last executing test programs: 6.075240283s ago: executing program 3 (id=895): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x29, 0x8, 0x2, 0x0, 0x1}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000200)=r1}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) 6.002241564s ago: executing program 3 (id=896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x6a, &(0x7f0000000880)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "3ce7b9286b574dc2720ef6057772f09df9d3421eee34e003", "047b90670593e17881953d1e429031066797feb6632a4cea988cc9256fe11df4"}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140)=0x2186, 0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd23, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0xa}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x240040d4) 3.781400992s ago: executing program 3 (id=900): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x20008880) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (async, rerun: 64) sendmmsg(r0, &(0x7f0000000140), 0x400000000000235, 0x0) (async, rerun: 64) sendmsg$tipc(r0, &(0x7f0000001500)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001600)="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", 0x10e2}, {&(0x7f00000011c0)="94310b8e2589461cfd0a5d505f523f7ae97b35f688649cc75ec096e2ca0a0370b1a72cd2dd34142f483b11f66892ee97034b371dc2381d224ba5fc324b8f9e9156e587bffcc5d9ea15c8358a729945e99b203c0aa9ae08e1c19d11a2ffd6f22725bb844bc4a4f9ae50e5683c55b3dd330d1f6aba998344aae6a0d80e3eb05fb15c0650c000229359177a879676fec0c0d3461c76812ebc8cc8815a6d13", 0x9d}, {&(0x7f0000001280)="5b0d38f00f222c819f7ba30c04ad792d9cdc97badaa0f986565d6c3770bdfbf402a99a599180dd0861515eac4470fb895aeba3b51355177e6f79f5e6b733b85d09b52517b93f5f190be25e50d2671c9b3e2e8cebccbb19ec5957cd2e2a1371c10c0ea99dc5f1238661de608b7d0162a286ee244887763488ad4a464bdca6982fbb316daf4c3e4432eecf254e7c14ea3cef657b29a3ff6253f8196d85b3dd6b6773aa7dfbea0f838ace3bfa0a400cb96c91aabd946a87008edeb22b", 0xbb}, {&(0x7f0000001340)="3cf1072589efb932513cb0fccbac47dfa3ecb5f88118ae9ae6234db02d8430805d3f9f5868a1678d1832448f5cc0d36303e81c955dd148965aac66e7a43f67a4d9c890b42600acc5a524619cbf01380af4f0ccbefaa0d7628924f35b1631f917ddddce996d15d2a8ce6d3a19af5e56da9a74cd51df6b850bb09af3ba9c3525011928dd41c978df3375446ad2d896839c2ac06a93ff2dee", 0x97}, {&(0x7f0000001400)="0690f4ef0c8ea32f9f6b30846afc8175f2724f4d", 0x14}], 0x5, &(0x7f00000014c0)="4b0b8e2fb8ca1ce3978ad8b27e5211cc26d653c2f771d31c34875aa95886e3dc32d1a260bfa261f25b70298fe15b5afb4170acc76f276f", 0x37, 0xc0886}, 0x2000088d) syz_emit_ethernet(0x82, &(0x7f0000001540)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @rand_addr=0x64010100, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01212f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}]}}}}}}}}, 0x0) 3.498760926s ago: executing program 3 (id=904): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="4c00000011000f140011000200001a0002000000200000", 0x17) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a88000000060a010400000000000000000a0000050900010073797a31000000005c000480580001800a000100696e6e657200000048000280080004400000001724000580090001006d6574610000000014000280080002400000001008000140000000140800034000000000080002400000008408000140000000000900020073797a32000000"], 0xb0}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.305615091s ago: executing program 3 (id=908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @local}], 0x30) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000014c0)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r11, 0x0, 0x44) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000000c0)={@val={0x0, 0x890d}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3b, 0x28, 0x66, 0x0, 0x0, 0x1, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x2, 0x7}}}}}}, 0x3e) ioctl$AUTOFS_IOC_READY(r1, 0x400442c8, 0x200000f3) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000001900)=@nat={'nat\x00', 0x2, 0x5, 0x5e8, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) 2.862782062s ago: executing program 3 (id=916): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000640)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000680)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x220080c1, &(0x7f00000006c0)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r1, &(0x7f0000000700)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x4000}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x8a, &(0x7f0000000480), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001b40)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="2f00000000000100"], 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x68, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffff, 0xfffb}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x9}}}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x80000000, 0x6, 0xfffffffd, 0x101}}}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x4}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x8, 0x8000, 0xb4bb, {0x0, 0x0, 0x1000, 0x9, 0x4, 0x5e3d}, {0x3, 0x2, 0x4, 0x9, 0x2, 0xa}, 0x5, 0x1420}}]}]}}]}, 0xaf}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) epoll_create(0x3) socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0xd1, &(0x7f0000000580)=0x20f, 0x4) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f00000005c0)={0x0, 0x1}, 0xc) listen(r3, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r10, @ANYRES64=r8], 0x18}}, 0x0) 2.362596869s ago: executing program 4 (id=926): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x7, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x4004743c, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x8010}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x8, 0x0, 0x0, 0x1}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x48094) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6}, @cb_func={0x18, 0x4}, @jmp={0x5, 0x0, 0x7, 0x7, 0x4, 0x40, 0xfffffffffffffffb}, @generic={0x6, 0x9, 0xe, 0xfff, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x2, 0xfffffff4, 0x7}, 0x10, 0x40bb, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000280)=[{0x5, 0x3, 0xf, 0x7}, {0x4, 0x1, 0xb}, {0x3, 0x2, 0xa, 0xa}, {0x1, 0x4, 0x6, 0x2}, {0x5, 0x2, 0xe, 0x5}, {0x3, 0x1, 0x10, 0x7}, {0x0, 0x1, 0x9, 0x1}], 0x10, 0x6ae400af}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r4, 0x4) 2.291090607s ago: executing program 4 (id=928): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000150a0102000000000000000000000001090001"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x2004880c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x375c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="090300000000000000002a"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xac, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c840) 2.114194808s ago: executing program 0 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x100000000000000, 0x0, 0x600}, 0x0) 2.064953217s ago: executing program 0 (id=933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000000)={0x49, 0x0, 0x6, 0x7, 0x5}) ioctl(r3, 0x890b, 0x0) bind$x25(r3, &(0x7f0000000140), 0x12) connect$x25(r3, &(0x7f0000000180), 0x12) (async) connect$x25(r3, &(0x7f0000000180), 0x12) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf250100000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x4008000) (async) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf250100000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x4008000) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080c4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000340)="18000000010005", 0x7) (async) write(r11, &(0x7f0000000340)="18000000010005", 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xb3538085985bbb56}, 0x0) 1.365675215s ago: executing program 4 (id=948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000080000000000000500000a44000000090a010400000000000000000a0000840900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000007400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.211135935s ago: executing program 4 (id=949): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000280)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), r5) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="28032cbd7000fcdbdf2501000000140009000000e300000000000000000000000001040005000400050008000800ac1414260500030006000000"], 0x40}, 0x1, 0x0, 0x0, 0x14000801}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r8, 0x1, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x20000800) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2c7691f6f275dadc, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRESHEX, @ANYRESHEX=r10, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x128}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xfc, 0x7, 0x0, @mcast2, @loopback, 0x700, 0x20, 0x9, 0xa73}}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0x4, &(0x7f0000000340)=ANY=[@ANYRES16=r9], &(0x7f0000000380)='GPL\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', r13, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x8, 0x10, &(0x7f0000000500), 0x10}, 0x94) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000a40)={'veth1_macvtap\x00', 0x0}) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000a00102001c0012800b0001006d616373656300000c000280060002404e24000008000500", @ANYRES32=r15, @ANYBLOB="6ab1efcf68ff22eaefb8fbd09dc0d270cc9edfa2bdbfd0b1886980fbfdcca8"], 0x44}}, 0x800) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$unix(0x1, 0x2, 0x0) recvmsg(r17, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) 1.210667289s ago: executing program 1 (id=950): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, r10, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x80, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x1b, 0x80, [@rann={0x7e, 0x15, {{0x0, 0xb}, 0x91, 0xd3, @broadcast, 0x8, 0x1, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x80}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 1.181180951s ago: executing program 2 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0x400000b7, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0xfffffffffffffd16, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffff5, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x6}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) unshare(0x6020400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xff}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.17229862s ago: executing program 0 (id=952): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000004c0)="b9fe030768045c8c989a14f088a865f986dd", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 1.036387774s ago: executing program 0 (id=953): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) shutdown(r0, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x8) 1.015710363s ago: executing program 2 (id=954): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x25, 0x0, 0x1, 0xfffffffd}, {}, {0x81}, {0x0, 0x1}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8090}, 0x8000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x94, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x80}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x9}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @local}]}}}]}, 0x94}}, 0x0) 924.431313ms ago: executing program 0 (id=955): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000c000000002df297480000aaff0200000000000000000000000000011595a7"], 0xffe) 822.615518ms ago: executing program 1 (id=956): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xfff3}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x60a4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e"], 0x50}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @private2, 0x7b}, 0x80, 0x0}, 0x4000840) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x30, r3, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080003"], 0x2c}}, 0x0) 819.702284ms ago: executing program 2 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf749}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x48000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000006180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000400)=""/222}, 0x78) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)=ANY=[@ANYBLOB='..']) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/ipc\x00') openat$cgroup(r4, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 647.17974ms ago: executing program 0 (id=958): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000150a0102000000000000000000000001090001"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x2004880c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x375c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="090300000000000000002a"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xac, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c840) 615.886199ms ago: executing program 2 (id=959): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690036000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 550.968834ms ago: executing program 1 (id=960): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x18}}], 0x1, 0x48000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2004000c}, 0x40024) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x8051) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000090a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x4000801}, 0x20040004) (rerun: 32) 550.01713ms ago: executing program 2 (id=961): recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1, &(0x7f0000000140)=""/159, 0x9f}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000040)={'wlan1\x00', @random="018d00008d00"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b6bf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 487.481892ms ago: executing program 1 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x130, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x55a7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x10000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x11}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfad}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x19a}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xd6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xd}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9a1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000208fe646d9dddb2b4dc476696d501f8700"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x18, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000005c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x40) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf2501000000060006004e240000060006004e220000060006004e23000008000700bc45ffffa1512fc47d4f07f1088a8aab82b9a0baac52ae028f"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x50811) 486.494839ms ago: executing program 2 (id=963): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x4300, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26}, 0x20) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) syz_emit_ethernet(0xc2, &(0x7f0000000040)={@local, @random="492b00014011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x26, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast2, {[@end, @rr={0x7, 0x13, 0xac, [@multicast2, @loopback, @multicast2, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x1, [{@multicast1, 0x8}, {@local, 0xfffff3bf}, {@local, 0x8}]}, @cipso={0x86, 0x51, 0x0, [{0x0, 0x2}, {0x6, 0x3, '\v'}, {0x6, 0xf, "5325bceb23e0bc2e55ff0a9b49"}, {0x5, 0xf, "a0ca69946cfaefcdad6be85bf3"}, {0x1, 0x12, "9e46517709a48208b4477fcb0b0bed3e"}, {0x2, 0x9, "9d1ef5e6769850"}, {0x0, 0xd, "3fd21302dd7d660fb8cb4b"}]}]}}}}}}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5d4528bd70a0fedbdf25010000000c0002000400000000800000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c0005000400000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000010) 395.530893ms ago: executing program 1 (id=964): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0x2cfee8fc}, 0x2, r9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000400), 0x56) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x22, &(0x7f00000004c0)={&(0x7f0000000500)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004000}, 0x4041080) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) 296.867683ms ago: executing program 4 (id=965): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x6e21, 0xfffc, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0xbcfbddc4f0d79c8f}}, 0xe8) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, &(0x7f0000000440)={&(0x7f0000000340)=[{0x7e4, 0x1, 0x0, {0x1, 0x9}}, {0xe6d, 0x0, 0x0, {0x8, 0x6, 0x1}}, {0xe01, 0x1, 0x0, {0x0, 0x1, 0x1}}, {0x5, 0x0, 0x0, {0x0, 0x4}}, {0x8000, 0x0, 0x0, {0x9, 0x9, 0x2}}, {0x2, 0x0, 0x0, {0x1, 0x2}}, {0x202d, 0x1, 0x0, {0x7, 0x100, 0x3}}], 0x7, 0x20, 0x4, 0x7}) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000640)={'broute\x00', 0x0, 0x3, 0x5e, [0x0, 0x3bf7, 0x3, 0x1, 0xffffffff, 0x1c00000000000], 0x4, &(0x7f00000001c0)=[{}, {}, {}, {}], &(0x7f0000000580)=""/94}, &(0x7f00000006c0)=0x78) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x5, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x3d) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f00000000c0)) 161.74613ms ago: executing program 1 (id=966): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) bind$xdp(r1, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000002bc0)={'veth0_to_hsr\x00', 0xffff, 0xfff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r3, 0x1, 0x5}, 0x48) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a80), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x28, r4, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x3d}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) (async) recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f00000004c0)=""/148, 0x94}, {&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/4, 0x4}, {&(0x7f0000000740)=""/198, 0xc6}], 0x6, &(0x7f00000008c0)=""/216, 0xd8}, 0x1a5a}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000009c0)=""/7, 0x7}], 0x1, &(0x7f0000000a40)=""/65, 0x41}, 0x4}, {{&(0x7f0000000ac0)=@tipc=@name, 0x80, &(0x7f0000001140)=[{&(0x7f0000000b40)=""/233, 0xe9}, {&(0x7f0000000c40)=""/152, 0x98}, {&(0x7f0000000d00)=""/116, 0x74}, {&(0x7f0000000d80)=""/157, 0x9d}, {&(0x7f0000000e40)=""/28, 0x1c}, {&(0x7f0000000e80)=""/38, 0x26}, {&(0x7f0000000ec0)=""/181, 0xb5}, {&(0x7f0000000fc0)=""/51, 0x33}, {&(0x7f0000002d80)=""/265, 0x109}, {&(0x7f00000010c0)=""/105, 0x69}], 0xa, &(0x7f0000001200)=""/145, 0x91}, 0x5}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000012c0)=""/76, 0x4c}, {&(0x7f0000001340)=""/81, 0x51}, {&(0x7f00000013c0)=""/176, 0xb0}, {&(0x7f0000001480)=""/121, 0x79}, {&(0x7f0000001500)=""/186, 0xba}, {&(0x7f00000015c0)=""/120, 0x78}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/59, 0x3b}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000002700)=""/87, 0x57}], 0xa, &(0x7f0000002840)=""/196, 0xc4}, 0x724}], 0x4, 0x2, 0x0) (async) r7 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff}) shutdown(r8, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$inet(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000300)={r1}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES64=r7, @ANYBLOB="0100000008000300", @ANYRES32=r10, @ANYBLOB="40007a801c00020033cd7324ebe63371ebec78e92cbdd1d06038f01b2abf3f5a140001008759608d455c48735a8b43ea7c86a3020c000300b1f53ad5fc54cb62"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000814) 0s ago: executing program 4 (id=967): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="b700000000000000bf160018000000007961a800000001001501020000000000850000008a000000b70000000100080095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="0000e5ffffffffffffff00000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x1, @in={{0x2, 0x4e20, @local}}, 0x4, 0x5, 0x2, 0xc, 0x81}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r2, 0xfffffff8, 0x9, 0xafb7, 0x401, 0x7, 0xb6a2, 0x0, {r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x8, 0x6, 0x100, 0x3, 0x9}}, &(0x7f0000000240)=0xb0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x40082, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000007c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000100001000000000000000004000c0a010100000000000000000600000609000200737e7a31000000000900014073797a310000000014000380100000800c00018006000100000000000100000a00000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYRES8=r8], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000640)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010067656e657665000008000280040010001400030067656e65766531"], 0x4c}}, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000680)=0x5) setsockopt$inet6_int(r4, 0x29, 0x42, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xffffffffffffff11}, {0x4}, {0x4}, {0xc, 0x7, {0x600}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000880)="9a", 0x1, 0x20008080, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 66.704338][ T5615] cgroup: Unknown subsys name 'net' [ 66.793113][ T5615] cgroup: Unknown subsys name 'cpuset' [ 66.801893][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.173540][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.348220][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.348731][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.349918][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.358739][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.359166][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.359627][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.366926][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.367338][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.374591][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.374853][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.382925][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.390867][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.391016][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.400679][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.425545][ T4949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.481080][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.482520][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.483061][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.485302][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.486094][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.505274][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.520572][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.528028][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.541832][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.542430][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.314848][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.314924][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.335498][ T5628] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.338413][ T5629] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.351437][ T5628] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.352827][ T5628] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.353471][ T5627] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.398113][ T5635] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.445697][ T5626] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.791582][ T5628] infiniband rxe0: set active [ 71.791603][ T5628] infiniband rxe0: added rxe_eth0 [ 71.840451][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.857634][ T5628] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 71.857664][ T5628] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 71.857701][ T5628] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 71.961027][ T5628] RDS/IB: rxe0: added [ 71.961374][ T5628] smc: adding ib device rxe0 with port count 1 [ 71.961464][ T5628] smc: ib device rxe0 port 1 has no pnetid [ 72.007371][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.056073][ T5628] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.105130][ T2262] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.189195][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.233326][ T2262] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.432133][ T5631] Bluetooth: hci1: command tx timeout [ 72.454122][ T5628] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.510646][ T5631] Bluetooth: hci3: command tx timeout [ 72.510801][ T53] Bluetooth: hci2: command tx timeout [ 72.510810][ T5631] Bluetooth: hci0: command tx timeout [ 72.590245][ T5631] Bluetooth: hci4: command tx timeout [ 72.718077][ T5628] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.788549][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.789373][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.789807][ T5629] bridge_slave_0: entered allmulticast mode [ 72.812551][ T5629] bridge_slave_0: entered promiscuous mode [ 72.822520][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.822623][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.823022][ T5627] bridge_slave_0: entered allmulticast mode [ 72.825298][ T5627] bridge_slave_0: entered promiscuous mode [ 72.885900][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.886013][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.886398][ T5629] bridge_slave_1: entered allmulticast mode [ 72.888300][ T5629] bridge_slave_1: entered promiscuous mode [ 72.916439][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.916544][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.916964][ T5627] bridge_slave_1: entered allmulticast mode [ 72.919230][ T5627] bridge_slave_1: entered promiscuous mode [ 72.965438][ T5628] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.048813][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.056926][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.057120][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.057294][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.057406][ T5635] bridge_slave_0: entered allmulticast mode [ 73.061491][ T5635] bridge_slave_0: entered promiscuous mode [ 73.067195][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.067295][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.067676][ T5635] bridge_slave_1: entered allmulticast mode [ 73.072497][ T5635] bridge_slave_1: entered promiscuous mode [ 73.109926][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.137239][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.137437][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.137530][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.137635][ T5626] bridge_slave_0: entered allmulticast mode [ 73.138642][ T5626] bridge_slave_0: entered promiscuous mode [ 73.206833][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.206979][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.207093][ T5626] bridge_slave_1: entered allmulticast mode [ 73.208845][ T5626] bridge_slave_1: entered promiscuous mode [ 73.259300][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.295630][ T5627] team0: Port device team_slave_0 added [ 73.297913][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.313629][ T5629] team0: Port device team_slave_0 added [ 73.317301][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.320757][ T5627] team0: Port device team_slave_1 added [ 73.336594][ T5629] team0: Port device team_slave_1 added [ 73.339189][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.357622][ T5635] team0: Port device team_slave_0 added [ 73.363120][ T5635] team0: Port device team_slave_1 added [ 73.423203][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.423219][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.423243][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.430812][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.430826][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.430848][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.447700][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.447714][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.447736][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.450783][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.450795][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.450816][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.454728][ T5626] team0: Port device team_slave_0 added [ 73.458064][ T5626] team0: Port device team_slave_1 added [ 73.468058][ T5628] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.470922][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.470934][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.470956][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.492617][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.492631][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.492654][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.704721][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.704736][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.704758][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.710653][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.710666][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.710688][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.807747][ T5627] hsr_slave_0: entered promiscuous mode [ 73.808910][ T5627] hsr_slave_1: entered promiscuous mode [ 73.838229][ T5629] hsr_slave_0: entered promiscuous mode [ 73.839287][ T5629] hsr_slave_1: entered promiscuous mode [ 73.840051][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 73.840703][ T5629] Cannot create hsr debugfs directory [ 73.869001][ T5635] hsr_slave_0: entered promiscuous mode [ 73.870714][ T5635] hsr_slave_1: entered promiscuous mode [ 73.871445][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 73.871462][ T5635] Cannot create hsr debugfs directory [ 73.968230][ T5626] hsr_slave_0: entered promiscuous mode [ 73.968815][ T5626] hsr_slave_1: entered promiscuous mode [ 73.969237][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 73.969254][ T5626] Cannot create hsr debugfs directory [ 74.407503][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.417677][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.418679][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.428745][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.445507][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.453307][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.465796][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.473727][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.510888][ T5631] Bluetooth: hci1: command tx timeout [ 74.577326][ T5629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.588259][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.590540][ T5631] Bluetooth: hci0: command tx timeout [ 74.590562][ T4949] Bluetooth: hci3: command tx timeout [ 74.590568][ T5631] Bluetooth: hci2: command tx timeout [ 74.626822][ T5629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.631002][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.631802][ T5629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.639820][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.645750][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.645848][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.646258][ T5628] bridge_slave_0: entered allmulticast mode [ 74.649335][ T5628] bridge_slave_0: entered promiscuous mode [ 74.653066][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.653200][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.653573][ T5628] bridge_slave_1: entered allmulticast mode [ 74.655231][ T5628] bridge_slave_1: entered promiscuous mode [ 74.657965][ T5629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.663333][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.673408][ T53] Bluetooth: hci4: command tx timeout [ 74.737010][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.759129][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.819903][ T5628] team0: Port device team_slave_0 added [ 74.824930][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.832257][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.833036][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.836947][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.845000][ T5628] team0: Port device team_slave_1 added [ 74.854118][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.858349][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.893946][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.896691][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.902607][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.902619][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.902641][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.907798][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.907811][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.907833][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.048145][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.053975][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.054815][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.063489][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.071589][ T5628] hsr_slave_0: entered promiscuous mode [ 75.072570][ T5628] hsr_slave_1: entered promiscuous mode [ 75.073266][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 75.073283][ T5628] Cannot create hsr debugfs directory [ 75.084520][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.093983][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.128157][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.132714][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.164058][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.282401][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.338707][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.338791][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.348821][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.368507][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.368565][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.408737][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.436726][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.439809][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.459328][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.465222][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.466856][ T1931] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.466953][ T1931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.484603][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.498266][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.501315][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.501411][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.522477][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.528609][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.542340][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.544673][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.562419][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.594384][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.594480][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.628717][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.628816][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.651555][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.687293][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.687352][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.722949][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.723008][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.026648][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.123975][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.154583][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.154752][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.189590][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.189694][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.591283][ T53] Bluetooth: hci1: command tx timeout [ 76.671107][ T53] Bluetooth: hci2: command tx timeout [ 76.671140][ T53] Bluetooth: hci0: command tx timeout [ 76.671160][ T53] Bluetooth: hci3: command tx timeout [ 76.751389][ T5631] Bluetooth: hci4: command tx timeout [ 76.806876][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.966675][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.988056][ T5627] veth0_vlan: entered promiscuous mode [ 77.028783][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.049149][ T5627] veth1_vlan: entered promiscuous mode [ 77.094898][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.191503][ T5635] veth0_vlan: entered promiscuous mode [ 77.226270][ T5635] veth1_vlan: entered promiscuous mode [ 77.260298][ T5627] veth0_macvtap: entered promiscuous mode [ 77.288749][ T5627] veth1_macvtap: entered promiscuous mode [ 77.361854][ T5626] veth0_vlan: entered promiscuous mode [ 77.379391][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.396786][ T5635] veth0_macvtap: entered promiscuous mode [ 77.404264][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.410496][ T5626] veth1_vlan: entered promiscuous mode [ 77.416032][ T5635] veth1_macvtap: entered promiscuous mode [ 77.502252][ T1931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.502402][ T1931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.502437][ T1931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.502477][ T1931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.563478][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.598987][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.627265][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.629211][ T5626] veth0_macvtap: entered promiscuous mode [ 77.678118][ T5626] veth1_macvtap: entered promiscuous mode [ 77.704090][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.704115][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.713208][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.714864][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.714900][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.714931][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.808315][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.830362][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.830380][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.871882][ T5629] veth0_vlan: entered promiscuous mode [ 77.899741][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.925158][ T5628] veth0_vlan: entered promiscuous mode [ 77.964605][ T5629] veth1_vlan: entered promiscuous mode [ 77.966096][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.966113][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.973344][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.973385][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.973424][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.973455][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.996909][ T5628] veth1_vlan: entered promiscuous mode [ 78.080535][ T5627] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.082908][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.082925][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.232661][ T5629] veth0_macvtap: entered promiscuous mode [ 78.283362][ T5848] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 78.293726][ T5849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6'. [ 78.298604][ T5628] veth0_macvtap: entered promiscuous mode [ 78.310925][ T5629] veth1_macvtap: entered promiscuous mode [ 78.345427][ T5628] veth1_macvtap: entered promiscuous mode [ 78.345775][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.345790][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.453796][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.453815][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.493749][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.495906][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.524965][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.528380][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.580493][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.623838][ T83] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.624013][ T83] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.671476][ T5631] Bluetooth: hci1: command tx timeout [ 78.675722][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.676966][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.677030][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.721102][ T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.750761][ T53] Bluetooth: hci0: command tx timeout [ 78.750772][ T4949] Bluetooth: hci2: command tx timeout [ 78.750809][ T5631] Bluetooth: hci3: command tx timeout [ 78.762417][ T1931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.830435][ T5631] Bluetooth: hci4: command tx timeout [ 79.509896][ T83] af_packet: tpacket_rcv: packet too big, clamped from 86 to 4294967286. macoff=82 [ 79.537998][ T5871] bridge_slave_0: left allmulticast mode [ 79.538023][ T5871] bridge_slave_0: left promiscuous mode [ 79.539103][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.575288][ T5871] bridge_slave_1: left allmulticast mode [ 79.575311][ T5871] bridge_slave_1: left promiscuous mode [ 79.575686][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.602700][ T5871] bond0: (slave bond_slave_0): Releasing backup interface [ 79.607774][ T5871] bond0: (slave bond_slave_1): Releasing backup interface [ 79.629433][ T5871] team0: Port device team_slave_0 removed [ 79.642071][ T5871] team0: Port device team_slave_1 removed [ 79.642550][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.642562][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.643658][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.643670][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.644735][ T5871] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.656165][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.656181][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.739232][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.739249][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.817990][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.818011][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.886718][ T5882] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 79.886740][ T5882] netlink: 'syz.2.3': attribute type 7 has an invalid length. [ 79.886751][ T5882] netlink: 'syz.2.3': attribute type 8 has an invalid length. [ 79.886763][ T5882] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3'. [ 79.886798][ T5882] NCSI netlink: No device for ifindex 65584 [ 79.947940][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.947959][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.117126][ T5890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'. [ 80.311057][ T5890] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 80.461002][ T5907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 80.556570][ T5906] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 80.797020][ T5920] netlink: 'syz.1.19': attribute type 2 has an invalid length. [ 80.797060][ T5920] netlink: 'syz.1.19': attribute type 2 has an invalid length. [ 80.809742][ T5927] netlink: 'syz.1.19': attribute type 2 has an invalid length. [ 80.809762][ T5927] netlink: 'syz.1.19': attribute type 2 has an invalid length. [ 81.112765][ T5931] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.141576][ T5933] Bluetooth: MGMT ver 1.23 [ 81.404564][ T5940] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 81.658219][ T5951] syzkaller1: entered promiscuous mode [ 81.658240][ T5951] syzkaller1: entered allmulticast mode [ 81.857649][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'. [ 81.894643][ T5955] team_slave_0: entered promiscuous mode [ 81.894960][ T5955] team_slave_0: left promiscuous mode [ 82.204753][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 82.427033][ T5996] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 82.674127][ T6005] ovs-dp0: entered promiscuous mode [ 82.804892][ T6020] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 82.968065][ T6028] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 82.968181][ T6028] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 82.985858][ T6038] Zero length message leads to an empty skb [ 83.466026][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.54'. [ 83.549727][ T6067] netlink: 64 bytes leftover after parsing attributes in process `syz.4.56'. [ 83.667050][ T6072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.58'. [ 84.436110][ T993] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.507751][ T6079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.59'. [ 84.659944][ T6087] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 84.702851][ T6090] openvswitch: netlink: IP tunnel dst address not specified [ 85.112713][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 85.447429][ T6140] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 85.791252][ T6159] netlink: 72 bytes leftover after parsing attributes in process `syz.2.80'. [ 85.979261][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.84'. [ 86.049568][ T6175] Bluetooth: MGMT ver 1.23 [ 86.129258][ T6182] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 86.691348][ T9] cfg80211: failed to load regulatory.db [ 86.816956][ T6213] 0: reclassify loop, rule prio 0, protocol 03 [ 86.880437][ T6226] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 87.084407][ T6241] netlink: 244 bytes leftover after parsing attributes in process `syz.2.102'. [ 87.106211][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 87.184438][ T6245] veth1_to_bond: entered allmulticast mode [ 87.220233][ T6245] veth1_to_bond: left allmulticast mode [ 87.987099][ T6298] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 88.108095][ T6304] netlink: 'syz.3.114': attribute type 6 has an invalid length. [ 88.108298][ T6304] netlink: 'syz.3.114': attribute type 6 has an invalid length. [ 88.108478][ T6304] netlink: 'syz.3.114': attribute type 6 has an invalid length. [ 88.108649][ T6304] netlink: 'syz.3.114': attribute type 6 has an invalid length. [ 88.149592][ T6304] netlink: 'syz.3.114': attribute type 6 has an invalid length. [ 88.149775][ T6304] netlink: 'syz.3.114': attribute type 6 has an invalid length. [ 88.149977][ T6304] netlink: 'syz.3.114': attribute type 6 has an invalid length. [ 88.165947][ T6304] netlink: 'syz.3.114': attribute type 6 has an invalid length. [ 88.166140][ T6304] netlink: 'syz.3.114': attribute type 6 has an invalid length. [ 88.166306][ T6304] netlink: 'syz.3.114': attribute type 6 has an invalid length. [ 88.504560][ T6317] netlink: 244 bytes leftover after parsing attributes in process `syz.2.117'. [ 88.536505][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 88.698255][ T6335] sctp: Trying to GSO but underlying device doesn't support it. [ 89.008834][ T6349] xt_CT: No such helper "netbios-ns" [ 89.278603][ T6375] nftables ruleset with unbound set [ 90.043019][ T6420] openvswitch: netlink: Key type 316 is out of range max 32 [ 90.664927][ T6413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.133'. [ 90.790009][ T6459] syzkaller0: entered promiscuous mode [ 90.790030][ T6459] syzkaller0: entered allmulticast mode [ 90.934147][ T6473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.143'. [ 91.172793][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 91.358991][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 91.698781][ T6523] ip_tables: iptables: counters copy to user failed while replacing table [ 91.699963][ T6523] C: renamed from lo (while UP) [ 91.719997][ T6523] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 91.730277][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'. [ 91.779222][ T6523] netlink: 156 bytes leftover after parsing attributes in process `syz.1.160'. [ 91.844024][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 91.844046][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 91.901844][ T6526] dvmrp0: entered allmulticast mode [ 92.146869][ T6558] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 93.050690][ T6608] bridge1: entered promiscuous mode [ 93.050718][ T6608] bridge1: entered allmulticast mode [ 95.554815][ T6578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.677035][ T6663] validate_nla: 27 callbacks suppressed [ 95.677053][ T6663] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 95.733183][ T6663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.824689][ T6675] __nla_validate_parse: 5 callbacks suppressed [ 95.824709][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 95.824723][ T6675] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 95.824734][ T6675] netlink: 224 bytes leftover after parsing attributes in process `syz.3.204'. [ 95.898435][ T6675] netlink: 'syz.3.204': attribute type 4 has an invalid length. [ 95.898457][ T6675] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.204'. [ 95.925168][ T6676] netlink: 200 bytes leftover after parsing attributes in process `syz.2.205'. [ 95.937997][ T6676] netlink: 68 bytes leftover after parsing attributes in process `syz.2.205'. [ 96.052570][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 96.132156][ T6685] bond1: option all_slaves_active: invalid value (179) [ 96.136426][ T6685] bond1 (unregistering): Released all slaves [ 96.211311][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 96.211337][ T6698] netlink: 14 bytes leftover after parsing attributes in process `syz.0.213'. [ 96.294790][ T6705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.375390][ T6709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.375583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.376449][ T6709] veth1_to_hsr: entered allmulticast mode [ 96.470227][ T6708] 8021q: VLANs not supported on ip6_vti0 [ 96.739079][ T6729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.832803][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.066832][ T6754] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 97.202315][ T6760] xt_hashlimit: size too large, truncated to 1048576 [ 97.225885][ T6757] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 97.235055][ T6757] bond1 (unregistering): Released all slaves [ 97.273842][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 97.332327][ T6770] netlink: 'syz.3.233': attribute type 8 has an invalid length. [ 97.527586][ T4949] block nbd0: Receive control failed (result -32) [ 97.527586][ T5631] block nbd0: Receive control failed (result -32) [ 97.716154][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.240'. [ 97.739114][ T6788] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 97.870383][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.902631][ T6801] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 97.903486][ T6803] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20004 [ 97.925660][ T6801] syzkaller0: entered promiscuous mode [ 97.925679][ T6801] syzkaller0: entered allmulticast mode [ 98.244096][ T6831] gretap0: entered promiscuous mode [ 98.326079][ T6841] netlink: 'syz.1.254': attribute type 3 has an invalid length. [ 98.346418][ T6841] netlink: 'syz.1.254': attribute type 13 has an invalid length. [ 98.376806][ T6841] netlink: 'syz.1.254': attribute type 13 has an invalid length. [ 98.390981][ T6836] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.391818][ T6836] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.391854][ T6836] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.391884][ T6836] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.495959][ T6846] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 98.654021][ T6859] netlink: 'syz.0.260': attribute type 1 has an invalid length. [ 98.706176][ T6859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.738957][ T6858] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 98.864240][ T6869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.867327][ T6869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.911514][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.950448][ T83] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.950486][ T83] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.950516][ T83] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.950546][ T83] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.970587][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.993470][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.060377][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.389689][ T6898] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 99.518531][ T6903] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 99.554641][ T6903] syzkaller0: entered promiscuous mode [ 99.554663][ T6903] syzkaller0: entered allmulticast mode [ 99.848402][ T6918] Bluetooth: hci0: unsupported parameter 5135 [ 99.848423][ T6918] Bluetooth: hci0: unsupported parameter 8192 [ 99.848440][ T6918] Bluetooth: hci0: unsupported parameter 5135 [ 99.848451][ T6918] Bluetooth: hci0: unsupported parameter 8192 [ 99.860025][ T6924] Bluetooth: hci0: unsupported parameter 5135 [ 99.860042][ T6924] Bluetooth: hci0: unsupported parameter 8192 [ 99.860052][ T6924] Bluetooth: hci0: unsupported parameter 5135 [ 99.860062][ T6924] Bluetooth: hci0: unsupported parameter 8192 [ 99.903147][ T6922] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 100.016932][ T83] IPVS: starting estimator thread 0... [ 100.104799][ T6938] IPVS: using max 34 ests per chain, 81600 per kthread [ 100.440674][ T6961] ip6erspan0: entered promiscuous mode [ 100.476697][ T6963] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 100.744612][ T6789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.989051][ T6989] __nla_validate_parse: 9 callbacks suppressed [ 100.989069][ T6989] netlink: 100 bytes leftover after parsing attributes in process `syz.1.299'. [ 101.176593][ T7000] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 101.213013][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 101.313263][ T10] net_ratelimit: 8 callbacks suppressed [ 101.313281][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.460412][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'. [ 102.034191][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.034215][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.299497][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 102.300075][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 102.327119][ T7078] tipc: Started in network mode [ 102.327144][ T7078] tipc: Node identity 8e4ece97444f, cluster identity 4711 [ 102.330024][ T7078] tipc: Enabled bearer , priority 0 [ 102.349785][ T7078] syzkaller0: entered promiscuous mode [ 102.349803][ T7078] syzkaller0: entered allmulticast mode [ 102.397552][ T7077] tipc: Resetting bearer [ 102.414006][ T7077] tipc: Disabling bearer [ 102.555768][ T7091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.327'. [ 102.586912][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.328'. [ 102.587553][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 102.587583][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 102.682796][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.743555][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 103.072492][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.150880][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.197237][ T7132] FAULT_INJECTION: forcing a failure. [ 103.197237][ T7132] name failslab, interval 1, probability 0, space 0, times 1 [ 103.197283][ T7132] CPU: 1 UID: 0 PID: 7132 Comm: syz.4.341 Not tainted syzkaller #0 PREEMPT(full) [ 103.197327][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.197357][ T7132] Call Trace: [ 103.197365][ T7132] [ 103.197373][ T7132] dump_stack_lvl+0xe8/0x150 [ 103.197405][ T7132] should_fail_ex+0x410/0x560 [ 103.197436][ T7132] should_failslab+0xa8/0x100 [ 103.197462][ T7132] ? skb_clone+0x212/0x3a0 [ 103.197480][ T7132] kmem_cache_alloc_noprof+0x9c/0x600 [ 103.197505][ T7132] ? skb_clone+0x212/0x3a0 [ 103.197531][ T7132] skb_clone+0x212/0x3a0 [ 103.197554][ T7132] __netlink_deliver_tap+0x355/0x6e0 [ 103.197586][ T7132] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.197609][ T7132] netlink_deliver_tap+0x19c/0x1b0 [ 103.197632][ T7132] netlink_unicast+0x8c1/0xa80 [ 103.197669][ T7132] netlink_sendmsg+0x7f0/0xb20 [ 103.197697][ T7132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.197723][ T7132] ? aa_sock_msg_perm+0x144/0x210 [ 103.197749][ T7132] ? apparmor_socket_sendmsg+0x98/0x360 [ 103.197770][ T7132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.197791][ T7132] sock_sendmsg_nosec+0x14e/0x190 [ 103.197816][ T7132] ____sys_sendmsg+0x54e/0x850 [ 103.197847][ T7132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.197884][ T7132] ? import_iovec+0x73/0xa0 [ 103.197913][ T7132] ___sys_sendmsg+0x2a5/0x360 [ 103.197937][ T7132] ? __lock_acquire+0x747/0x2de0 [ 103.197973][ T7132] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.198039][ T7132] ? __fget_files+0x3a2/0x420 [ 103.198057][ T7132] ? __fget_files+0x2a/0x420 [ 103.198086][ T7132] __x64_sys_sendmsg+0x1b1/0x290 [ 103.198108][ T7132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 103.198158][ T7132] do_syscall_64+0x166/0x520 [ 103.198176][ T7132] ? trace_irq_disable+0x3b/0x140 [ 103.198197][ T7132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.198216][ T7132] ? clear_bhb_loop+0x70/0xc0 [ 103.198239][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.198257][ T7132] RIP: 0033:0x7f0b9639f559 [ 103.198281][ T7132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.198295][ T7132] RSP: 002b:00007f0b972d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.198319][ T7132] RAX: ffffffffffffffda RBX: 00007f0b96625fa0 RCX: 00007f0b9639f559 [ 103.198333][ T7132] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 103.198344][ T7132] RBP: 00007f0b972d8090 R08: 0000000000000000 R09: 0000000000000000 [ 103.198355][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.198366][ T7132] R13: 00007f0b96626038 R14: 00007f0b96625fa0 R15: 00007fff6b685e18 [ 103.198398][ T7132] [ 103.521520][ T7145] x_tables: duplicate underflow at hook 1 [ 103.525870][ T7145] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.526751][ T7145] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.111441][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.394805][ T7204] netlink: 'syz.4.364': attribute type 32 has an invalid length. [ 104.421740][ T7204] bond1: option coupled_control: invalid value (192) [ 104.425525][ T7204] bond1 (unregistering): Released all slaves [ 104.453287][ T7210] netlink: 'syz.4.364': attribute type 32 has an invalid length. [ 104.495396][ T7210] bond1: option coupled_control: invalid value (192) [ 104.496655][ T7210] bond1 (unregistering): Released all slaves [ 104.510458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.516319][ T7025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.649001][ T7213] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 104.971544][ T7241] geneve2: entered promiscuous mode [ 104.971565][ T7241] geneve2: entered allmulticast mode [ 105.363413][ T7262] bond1: entered promiscuous mode [ 105.363436][ T7262] bond1: entered allmulticast mode [ 105.782764][ T7281] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 105.785419][ T7281] bond1 (unregistering): Released all slaves [ 105.997404][ T7287] netlink: 'syz.3.383': attribute type 4 has an invalid length. [ 105.997424][ T7287] __nla_validate_parse: 76 callbacks suppressed [ 105.997435][ T7287] netlink: 224 bytes leftover after parsing attributes in process `syz.3.383'. [ 106.065296][ T7290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 106.188353][ T7295] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 106.189082][ T7295] xt_REDIRECT: bad MAP_IPS. [ 106.345086][ T7304] FAULT_INJECTION: forcing a failure. [ 106.345086][ T7304] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.345116][ T7304] CPU: 1 UID: 0 PID: 7304 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(full) [ 106.345136][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.345147][ T7304] Call Trace: [ 106.345154][ T7304] [ 106.345162][ T7304] dump_stack_lvl+0xe8/0x150 [ 106.345194][ T7304] should_fail_ex+0x410/0x560 [ 106.345225][ T7304] _copy_from_user+0x2d/0xb0 [ 106.345252][ T7304] ___sys_sendmsg+0x1c6/0x360 [ 106.345278][ T7304] ? __lock_acquire+0x747/0x2de0 [ 106.345304][ T7304] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.345368][ T7304] ? __fget_files+0x3a2/0x420 [ 106.345387][ T7304] ? __fget_files+0x2a/0x420 [ 106.345416][ T7304] __x64_sys_sendmsg+0x1b1/0x290 [ 106.345437][ T7304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.345487][ T7304] do_syscall_64+0x166/0x520 [ 106.345504][ T7304] ? trace_irq_disable+0x3b/0x140 [ 106.345525][ T7304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.345543][ T7304] ? clear_bhb_loop+0x70/0xc0 [ 106.345565][ T7304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.345583][ T7304] RIP: 0033:0x7f2b6b19f559 [ 106.345601][ T7304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.345615][ T7304] RSP: 002b:00007f2b6c055028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.345635][ T7304] RAX: ffffffffffffffda RBX: 00007f2b6b426090 RCX: 00007f2b6b19f559 [ 106.345648][ T7304] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 106.345666][ T7304] RBP: 00007f2b6c055090 R08: 0000000000000000 R09: 0000000000000000 [ 106.345677][ T7304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.345688][ T7304] R13: 00007f2b6b426128 R14: 00007f2b6b426090 R15: 00007fff94c22268 [ 106.345719][ T7304] [ 106.664690][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'. [ 106.851817][ T7314] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 107.174594][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 107.230656][ T993] net_ratelimit: 3 callbacks suppressed [ 107.230675][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.630701][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.139160][ T7250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.177341][ T7357] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 108.250763][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 108.271968][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.352495][ T7361] vlan2: entered allmulticast mode [ 108.352510][ T7361] bridge3: entered allmulticast mode [ 109.077267][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.244632][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 109.312195][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.322179][ T7409] vlan2: entered allmulticast mode [ 109.322196][ T7409] bridge1: entered allmulticast mode [ 109.439581][ T7417] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 109.665246][ T7425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.424'. [ 109.677213][ T7425] team_slave_0: entered promiscuous mode [ 109.677407][ T7425] team_slave_0: left promiscuous mode [ 110.038283][ T7439] netlink: 'syz.4.427': attribute type 39 has an invalid length. [ 110.352446][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.454378][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 110.484477][ T7453] vlan1: entered allmulticast mode [ 110.484497][ T7453] bridge2: entered allmulticast mode [ 110.556756][ T7455] netlink: 112 bytes leftover after parsing attributes in process `syz.4.431'. [ 110.577630][ T7455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.431'. [ 110.578309][ T7455] IPVS: set_ctl: invalid protocol: 43 172.20.20.17:20000 [ 110.671571][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.736953][ T7463] xt_hashlimit: size too large, truncated to 1048576 [ 110.814878][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.864571][ T7465] bridge_slave_0 (unregistering): left allmulticast mode [ 110.864597][ T7465] bridge_slave_0 (unregistering): left promiscuous mode [ 110.864673][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.992115][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.390365][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.916303][ T7394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.120539][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 112.125885][ T7486] netlink: 'syz.1.441': attribute type 83 has an invalid length. [ 112.175356][ T7491] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 112.303945][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 112.383061][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 112.469461][ T5766] net_ratelimit: 1 callbacks suppressed [ 112.469479][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.503136][ T7519] tipc: Failed to remove unknown binding: 66,0,2/0:1936490556/1936490557 [ 112.503685][ T7519] tipc: Failed to remove unknown binding: 66,0,2/0:1936490556/1936490557 [ 112.514996][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.515188][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.515358][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.515501][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.519233][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.519373][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.519606][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.523341][ T7516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.523476][ T7516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.690353][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 112.690376][ T7526] netlink: 224 bytes leftover after parsing attributes in process `syz.4.449'. [ 112.690392][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 112.809922][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 113.026639][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.458'. [ 113.026663][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.458'. [ 113.026692][ T7554] netlink: 'syz.1.458': attribute type 4 has an invalid length. [ 113.117094][ T7557] ipvlan2: entered allmulticast mode [ 113.117117][ T7557] virt_wifi0: entered allmulticast mode [ 113.119694][ T7557] batman_adv: batadv0: Adding interface: ipvlan2 [ 113.119708][ T7557] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.119735][ T7557] batman_adv: batadv0: Interface activated: ipvlan2 [ 113.172137][ T43] IPVS: starting estimator thread 0... [ 113.172437][ T7559] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 113.260276][ T7561] IPVS: using max 31 ests per chain, 74400 per kthread [ 113.595819][ T7584] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 113.679811][ T7584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.764914][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 113.888771][ T7599] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 113.956341][ T7602] x_tables: duplicate underflow at hook 1 [ 113.956485][ T7602] x_tables: duplicate underflow at hook 1 [ 113.956556][ T7602] x_tables: duplicate underflow at hook 1 [ 113.956627][ T7602] x_tables: duplicate underflow at hook 1 [ 113.956701][ T7602] x_tables: duplicate underflow at hook 1 [ 113.967874][ T7602] x_tables: duplicate underflow at hook 1 [ 113.967958][ T7602] x_tables: duplicate underflow at hook 1 [ 113.968032][ T7602] x_tables: duplicate underflow at hook 1 [ 113.968159][ T7602] x_tables: duplicate underflow at hook 1 [ 113.968232][ T7602] x_tables: duplicate underflow at hook 1 [ 114.054546][ T7597] bond3: option fail_over_mac: invalid value (16) [ 114.057587][ T7597] bond3 (unregistering): Released all slaves [ 114.117874][ T7617] netlink: 'syz.3.481': attribute type 2 has an invalid length. [ 114.133087][ T7609] vlan3: entered allmulticast mode [ 114.133106][ T7609] bridge4: entered allmulticast mode [ 114.133576][ T7608] syzkaller1: entered promiscuous mode [ 114.133592][ T7608] syzkaller1: entered allmulticast mode [ 114.169275][ T7617] netlink: 'syz.3.481': attribute type 2 has an invalid length. [ 114.636623][ T7646] tipc: Started in network mode [ 114.636648][ T7646] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 114.636961][ T7646] tipc: Enabled bearer , priority 0 [ 114.639220][ T7645] tipc: Enabling of bearer rejected, already enabled [ 114.667692][ T7651] team_slave_0: entered promiscuous mode [ 114.667877][ T7651] team_slave_0: left promiscuous mode [ 114.987297][ T7674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.014927][ T7660] vlan2: entered allmulticast mode [ 115.014948][ T7660] bridge4: entered allmulticast mode [ 115.049556][ T7680] netlink: 'syz.3.499': attribute type 24 has an invalid length. [ 115.282808][ T7693] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 115.320066][ T7695] netlink: 'syz.3.502': attribute type 21 has an invalid length. [ 115.335628][ T7693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.363397][ T7693] xt_cluster: node mask cannot exceed total number of nodes [ 115.385505][ T7693] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.398786][ T7693] bond3: (slave team0): Enslaving as a backup interface with an up link [ 115.456823][ T7700] team_slave_0: entered promiscuous mode [ 115.457013][ T7700] team_slave_0: left promiscuous mode [ 115.516291][ T6839] bond3: (slave team0): link status definitely down, disabling slave [ 115.630360][ T4949] Bluetooth: hci0: command 0x0c24 tx timeout [ 115.634212][ T5631] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 115.737081][ T7715] xt_IDLETIMER: label is empty or not nul-terminated [ 115.753009][ T10] tipc: Node number set to 43690 [ 115.980555][ T7735] netlink: 'syz.3.515': attribute type 3 has an invalid length. [ 117.630442][ T5774] net_ratelimit: 14 callbacks suppressed [ 117.630460][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.794372][ T7792] syzkaller0: entered promiscuous mode [ 117.794393][ T7792] syzkaller0: entered allmulticast mode [ 117.863332][ T7797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.864191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.888246][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.286555][ T7824] __nla_validate_parse: 19 callbacks suppressed [ 118.286573][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 118.307303][ T5631] block nbd1: Receive control failed (result -107) [ 118.554211][ T7832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.554420][ T7832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.554695][ T7832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.566008][ T7832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.566160][ T7832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.649165][ T7830] bond3 (unregistering): Released all slaves [ 118.663828][ T7835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.797208][ T7844] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 118.829553][ T7844] syzkaller0: entered promiscuous mode [ 118.829576][ T7844] syzkaller0: entered allmulticast mode [ 118.922018][ T7853] netlink: 'syz.2.553': attribute type 9 has an invalid length. [ 119.196722][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.559'. [ 119.214560][ T7869] bond0: (slave bond_slave_0): Releasing backup interface [ 119.276933][ T7869] bond_slave_0: entered promiscuous mode [ 119.278942][ T7869] bond_slave_0: entered allmulticast mode [ 119.560341][ T7889] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 119.690728][ T7894] nbd: must specify a device to reconfigure [ 119.923274][ T7906] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 120.118952][ T7919] xt_policy: too many policy elements [ 120.138908][ T7919] macvlan0: entered promiscuous mode [ 120.295580][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 120.528268][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 120.681627][ T7944] netlink: 'syz.4.579': attribute type 10 has an invalid length. [ 120.696452][ T7949] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 120.746782][ T7944] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.761849][ T7944] bond0: (slave team0): Enslaving as an active interface with an up link [ 120.762308][ T7954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.580'. [ 120.875418][ T7959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.580'. [ 120.878416][ T7949] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.996830][ T7958] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 121.046726][ T7958] syzkaller0: entered promiscuous mode [ 121.046750][ T7958] syzkaller0: entered allmulticast mode [ 121.253299][ T7976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.313699][ T7981] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 121.318922][ T7981] xt_check_table_hooks: 23 callbacks suppressed [ 121.318941][ T7981] x_tables: duplicate underflow at hook 1 [ 121.474309][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.591'. [ 121.495879][ T7994] team_slave_0: entered promiscuous mode [ 121.496077][ T7994] team_slave_0: left promiscuous mode [ 121.596120][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 121.596151][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 121.662476][ T8001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.737121][ T8001] bond1: (slave bond0): making interface the new active one [ 121.738618][ T8001] bond1: (slave bond0): Enslaving as an active interface with an up link [ 121.796848][ T8008] bond1 (unregistering): (slave bond0): Releasing active interface [ 121.819499][ T8008] bond1 (unregistering): Released all slaves [ 122.191913][ T8031] netlink: 'syz.4.596': attribute type 4 has an invalid length. [ 122.205908][ T8032] netlink: 'syz.4.596': attribute type 4 has an invalid length. [ 122.284140][ T8030] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 122.323746][ T8030] syzkaller0: entered promiscuous mode [ 122.323769][ T8030] syzkaller0: entered allmulticast mode [ 122.510625][ T8019] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 122.542653][ T8019] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 122.833256][ T24] net_ratelimit: 12 callbacks suppressed [ 122.833274][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.129371][ T8086] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.321374][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.607'. [ 123.349837][ T8094] team_slave_0: entered promiscuous mode [ 123.361434][ T8094] gretap0: entered promiscuous mode [ 123.366407][ T8094] hsr1: entered promiscuous mode [ 123.408249][ T8099] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.409065][ T8099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.624464][ T8103] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 123.645011][ T8103] syzkaller0: entered promiscuous mode [ 123.645033][ T8103] syzkaller0: entered allmulticast mode [ 123.708738][ T8122] netlink: 392 bytes leftover after parsing attributes in process `syz.3.616'. [ 123.873345][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.951647][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.005153][ T8140] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.005242][ T8137] netlink: 'syz.2.620': attribute type 12 has an invalid length. [ 124.044808][ T8140] netlink: 'syz.3.621': attribute type 1 has an invalid length. [ 124.044826][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 124.068499][ T8140] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.098093][ T8145] netlink: 'syz.3.621': attribute type 1 has an invalid length. [ 124.098112][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 124.216614][ T8151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.622'. [ 124.252286][ T8151] 0: reclassify loop, rule prio 0, protocol 03 [ 124.501527][ T8170] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 124.501549][ T8170] netlink: 224 bytes leftover after parsing attributes in process `syz.1.626'. [ 124.603456][ T8180] sctp: [Deprecated]: syz.3.630 (pid 8180) Use of int in maxseg socket option. [ 124.603456][ T8180] Use struct sctp_assoc_value instead [ 124.677525][ T8178] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 124.720536][ T8178] syzkaller0: entered promiscuous mode [ 124.720559][ T8178] syzkaller0: entered allmulticast mode [ 124.742022][ T8189] netlink: 'syz.1.631': attribute type 8 has an invalid length. [ 124.913824][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.981876][ T8200] veth0_vlan: left promiscuous mode [ 124.981936][ T8200] vlan0: entered promiscuous mode [ 124.981948][ T8200] veth0_vlan: entered promiscuous mode [ 125.049226][ T8200] team0: Port device vlan0 added [ 125.051989][ T8201] tipc: Started in network mode [ 125.052014][ T8201] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 125.052157][ T8201] tipc: Enabled bearer , priority 0 [ 125.094618][ T8208] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 125.128875][ T8211] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 125.207396][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.637'. [ 125.247785][ T8217] netlink: 156 bytes leftover after parsing attributes in process `syz.2.639'. [ 125.249354][ T8214] team_slave_0: entered promiscuous mode [ 125.249605][ T8214] team_slave_0: left promiscuous mode [ 125.677947][ T8250] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 125.696127][ T8250] syzkaller0: entered promiscuous mode [ 125.696148][ T8250] syzkaller0: entered allmulticast mode [ 125.876193][ T8253] netlink: 'syz.2.648': attribute type 4 has an invalid length. [ 125.907488][ T8257] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 126.061649][ T8268] v: renamed from vlan1 (while UP) [ 126.122633][ T8272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.655'. [ 126.146221][ T8272] team_slave_0: entered promiscuous mode [ 126.146421][ T8272] team_slave_0: left promiscuous mode [ 126.181137][ T5774] tipc: Node number set to 11578026 [ 126.226275][ T8278] bond1: entered allmulticast mode [ 126.229395][ T8278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.255248][ T8279] netlink: 14 bytes leftover after parsing attributes in process `syz.1.658'. [ 126.285887][ T8279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.303764][ T8279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.318586][ T8279] bond0 (unregistering): Released all slaves [ 126.417898][ T8290] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 126.445136][ T8290] syzkaller0: entered promiscuous mode [ 126.445160][ T8290] syzkaller0: entered allmulticast mode [ 127.869481][ T8343] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 127.911037][ T8343] syzkaller0: entered promiscuous mode [ 127.911061][ T8343] syzkaller0: entered allmulticast mode [ 128.167808][ T8365] Cannot find del_set index 4 as target [ 128.357966][ T8374] __nla_validate_parse: 6 callbacks suppressed [ 128.358453][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 128.358508][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 128.454266][ T8374] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 128.751269][ T8406] xt_CONNSECMARK: invalid mode: 0 [ 128.814773][ T8397] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 128.854571][ T8397] syzkaller0: entered promiscuous mode [ 128.854594][ T8397] syzkaller0: entered allmulticast mode [ 129.184801][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 129.184823][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.698'. [ 129.185839][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 129.185856][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.698'. [ 129.354854][ T8444] netlink: 104 bytes leftover after parsing attributes in process `syz.1.700'. [ 129.434751][ T8424] wg0 speed is unknown, defaulting to 1000 [ 129.553677][ T8448] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.553711][ T8448] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.605616][ T8424] wg0 speed is unknown, defaulting to 1000 [ 129.734018][ T8424] wg0 speed is unknown, defaulting to 1000 [ 129.737969][ T8424] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 129.737999][ T8424] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 129.738032][ T8424] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 129.889186][ T8424] wg0 speed is unknown, defaulting to 1000 [ 129.899033][ T8424] wg0 speed is unknown, defaulting to 1000 [ 129.924624][ T8424] wg0 speed is unknown, defaulting to 1000 [ 129.929168][ T8424] wg0 speed is unknown, defaulting to 1000 [ 129.946004][ T8424] wg0 speed is unknown, defaulting to 1000 [ 130.182006][ T8492] netlink: 36 bytes leftover after parsing attributes in process `syz.2.707'. [ 130.190817][ T4949] Bluetooth: hci0: command 0x0c24 tx timeout [ 130.190850][ T5631] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 130.208424][ T8490] netlink: 256 bytes leftover after parsing attributes in process `syz.3.708'. [ 130.528351][ T8511] xt_policy: neither incoming nor outgoing policy selected [ 130.545169][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.713'. [ 130.817913][ T8537] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 130.817946][ T8537] netlink: 'syz.3.718': attribute type 2 has an invalid length. [ 130.993820][ T8546] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 131.253388][ T8558] nbd: must specify a device to reconfigure [ 131.667023][ T8589] tipc: Can't bind to reserved service type 2 [ 131.684671][ T6836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.684690][ T6836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.684901][ T8597] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 132.570204][ T5293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.752983][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.753037][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.844414][ T8673] Bluetooth: MGMT ver 1.23 [ 132.894972][ T8673] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.080182][ T8690] netlink: 'syz.2.753': attribute type 25 has an invalid length. [ 134.927737][ T8679] geneve2: entered promiscuous mode [ 134.927751][ T8679] geneve2: entered allmulticast mode [ 134.956653][ T8690] netlink: 'syz.2.753': attribute type 25 has an invalid length. [ 134.956670][ T8690] __nla_validate_parse: 13 callbacks suppressed [ 134.956680][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 135.012932][ T6836] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.013011][ T6836] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.013042][ T6836] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.013072][ T6836] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.202963][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'. [ 135.285760][ T8718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 135.349773][ T8723] netlink: 64 bytes leftover after parsing attributes in process `syz.0.764'. [ 135.359671][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 135.364378][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'. [ 135.559751][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 135.559784][ T8735] netlink: 'syz.3.768': attribute type 10 has an invalid length. [ 135.559798][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 135.672144][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 135.810930][ T8754] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 136.137182][ T8771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.777'. [ 136.434389][ T8797] netlink: zone id is out of range [ 136.764508][ T8815] TC_ACT_REPEAT abuse ? [ 137.183996][ T8837] xt_hashlimit: max too large, truncated to 1048576 [ 137.186043][ T8837] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.482295][ T8847] ipt_rpfilter: unknown options [ 137.694812][ T8850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.284860][ T8878] bond0: Error: CAN devices cannot be enslaved [ 138.378118][ T8882] ip_tables: iptables: counters copy to user failed while replacing table [ 139.828287][ T8949] macvlan0: left promiscuous mode [ 139.893397][ T8949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.895119][ T8949] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 139.911990][ T5774] wg0 speed is unknown, defaulting to 1000 [ 140.346366][ T8972] __nla_validate_parse: 5 callbacks suppressed [ 140.346385][ T8972] netlink: 60 bytes leftover after parsing attributes in process `syz.2.821'. [ 140.346989][ T8972] netlink: 60 bytes leftover after parsing attributes in process `syz.2.821'. [ 140.487344][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.818'. [ 140.515557][ T8978] team_slave_0: entered promiscuous mode [ 140.518272][ T8978] team_slave_0: left promiscuous mode [ 140.542976][ T8986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.824'. [ 140.898913][ T9003] netlink: 'syz.4.829': attribute type 2 has an invalid length. [ 140.917345][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.828'. [ 141.217840][ T9016] netlink: 88 bytes leftover after parsing attributes in process `syz.2.832'. [ 141.218065][ T9016] netlink: 88 bytes leftover after parsing attributes in process `syz.2.832'. [ 141.219468][ T9016] netlink: 88 bytes leftover after parsing attributes in process `syz.2.832'. [ 141.219681][ T9016] netlink: 88 bytes leftover after parsing attributes in process `syz.2.832'. [ 141.219893][ T9016] netlink: 88 bytes leftover after parsing attributes in process `syz.2.832'. [ 141.692459][ T9035] team_slave_0: entered promiscuous mode [ 141.692657][ T9035] team_slave_0: left promiscuous mode [ 141.719128][ T5631] block nbd2: Receive control failed (result -32) [ 141.848506][ T9042] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 142.264024][ T9067] 8021q: VLANs not supported on ip_vti0 [ 144.196638][ T9132] bond3: entered allmulticast mode [ 144.208047][ T9132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.417311][ T9140] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.417446][ T9132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.451676][ T9132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.459550][ T9132] bond0 (unregistering): Released all slaves [ 144.598874][ T9146] vlan3: entered allmulticast mode [ 144.598893][ T9146] bridge3: entered allmulticast mode [ 144.911197][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 145.249905][ T9186] bond0: (slave team0): Releasing backup interface [ 145.294662][ T9186] team0 (unregistering): Port device team_slave_0 removed [ 145.405637][ T9186] team0 (unregistering): Port device team_slave_1 removed [ 145.592228][ T9199] __nla_validate_parse: 70 callbacks suppressed [ 145.592249][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 145.592262][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 145.642620][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 145.642642][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 145.674863][ T6839] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.674904][ T6839] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.674935][ T6839] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.681506][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.688034][ T9201] syzkaller0: Caught tx_queue_len zero misconfig [ 145.718193][ T9203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.878'. [ 145.747387][ T9201] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 145.748518][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.877'. [ 146.008856][ T9220] netlink: 64 bytes leftover after parsing attributes in process `syz.4.884'. [ 146.308798][ T9256] netlink: 'syz.0.892': attribute type 1 has an invalid length. [ 146.348644][ T9256] 8021q: adding VLAN 0 to HW filter on device bond5 [ 146.357871][ T9256] bond4: (slave bond5): making interface the new active one [ 146.358447][ T9256] bond4: (slave bond5): Enslaving as an active interface with an up link [ 146.381498][ T9256] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 146.382985][ T9256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.892'. [ 146.518098][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 146.922638][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 146.988485][ T9273] ip_tables: iptables: counters copy to user failed while replacing table [ 149.124081][ T9235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.295293][ T9290] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.299501][ T9290] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.477162][ T9299] wlan1 speed is unknown, defaulting to 1000 [ 149.477223][ T9299] wlan1 speed is unknown, defaulting to 1000 [ 149.477963][ T9299] wlan1 speed is unknown, defaulting to 1000 [ 149.498793][ T9299] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 149.498823][ T9299] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 149.498857][ T9299] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 149.519646][ T9301] Bluetooth: hci0: unsupported parameter 5135 [ 149.519665][ T9301] Bluetooth: hci0: unsupported parameter 8192 [ 149.519675][ T9301] Bluetooth: hci0: unsupported parameter 5135 [ 149.519686][ T9301] Bluetooth: hci0: unsupported parameter 8192 [ 149.604276][ T9299] wlan1 speed is unknown, defaulting to 1000 [ 149.609189][ T9299] wlan1 speed is unknown, defaulting to 1000 [ 149.628392][ T9299] wlan1 speed is unknown, defaulting to 1000 [ 149.640680][ T9299] wlan1 speed is unknown, defaulting to 1000 [ 149.644551][ T9299] wlan1 speed is unknown, defaulting to 1000 [ 149.671199][ T9310] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 149.721248][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.778283][ T9310] bond0: (slave gretap1): making interface the new active one [ 149.779289][ T9310] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 149.787544][ T9321] netlink: 'syz.4.910': attribute type 1 has an invalid length. [ 150.294664][ T9357] vlan3: entered allmulticast mode [ 150.294685][ T9357] bridge6: entered allmulticast mode [ 150.379092][ T9360] pim6reg527: entered allmulticast mode [ 150.723703][ T9385] __nla_validate_parse: 5 callbacks suppressed [ 150.723716][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.929'. [ 150.724000][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'. [ 150.865187][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 150.868755][ T9391] ip_tables: iptables: counters copy to user failed while replacing table [ 150.886223][ T9393] vlan4: entered allmulticast mode [ 150.886239][ T9393] bridge8: entered allmulticast mode [ 151.134813][ T9411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.938'. [ 151.185509][ T9417] Bluetooth: hci0: unsupported parameter 5134 [ 151.185529][ T9417] Bluetooth: hci0: unsupported parameter 8192 [ 151.185541][ T9417] Bluetooth: hci0: unsupported parameter 5134 [ 151.185552][ T9417] Bluetooth: hci0: unsupported parameter 8192 [ 151.188534][ T9417] netlink: 220 bytes leftover after parsing attributes in process `syz.2.940'. [ 151.314368][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 151.345776][ T9423] vlan1: entered allmulticast mode [ 151.345794][ T9423] bridge6: entered allmulticast mode [ 151.459512][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 151.866615][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'. [ 151.925477][ T9450] vlan4: entered allmulticast mode [ 151.925497][ T9450] bridge7: entered allmulticast mode [ 151.993360][ T9450] bridge7: port 1(erspan0) entered blocking state [ 151.993478][ T9450] bridge7: port 1(erspan0) entered disabled state [ 151.993608][ T9450] erspan0: entered allmulticast mode [ 151.998851][ T9450] erspan0: entered promiscuous mode [ 151.999858][ T9450] bridge7: port 1(erspan0) entered blocking state [ 151.999968][ T9450] bridge7: port 1(erspan0) entered forwarding state [ 152.536528][ T9495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 152.536553][ T9495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.962'. [ 152.651335][ T9497] syzkaller0: entered promiscuous mode [ 152.651358][ T9497] syzkaller0: entered allmulticast mode [ 152.741488][ T9499] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.776183][ T9499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.787476][ T9499] bond4: (slave bond0): making interface the new active one [ 152.795056][ T9499] bond4: (slave bond0): Enslaving as an active interface with an up link [ 152.837117][ T9499] bond4 (unregistering): (slave bond0): Releasing active interface [ 152.852950][ T9499] bond4 (unregistering): Released all slaves [ 153.008458][ T9493] ip_tables: iptables: counters copy to user failed while replacing table [ 153.023679][ T9493] nbd3: detected capacity change from 0 to 274877906944 [ 153.025933][ T5631] block nbd3: Receive control failed (result -32) [ 153.053534][ T2002] block nbd3: Dead connection, failed to find a fallback [ 153.053563][ T2002] block nbd3: shutting down sockets [ 153.053644][ T2002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.053730][ T2002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 153.054144][ T2002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.054169][ T2002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 153.054287][ T2002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.054309][ T2002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 153.054471][ T2002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.054492][ T2002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 153.054590][ T2002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.054611][ T2002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 153.054734][ T2002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.054755][ T2002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 153.054866][ T2002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.054887][ T2002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 153.054980][ T2002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.055001][ T2002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 153.055028][ T9514] ldm_validate_partition_table(): Disk read failed. [ 153.055106][ T2002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.055127][ T2002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 153.055221][ T2002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.055242][ T2002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 153.055434][ T9514] Dev nbd3: unable to read RDB block 0 [ 153.055909][ T9514] nbd3: unable to read partition table [ 153.057251][ T9514] [ 153.260468][ T9514] ====================================================== [ 153.267472][ T9514] WARNING: possible circular locking dependency detected [ 153.274481][ T9514] syzkaller #0 Not tainted [ 153.278900][ T9514] ------------------------------------------------------ [ 153.285897][ T9514] udevd/9514 is trying to acquire lock: [ 153.291421][ T9514] ffffffff8fe8de00 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x5f0 [ 153.300566][ T9514] [ 153.300566][ T9514] but task is already holding lock: [ 153.307906][ T9514] ffff888078062800 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 153.317369][ T9514] [ 153.317369][ T9514] which lock already depends on the new lock. [ 153.317369][ T9514] [ 153.327753][ T9514] [ 153.327753][ T9514] the existing dependency chain (in reverse order) is: [ 153.336749][ T9514] [ 153.336749][ T9514] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 153.344289][ T9514] __might_fault+0xcb/0x130 [ 153.349310][ T9514] _copy_from_iter+0x100/0x1660 [ 153.354680][ T9514] tcp_sendmsg_locked+0x214a/0x53c0 [ 153.360383][ T9514] tcp_sendmsg+0x2f/0x50 [ 153.365129][ T9514] sock_sendmsg_nosec+0x10f/0x190 [ 153.370667][ T9514] sock_write_iter+0x2de/0x3e0 [ 153.375935][ T9514] vfs_write+0x612/0xba0 [ 153.380683][ T9514] ksys_write+0x150/0x270 [ 153.385518][ T9514] do_syscall_64+0x166/0x520 [ 153.390610][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.397013][ T9514] [ 153.397013][ T9514] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 153.404641][ T9514] lock_sock_nested+0x41/0x100 [ 153.409913][ T9514] inet_shutdown+0x6a/0x390 [ 153.414925][ T9514] nbd_mark_nsock_dead+0x2cb/0x550 [ 153.420539][ T9514] recv_work+0x1cee/0x1e10 [ 153.425460][ T9514] process_scheduled_works+0xc3d/0x1630 [ 153.431513][ T9514] worker_thread+0xa47/0xfb0 [ 153.436615][ T9514] kthread+0x38b/0x480 [ 153.441190][ T9514] ret_from_fork+0x514/0xb70 [ 153.446282][ T9514] ret_from_fork_asm+0x1a/0x30 [ 153.451550][ T9514] [ 153.451550][ T9514] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 153.459177][ T9514] __mutex_lock+0x197/0x15a0 [ 153.464271][ T9514] nbd_queue_rq+0x373/0xff0 [ 153.469296][ T9514] blk_mq_dispatch_rq_list+0x499/0x1990 [ 153.475355][ T9514] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 153.482190][ T9514] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 153.488678][ T9514] blk_mq_run_work_fn+0x167/0x2f0 [ 153.494213][ T9514] process_scheduled_works+0xc3d/0x1630 [ 153.500270][ T9514] worker_thread+0xa47/0xfb0 [ 153.505376][ T9514] kthread+0x38b/0x480 [ 153.509944][ T9514] ret_from_fork+0x514/0xb70 [ 153.515036][ T9514] ret_from_fork_asm+0x1a/0x30 [ 153.520303][ T9514] [ 153.520303][ T9514] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 153.527497][ T9514] __mutex_lock+0x197/0x15a0 [ 153.532592][ T9514] nbd_queue_rq+0xc1/0xff0 [ 153.537524][ T9514] blk_mq_dispatch_rq_list+0x499/0x1990 [ 153.543577][ T9514] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 153.550416][ T9514] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 153.556902][ T9514] blk_mq_run_work_fn+0x167/0x2f0 [ 153.562436][ T9514] process_scheduled_works+0xc3d/0x1630 [ 153.568489][ T9514] worker_thread+0xa47/0xfb0 [ 153.573584][ T9514] kthread+0x38b/0x480 [ 153.578160][ T9514] ret_from_fork+0x514/0xb70 [ 153.583254][ T9514] ret_from_fork_asm+0x1a/0x30 [ 153.588520][ T9514] [ 153.588520][ T9514] -> #3 (set->srcu){.+.+}-{0:0}: [ 153.595630][ T9514] __synchronize_srcu+0xca/0x2f0 [ 153.601074][ T9514] elevator_switch+0x1e8/0x7b0 [ 153.606346][ T9514] elevator_change+0x2fa/0x480 [ 153.611617][ T9514] elevator_set_default+0x375/0x440 [ 153.617335][ T9514] blk_register_queue+0x404/0x4f0 [ 153.622868][ T9514] __add_disk+0x6b8/0xdb0 [ 153.627706][ T9514] add_disk_fwnode+0x100/0x3a0 [ 153.633239][ T9514] nbd_dev_add+0x733/0xb60 [ 153.638167][ T9514] nbd_init+0x168/0x1f0 [ 153.642825][ T9514] do_one_initcall+0x250/0x870 [ 153.648123][ T9514] do_initcall_level+0x10a/0x1a0 [ 153.653566][ T9514] do_initcalls+0x59/0xa0 [ 153.658404][ T9514] kernel_init_freeable+0x29d/0x3e0 [ 153.664105][ T9514] kernel_init+0x22/0x1d0 [ 153.668942][ T9514] ret_from_fork+0x514/0xb70 [ 153.674038][ T9514] ret_from_fork_asm+0x1a/0x30 [ 153.679306][ T9514] [ 153.679306][ T9514] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 153.687111][ T9514] __mutex_lock+0x197/0x15a0 [ 153.692210][ T9514] elevator_change+0x1af/0x480 [ 153.697491][ T9514] elevator_set_none+0xb5/0x140 [ 153.702865][ T9514] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 153.709184][ T9514] nbd_start_device+0x189/0xb30 [ 153.714543][ T9514] nbd_genl_connect+0x167d/0x1cd0 [ 153.720080][ T9514] genl_family_rcv_msg_doit+0x233/0x340 [ 153.726136][ T9514] genl_rcv_msg+0x614/0x7a0 [ 153.731325][ T9514] netlink_rcv_skb+0x226/0x4a0 [ 153.736594][ T9514] genl_rcv+0x28/0x40 [ 153.741092][ T9514] netlink_unicast+0x8ef/0xa80 [ 153.746363][ T9514] netlink_sendmsg+0x7f0/0xb20 [ 153.751636][ T9514] sock_sendmsg_nosec+0x14e/0x190 [ 153.757168][ T9514] ____sys_sendmsg+0x54e/0x850 [ 153.762439][ T9514] ___sys_sendmsg+0x2a5/0x360 [ 153.767624][ T9514] __x64_sys_sendmsg+0x1b1/0x290 [ 153.773063][ T9514] do_syscall_64+0x166/0x520 [ 153.778156][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.784554][ T9514] [ 153.784554][ T9514] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 153.793157][ T9514] blk_alloc_queue+0x544/0x690 [ 153.798439][ T9514] __blk_mq_alloc_disk+0x194/0x390 [ 153.804065][ T9514] nbd_dev_add+0x494/0xb60 [ 153.808996][ T9514] nbd_init+0x168/0x1f0 [ 153.813663][ T9514] do_one_initcall+0x250/0x870 [ 153.818943][ T9514] do_initcall_level+0x10a/0x1a0 [ 153.824391][ T9514] do_initcalls+0x59/0xa0 [ 153.829226][ T9514] kernel_init_freeable+0x29d/0x3e0 [ 153.834931][ T9514] kernel_init+0x22/0x1d0 [ 153.839776][ T9514] ret_from_fork+0x514/0xb70 [ 153.844899][ T9514] ret_from_fork_asm+0x1a/0x30 [ 153.850170][ T9514] [ 153.850170][ T9514] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 153.857371][ T9514] __lock_acquire+0x164c/0x2de0 [ 153.862737][ T9514] lock_acquire+0x115/0x350 [ 153.867744][ T9514] fs_reclaim_acquire+0x71/0x100 [ 153.873190][ T9514] prepare_alloc_pages+0x149/0x5f0 [ 153.878816][ T9514] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 153.885129][ T9514] alloc_pages_mpol+0x21e/0x390 [ 153.890489][ T9514] folio_alloc_mpol_noprof+0x39/0x160 [ 153.896373][ T9514] vma_alloc_folio_noprof+0xe1/0x1e0 [ 153.902165][ T9514] do_wp_page+0x1178/0x4b70 [ 153.907170][ T9514] handle_mm_fault+0x15d7/0x3750 [ 153.912609][ T9514] do_user_addr_fault+0x7f6/0x1480 [ 153.918225][ T9514] exc_page_fault+0x6a/0xc0 [ 153.923228][ T9514] asm_exc_page_fault+0x26/0x30 [ 153.928582][ T9514] rep_movs_alternative+0x33/0xa0 [ 153.934114][ T9514] _copy_to_iter+0x255/0x1810 [ 153.939301][ T9514] seq_read_iter+0xaae/0xca0 [ 153.944400][ T9514] vfs_read+0x595/0xa80 [ 153.949061][ T9514] ksys_read+0x150/0x270 [ 153.953808][ T9514] do_syscall_64+0x166/0x520 [ 153.958903][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.965298][ T9514] [ 153.965298][ T9514] other info that might help us debug this: [ 153.965298][ T9514] [ 153.975504][ T9514] Chain exists of: [ 153.975504][ T9514] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 153.975504][ T9514] [ 153.988001][ T9514] Possible unsafe locking scenario: [ 153.988001][ T9514] [ 153.995435][ T9514] CPU0 CPU1 [ 154.000781][ T9514] ---- ---- [ 154.006127][ T9514] rlock(&mm->mmap_lock); [ 154.010525][ T9514] lock(sk_lock-AF_INET); [ 154.017441][ T9514] lock(&mm->mmap_lock); [ 154.024271][ T9514] lock(fs_reclaim); [ 154.028234][ T9514] [ 154.028234][ T9514] *** DEADLOCK *** [ 154.028234][ T9514] [ 154.036355][ T9514] locks held by udevd/9514: 2, last CPU#1: [ 154.042142][ T9514] #0: ffff88807bdad998 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 154.050922][ T9514] #1: ffff888078062800 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 154.060843][ T9514] [ 154.060843][ T9514] stack backtrace: [ 154.066723][ T9514] CPU: 1 UID: 0 PID: 9514 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 154.075552][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 154.085590][ T9514] Call Trace: [ 154.088856][ T9514] [ 154.091773][ T9514] dump_stack_lvl+0xe8/0x150 [ 154.096361][ T9514] print_circular_bug+0x2e2/0x300 [ 154.101374][ T9514] check_noncircular+0x12f/0x150 [ 154.106301][ T9514] __lock_acquire+0x164c/0x2de0 [ 154.111143][ T9514] ? __lock_acquire+0x747/0x2de0 [ 154.116069][ T9514] ? lock_acquire+0x115/0x350 [ 154.120734][ T9514] lock_acquire+0x115/0x350 [ 154.125222][ T9514] ? prepare_alloc_pages+0x149/0x5f0 [ 154.130495][ T9514] ? rcu_is_watching+0x16/0xb0 [ 154.135247][ T9514] ? __kasan_check_byte+0x12/0x40 [ 154.140263][ T9514] fs_reclaim_acquire+0x71/0x100 [ 154.145187][ T9514] ? prepare_alloc_pages+0x149/0x5f0 [ 154.150458][ T9514] prepare_alloc_pages+0x149/0x5f0 [ 154.155560][ T9514] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 154.161355][ T9514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 154.167670][ T9514] ? __pfx_policy_nodemask+0x10/0x10 [ 154.172947][ T9514] alloc_pages_mpol+0x21e/0x390 [ 154.177792][ T9514] folio_alloc_mpol_noprof+0x39/0x160 [ 154.183156][ T9514] vma_alloc_folio_noprof+0xe1/0x1e0 [ 154.188468][ T9514] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 154.194385][ T9514] do_wp_page+0x1178/0x4b70 [ 154.198882][ T9514] ? __pfx_do_wp_page+0x10/0x10 [ 154.203714][ T9514] ? do_raw_spin_lock+0x12b/0x2f0 [ 154.208732][ T9514] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 154.214096][ T9514] handle_mm_fault+0x15d7/0x3750 [ 154.219022][ T9514] ? handle_mm_fault+0xf1/0x3750 [ 154.223947][ T9514] ? __pfx_handle_mm_fault+0x10/0x10 [ 154.229220][ T9514] ? __lock_acquire+0x747/0x2de0 [ 154.234155][ T9514] ? lock_mm_and_find_vma+0xa7/0x340 [ 154.239426][ T9514] do_user_addr_fault+0x7f6/0x1480 [ 154.244531][ T9514] exc_page_fault+0x6a/0xc0 [ 154.249026][ T9514] asm_exc_page_fault+0x26/0x30 [ 154.253859][ T9514] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 154.259658][ T9514] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 154.279244][ T9514] RSP: 0018:ffffc90005017a58 EFLAGS: 00050212 [ 154.285311][ T9514] RAX: 33343d524f4a414d RBX: ffff88803fea6000 RCX: 0000000000000037 [ 154.293266][ T9514] RDX: 0000000000000000 RSI: ffff88803fea6000 RDI: 000055e70356ba00 [ 154.301227][ T9514] RBP: ffffc90005017bd8 R08: ffff88803fea6036 R09: 1ffff11007fd4c06 [ 154.309184][ T9514] R10: dffffc0000000000 R11: ffffed1007fd4c07 R12: 1ffff92000a02faf [ 154.317149][ T9514] R13: 000055e70356ba00 R14: ffffc90005017d88 R15: 0000000000000037 [ 154.325113][ T9514] _copy_to_iter+0x255/0x1810 [ 154.329781][ T9514] ? seq_read_iter+0xa47/0xca0 [ 154.334538][ T9514] ? __pfx__copy_to_iter+0x10/0x10 [ 154.339639][ T9514] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.345604][ T9514] ? kernfs_put_active+0xa0/0x100 [ 154.350621][ T9514] ? kernfs_seq_stop+0x17e/0x200 [ 154.355550][ T9514] seq_read_iter+0xaae/0xca0 [ 154.360136][ T9514] vfs_read+0x595/0xa80 [ 154.364277][ T9514] ? handle_mm_fault+0xf1/0x3750 [ 154.369199][ T9514] ? __pfx_vfs_read+0x10/0x10 [ 154.373863][ T9514] ? do_sys_openat2+0x18d/0x200 [ 154.378708][ T9514] ? fdget+0x16b/0x250 [ 154.382765][ T9514] ksys_read+0x150/0x270 [ 154.386996][ T9514] ? __pfx_ksys_read+0x10/0x10 [ 154.391747][ T9514] do_syscall_64+0x166/0x520 [ 154.396322][ T9514] ? trace_irq_disable+0x3b/0x140 [ 154.401334][ T9514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.407384][ T9514] ? clear_bhb_loop+0x70/0xc0 [ 154.412050][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.417926][ T9514] RIP: 0033:0x7f84a7aa7407 [ 154.422347][ T9514] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 154.441935][ T9514] RSP: 002b:00007ffda0035ff0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 154.450337][ T9514] RAX: ffffffffffffffda RBX: 00007f84a822c880 RCX: 00007f84a7aa7407 [ 154.458297][ T9514] RDX: 0000000000001000 RSI: 000055e70356ba00 RDI: 0000000000000009 [ 154.466280][ T9514] RBP: 00007f84a7befff0 R08: 0000000000000000 R09: 0000000000000000 [ 154.474233][ T9514] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 154.482187][ T9514] R13: 00007f84a7befea0 R14: 0000000000000000 R15: 000055e7035738a0 [ 154.490156][ T9514] [ 154.586646][ T9514] ldm_validate_partition_table(): Disk read failed. [ 154.586897][ T9514] Dev nbd3: unable to read RDB block 0 [ 154.587194][ T9514] nbd3: unable to read partition table