last executing test programs: 7.985844176s ago: executing program 2 (id=316): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80000000000000000000000000003614000700fe"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000014) 7.903788358s ago: executing program 2 (id=317): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff0307680426b1929e14f08800", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x2f) 7.768169351s ago: executing program 2 (id=319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/31, 0x1f) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$netlink(r1, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000001400)=ANY=[], 0x131c}], 0x1, 0x0, 0x0, 0x80}, 0x4040000) 7.617132875s ago: executing program 2 (id=322): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) writev(r0, &(0x7f0000002c00), 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.504123811s ago: executing program 2 (id=338): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2d, 0x0, 0x1, 0xfffff038}]}, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 4.269780947s ago: executing program 1 (id=342): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$inet(0x2, 0xa, 0x8) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "d3d2aa413a0ccee9ef04473e5ba7ae5e"}) close(0x3) 4.247613317s ago: executing program 0 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1, 0x17, &(0x7f0000002080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xaa9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.072136581s ago: executing program 0 (id=345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xd}, @mss={0x2, 0x2}, @mss={0x2, 0x7f}, @window={0x3, 0x80, 0xe}, @window={0x3, 0x218, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, &(0x7f0000000080)='<', 0xfffffffffffffda9, 0x4894, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0xe22, @remote}, 0x10) 4.022809983s ago: executing program 1 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b936, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x6}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.899256116s ago: executing program 0 (id=348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000ec0)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}}, 0x4000000) 1.322796598s ago: executing program 1 (id=350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x7}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1.316690529s ago: executing program 2 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040), 0x0) recvmsg(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$sock(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)}}], 0x1, 0x4) sendmsg$NFT_MSG_GETCHAIN(r2, 0x0, 0x4000020) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000500)=r4, 0x4) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) writev(r5, &(0x7f0000006280)=[{&(0x7f00000041c0)="d2", 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 1.313643438s ago: executing program 0 (id=352): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x38, r1, 0x79811ce565b51061, 0x70bd25, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8, 0xa8, @random="002c81c0"}]}, 0x38}, 0x1, 0x0, 0x0, 0x48084}, 0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t\n', @ANYRESHEX=r3], 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x2, 0x3, 0xc2, 0xffffffffffffffff, 0x3}, 0x50) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r6, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x840000000002, 0x3, 0x100) sendmsg$nl_route(r7, &(0x7f0000000500)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="7c0100006c00000225bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4010}, 0x14) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x13, 0xffffffffffffffff, 0x4b291000) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x404c0d5}, 0x0) r9 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000d4a86f9c0e65e296add403000000000000000200"/72], 0x48) setsockopt$inet_buf(r7, 0x0, 0x4, 0x0, 0x0) 1.080292244s ago: executing program 1 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x2}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c5}, 0x48880) 877.747889ms ago: executing program 1 (id=356): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x24, 0x2f, 0x9, 0x70bd27, 0x25dfdc01, {0x4}, [@nested={0x10, 0x1c, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c044) 724.189383ms ago: executing program 1 (id=357): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) writev(r0, &(0x7f0000002c00)=[{0x0}], 0x1) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 700.526633ms ago: executing program 0 (id=358): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}}, 0x20}}, 0x20000840) sendmmsg$unix(r0, 0x0, 0x0, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 623.411315ms ago: executing program 0 (id=359): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 428.26635ms ago: executing program 3 (id=361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x60}}, 0x20000040) 400.70214ms ago: executing program 3 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x7}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 298.384773ms ago: executing program 3 (id=363): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$netlink(r1, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000001400)=ANY=[], 0x131c}], 0x1, 0x0, 0x0, 0x80}, 0x4040000) 198.875575ms ago: executing program 3 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa902, 0x800, 0x400, 0xfffffffc, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) 98.921188ms ago: executing program 3 (id=365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x95c}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 0s ago: executing program 3 (id=366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004800)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000000009000000731122000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 72.351915][ T5764] cgroup: Unknown subsys name 'net' [ 72.484207][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.864097][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.763390][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.772213][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.779945][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.788295][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.798150][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.805624][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.870900][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.878698][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.887851][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.913102][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.928630][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.959447][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.979627][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.989256][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.001354][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.008850][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.017652][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.025422][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.034402][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.042065][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.050630][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.057924][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.065385][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.072696][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.178806][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 76.324770][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.333856][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.342481][ T5775] bridge_slave_0: entered allmulticast mode [ 76.350103][ T5775] bridge_slave_0: entered promiscuous mode [ 76.362667][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.370119][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.377256][ T5775] bridge_slave_1: entered allmulticast mode [ 76.384421][ T5775] bridge_slave_1: entered promiscuous mode [ 76.419335][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.451921][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.478940][ T5775] team0: Port device team_slave_0 added [ 76.492602][ T5775] team0: Port device team_slave_1 added [ 76.544900][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 76.571629][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.578807][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.605113][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.639182][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.646183][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.672111][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.772993][ T5775] hsr_slave_0: entered promiscuous mode [ 76.779512][ T5775] hsr_slave_1: entered promiscuous mode [ 76.805752][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 76.920692][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 76.932558][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.939830][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.946980][ T5778] bridge_slave_0: entered allmulticast mode [ 76.954982][ T5778] bridge_slave_0: entered promiscuous mode [ 76.972744][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.979952][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.987163][ T5778] bridge_slave_1: entered allmulticast mode [ 76.994963][ T5778] bridge_slave_1: entered promiscuous mode [ 77.069320][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.076537][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.083952][ T5784] bridge_slave_0: entered allmulticast mode [ 77.090738][ T5784] bridge_slave_0: entered promiscuous mode [ 77.125612][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.135612][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.142910][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.150236][ T5784] bridge_slave_1: entered allmulticast mode [ 77.156883][ T5784] bridge_slave_1: entered promiscuous mode [ 77.175932][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.244696][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.276369][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.286096][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.293396][ T5779] bridge_slave_0: entered allmulticast mode [ 77.300615][ T5779] bridge_slave_0: entered promiscuous mode [ 77.310705][ T5778] team0: Port device team_slave_0 added [ 77.318757][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.349022][ T5784] team0: Port device team_slave_0 added [ 77.355129][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.362954][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.370330][ T5779] bridge_slave_1: entered allmulticast mode [ 77.376969][ T5779] bridge_slave_1: entered promiscuous mode [ 77.385352][ T5778] team0: Port device team_slave_1 added [ 77.404120][ T5784] team0: Port device team_slave_1 added [ 77.454991][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.462147][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.490558][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.503873][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.518666][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.550664][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.558187][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.584371][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.605053][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.612100][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.638861][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.674518][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.681597][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.711833][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.735273][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.749395][ T5779] team0: Port device team_slave_0 added [ 77.771532][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.782959][ T5779] team0: Port device team_slave_1 added [ 77.804040][ T5778] hsr_slave_0: entered promiscuous mode [ 77.810422][ T5778] hsr_slave_1: entered promiscuous mode [ 77.816650][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.824587][ T5778] Cannot create hsr debugfs directory [ 77.831538][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.842316][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.863690][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.871277][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.871388][ T5783] Bluetooth: hci0: command tx timeout [ 77.898034][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.942957][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.950897][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.977805][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.018736][ T5784] hsr_slave_0: entered promiscuous mode [ 78.025282][ T5784] hsr_slave_1: entered promiscuous mode [ 78.031066][ T5783] Bluetooth: hci1: command tx timeout [ 78.037470][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.045114][ T5784] Cannot create hsr debugfs directory [ 78.108082][ T5783] Bluetooth: hci2: command tx timeout [ 78.108916][ T5088] Bluetooth: hci3: command tx timeout [ 78.139630][ T5779] hsr_slave_0: entered promiscuous mode [ 78.145974][ T5779] hsr_slave_1: entered promiscuous mode [ 78.152183][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.159817][ T5779] Cannot create hsr debugfs directory [ 78.430693][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.442131][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.452696][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.463443][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.576044][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.583574][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.611403][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.640309][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.653705][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.663131][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.690652][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.697453][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.713548][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.723990][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.757343][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.764638][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.796236][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.803395][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.861301][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.951170][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.970189][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.977348][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.011853][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.019036][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.058864][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.082289][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.101860][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.151270][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.158462][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.170618][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.177817][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.202283][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.236250][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.243389][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.297487][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.304800][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.321793][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.479584][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.495541][ T5775] veth0_vlan: entered promiscuous mode [ 79.552597][ T5775] veth1_vlan: entered promiscuous mode [ 79.649635][ T5775] veth0_macvtap: entered promiscuous mode [ 79.677376][ T5775] veth1_macvtap: entered promiscuous mode [ 79.744607][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.785155][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.812977][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.857162][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.881588][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.891745][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.901138][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.910234][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.948706][ T5088] Bluetooth: hci0: command tx timeout [ 79.971037][ T5779] veth0_vlan: entered promiscuous mode [ 80.013854][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.044272][ T5778] veth0_vlan: entered promiscuous mode [ 80.052855][ T5779] veth1_vlan: entered promiscuous mode [ 80.108125][ T5088] Bluetooth: hci1: command tx timeout [ 80.114977][ T4739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.134854][ T4739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.146061][ T5778] veth1_vlan: entered promiscuous mode [ 80.189763][ T5088] Bluetooth: hci3: command tx timeout [ 80.189816][ T5783] Bluetooth: hci2: command tx timeout [ 80.211942][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.222004][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.234887][ T5779] veth0_macvtap: entered promiscuous mode [ 80.251831][ T5779] veth1_macvtap: entered promiscuous mode [ 80.274835][ T5778] veth0_macvtap: entered promiscuous mode [ 80.295964][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.307930][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.320175][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.331457][ T5778] veth1_macvtap: entered promiscuous mode [ 80.361451][ T5784] veth0_vlan: entered promiscuous mode [ 80.372696][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.384313][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.398108][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.414551][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.425138][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.438093][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.449337][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.461285][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.474917][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.486809][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.504381][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.520956][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.552134][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.564415][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.576522][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.587489][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.603483][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.624285][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.647457][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.658384][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.667110][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.688266][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.738031][ T5784] veth1_vlan: entered promiscuous mode [ 80.861046][ T5784] veth0_macvtap: entered promiscuous mode [ 80.875705][ T5784] veth1_macvtap: entered promiscuous mode [ 80.980750][ T4739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.005244][ T4739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.014300][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.025916][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.036684][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.047381][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.069038][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.088362][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.100545][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.117135][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.121414][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.136270][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.156488][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.158626][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.174948][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.197887][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.209332][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.230805][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.386897][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.400657][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.414970][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.426536][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.451767][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.461068][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.513717][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.541460][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.697861][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.705731][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.830326][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.864876][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.027789][ T5783] Bluetooth: hci0: command tx timeout [ 82.161070][ T5860] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 82.188036][ T5783] Bluetooth: hci1: command tx timeout [ 82.268055][ T5783] Bluetooth: hci3: command tx timeout [ 82.268138][ T5088] Bluetooth: hci2: command tx timeout [ 84.117633][ T5088] Bluetooth: hci0: command tx timeout [ 84.281810][ T5088] Bluetooth: hci1: command tx timeout [ 84.349628][ T5783] Bluetooth: hci3: command tx timeout [ 84.355092][ T5088] Bluetooth: hci2: command tx timeout [ 84.550068][ T5932] Zero length message leads to an empty skb [ 84.626478][ T5932] syzkaller0: entered promiscuous mode [ 84.654150][ T5932] syzkaller0: entered allmulticast mode [ 84.708108][ T5933] tipc: Started in network mode [ 84.713252][ T5933] tipc: Node identity 2ab1473412e2, cluster identity 4711 [ 84.733316][ T5933] tipc: Enabled bearer , priority 0 [ 84.756393][ T5932] tipc: Resetting bearer [ 84.789956][ T5931] tipc: Resetting bearer [ 84.825354][ T5931] tipc: Disabling bearer [ 84.995284][ T5852] IPVS: starting estimator thread 0... [ 85.098416][ T5953] IPVS: using max 19 ests per chain, 45600 per kthread [ 85.293890][ T5969] Bluetooth: MGMT ver 1.22 [ 85.615197][ T5977] syzkaller0: entered promiscuous mode [ 85.621034][ T5977] syzkaller0: entered allmulticast mode [ 85.934759][ T5979] syzkaller0: entered promiscuous mode [ 85.940494][ T5979] syzkaller0: entered allmulticast mode [ 86.831841][ T789] cfg80211: failed to load regulatory.db [ 87.698546][ T5941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.232326][ T5996] syzkaller0: entered promiscuous mode [ 88.251411][ T5996] syzkaller0: entered allmulticast mode [ 89.193135][ T6027] syzkaller0: entered promiscuous mode [ 89.200142][ T6027] syzkaller0: entered allmulticast mode [ 91.543576][ T6009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.718153][ T6065] syzkaller0: entered promiscuous mode [ 91.723826][ T6065] syzkaller0: entered allmulticast mode [ 92.039658][ T6075] tipc: Enabling of bearer rejected, failed to enable media [ 92.148635][ T6075] syzkaller0: entered promiscuous mode [ 92.167922][ T6075] syzkaller0: entered allmulticast mode [ 93.466115][ T6090] syzkaller0: entered promiscuous mode [ 93.473547][ T6090] syzkaller0: entered allmulticast mode [ 93.499673][ T6084] tipc: Started in network mode [ 93.504608][ T6084] tipc: Node identity e6a4cd9cfb1e, cluster identity 4711 [ 93.523492][ T6084] tipc: Enabled bearer , priority 0 [ 93.553017][ T6096] tipc: Resetting bearer [ 93.607995][ T6076] tipc: Resetting bearer [ 93.685424][ T6076] tipc: Disabling bearer [ 93.967334][ T6114] syzkaller0: entered promiscuous mode [ 93.974538][ T6111] netlink: 132 bytes leftover after parsing attributes in process `syz.2.87'. [ 93.989107][ T6114] syzkaller0: entered allmulticast mode [ 94.803605][ T6132] netlink: 132 bytes leftover after parsing attributes in process `syz.1.96'. [ 94.879417][ T6134] syzkaller0: entered promiscuous mode [ 94.885750][ T6134] syzkaller0: entered allmulticast mode [ 96.611572][ T6098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.149043][ T6157] netlink: 132 bytes leftover after parsing attributes in process `syz.3.105'. [ 97.599423][ T6165] syzkaller0: entered promiscuous mode [ 97.617999][ T6165] syzkaller0: entered allmulticast mode [ 98.974700][ T6188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.116'. [ 100.467592][ T6211] syzkaller0: entered promiscuous mode [ 100.473187][ T6211] syzkaller0: entered allmulticast mode [ 100.554648][ T6167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.276253][ T6236] syzkaller0: entered promiscuous mode [ 101.292093][ T6236] syzkaller0: entered allmulticast mode [ 101.418095][ T6239] tipc: Started in network mode [ 101.423423][ T6239] tipc: Node identity 0696e0f903fb, cluster identity 4711 [ 101.467320][ T6239] tipc: Enabled bearer , priority 0 [ 101.515903][ T6239] tipc: Resetting bearer [ 101.575262][ T6238] tipc: Disabling bearer [ 101.891012][ T6255] syzkaller0: entered promiscuous mode [ 101.896721][ T6255] syzkaller0: entered allmulticast mode [ 102.071217][ T6264] syzkaller0: entered promiscuous mode [ 102.087679][ T6264] syzkaller0: entered allmulticast mode [ 102.103880][ T6262] tipc: Enabling of bearer rejected, failed to enable media [ 102.225150][ T6262] syzkaller0: entered promiscuous mode [ 102.233209][ T6262] syzkaller0: entered allmulticast mode [ 103.863470][ T6308] syzkaller0: entered promiscuous mode [ 103.871749][ T6308] syzkaller0: entered allmulticast mode [ 105.457653][ T6340] tipc: Enabling of bearer rejected, failed to enable media [ 105.885910][ T6371] tipc: Enabled bearer , priority 0 [ 105.910206][ T6371] tipc: Resetting bearer [ 105.933796][ T6368] tipc: Disabling bearer [ 106.233323][ T6380] tipc: Enabling of bearer rejected, failed to enable media [ 106.353101][ T6384] syzkaller0: entered promiscuous mode [ 106.367749][ T6384] syzkaller0: entered allmulticast mode [ 109.277405][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 109.291919][ T6397] ip6gre1: entered promiscuous mode [ 109.297157][ T6397] ip6gre1: entered allmulticast mode [ 109.304405][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.317101][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.327871][ T5816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.714083][ T5816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.747718][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.817028][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 111.403134][ T6466] tipc: Enabling of bearer rejected, failed to enable media [ 111.917239][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 112.222550][ T6513] syzkaller0: entered promiscuous mode [ 112.232498][ T6513] syzkaller0: entered allmulticast mode [ 112.473243][ T6525] xt_hashlimit: size too large, truncated to 1048576 [ 113.628355][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.086774][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 114.105145][ T6523] ip6gre1: entered promiscuous mode [ 114.112164][ T6523] ip6gre1: entered allmulticast mode [ 114.138914][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.270699][ T6526] bridge_slave_0 (unregistering): left allmulticast mode [ 114.287610][ T6526] bridge_slave_0 (unregistering): left promiscuous mode [ 114.295590][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.345172][ T2951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.366841][ T2951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.374737][ T5843] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.437865][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.532512][ T6552] syzkaller0: entered promiscuous mode [ 114.538340][ T6552] syzkaller0: entered allmulticast mode [ 114.780145][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.986278][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 115.356363][ T6579] syzkaller0: entered promiscuous mode [ 115.367646][ T6579] syzkaller0: entered allmulticast mode [ 116.395195][ T6537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.961707][ T6623] hsr0: entered promiscuous mode [ 117.987492][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 118.005854][ T6623] hsr_slave_0: left promiscuous mode [ 118.019692][ T6623] hsr_slave_1: left promiscuous mode [ 118.130558][ T6623] hsr0 (unregistering): left promiscuous mode [ 118.159191][ T6628] syzkaller0: entered promiscuous mode [ 118.165143][ T6628] syzkaller0: entered allmulticast mode [ 118.587738][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.636684][ T6639] syzkaller0: entered promiscuous mode [ 118.642471][ T6639] syzkaller0: entered allmulticast mode [ 120.125731][ T6675] syzkaller0: entered promiscuous mode [ 120.131494][ T6675] syzkaller0: entered allmulticast mode [ 120.222274][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 120.377565][ T6683] syzkaller0: entered promiscuous mode [ 120.386894][ T6683] syzkaller0: entered allmulticast mode [ 120.425092][ T6685] syzkaller0: entered promiscuous mode [ 120.437956][ T6685] syzkaller0: entered allmulticast mode [ 121.722595][ T6705] hsr0: entered promiscuous mode [ 121.740047][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 121.751613][ T6705] hsr_slave_0: left promiscuous mode [ 121.764181][ T6705] hsr_slave_1: left promiscuous mode [ 121.820048][ T6705] hsr0 (unregistering): left promiscuous mode [ 121.908968][ T6714] syzkaller0: entered promiscuous mode [ 121.930934][ T6714] syzkaller0: entered allmulticast mode [ 122.027728][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.414136][ T6726] syzkaller0: entered promiscuous mode [ 122.431263][ T6726] syzkaller0: entered allmulticast mode [ 125.038110][ T6763] syzkaller0: entered promiscuous mode [ 125.043638][ T6763] syzkaller0: entered allmulticast mode [ 126.081817][ T6773] syzkaller0: entered promiscuous mode [ 126.087391][ T6773] syzkaller0: entered allmulticast mode [ 126.142141][ T6748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.157689][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.378397][ T6829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'. [ 128.426619][ T6829] vlan2: entered promiscuous mode [ 128.436934][ T6829] bond0: entered promiscuous mode [ 128.444613][ T6829] bond_slave_0: entered promiscuous mode [ 128.454439][ T6829] bond_slave_1: entered promiscuous mode [ 129.714043][ T6798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.156168][ T6861] netlink: 132 bytes leftover after parsing attributes in process `syz.2.315'. [ 130.789450][ T6888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.324'. [ 130.963903][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 132.164873][ T6920] netlink: 'syz.1.334': attribute type 2 has an invalid length. [ 132.174598][ T6920] netlink: 'syz.1.334': attribute type 1 has an invalid length. [ 132.201426][ T6920] bridge1: entered promiscuous mode [ 132.206651][ T6920] bridge1: entered allmulticast mode [ 132.216129][ T6920] team0: Port device bridge1 added [ 132.306848][ T6924] syzkaller0: entered promiscuous mode [ 132.312382][ T6924] syzkaller0: entered allmulticast mode [ 132.920376][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.926983][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.646844][ T6878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.243343][ T6959] syzkaller0: entered promiscuous mode [ 134.249366][ T6959] syzkaller0: entered allmulticast mode [ 136.811361][ T6931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.216364][ T6984] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 137.232535][ T6984] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 138.220232][ T7024] syzkaller0: entered promiscuous mode [ 138.225820][ T7024] syzkaller0: entered allmulticast mode [ 138.236762][ T7024] [ 138.239112][ T7024] ============================================ [ 138.245239][ T7024] WARNING: possible recursive locking detected [ 138.251382][ T7024] syzkaller #0 Not tainted [ 138.255774][ T7024] -------------------------------------------- [ 138.261908][ T7024] syz.3.366/7024 is trying to acquire lock: [ 138.267793][ T7024] ffff88801df14108 (&sch->root_lock_key#58){+...}-{2:2}, at: __dev_queue_xmit+0xb01/0x3640 [ 138.277833][ T7024] [ 138.277833][ T7024] but task is already holding lock: [ 138.285176][ T7024] ffff88801df14108 (&sch->root_lock_key#58){+...}-{2:2}, at: __dev_queue_xmit+0xb01/0x3640 [ 138.295175][ T7024] [ 138.295175][ T7024] other info that might help us debug this: [ 138.303218][ T7024] Possible unsafe locking scenario: [ 138.303218][ T7024] [ 138.310682][ T7024] CPU0 [ 138.313945][ T7024] ---- [ 138.317207][ T7024] lock(&sch->root_lock_key#58); [ 138.322227][ T7024] lock(&sch->root_lock_key#58); [ 138.327258][ T7024] [ 138.327258][ T7024] *** DEADLOCK *** [ 138.327258][ T7024] [ 138.335386][ T7024] May be due to missing lock nesting notation [ 138.335386][ T7024] [ 138.343692][ T7024] 3 locks held by syz.3.366/7024: [ 138.348703][ T7024] #0: ffffffff8d131e00 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x275/0x3640 [ 138.358630][ T7024] #1: ffff88801df14108 (&sch->root_lock_key#58){+...}-{2:2}, at: __dev_queue_xmit+0xb01/0x3640 [ 138.369074][ T7024] #2: ffffffff8d131e00 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x275/0x3640 [ 138.378990][ T7024] [ 138.378990][ T7024] stack backtrace: [ 138.384885][ T7024] CPU: 0 PID: 7024 Comm: syz.3.366 Not tainted syzkaller #0 [ 138.392159][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.402220][ T7024] Call Trace: [ 138.405494][ T7024] [ 138.408422][ T7024] dump_stack_lvl+0x18c/0x250 [ 138.413096][ T7024] ? show_regs_print_info+0x20/0x20 [ 138.418290][ T7024] ? print_deadlock_bug+0x435/0x5d0 [ 138.423482][ T7024] __lock_acquire+0x6809/0x7d80 [ 138.428334][ T7024] ? lockdep_lock+0x230/0x230 [ 138.433002][ T7024] ? verify_lock_unused+0x140/0x140 [ 138.438193][ T7024] ? add_lock_to_list+0x191/0x280 [ 138.443217][ T7024] ? verify_lock_unused+0x140/0x140 [ 138.448412][ T7024] ? __lock_acquire+0x357f/0x7d80 [ 138.453434][ T7024] lock_acquire+0x19e/0x420 [ 138.457954][ T7024] ? __dev_queue_xmit+0xb01/0x3640 [ 138.463065][ T7024] ? read_lock_is_recursive+0x20/0x20 [ 138.468444][ T7024] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 138.474680][ T7024] ? rcu_read_lock_bh_held+0x7a/0x100 [ 138.480131][ T7024] ? rcu_read_lock_held+0x40/0x40 [ 138.485150][ T7024] _raw_spin_lock+0x2e/0x40 [ 138.489651][ T7024] ? __dev_queue_xmit+0xb01/0x3640 [ 138.494767][ T7024] __dev_queue_xmit+0xb01/0x3640 [ 138.499703][ T7024] ? __dev_queue_xmit+0x275/0x3640 [ 138.504814][ T7024] ? __lock_acquire+0x7d80/0x7d80 [ 138.509841][ T7024] ? lock_chain_count+0x20/0x20 [ 138.514692][ T7024] ? __kernel_text_address+0xd/0x30 [ 138.519893][ T7024] ? netdev_core_pick_tx+0x370/0x370 [ 138.525176][ T7024] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 138.531064][ T7024] ? lockdep_hardirqs_on+0x98/0x150 [ 138.536262][ T7024] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 138.542147][ T7024] ? _raw_spin_unlock+0x40/0x40 [ 138.546998][ T7024] ? stack_trace_save+0xaa/0x100 [ 138.551935][ T7024] ? stack_trace_snprint+0xf0/0xf0 [ 138.557044][ T7024] ? tcf_action_inc_overlimit_qstats+0x120/0x120 [ 138.563384][ T7024] sch_frag_xmit_hook+0x2a8/0x11d0 [ 138.568514][ T7024] ? kasan_set_track+0x4e/0x70 [ 138.573270][ T7024] ? __kasan_slab_alloc+0x6c/0x80 [ 138.578287][ T7024] ? slab_post_alloc_hook+0x6a/0x4d0 [ 138.583571][ T7024] ? skb_clone+0x1eb/0x370 [ 138.587982][ T7024] ? tcf_mirred_act+0x589/0x1350 [ 138.592929][ T7024] ? tcf_action_exec+0x1a9/0x5d0 [ 138.597860][ T7024] ? basic_classify+0x1b2/0x2d0 [ 138.602702][ T7024] ? tcf_classify+0x421/0xfc0 [ 138.607388][ T7024] ? qfq_enqueue+0x320/0x12e0 [ 138.612073][ T7024] ? dev_qdisc_enqueue+0x48/0x220 [ 138.617197][ T7024] ? __dev_queue_xmit+0xcd4/0x3640 [ 138.622487][ T7024] ? packet_sendmsg+0x38d9/0x4a30 [ 138.627517][ T7024] ? ____sys_sendmsg+0x61b/0x980 [ 138.633505][ T7024] ? ___sys_sendmsg+0x2a6/0x360 [ 138.639101][ T7024] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 138.644411][ T7024] ? mq_dump_class_stats+0x450/0x450 [ 138.650077][ T7024] ? __copy_skb_header+0xa3/0x4a0 [ 138.655187][ T7024] ? __asan_memcpy+0x40/0x70 [ 138.659952][ T7024] ? __skb_clone+0x5c/0x6c0 [ 138.664451][ T7024] ? __skb_clone+0x446/0x6c0 [ 138.667691][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.669030][ T7024] ? skb_clone+0x21f/0x370 [ 138.680881][ T7024] ? tcf_mirred_act+0x570/0x1350 [ 138.685820][ T7024] tcf_mirred_act+0xbd6/0x1350 [ 138.690580][ T7024] tcf_action_exec+0x1a9/0x5d0 [ 138.695344][ T7024] basic_classify+0x1b2/0x2d0 [ 138.700014][ T7024] tcf_classify+0x421/0xfc0 [ 138.704512][ T7024] qfq_enqueue+0x320/0x12e0 [ 138.709008][ T7024] ? sch_tree_lock+0x1b0/0x1b0 [ 138.713764][ T7024] ? do_raw_spin_lock+0x11f/0x2b0 [ 138.718792][ T7024] ? __rwlock_init+0x150/0x150 [ 138.723550][ T7024] dev_qdisc_enqueue+0x48/0x220 [ 138.728399][ T7024] ? __dev_queue_xmit+0xb88/0x3640 [ 138.733511][ T7024] __dev_queue_xmit+0xcd4/0x3640 [ 138.738443][ T7024] ? __dev_queue_xmit+0x275/0x3640 [ 138.743550][ T7024] ? skb_partial_csum_set+0xf2/0x350 [ 138.748830][ T7024] ? netdev_core_pick_tx+0x370/0x370 [ 138.754105][ T7024] ? virtio_net_hdr_to_skb+0xcd8/0x1470 [ 138.759645][ T7024] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 138.765789][ T7024] ? packet_xmit+0x66/0x340 [ 138.770284][ T7024] packet_sendmsg+0x38d9/0x4a30 [ 138.775124][ T7024] ? aa_sk_perm+0x970/0x970 [ 138.779717][ T7024] ? __might_sleep+0xe0/0xe0 [ 138.784313][ T7024] ? verify_lock_unused+0x140/0x140 [ 138.789509][ T7024] ? aa_sk_perm+0x83c/0x970 [ 138.794007][ T7024] ? packet_getsockopt+0xad0/0xad0 [ 138.799111][ T7024] ? tomoyo_memory_ok+0x2e/0x150 [ 138.804045][ T7024] ? aa_sock_msg_perm+0x94/0x150 [ 138.809149][ T7024] ? apparmor_socket_sendmsg+0x8e/0x330 [ 138.814715][ T7024] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 138.819999][ T7024] ? security_socket_sendmsg+0x80/0xa0 [ 138.825450][ T7024] ? packet_getsockopt+0xad0/0xad0 [ 138.830646][ T7024] ____sys_sendmsg+0x61b/0x980 [ 138.835413][ T7024] ? __asan_memset+0x22/0x40 [ 138.840002][ T7024] ? __sys_sendmsg_sock+0x30/0x30 [ 138.845044][ T7024] ? __import_iovec+0x5f2/0x850 [ 138.849897][ T7024] ? import_iovec+0x73/0xa0 [ 138.854398][ T7024] ___sys_sendmsg+0x2a6/0x360 [ 138.859156][ T7024] ? __sys_sendmsg+0x2b0/0x2b0 [ 138.864016][ T7024] __se_sys_sendmsg+0x1d0/0x2c0 [ 138.868870][ T7024] ? __x64_sys_sendmsg+0x80/0x80 [ 138.873809][ T7024] ? lockdep_hardirqs_on+0x98/0x150 [ 138.879004][ T7024] do_syscall_64+0x55/0xb0 [ 138.883416][ T7024] ? clear_bhb_loop+0x40/0x90 [ 138.888085][ T7024] ? clear_bhb_loop+0x40/0x90 [ 138.892754][ T7024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.898650][ T7024] RIP: 0033:0x7f438c39e159 [ 138.903064][ T7024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.922668][ T7024] RSP: 002b:00007f438d2f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.931081][ T7024] RAX: ffffffffffffffda RBX: 00007f438c625fa0 RCX: 00007f438c39e159 [ 138.939053][ T7024] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 138.947013][ T7024] RBP: 00007f438c435024 R08: 0000000000000000 R09: 0000000000000000 [ 138.954976][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.962946][ T7024] R13: 00007f438c626038 R14: 00007f438c625fa0 R15: 00007ffc4eaa0f48 [ 138.970918][ T7024] [ 139.967731][ T6977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512