last executing test programs: 3.308065784s ago: executing program 1 (id=649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async) close(0x3) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0xa, 0x0, &(0x7f0000000100)=0x1f) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (rerun: 32) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) 3.081856044s ago: executing program 1 (id=652): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="8bed6b7ee1425d22", 0x8}, {0x0}], 0x2}}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00000003c0)="6812c04c9499888add4d9db4a3af3daffcb22b06d80f4192dcc0b683b702d25e7e1bd94ceb38094b1825b7707cf3466d45e2327980467acf78089c92036d2458bae3f637865612315ae8db93a08c06f6fb6a7d3a6cc8c37cb3bcee802f115d928ce564da4e022e6d76e39910ab70a2dd56f597d3215ae3b06257726d5c1399b4700189dc6b4e7f0fee205abf270c47ac39554124a4618f2963be90de204be392fcb429e5b0976e114a34a9419022f0e9d04f894f315621b3b9120f34bcfb684890ed4a8de289f9d12b1023a3e7e99c9f17e5bbe8e15315d5107db94e60", 0xdd) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x44880) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000000000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000100)=@ethtool_dump={0x3f, 0x3c5, 0x6}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES64, @ANYRESHEX=r5], 0x40}}, 0x20000094) 2.681274739s ago: executing program 1 (id=657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffffcd8b, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0xb, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "5f41235b9c4a9dd1", "a2b0c1951dc64a7c10d02ca8bf375b17", "61db0a1b", "4d6fd1789d18fd43"}, 0x28) 2.466439996s ago: executing program 4 (id=661): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.269230293s ago: executing program 4 (id=663): socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'ipvlan1\x00', @random}) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async, rerun: 32) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080)=0x3, 0x4) (async, rerun: 32) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac", @ANYRES32], 0x28}}], 0x1, 0x10) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 2.205992988s ago: executing program 1 (id=664): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x8, 0x110, r0, 0x206ad000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x4}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) socket$kcm(0x10, 0x2, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) pwritev(r7, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x4000000, 0x80) sendfile(r6, r7, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) 2.057664859s ago: executing program 2 (id=666): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x2a, 0x2, 0x0) (async) socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xf, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r10], 0x90}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c0002800800014000000011080003400000000e080002"], 0xdc}}, 0x0) 1.909183402s ago: executing program 0 (id=667): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff40080041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}, 0x10) r2 = socket(0x2a, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) r3 = socket(0x27, 0x3, 0x3) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000012000109fffb84a31d61000080000000fd94a463f17820c3312e65771e6a06793e210c7f37defecab666bb17049db3ad80cc8c00544571e84442f1c8786b01aa1415c9b2bd358a2a2e1654de1e"], 0x26}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f000030e000/0x1000)=nil, 0x1000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000540)) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x10}, 0xfffffdef}], 0x1, 0x401eb94) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000000), 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000000)={0x7e, 0x800, 0x6, 0x9, 0x8, 0x11}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x3, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRESOCT=0x0, @ANYRES64=r5, @ANYRESHEX=r2, @ANYRES16, @ANYRESDEC=r6, @ANYBLOB="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", @ANYRESDEC=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r7, 0x0, 0x0}, 0x10) r8 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, 0x0, 0x0) 1.858939554s ago: executing program 4 (id=668): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x41, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x1f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffffcd8b, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r12, @ANYRES16=r7], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$packet(r0, 0x0, 0x0) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.675057929s ago: executing program 2 (id=670): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2160, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x800, 0x5) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x8, 0x0, &(0x7f0000000000)) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0x5}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd660000000018000000000000000000000000000000000000000000000000000000000000000000008701000000000000c2047fffffff050204010000000000004f8238cc7cfe50be58a4ad5df8bf3569e20dc29f56581c97f468effa213a4d29176de01083f16e82fc212beb4ef7039d84e9d50e8b53115fa64d1db7ed4d271839a85a7bfc10414a69babf6b675ee994341d14b4242d2d69"], 0x0) 1.330857198s ago: executing program 3 (id=672): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, &(0x7f00000007c0)=0xffffff78) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000013a40)={0x0, 0x14, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd}, {}, {0x9}}}, 0x24}}, 0x0) recvmsg$can_j1939(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/15, 0xf}, {&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000380)=""/197, 0xc5}], 0x3}, 0x1) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="439aba2b496d941d29f251a153e4cca6", 0x10}, {&(0x7f0000000140)="30f04e54c6397385fbd207c7aacf0a6a7bc0d50a355b972648c3775be9775bd77eb3d88b2619db5a80da9fc1257e38211018ff93aab78d07bd8223d0f1a286aad871be62", 0x44}, {&(0x7f0000000480)="28493b3814f0db679bff36a2356686905b66af0a9cf3de2cd4fbb841a14d5b02b1eaee66f56088bfb1d7293c76a1159d0e86b78553e7304b2605590d84b6e718f95baca36e80a0d57c3893278578f9f0a7e928eb78dc3cf299384ebf8be7ee2b99", 0x61}], 0x3}, 0x4000085) 1.328974191s ago: executing program 4 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000080)) write(r2, &(0x7f0000000000)="3f000000010040", 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) listen(0xffffffffffffffff, 0xfff) recvmmsg(r4, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/138, 0x8a}], 0x1}, 0x805}], 0x1, 0x10000, 0x0) socket$inet6(0xa, 0x80000, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r1, 0x300, 0x70bd2d, 0x25dfdc03, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x24048041) 1.169677068s ago: executing program 0 (id=674): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.10181406s ago: executing program 1 (id=675): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x88affda4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x4000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), &(0x7f0000001c40)=r3}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) shutdown(r0, 0x1) 1.034140798s ago: executing program 2 (id=676): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x10000, 0x0) 1.019538934s ago: executing program 3 (id=677): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 917.251901ms ago: executing program 0 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000019000100feffffff000008001d01070008000900", @ANYRES32, @ANYBLOB="08000a009d05"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001900290029bd7000fbdbdf2102201000fd03ff0b000a000008001e000700000008000400", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) getsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000100)={@broadcast}, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) r5 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) (async) write$cgroup_pid(r4, &(0x7f0000000080)=r5, 0x12) 808.880648ms ago: executing program 1 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a50000000060a0b0400000000000000000200000024000480200001800b0001006f626a7265660000100002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000dfffffff0a00"/120], 0x78}, 0x1, 0x0, 0x0, 0x20004049}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004800)=ANY=[], 0x1b4}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002700), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000002740)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002780)={0x28, r7, 0xb3ed58ea428894e7, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4008000) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x5c, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r9 = socket(0x8, 0x6, 0xfffffffd) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f00000000c0)=[{{0x2, 0x1, 0x1}, {0x4, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x10) recvmmsg(r9, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000009368a9d233420c836ad07a7adb6d8d13af89d182584d70f83db727"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 800.748461ms ago: executing program 0 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000908000008000000010000f04d8b724abe330180000088ca84e6455a402e7d711dfc840d9b6978156072ec40b2755f2b260f99fc314e679e5214e6154fcce100c5182053f6a61346e583719b0ec80000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x1a, &(0x7f0000000180)=""/26, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x40000) 776.638517ms ago: executing program 2 (id=681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0xb8, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0xa4, 0x1, [@m_skbedit={0xa0, 0xd, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xfff2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x333, 0x4, 0x4, 0x80000001}}]}, {0x44, 0x6, "b84ae2cf57720f9cbc72347cd3bab6fab7680a2b91627dbb1167239be3ad79b6323f8cd5510bae1e22176ab0502af6d7a56ce0fc633f1544d65a26fc879de639"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4068000}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async, rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) (async, rerun: 32) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x400000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r13, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="0100000000000000", @ANYRES32, @ANYBLOB="2b4cc226fed6dc3b6c42e7d6b9cc9d3aede3b0b75b816cd2eb614f97c30f969ef3ebcd1be017e99634888a69ade24691ebd0ba090cf532851f3e788a9264d982f556839afe9dc933fa5bfecb6cde3e838c174312670f395d50801788ec3459e03df7226c0400000000000000dcd3c82f24f91fdd465d3196dee7f0414ed390978abc28829206f9a4fc0a52fcc770ff5d9b878c7fa7be58794d8d7ad9f88f03999ad23e71b155d3bd80cc11c75b7c2844bf0415", @ANYRES32=r10, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r4, @ANYBLOB="060066008e880000b1003300080300000802110000000001ffffffffffff000008021100000100000a0006000802110029906c87"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 754.447026ms ago: executing program 3 (id=682): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769368f40653727f7526af11d10fafc11b91ced9d4ae3916383fb98fc275e11f5bed4ec3469dd878bea99164e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r7 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0xc, 0x100, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x2400c000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769368f40653727f7526af11d10fafc11b91ced9d4ae3916383fb98fc275e11f5bed4ec3469dd878bea99164e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) (async) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0xc, 0x100, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x2400c000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 521.585998ms ago: executing program 0 (id=683): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000700)={'bond0\x00'}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x14) (async, rerun: 32) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve0\x00'}}, 0x1e) (async) sendto$x25(r2, &(0x7f0000000140)="a2da7e9909e6c1fbf9f6e60f22be1d1d995a3d6cac3926090b0b38c4cd13c872ab59663e28dad90feb0b3c6fc03ccda7af8ea4b55f5362fc9a9dc26fbdf4c20e7949bd25f9cef4bbe7327d677fbd53bb23afbf42ba9d713f32aa554b4fc83d66b3b427cd606ab4c088df2896342ce90c467c7dee9538e7a16e2f486d5d5443ea5157d814b6ef282fcb5643f91cc45f9a9d4b8a62a449ca7c80d5d7046dfead7c7557d7ebffd5", 0xa6, 0x20008080, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async, rerun: 32) r4 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve1\x00'}}, 0x1e) (async, rerun: 64) r5 = socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)={0x1c, r6, 0x200, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@crypto_settings]}, 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x40880) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'ip6tnl0\x00'}}, 0x1e) (async) close(0x3) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x80) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008884) 482.622299ms ago: executing program 3 (id=684): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40000800, 0x0, 0x2, 0xa, 0x0, 0x9}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 463.338597ms ago: executing program 2 (id=685): r0 = socket(0x11, 0x3, 0xfffffffd) (async) r1 = socket$unix(0x1, 0x2, 0x0) r2 = epoll_create(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x30000000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140)=0x9, 0x4) (async, rerun: 32) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r4}, 0x10) (async, rerun: 32) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) r6 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_create1(0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x29, 0x5, 0xfc, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0x30000}, 0x20, 0x700, 0x7, 0x8}}) 313.737631ms ago: executing program 3 (id=686): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@updpolicy={0x108, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0x44, 0x5, [{{@in6=@private1, 0x4d6, 0x2b}, 0x2, @in=@multicast1, 0x3504, 0x3, 0x2, 0xfd, 0x1, 0x8}]}, @policy_type={0xa, 0x10, {0x1}}]}, 0x108}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x9403, 0x0, 0x340, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0xa, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 293.939119ms ago: executing program 4 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000b700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x40810) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @empty}, 0xe, 0x0, 0x0, 0x0, 0x16, 0x0, 0x50, 0x3, 0x200}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x6bd14d2bc29e41b6}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 152.841046ms ago: executing program 2 (id=688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 41.692753ms ago: executing program 3 (id=689): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010"], 0x34}}, 0x0) unshare(0x22020400) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000740)=ANY=[@ANYBLOB="120000003a000000d51f00000200000000000000aa647b5d3bf6372cc64a33ce1d65517c6c99af30", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000980)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="96dcda546ca8bf252f49133f79f6cc7cbb798e5c7615246bffc2f279efc6df25b63753a3c82df154d9da09e3538d385e692985cbae15f75ef73f337c5b4d150d7d7593a2243d7b238337d2ae1174026facba01bfc3b77193716639aebd0d0a6be495b0773e976b18d35a3c61e45f7967559f975268e9b7d0a6982e681cc65fa1000000000000000000003806a7a7d52315c49a3ff3", @ANYRES64=0x0], 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000004c00)="35b78a259c3d306dedbc8d57d8c01078a4dd14fd58c260c512c386d87551f18513e8b66626c8ad409a8ab83313b561a46f857ff0f17f6e18f5f37fdc57fe91ae9be5e427bde7e705a5998fe6c7e81613c7750078aa39ca3950011baca521f3d9c9acf8e3bfbb0e5485f1bc4934f5ffd9ceef098f7ab6adae48f5a275c3d4c09f1ec3fddde01d2257b8e71ef4250198cf630763f021c0a9345d25adaead684f2b59664bad71b8d5ae00a0e83e9734ba65390dfadea91820fa32163f4e0aa80949755f0b337c6bfe47a71e0f7a8492f675381ab13b161f2169ea2cdceed60177b5", 0xe0}, {&(0x7f0000004d00)="2e8f01702f94fde65d9d351be63d69be781cfe819b9603e82489b6d996aef081a6bebc529e724ea6ab554b7e18cb1ba69474b3961c30efbeb8a09ee4f18d5d617507a03077e3f0121e347f63fa409968c94a5ae6d261fe17a4c123d2a5cbbf", 0x5f}, {&(0x7f00000008c0)="d438e6fcb18d7aee648186af7c9497d28374be3acab4f8800cc562dabec8075170ea00c3d786f331b8892bad6a1887392c1ae99839700e47d3f02c0a35d78145f9a532e73feb1b344ab6c8b34886ff000000000000000000361d434904ddc6734d63e8caf53f6bd9c91b1576c369808a94aa2cd2e5fc6d74d0752a6880e6c6c82b126b4dba31cefa12c3dcb64e9f2b68ed3b77d8301e4bc409c2eb29fa578a3ed61f93445f08102f", 0x60}, {&(0x7f0000000380)="80", 0x1}, {&(0x7f00000003c0)="8470a96484df3d70e4562a9d77de024b58b03dac7d6d9b091a122d8a56e91171a2f00f6aeb8abba27deb0f2c5dbfd5d53bb1710e488b8075bfb6599ed0946ec3b481ffff1af3fc95269c8b89e98b41f4c539f042d0724446646d3c1f4ef32dcffeb9c457f3913f25d2fe76fe7a447e4393676c59d3e9b8f2da471b4f2fe5d7609734ebbe424329bbd64db4502012b6e48604180d87fd5b75a1f54e495365db2d00fb4827665238bbda4dbacc7486a2ba67f554cac38be12c78bbe65b29a62d6773a9a41674e68d3f98d4d4c2db3e26ef", 0xd0}, {&(0x7f0000000600)="88d4a5f95d728e6adb5f38789538b149c77c2b85d9c897ae7a1ff9282c512650223e2bbcf9357bad5f1949e8ea3d8c3095e004466af45a7fec4b4c0678b3ce28df80378ea17e49b88360df1f4bd7a4e56c4cfb1d440a4753ac3bcd196163d071c50a8858d5e4b882e643dff6069651a6d02641a11fd612fbc58f66a755a0ce4a3d27e197156f11b8c52c1665ec413e3782b886e5c1e27aa3", 0x98}], 0x40}}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "eb3700", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x87, {[@mptcp=@ack={0x1e, 0x4}]}}}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "3dead4", 0x68, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@routing={0x3a, 0x6, 0x1, 0xff, 0x0, [@remote, @local, @private0={0xfc, 0x0, '\x00', 0x1}]}], @payload_mcast={{{{{{0x30, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x2, 0x1, 0x0, 0x0, 0xf, 0x2, 0x1, 0x1423, 0x3, 0x0, 0x4e20, 0x4e24}, 0x0, 0x1}, 0x2, 0x1}, 0x2}}, [0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r9 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r10 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000300)=r10) 40.123255ms ago: executing program 0 (id=690): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x30, 0x29000000}, 0x0) 0s ago: executing program 4 (id=691): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000000100000811"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 0s ago: executing program 1 (id=697): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x17, 0x2e, 0x1, 0x0, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff3, 0xffff}, {0x0, 0xffff}}, [@TCA_CHAIN={0x0, 0xb, 0xc}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 84.915856][ T5826] cgroup: Unknown subsys name 'net' [ 85.031990][ T5826] cgroup: Unknown subsys name 'cpuset' [ 85.041554][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.771562][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.924030][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.941696][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.945670][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.950411][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.959511][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.965388][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.979156][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.986876][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.987350][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.994945][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.009212][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.016638][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.025671][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.038961][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.039281][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.055637][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.063063][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.063963][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.078458][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.079534][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.094776][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.105896][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.113180][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.127833][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.135895][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.820358][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 91.861019][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 91.974304][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 92.019968][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 92.172605][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.180032][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.187438][ T5837] bridge_slave_0: entered allmulticast mode [ 92.195189][ T5837] bridge_slave_0: entered promiscuous mode [ 92.219200][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 92.274587][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.282457][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.289852][ T5837] bridge_slave_1: entered allmulticast mode [ 92.297159][ T5837] bridge_slave_1: entered promiscuous mode [ 92.330549][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.337923][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.345147][ T5853] bridge_slave_0: entered allmulticast mode [ 92.352692][ T5853] bridge_slave_0: entered promiscuous mode [ 92.361841][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.369715][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.376968][ T5853] bridge_slave_1: entered allmulticast mode [ 92.384494][ T5853] bridge_slave_1: entered promiscuous mode [ 92.509534][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.534348][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.548147][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.580101][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.617272][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.627319][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.635204][ T5848] bridge_slave_0: entered allmulticast mode [ 92.645106][ T5848] bridge_slave_0: entered promiscuous mode [ 92.672890][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.680200][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.687840][ T5836] bridge_slave_0: entered allmulticast mode [ 92.695188][ T5836] bridge_slave_0: entered promiscuous mode [ 92.720393][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.727747][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.735035][ T5848] bridge_slave_1: entered allmulticast mode [ 92.743471][ T5848] bridge_slave_1: entered promiscuous mode [ 92.781166][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.788483][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.795669][ T5836] bridge_slave_1: entered allmulticast mode [ 92.803351][ T5836] bridge_slave_1: entered promiscuous mode [ 92.828240][ T5837] team0: Port device team_slave_0 added [ 92.864412][ T5853] team0: Port device team_slave_0 added [ 92.889547][ T5837] team0: Port device team_slave_1 added [ 92.913119][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.922733][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.931321][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.938664][ T5842] bridge_slave_0: entered allmulticast mode [ 92.945969][ T5842] bridge_slave_0: entered promiscuous mode [ 92.955800][ T5853] team0: Port device team_slave_1 added [ 92.964619][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.991696][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.013495][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.021274][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.029048][ T5842] bridge_slave_1: entered allmulticast mode [ 93.036382][ T5842] bridge_slave_1: entered promiscuous mode [ 93.060876][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.085140][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.092336][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.118629][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.168402][ T5847] Bluetooth: hci4: command tx timeout [ 93.168406][ T5850] Bluetooth: hci1: command tx timeout [ 93.168696][ T5850] Bluetooth: hci3: command tx timeout [ 93.174115][ T5847] Bluetooth: hci0: command tx timeout [ 93.207156][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.214917][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.241800][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.252584][ T5847] Bluetooth: hci2: command tx timeout [ 93.276565][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.283630][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.310290][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.338919][ T5848] team0: Port device team_slave_0 added [ 93.349532][ T5848] team0: Port device team_slave_1 added [ 93.359274][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.372585][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.382725][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.390086][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.416169][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.430996][ T5836] team0: Port device team_slave_0 added [ 93.502036][ T5836] team0: Port device team_slave_1 added [ 93.540160][ T5842] team0: Port device team_slave_0 added [ 93.578675][ T5837] hsr_slave_0: entered promiscuous mode [ 93.585277][ T5837] hsr_slave_1: entered promiscuous mode [ 93.593645][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.600725][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.627286][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.654117][ T5842] team0: Port device team_slave_1 added [ 93.661064][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.668134][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.694333][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.707149][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.714214][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.740707][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.752728][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.759816][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.786010][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.907372][ T5853] hsr_slave_0: entered promiscuous mode [ 93.914038][ T5853] hsr_slave_1: entered promiscuous mode [ 93.920665][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.928568][ T5853] Cannot create hsr debugfs directory [ 93.935141][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.944944][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.972024][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.984745][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.991800][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.017862][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.174197][ T5836] hsr_slave_0: entered promiscuous mode [ 94.180749][ T5836] hsr_slave_1: entered promiscuous mode [ 94.186916][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.195087][ T5836] Cannot create hsr debugfs directory [ 94.236788][ T5842] hsr_slave_0: entered promiscuous mode [ 94.243463][ T5842] hsr_slave_1: entered promiscuous mode [ 94.249878][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.257462][ T5842] Cannot create hsr debugfs directory [ 94.328136][ T5848] hsr_slave_0: entered promiscuous mode [ 94.334644][ T5848] hsr_slave_1: entered promiscuous mode [ 94.344613][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.352357][ T5848] Cannot create hsr debugfs directory [ 94.754958][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.769292][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.830316][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.872419][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.988060][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.004654][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.016957][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.032471][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.130534][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.168953][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.186056][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.199286][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.251390][ T5847] Bluetooth: hci0: command tx timeout [ 95.257881][ T5847] Bluetooth: hci3: command tx timeout [ 95.258014][ T5850] Bluetooth: hci1: command tx timeout [ 95.270032][ T5150] Bluetooth: hci4: command tx timeout [ 95.327787][ T5850] Bluetooth: hci2: command tx timeout [ 95.363640][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.375182][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.401524][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.413482][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.502611][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.515387][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.573658][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.586832][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.608072][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.623977][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.640078][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.663190][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.684392][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.691827][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.706407][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.727211][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.734388][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.746064][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.753257][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.789363][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.796545][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.834167][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.871359][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.878673][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.906545][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.913739][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.213134][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.252616][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.333307][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.355422][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.377201][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.384449][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.407405][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.414741][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.440201][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.447403][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.500097][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.507258][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.616157][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.678876][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.741034][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.949969][ T5837] veth0_vlan: entered promiscuous mode [ 96.976900][ T5842] veth0_vlan: entered promiscuous mode [ 96.996654][ T5842] veth1_vlan: entered promiscuous mode [ 97.029994][ T5837] veth1_vlan: entered promiscuous mode [ 97.100743][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.109541][ T10] cfg80211: failed to load regulatory.db [ 97.245201][ T5842] veth0_macvtap: entered promiscuous mode [ 97.276177][ T5848] veth0_vlan: entered promiscuous mode [ 97.301867][ T5842] veth1_macvtap: entered promiscuous mode [ 97.315380][ T5837] veth0_macvtap: entered promiscuous mode [ 97.327850][ T5850] Bluetooth: hci1: command tx timeout [ 97.333309][ T5850] Bluetooth: hci4: command tx timeout [ 97.338984][ T5150] Bluetooth: hci3: command tx timeout [ 97.342422][ T5847] Bluetooth: hci0: command tx timeout [ 97.346296][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.364891][ T5837] veth1_macvtap: entered promiscuous mode [ 97.374825][ T5848] veth1_vlan: entered promiscuous mode [ 97.408368][ T5847] Bluetooth: hci2: command tx timeout [ 97.425813][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.459196][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.471318][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.483395][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.499210][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.520225][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.531032][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.543581][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.558684][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.568147][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.576887][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.587897][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.605447][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.614530][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.624244][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.633470][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.675632][ T5848] veth0_macvtap: entered promiscuous mode [ 97.704535][ T5848] veth1_macvtap: entered promiscuous mode [ 97.750446][ T5836] veth0_vlan: entered promiscuous mode [ 97.758109][ T5853] veth0_vlan: entered promiscuous mode [ 97.816957][ T5853] veth1_vlan: entered promiscuous mode [ 97.865137][ T5836] veth1_vlan: entered promiscuous mode [ 97.880087][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.894564][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.906658][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.917399][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.929403][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.943457][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.960955][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.964890][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.980630][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.991769][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.002583][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.014164][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.046145][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.055590][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.065733][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.074898][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.092543][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.102325][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.181326][ T5853] veth0_macvtap: entered promiscuous mode [ 98.198148][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.206435][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.229591][ T5836] veth0_macvtap: entered promiscuous mode [ 98.241334][ T5853] veth1_macvtap: entered promiscuous mode [ 98.264349][ T5836] veth1_macvtap: entered promiscuous mode [ 98.327502][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.336868][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.371156][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.389154][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.409015][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.427470][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.437436][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.447943][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.457920][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.468380][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.482272][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.512654][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.525593][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.542314][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.557803][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.568759][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.578942][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.589986][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.600739][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.611565][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.623688][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.650245][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.663099][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.673451][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.684020][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.694384][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.705742][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.727880][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.744490][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.755193][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.786849][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.805201][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.816131][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.827272][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.837343][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.848038][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.862763][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.886450][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.901740][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.932000][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.950996][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.974331][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.976922][ T5853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.998405][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.037636][ T5853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.046416][ T5853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.077678][ T5853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.199415][ T5929] "syz.1.2" (5929) uses obsolete ecb(arc4) skcipher [ 99.408366][ T5847] Bluetooth: hci4: command tx timeout [ 99.409711][ T5850] Bluetooth: hci3: command tx timeout [ 99.413829][ T5847] Bluetooth: hci0: command tx timeout [ 99.422588][ T5150] Bluetooth: hci1: command tx timeout [ 99.489132][ T5850] Bluetooth: hci2: command tx timeout [ 99.505466][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.530212][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.530612][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.553002][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.610968][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.628988][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.712560][ T5955] veth1_to_bond: entered promiscuous mode [ 99.722776][ T5953] veth1_to_bond: entered allmulticast mode [ 99.733767][ T5955] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4'. [ 99.772673][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.783901][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.793421][ T5949] veth1_to_bond: left allmulticast mode [ 99.803117][ T5949] veth1_to_bond: left promiscuous mode [ 100.420913][ T5976] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 100.627005][ T5976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 101.045077][ T5994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.236378][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 101.273450][ T6002] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 101.332698][ T6002] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17'. [ 101.848123][ T6011] netlink: 72 bytes leftover after parsing attributes in process `syz.4.22'. [ 101.929255][ T6018] netlink: 'syz.3.25': attribute type 13 has an invalid length. [ 101.947296][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 102.203100][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.211614][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.363137][ T6036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.454973][ T6036] Zero length message leads to an empty skb [ 102.480967][ T6036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.539435][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.563537][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.734761][ T6018] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.747668][ T6018] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.756593][ T6018] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.768800][ T6018] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.088765][ T5850] Bluetooth: hci4: command tx timeout [ 103.522081][ T6078] FAULT_INJECTION: forcing a failure. [ 103.522081][ T6078] name failslab, interval 1, probability 0, space 0, times 1 [ 103.579039][ T6078] CPU: 0 UID: 0 PID: 6078 Comm: syz.2.37 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 103.579071][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.579089][ T6078] Call Trace: [ 103.579097][ T6078] [ 103.579106][ T6078] dump_stack_lvl+0x241/0x360 [ 103.579153][ T6078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.579183][ T6078] ? __pfx__printk+0x10/0x10 [ 103.579214][ T6078] ? __pfx___might_resched+0x10/0x10 [ 103.579245][ T6078] should_fail_ex+0x424/0x570 [ 103.579277][ T6078] should_failslab+0xac/0x100 [ 103.579307][ T6078] __kmalloc_noprof+0xdf/0x4d0 [ 103.579335][ T6078] ? sock_kmalloc+0xd7/0x160 [ 103.579367][ T6078] sock_kmalloc+0xd7/0x160 [ 103.579399][ T6078] ____sys_sendmsg+0x23b/0x860 [ 103.579436][ T6078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.579460][ T6078] ? __fget_files+0x2a/0x420 [ 103.579495][ T6078] ? __fget_files+0x2a/0x420 [ 103.579536][ T6078] __sys_sendmsg+0x271/0x360 [ 103.579569][ T6078] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.579653][ T6078] ? rcu_is_watching+0x15/0xb0 [ 103.579680][ T6078] ? trace_sys_enter+0x25/0x120 [ 103.579708][ T6078] do_syscall_64+0xf3/0x230 [ 103.579733][ T6078] ? clear_bhb_loop+0x45/0xa0 [ 103.579758][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.579783][ T6078] RIP: 0033:0x7f514578e169 [ 103.579820][ T6078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.579836][ T6078] RSP: 002b:00007f514656e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.579859][ T6078] RAX: ffffffffffffffda RBX: 00007f51459b5fa0 RCX: 00007f514578e169 [ 103.579874][ T6078] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 103.579887][ T6078] RBP: 00007f514656e090 R08: 0000000000000000 R09: 0000000000000000 [ 103.579899][ T6078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.579911][ T6078] R13: 0000000000000000 R14: 00007f51459b5fa0 R15: 00007ffe586730e8 [ 103.579950][ T6078] [ 103.636147][ T6084] pimreg3: entered allmulticast mode [ 103.923434][ T6091] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.015132][ T6082] syzkaller0: entered promiscuous mode [ 104.036533][ T6082] syzkaller0: entered allmulticast mode [ 106.341096][ T6126] Bluetooth: MGMT ver 1.23 [ 106.357462][ T6128] netlink: 'syz.0.52': attribute type 3 has an invalid length. [ 106.608572][ T6137] sctp: failed to load transform for md5: -4 [ 106.751772][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 106.848727][ T6155] netlink: 'syz.3.60': attribute type 10 has an invalid length. [ 106.873310][ T6150] bridge_slave_1: left allmulticast mode [ 106.902391][ T6150] bridge_slave_1: left promiscuous mode [ 106.934658][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.952109][ T6150] bridge_slave_0: left allmulticast mode [ 106.959815][ T6150] bridge_slave_0: left promiscuous mode [ 106.967874][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.081250][ T6155] veth0_vlan: left promiscuous mode [ 107.090131][ T6155] veth0_vlan: entered promiscuous mode [ 107.100396][ T6155] team0: Device veth0_vlan failed to register rx_handler [ 107.114661][ T6157] tc_dump_action: action bad kind [ 107.128721][ T6155] syz.3.60 (6155) used greatest stack depth: 19320 bytes left [ 107.319403][ T6170] FAULT_INJECTION: forcing a failure. [ 107.319403][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 107.336484][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.1.66 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 107.336512][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.336522][ T6170] Call Trace: [ 107.336530][ T6170] [ 107.336537][ T6170] dump_stack_lvl+0x241/0x360 [ 107.336571][ T6170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.336599][ T6170] ? __pfx__printk+0x10/0x10 [ 107.336621][ T6170] ? fib_table_lookup+0x1325/0x1880 [ 107.336656][ T6170] should_fail_ex+0x424/0x570 [ 107.336688][ T6170] should_failslab+0xac/0x100 [ 107.336718][ T6170] kmem_cache_alloc_noprof+0x78/0x390 [ 107.336746][ T6170] ? dst_alloc+0x12b/0x190 [ 107.336778][ T6170] dst_alloc+0x12b/0x190 [ 107.336809][ T6170] ip_route_output_key_hash_rcu+0x13fa/0x2320 [ 107.336851][ T6170] ip_route_output_key_hash+0x195/0x2b0 [ 107.336879][ T6170] ? ip_route_output_key_hash+0xe1/0x2b0 [ 107.336903][ T6170] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 107.336935][ T6170] ? ip_cmsg_send+0x9d0/0xa80 [ 107.336971][ T6170] ip_route_output_flow+0x29/0x140 [ 107.336998][ T6170] udp_sendmsg+0x17d6/0x2ca0 [ 107.337092][ T6170] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 107.337119][ T6170] ? __pfx_udp_sendmsg+0x10/0x10 [ 107.337144][ T6170] ? tomoyo_supervisor+0x590/0x18b0 [ 107.337212][ T6170] ? look_up_lock_class+0x7b/0x170 [ 107.337236][ T6170] ? register_lock_class+0x54/0x330 [ 107.337266][ T6170] udpv6_sendmsg+0xe4c/0x3070 [ 107.337323][ T6170] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 107.337358][ T6170] ? __lock_acquire+0xad5/0xd80 [ 107.337395][ T6170] ? inet_send_prepare+0x1b7/0x260 [ 107.337421][ T6170] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 107.337438][ T6170] ? inet_send_prepare+0x1b7/0x260 [ 107.337464][ T6170] ? do_raw_spin_unlock+0x13c/0x8b0 [ 107.337503][ T6170] ? inet_send_prepare+0x1b7/0x260 [ 107.337541][ T6170] __sock_sendmsg+0xef/0x270 [ 107.337576][ T6170] ____sys_sendmsg+0x523/0x860 [ 107.337611][ T6170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.337634][ T6170] ? __fget_files+0x2a/0x420 [ 107.337668][ T6170] ? __fget_files+0x2a/0x420 [ 107.337706][ T6170] __sys_sendmsg+0x271/0x360 [ 107.337738][ T6170] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.337822][ T6170] ? do_syscall_64+0xb6/0x230 [ 107.337847][ T6170] do_syscall_64+0xf3/0x230 [ 107.337870][ T6170] ? clear_bhb_loop+0x45/0xa0 [ 107.337895][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.337915][ T6170] RIP: 0033:0x7fc0bb78e169 [ 107.337933][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.337949][ T6170] RSP: 002b:00007fc0bc619038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.337971][ T6170] RAX: ffffffffffffffda RBX: 00007fc0bb9b5fa0 RCX: 00007fc0bb78e169 [ 107.337986][ T6170] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 107.337998][ T6170] RBP: 00007fc0bc619090 R08: 0000000000000000 R09: 0000000000000000 [ 107.338010][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.338021][ T6170] R13: 0000000000000000 R14: 00007fc0bb9b5fa0 R15: 00007ffd7226baa8 [ 107.338059][ T6170] [ 107.724255][ T6176] netlink: 'syz.0.65': attribute type 1 has an invalid length. [ 107.733187][ T6176] netlink: 224 bytes leftover after parsing attributes in process `syz.0.65'. [ 108.071874][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.69'. [ 108.323643][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 108.378029][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 108.386993][ T6201] netlink: 32 bytes leftover after parsing attributes in process `syz.2.75'. [ 108.463145][ T5850] block nbd0: Receive control failed (result -107) [ 108.499307][ T6201] nbd0: detected capacity change from 0 to 256 [ 108.523006][ T6088] block nbd0: Dead connection, failed to find a fallback [ 108.564136][ T6088] block nbd0: shutting down sockets [ 108.587833][ T6088] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.618869][ T6088] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.627063][ T6088] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.668284][ T6088] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.692032][ T6088] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.754916][ T6088] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.795511][ T6088] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.839875][ T6088] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.848101][ T6215] netlink: 'syz.3.82': attribute type 5 has an invalid length. [ 108.886784][ T6088] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.922374][ T6088] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.953982][ T6088] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.996468][ T6088] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.031884][ T6088] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.078388][ T6088] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.091118][ T6230] netlink: 280 bytes leftover after parsing attributes in process `syz.2.86'. [ 109.121312][ T6088] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.154678][ T6230] netlink: 5 bytes leftover after parsing attributes in process `syz.2.86'. [ 109.180111][ T6088] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.202364][ T6230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.225059][ T6088] ldm_validate_partition_table(): Disk read failed. [ 109.260961][ T6088] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.287077][ T6088] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.337843][ T6088] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.375532][ T6088] Buffer I/O error on dev nbd0, logical block 0, async page read [ 109.446265][ T6088] Dev nbd0: unable to read RDB block 0 [ 109.458097][ T6088] nbd0: unable to read partition table [ 109.467248][ T6241] sctp: [Deprecated]: syz.0.90 (pid 6241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.467248][ T6241] Use struct sctp_sack_info instead [ 109.504028][ T6088] ldm_validate_partition_table(): Disk read failed. [ 109.516977][ T6088] Dev nbd0: unable to read RDB block 0 [ 109.524138][ T6245] tipc: Can't bind to reserved service type 0 [ 109.566979][ T6088] nbd0: unable to read partition table [ 109.577349][ T6245] sctp: [Deprecated]: syz.0.90 (pid 6245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.577349][ T6245] Use struct sctp_sack_info instead [ 109.782331][ T6258] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.824782][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 110.188870][ T6275] syz.2.100 uses obsolete (PF_INET,SOCK_PACKET) [ 110.200190][ T6277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.98'. [ 111.038708][ T6302] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 111.084473][ T6310] sctp: [Deprecated]: syz.0.110 (pid 6310) Use of int in maxseg socket option. [ 111.084473][ T6310] Use struct sctp_assoc_value instead [ 111.088211][ T6302] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 111.161317][ T6302] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 111.200070][ T6310] netlink: 'syz.0.110': attribute type 21 has an invalid length. [ 111.286858][ T6319] vcan0 speed is unknown, defaulting to 1000 [ 111.334594][ T6319] vcan0 speed is unknown, defaulting to 1000 [ 111.360004][ T6319] vcan0 speed is unknown, defaulting to 1000 [ 111.379302][ T6321] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 112.003971][ T6339] bridge0: entered promiscuous mode [ 112.033159][ T6339] bridge0: port 3(macsec1) entered blocking state [ 112.108078][ T6339] bridge0: port 3(macsec1) entered disabled state [ 112.149608][ T6339] macsec1: entered allmulticast mode [ 112.165245][ T6339] bridge0: entered allmulticast mode [ 112.246250][ T6339] macsec1: left allmulticast mode [ 112.268460][ T6339] bridge0: left allmulticast mode [ 112.330706][ T6339] bridge0: left promiscuous mode [ 112.429848][ T6319] infiniband syz1: set down [ 112.435845][ T5997] vcan0 speed is unknown, defaulting to 1000 [ 112.443319][ T6358] netlink: 'syz.2.127': attribute type 3 has an invalid length. [ 112.443783][ T6319] infiniband syz1: added vcan0 [ 112.489915][ T6319] syz1: rxe_create_cq: returned err = -12 [ 112.515803][ T6319] infiniband syz1: Couldn't create ib_mad CQ [ 112.527812][ T6319] infiniband syz1: Couldn't open port 1 [ 112.660702][ T6319] RDS/IB: syz1: added [ 112.665243][ T6319] smc: adding ib device syz1 with port count 1 [ 112.713542][ T6319] smc: ib device syz1 port 1 has pnetid [ 112.903622][ T5997] vcan0 speed is unknown, defaulting to 1000 [ 112.924371][ T6319] vcan0 speed is unknown, defaulting to 1000 [ 113.004535][ T6375] netlink: 'syz.2.130': attribute type 4 has an invalid length. [ 113.103598][ T6386] netlink: 'syz.2.130': attribute type 4 has an invalid length. [ 113.195887][ T6389] __nla_validate_parse: 3 callbacks suppressed [ 113.195911][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 113.335913][ T6389] vlan2: entered allmulticast mode [ 113.354422][ T6389] bond0: entered allmulticast mode [ 113.376078][ T6389] bond_slave_0: entered allmulticast mode [ 113.383202][ T6389] bond_slave_1: entered allmulticast mode [ 113.419117][ T6389] bridge0: port 3(vlan2) entered blocking state [ 113.440622][ T6389] bridge0: port 3(vlan2) entered disabled state [ 113.443837][ T6396] netlink: 'syz.0.137': attribute type 9 has an invalid length. [ 113.459711][ T6396] netlink: 203172 bytes leftover after parsing attributes in process `syz.0.137'. [ 113.482241][ T6389] vlan2: entered promiscuous mode [ 113.489713][ T6389] bond0: entered promiscuous mode [ 113.494934][ T6389] bond_slave_0: entered promiscuous mode [ 113.515419][ T6389] bond_slave_1: entered promiscuous mode [ 113.532839][ T6389] bridge0: port 3(vlan2) entered blocking state [ 113.539590][ T6389] bridge0: port 3(vlan2) entered forwarding state [ 113.825923][ T6319] vcan0 speed is unknown, defaulting to 1000 [ 113.908542][ T6405] netlink: 72 bytes leftover after parsing attributes in process `syz.4.141'. [ 113.918963][ T6405] netlink: 56 bytes leftover after parsing attributes in process `syz.4.141'. [ 113.944950][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 113.954002][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.141'. [ 113.975765][ T6405] netlink: 32 bytes leftover after parsing attributes in process `syz.4.141'. [ 114.706618][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 114.806719][ T6429] netlink: 76 bytes leftover after parsing attributes in process `syz.1.146'. [ 115.062921][ T6408] vcan0 speed is unknown, defaulting to 1000 [ 115.619225][ T6319] vcan0 speed is unknown, defaulting to 1000 [ 115.862753][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'. [ 116.623723][ T6319] vcan0 speed is unknown, defaulting to 1000 [ 116.757050][ T6490] macvlan1: entered promiscuous mode [ 116.787750][ T6490] macvlan1: left promiscuous mode [ 117.123538][ T6502] netlink: 'syz.4.166': attribute type 9 has an invalid length. [ 117.132172][ T6502] netlink: 'syz.4.166': attribute type 6 has an invalid length. [ 117.174857][ T6451] vcan0 speed is unknown, defaulting to 1000 [ 117.375385][ T6509] xt_hashlimit: size too large, truncated to 1048576 [ 117.457959][ T6512] xt_hashlimit: size too large, truncated to 1048576 [ 117.507110][ T6517] : renamed from bond0 (while UP) [ 117.878795][ T6319] vcan0 speed is unknown, defaulting to 1000 [ 118.082758][ T6533] netlink: 'syz.4.172': attribute type 2 has an invalid length. [ 118.109205][ T6533] netlink: 'syz.4.172': attribute type 8 has an invalid length. [ 118.276052][ T6533] netlink: 'syz.4.172': attribute type 2 has an invalid length. [ 118.284358][ T6533] netlink: 'syz.4.172': attribute type 8 has an invalid length. [ 118.309246][ T6533] __nla_validate_parse: 7 callbacks suppressed [ 118.309266][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.172'. [ 118.374519][ T6533] netlink: 'syz.4.172': attribute type 2 has an invalid length. [ 118.383193][ T6533] netlink: 'syz.4.172': attribute type 8 has an invalid length. [ 118.425236][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.172'. [ 118.464260][ T6533] netlink: 'syz.4.172': attribute type 2 has an invalid length. [ 118.476529][ T6533] netlink: 'syz.4.172': attribute type 8 has an invalid length. [ 118.522175][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.172'. [ 118.582782][ T6533] netlink: 'syz.4.172': attribute type 2 has an invalid length. [ 118.613535][ T6533] netlink: 'syz.4.172': attribute type 8 has an invalid length. [ 118.631899][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.172'. [ 118.669617][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.172'. [ 118.701762][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.172'. [ 118.716188][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.172'. [ 118.737313][ T6319] syz.3.113 (6319) used greatest stack depth: 18952 bytes left [ 118.791253][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.172'. [ 118.829148][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.172'. [ 119.482790][ T6575] warning: `syz.4.182' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.106827][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 121.168567][ T6643] gretap0: entered promiscuous mode [ 121.354633][ T6650] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 121.476641][ T6650] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 121.532386][ T6650] : (slave wlan1): Enslaving as an active interface with an up link [ 121.653752][ T6666] bridge0: port 3(gretap0) entered blocking state [ 121.665846][ T6666] bridge0: port 3(gretap0) entered disabled state [ 121.676672][ T6666] gretap0: entered allmulticast mode [ 121.713756][ T6666] gretap0: entered promiscuous mode [ 121.752501][ T6666] bridge0: port 3(gretap0) entered blocking state [ 121.759582][ T6666] bridge0: port 3(gretap0) entered forwarding state [ 121.800106][ T6668] gretap0: left allmulticast mode [ 121.807657][ T6668] gretap0: left promiscuous mode [ 121.813757][ T6668] bridge0: port 3(gretap0) entered disabled state [ 122.473649][ T6694] bridge_slave_0: left allmulticast mode [ 122.480367][ T6697] xt_hashlimit: size too large, truncated to 1048576 [ 122.497434][ T6694] bridge_slave_0: left promiscuous mode [ 122.522048][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.545451][ T6703] xt_hashlimit: size too large, truncated to 1048576 [ 122.640692][ T6694] bridge_slave_1: left allmulticast mode [ 122.658076][ T6694] bridge_slave_1: left promiscuous mode [ 122.684752][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.805206][ T6694] bond0: (slave bond_slave_0): Releasing backup interface [ 122.834491][ T6694] bond0: (slave bond_slave_1): Releasing backup interface [ 122.940589][ T6694] team0: Port device team_slave_0 removed [ 122.959389][ T6694] team0: Port device team_slave_1 removed [ 122.966999][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.979859][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.995699][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.039006][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.251832][ T6705] : renamed from bond0 (while UP) [ 123.877333][ T6736] __nla_validate_parse: 6 callbacks suppressed [ 123.877352][ T6736] netlink: 60 bytes leftover after parsing attributes in process `syz.0.222'. [ 124.175688][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 124.229117][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 124.353648][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 124.431741][ T6754] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 124.489677][ T6754] Cannot find set identified by id 0 to match [ 124.581621][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 124.722222][ T6760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.738968][ T6758] vcan0 speed is unknown, defaulting to 1000 [ 125.044880][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 125.130739][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'. [ 125.542222][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 125.632729][ T6767] vcan0 speed is unknown, defaulting to 1000 [ 126.115621][ T6814] validate_nla: 14 callbacks suppressed [ 126.115641][ T6814] netlink: 'syz.1.247': attribute type 39 has an invalid length. [ 126.177507][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 126.214299][ T6813] netlink: 'syz.3.249': attribute type 1 has an invalid length. [ 126.235355][ T6813] netlink: 224 bytes leftover after parsing attributes in process `syz.3.249'. [ 126.374339][ T6810] team0 (unregistering): Port device team_slave_0 removed [ 126.388902][ T6810] team0 (unregistering): Port device team_slave_1 removed [ 126.649974][ T6820] netlink: 'syz.3.250': attribute type 1 has an invalid length. [ 127.172739][ T6828] vcan0 speed is unknown, defaulting to 1000 [ 128.141726][ T6858] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 128.180647][ T6860] sctp: [Deprecated]: syz.3.262 (pid 6860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.180647][ T6860] Use struct sctp_sack_info instead [ 128.227800][ T6860] sctp: [Deprecated]: syz.3.262 (pid 6860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.227800][ T6860] Use struct sctp_sack_info instead [ 128.914603][ T6870] __nla_validate_parse: 3 callbacks suppressed [ 128.914623][ T6870] netlink: 48 bytes leftover after parsing attributes in process `syz.2.266'. [ 129.305839][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 129.590792][ T6880] vcan0 speed is unknown, defaulting to 1000 [ 130.077842][ T6892] netlink: 280 bytes leftover after parsing attributes in process `syz.4.274'. [ 130.196183][ T6882] netlink: 'syz.0.268': attribute type 1 has an invalid length. [ 130.328611][ T6905] netlink: 'syz.4.278': attribute type 1 has an invalid length. [ 130.397366][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 130.412595][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 130.431168][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 130.441729][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 130.477195][ T6915] xt_hashlimit: invalid interval [ 130.524676][ T6905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.540289][ T6901] tap0: tun_chr_ioctl cmd 1074025677 [ 130.553167][ T6901] tap0: linktype set to 6 [ 130.776843][ T6926] openvswitch: netlink: IP tunnel TTL not specified. [ 130.806788][ T6927] openvswitch: netlink: IP tunnel TTL not specified. [ 130.902062][ T6929] bond0: (slave bond_slave_0): Releasing backup interface [ 130.933921][ T6929] bond0: (slave bond_slave_1): Releasing backup interface [ 130.985443][ T6929] team0: Port device team_slave_0 removed [ 131.005204][ T6929] team0: Port device team_slave_1 removed [ 131.019496][ T6929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.041837][ T6929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.085390][ T6929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.108077][ T6929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.045055][ T6966] netlink: 240 bytes leftover after parsing attributes in process `syz.1.291'. [ 132.054975][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 132.168959][ T6972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.237651][ T6972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.285202][ T6972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.403322][ T6972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.478836][ T6972] batadv_slave_0: entered promiscuous mode [ 132.521347][ T6972] batadv_slave_0: left promiscuous mode [ 132.548637][ T6982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.294'. [ 132.751902][ T6988] Bluetooth: MGMT ver 1.23 [ 133.043151][ T6992] veth5: entered allmulticast mode [ 133.055597][ T6992] bridge0: port 3(veth5) entered blocking state [ 133.074306][ T6992] bridge0: port 3(veth5) entered disabled state [ 133.083707][ T6992] veth5: entered promiscuous mode [ 133.121611][ T6992] bridge0: port 3(veth5) entered blocking state [ 133.128109][ T6992] bridge0: port 3(veth5) entered forwarding state [ 133.175776][ T6993] gretap0: left promiscuous mode [ 133.222684][ T6993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.281139][ T7013] lo: entered promiscuous mode [ 133.302096][ T7007] veth0: entered promiscuous mode [ 133.304561][ T7001] netlink: 'syz.4.300': attribute type 1 has an invalid length. [ 133.314471][ T7007] netlink: 'syz.3.304': attribute type 15 has an invalid length. [ 133.329025][ T7007] netlink: 'syz.3.304': attribute type 3 has an invalid length. [ 133.415259][ T7007] veth0 (unregistering): left promiscuous mode [ 133.465477][ T7020] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 133.494909][ T7020] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 133.530214][ T7020] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 133.572503][ T7005] lo: left promiscuous mode [ 133.603468][ T7026] tipc: Started in network mode [ 133.611081][ T7021] netlink: 'syz.0.306': attribute type 20 has an invalid length. [ 133.641006][ T7026] tipc: Node identity 000000000000003a0000000000000001, cluster identity 4711 [ 133.659256][ T7026] tipc: Enabling of bearer rejected, failed to enable media [ 133.705938][ T13] bridge0: port 3(veth5) entered disabled state [ 133.765502][ T7026] tipc: Enabling of bearer rejected, failed to enable media [ 134.019618][ T7046] tipc: Failed to remove unknown binding: 66,1,1/0:2839994581/2839994583 [ 134.049793][ T7046] tipc: Failed to remove unknown binding: 66,1,1/0:2839994581/2839994583 [ 134.328720][ T7057] __nla_validate_parse: 9 callbacks suppressed [ 134.328742][ T7057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'. [ 134.452649][ T7061] netlink: 64 bytes leftover after parsing attributes in process `syz.3.320'. [ 134.545202][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.322'. [ 134.681009][ T7079] netlink: 'syz.2.322': attribute type 1 has an invalid length. [ 134.721286][ T7079] netlink: 'syz.2.322': attribute type 3 has an invalid length. [ 134.742472][ T7079] netlink: 224 bytes leftover after parsing attributes in process `syz.2.322'. [ 134.816820][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 134.827935][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 134.877821][ T7082] sctp: [Deprecated]: syz.4.326 (pid 7082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.877821][ T7082] Use struct sctp_sack_info instead [ 135.237221][ T7097] netlink: 48 bytes leftover after parsing attributes in process `syz.4.332'. [ 135.285553][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 135.338771][ T7101] netlink: 'syz.3.334': attribute type 3 has an invalid length. [ 135.427425][ T7107] xt_bpf: check failed: parse error [ 135.602907][ T7110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.337'. [ 135.645152][ T7110] netlink: 18 bytes leftover after parsing attributes in process `syz.2.337'. [ 136.172753][ T7127] netlink: 'syz.3.342': attribute type 32 has an invalid length. [ 137.269827][ T7172] vlan0: entered promiscuous mode [ 137.277803][ T7170] netlink: 'syz.3.355': attribute type 1 has an invalid length. [ 137.416257][ T7176] x_tables: duplicate underflow at hook 4 [ 137.634503][ T7186] erspan0: entered promiscuous mode [ 137.674285][ T7185] erspan0: left promiscuous mode [ 138.056102][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.258984][ T7204] can: request_module (can-proto-3) failed. [ 138.386978][ T7190] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.643780][ T7190] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.780020][ T7190] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.886359][ T7226] netlink: 'syz.4.372': attribute type 29 has an invalid length. [ 138.916205][ T7226] netlink: 'syz.4.372': attribute type 29 has an invalid length. [ 139.026169][ T7190] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.100925][ T7232] xt_connbytes: Forcing CT accounting to be enabled [ 139.119552][ T7232] set match dimension is over the limit! [ 139.265157][ T7238] netlink: 'syz.4.378': attribute type 22 has an invalid length. [ 139.689463][ T7190] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.753490][ T7190] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.809974][ T7190] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.835140][ T7190] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.914197][ T7255] hsr0: mtu greater than device maximum [ 140.053763][ T5150] Bluetooth: hci4: command 0x0405 tx timeout [ 140.225963][ T7268] Cannot find del_set index 1 as target [ 140.382629][ T7275] __nla_validate_parse: 9 callbacks suppressed [ 140.382653][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 140.461774][ T7263] vcan0 speed is unknown, defaulting to 1000 [ 141.899201][ T7273] vcan0 speed is unknown, defaulting to 1000 [ 142.209799][ T7308] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 142.418258][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 142.620458][ T7320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'. [ 142.703530][ T7306] syzkaller1: entered promiscuous mode [ 142.741687][ T7306] syzkaller1: entered allmulticast mode [ 143.363156][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 143.418438][ T7357] netlink: 'syz.3.414': attribute type 4 has an invalid length. [ 143.426348][ T7357] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.414'. [ 143.540737][ T7363] xt_TCPMSS: Only works on TCP SYN packets [ 144.290455][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.421'. [ 144.347873][ T7383] netem: change failed [ 144.362682][ T7393] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 144.386007][ T7393] netlink: 224 bytes leftover after parsing attributes in process `syz.1.423'. [ 144.421664][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 144.516626][ T5850] Bluetooth: hci4: link tx timeout [ 144.522806][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.696869][ T7398] vcan0 speed is unknown, defaulting to 1000 [ 144.848299][ T7404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.427'. [ 145.057450][ T7414] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.429'. [ 145.454472][ T7418] vcan0 speed is unknown, defaulting to 1000 [ 145.775948][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 145.789232][ T7436] netlink: 'syz.0.436': attribute type 1 has an invalid length. [ 145.796960][ T7436] netlink: 224 bytes leftover after parsing attributes in process `syz.0.436'. [ 145.913513][ T7440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.437'. [ 145.956811][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.437'. [ 146.157229][ T975] IPVS: starting estimator thread 0... [ 146.174770][ T7440] geneve2: entered allmulticast mode [ 146.256275][ T7439] vcan0 speed is unknown, defaulting to 1000 [ 146.280308][ T7451] IPVS: using max 29 ests per chain, 69600 per kthread [ 146.608268][ T5150] Bluetooth: hci4: command 0x0405 tx timeout [ 146.891686][ T7434] vcan0 speed is unknown, defaulting to 1000 [ 147.202514][ T7483] batman_adv: batadv0: Adding interface: vxlan0 [ 147.213349][ T7483] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.261851][ T7483] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 147.279624][ T7484] pim6reg1: entered promiscuous mode [ 147.285177][ T7484] pim6reg1: entered allmulticast mode [ 148.172254][ T7509] raw_sendmsg: syz.2.455 forgot to set AF_INET. Fix it! [ 148.638834][ T7517] xt_nat: multiple ranges no longer supported [ 148.820703][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 148.869752][ T7526] netlink: 'syz.4.460': attribute type 1 has an invalid length. [ 148.897762][ T7526] netlink: 224 bytes leftover after parsing attributes in process `syz.4.460'. [ 149.232473][ T7538] netlink: 'syz.4.465': attribute type 9 has an invalid length. [ 149.249394][ T7538] netlink: 'syz.4.465': attribute type 6 has an invalid length. [ 149.257107][ T7538] netlink: 'syz.4.465': attribute type 7 has an invalid length. [ 149.308548][ T7538] netlink: 'syz.4.465': attribute type 8 has an invalid length. [ 149.353713][ T7537] can: request_module (can-proto-3) failed. [ 149.627301][ T7549] vcan0 speed is unknown, defaulting to 1000 [ 149.748017][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 149.889376][ T7574] FAULT_INJECTION: forcing a failure. [ 149.889376][ T7574] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 149.927915][ T7574] CPU: 0 UID: 0 PID: 7574 Comm: syz.0.476 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 149.927947][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.927959][ T7574] Call Trace: [ 149.927967][ T7574] [ 149.927975][ T7574] dump_stack_lvl+0x241/0x360 [ 149.928016][ T7574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.928043][ T7574] ? __pfx__printk+0x10/0x10 [ 149.928081][ T7574] should_fail_ex+0x424/0x570 [ 149.928111][ T7574] _copy_to_user+0x31/0xb0 [ 149.928133][ T7574] simple_read_from_buffer+0xc4/0x170 [ 149.928163][ T7574] proc_fail_nth_read+0x1ef/0x260 [ 149.928185][ T7574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.928207][ T7574] ? rw_verify_area+0x246/0x630 [ 149.928227][ T7574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.928248][ T7574] vfs_read+0x21f/0xb90 [ 149.928274][ T7574] ? __pfx___mutex_lock+0x10/0x10 [ 149.928297][ T7574] ? __pfx_vfs_read+0x10/0x10 [ 149.928320][ T7574] ? __fget_files+0x2a/0x420 [ 149.928351][ T7574] ? __fget_files+0x39d/0x420 [ 149.928378][ T7574] ? __fget_files+0x2a/0x420 [ 149.928416][ T7574] ksys_read+0x19d/0x2d0 [ 149.928439][ T7574] ? __pfx_ksys_read+0x10/0x10 [ 149.928465][ T7574] ? do_syscall_64+0xb6/0x230 [ 149.928491][ T7574] do_syscall_64+0xf3/0x230 [ 149.928512][ T7574] ? clear_bhb_loop+0x45/0xa0 [ 149.928535][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.928554][ T7574] RIP: 0033:0x7f731e38cb7c [ 149.928572][ T7574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 149.928586][ T7574] RSP: 002b:00007f731f2b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.928607][ T7574] RAX: ffffffffffffffda RBX: 00007f731e5b5fa0 RCX: 00007f731e38cb7c [ 149.928621][ T7574] RDX: 000000000000000f RSI: 00007f731f2b50a0 RDI: 0000000000000005 [ 149.928633][ T7574] RBP: 00007f731f2b5090 R08: 0000000000000000 R09: 0000000000000000 [ 149.928644][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.928655][ T7574] R13: 0000000000000000 R14: 00007f731e5b5fa0 R15: 00007fff6e9a3448 [ 149.928686][ T7574] [ 150.327447][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 150.338623][ T7579] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 150.346318][ T7579] netlink: 224 bytes leftover after parsing attributes in process `syz.3.477'. [ 150.390365][ T7552] vcan0 speed is unknown, defaulting to 1000 [ 150.480271][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'. [ 150.579177][ T7591] ieee802154 phy1 wpan1: encryption failed: -22 [ 150.770730][ T7596] netlink: 'syz.1.485': attribute type 12 has an invalid length. [ 150.812526][ T7596] netlink: 132 bytes leftover after parsing attributes in process `syz.1.485'. [ 150.848029][ T5894] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 151.327097][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 151.362213][ T7616] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 151.383564][ T7616] netlink: 224 bytes leftover after parsing attributes in process `syz.2.492'. [ 151.688960][ T7627] netlink: 48 bytes leftover after parsing attributes in process `syz.3.495'. [ 151.767247][ T7630] xt_l2tp: invalid flags combination: c [ 151.811280][ T7629] netlink: 'syz.0.496': attribute type 2 has an invalid length. [ 152.124635][ T7635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.474880][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'. [ 152.755269][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 152.797280][ T7669] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 152.847394][ T7669] netlink: 224 bytes leftover after parsing attributes in process `syz.3.508'. [ 153.381635][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 153.404562][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.514'. [ 153.653872][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 154.127871][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.463345][ T7720] netlink: 'syz.0.523': attribute type 1 has an invalid length. [ 154.846262][ T7739] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 154.946551][ T7739] ip6erspan0: entered promiscuous mode [ 155.101940][ T7741] tipc: Started in network mode [ 155.116753][ T7741] tipc: Node identity 0e2b11503a7d, cluster identity 4711 [ 155.136262][ T7741] tipc: Enabled bearer , priority 0 [ 155.242435][ T7746] syzkaller0: entered promiscuous mode [ 155.248896][ T7746] syzkaller0: entered allmulticast mode [ 155.255387][ T7746] tipc: Resetting bearer [ 155.266815][ T7750] netdevsim netdevsim4: Direct firmware load for . [ 155.266815][ T7750] failed with error -2 [ 155.285687][ T7740] tipc: Resetting bearer [ 155.286888][ T7750] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 155.286888][ T7750] [ 155.980200][ T7764] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 155.998471][ T7764] __nla_validate_parse: 3 callbacks suppressed [ 155.998492][ T7764] netlink: 224 bytes leftover after parsing attributes in process `syz.2.535'. [ 156.131965][ T7768] netlink: 'syz.4.537': attribute type 3 has an invalid length. [ 156.146159][ T3083] tipc: Node number set to 878055760 [ 156.756045][ T7740] tipc: Disabling bearer [ 156.768652][ T7753] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 156.781875][ T7753] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 156.794412][ T7753] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 156.796485][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 156.985932][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 157.007761][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'. [ 157.801157][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 157.826724][ T7819] netlink: 'syz.3.552': attribute type 1 has an invalid length. [ 157.835194][ T7819] netlink: 224 bytes leftover after parsing attributes in process `syz.3.552'. [ 158.169936][ T7841] netlink: 164 bytes leftover after parsing attributes in process `syz.2.558'. [ 158.248464][ T7848] netlink: 'syz.4.557': attribute type 21 has an invalid length. [ 158.261437][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.557'. [ 158.275075][ T7849] netlink: 64 bytes leftover after parsing attributes in process `syz.3.559'. [ 158.303737][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 158.314321][ T7849] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 158.508494][ T7860] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.615512][ T7865] netlink: 'syz.1.563': attribute type 20 has an invalid length. [ 158.655447][ T7865] netlink: 'syz.1.563': attribute type 20 has an invalid length. [ 159.037041][ T7876] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.145824][ T7876] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.239204][ T7878] netlink: 'syz.3.566': attribute type 1 has an invalid length. [ 159.326288][ T7876] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.463292][ T7891] xt_TPROXY: Can be used only with -p tcp or -p udp [ 159.495822][ T7876] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.553473][ T7896] netlink: 'syz.0.571': attribute type 2 has an invalid length. [ 159.606175][ T7896] lave_0: entered promiscuous mode [ 159.811022][ T7876] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.874652][ T7876] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.913565][ T7876] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.992599][ T7912] vcan0 speed is unknown, defaulting to 1000 [ 160.057081][ T7876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.180567][ T7923] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 160.264420][ T7920] IPVS: length: 78 != 8 [ 160.449726][ T5841] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 160.457230][ T5894] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 160.465027][ T7931] nbd: must specify at least one socket [ 160.649150][ T7935] : (slave dummy0): Enslaving as an active interface with an up link [ 160.892644][ T7948] xt_TCPMSS: Only works on TCP SYN packets [ 160.994080][ T7953] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 161.043936][ T7953] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 161.243100][ T7968] __nla_validate_parse: 13 callbacks suppressed [ 161.243121][ T7968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.596'. [ 161.280519][ T7968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.596'. [ 161.417625][ T7977] validate_nla: 2 callbacks suppressed [ 161.417677][ T7977] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 161.456574][ T7979] ip6tnl1: entered promiscuous mode [ 161.669432][ T7977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.696778][ T7981] ip6erspan0: entered promiscuous mode [ 161.710053][ T7981] bond1: (slave ip6erspan0): making interface the new active one [ 161.726018][ T7981] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 161.751530][ T7987] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 161.880510][ T7995] xt_l2tp: missing protocol rule (udp|l2tpip) [ 162.006708][ T7998] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 162.017739][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'. [ 162.029848][ T7999] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 162.067659][ T7999] netlink: 224 bytes leftover after parsing attributes in process `syz.2.604'. [ 162.339896][ T8011] bridge0: entered promiscuous mode [ 162.353234][ T8011] macvlan2: entered promiscuous mode [ 162.364183][ T8011] bridge0: port 4(macvlan2) entered blocking state [ 162.378854][ T8015] netlink: 84 bytes leftover after parsing attributes in process `syz.4.611'. [ 162.394332][ T8011] bridge0: port 4(macvlan2) entered disabled state [ 162.402204][ T8011] macvlan2: entered allmulticast mode [ 162.408315][ T8011] bridge0: entered allmulticast mode [ 162.419704][ T8011] macvlan2: left allmulticast mode [ 162.424938][ T8011] bridge0: left allmulticast mode [ 162.432643][ T8011] bridge0: left promiscuous mode [ 162.481410][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.611'. [ 162.741841][ T8036] netlink: 60 bytes leftover after parsing attributes in process `syz.4.615'. [ 162.758047][ T8036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.615'. [ 162.779003][ T8031] tipc: Started in network mode [ 162.798406][ T8031] tipc: Node identity 1, cluster identity 8 [ 162.817607][ T8031] tipc: Node number set to 1 [ 163.009622][ T975] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 163.300112][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 163.312923][ T8063] vcan0 speed is unknown, defaulting to 1000 [ 163.436233][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.625'. [ 163.689845][ T8090] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 164.525162][ T8130] openvswitch: netlink: IP tunnel TTL not specified. [ 164.707318][ T8118] syzkaller0: entered promiscuous mode [ 164.745942][ T8118] syzkaller0: entered allmulticast mode [ 165.577832][ T5894] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 167.295022][ T8156] __nla_validate_parse: 6 callbacks suppressed [ 167.295042][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 167.541724][ T8173] netlink: 88 bytes leftover after parsing attributes in process `syz.2.654'. [ 167.558319][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 167.574469][ T8173] ipt_rpfilter: unknown options [ 167.649935][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 167.659337][ T8179] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 167.667020][ T8179] netlink: 224 bytes leftover after parsing attributes in process `syz.4.653'. [ 168.095141][ T8196] vcan0 speed is unknown, defaulting to 1000 [ 168.631050][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 168.682627][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 168.756022][ T8216] netlink: 18 bytes leftover after parsing attributes in process `syz.2.666'. [ 168.827643][ T8216] nbd: socks must be embedded in a SOCK_ITEM attr [ 168.953430][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 169.007799][ T8227] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 169.052638][ T8227] netlink: 224 bytes leftover after parsing attributes in process `syz.4.668'. [ 169.886536][ T8273] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 169.923792][ T8273] gretap0: entered promiscuous mode [ 169.936587][ T8274] netlink: 'syz.3.682': attribute type 6 has an invalid length. [ 170.049407][ T8266] lo speed is unknown, defaulting to 1000 [ 170.055596][ T8266] lo speed is unknown, defaulting to 1000 [ 170.064885][ T8266] lo speed is unknown, defaulting to 1000 [ 170.086972][ T8266] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 170.135666][ T8286] ipvlan2: entered promiscuous mode [ 170.151528][ T8286] ipvlan2: entered allmulticast mode [ 170.156559][ T8266] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 170.164039][ T8286] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 170.361653][ T8289] bond1: (slave ip6erspan0): Releasing active interface [ 170.374933][ T8304] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 170.429033][ T8266] lo speed is unknown, defaulting to 1000 [ 170.437133][ T8266] lo speed is unknown, defaulting to 1000 [ 170.505608][ T8266] lo speed is unknown, defaulting to 1000 [ 170.539701][ T8266] lo speed is unknown, defaulting to 1000 [ 170.558541][ T8311] trusted_key: syz.3.689 sent an empty control message without MSG_MORE. [ 170.579579][ T8266] lo speed is unknown, defaulting to 1000 [ 171.576645][ T8330] [ 171.579048][ T8330] ============================================ [ 171.585234][ T8330] WARNING: possible recursive locking detected [ 171.591417][ T8330] 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 Not tainted [ 171.598550][ T8330] -------------------------------------------- [ 171.604812][ T8330] syz.1.697/8330 is trying to acquire lock: [ 171.610728][ T8330] ffffc900046690d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20e/0x650 [ 171.620361][ T8330] [ 171.620361][ T8330] but task is already holding lock: [ 171.628186][ T8330] ffffc900047410d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20e/0x650 [ 171.637814][ T8330] [ 171.637814][ T8330] other info that might help us debug this: [ 171.645881][ T8330] Possible unsafe locking scenario: [ 171.645881][ T8330] [ 171.653333][ T8330] CPU0 [ 171.656615][ T8330] ---- [ 171.659894][ T8330] lock(&rb->spinlock); [ 171.664143][ T8330] lock(&rb->spinlock); [ 171.668393][ T8330] [ 171.668393][ T8330] *** DEADLOCK *** [ 171.668393][ T8330] [ 171.676563][ T8330] May be due to missing lock nesting notation [ 171.676563][ T8330] [ 171.684885][ T8330] 3 locks held by syz.1.697/8330: [ 171.689909][ T8330] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run3+0x24e/0x5b0 [ 171.699364][ T8330] #1: ffffc900047410d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20e/0x650 [ 171.709388][ T8330] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1fe/0x550 [ 171.718815][ T8330] [ 171.718815][ T8330] stack backtrace: [ 171.724709][ T8330] CPU: 1 UID: 0 PID: 8330 Comm: syz.1.697 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 171.724731][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.724742][ T8330] Call Trace: [ 171.724748][ T8330] [ 171.724755][ T8330] dump_stack_lvl+0x241/0x360 [ 171.724784][ T8330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.724806][ T8330] ? __pfx__printk+0x10/0x10 [ 171.724828][ T8330] ? print_lock+0x171/0x1a0 [ 171.724849][ T8330] print_deadlock_bug+0x2be/0x2d0 [ 171.724870][ T8330] validate_chain+0x928/0x24e0 [ 171.724897][ T8330] ? __lock_acquire+0xad5/0xd80 [ 171.724916][ T8330] __lock_acquire+0xad5/0xd80 [ 171.724935][ T8330] lock_acquire+0x116/0x2f0 [ 171.724950][ T8330] ? __bpf_ringbuf_reserve+0x20e/0x650 [ 171.724975][ T8330] _raw_spin_lock_irqsave+0xd8/0x130 [ 171.725001][ T8330] ? __bpf_ringbuf_reserve+0x20e/0x650 [ 171.725020][ T8330] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 171.725051][ T8330] __bpf_ringbuf_reserve+0x20e/0x650 [ 171.725076][ T8330] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 171.725103][ T8330] ? __pfx___cant_migrate+0x10/0x10 [ 171.725127][ T8330] bpf_ringbuf_reserve+0x5c/0x70 [ 171.725145][ T8330] ? bpf_trace_run2+0x1fe/0x550 [ 171.725168][ T8330] bpf_prog_fe0ed97373b08409+0x2e/0x4b [ 171.725182][ T8330] ? bpf_trace_run2+0x1fe/0x550 [ 171.725205][ T8330] bpf_trace_run2+0x2ee/0x550 [ 171.725231][ T8330] ? __pfx_bpf_trace_run2+0x10/0x10 [ 171.725257][ T8330] ? __bpf_trace_contention_begin+0x151/0x230 [ 171.725279][ T8330] __bpf_trace_contention_begin+0x172/0x230 [ 171.725302][ T8330] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 171.725332][ T8330] trace_contention_begin+0x11b/0x140 [ 171.725356][ T8330] __pv_queued_spin_lock_slowpath+0x116/0xdc0 [ 171.725375][ T8330] ? is_bpf_text_address+0x26/0x2a0 [ 171.725394][ T8330] ? 0xffffffffa0001c14 [ 171.725407][ T8330] ? is_bpf_text_address+0x288/0x2a0 [ 171.725426][ T8330] ? is_bpf_text_address+0x26/0x2a0 [ 171.725444][ T8330] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 171.725463][ T8330] ? kernel_text_address+0xa7/0xe0 [ 171.725490][ T8330] ? __kernel_text_address+0xd/0x40 [ 171.725515][ T8330] ? unwind_get_return_address+0x4d/0x90 [ 171.725539][ T8330] queued_spin_lock_slowpath+0x42/0x50 [ 171.725563][ T8330] do_raw_spin_lock+0x276/0x370 [ 171.725588][ T8330] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 171.725615][ T8330] _raw_spin_lock_irqsave+0xe4/0x130 [ 171.725640][ T8330] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 171.725667][ T8330] ? kasan_save_track+0x51/0x80 [ 171.725684][ T8330] ? kasan_save_track+0x3f/0x80 [ 171.725700][ T8330] ? kasan_save_free_info+0x40/0x50 [ 171.725723][ T8330] ? __kasan_slab_free+0x59/0x70 [ 171.725742][ T8330] __bpf_ringbuf_reserve+0x20e/0x650 [ 171.725767][ T8330] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 171.725789][ T8330] ? __pfx___cant_migrate+0x10/0x10 [ 171.725810][ T8330] ? bpf_trace_run3+0x24e/0x5b0 [ 171.725833][ T8330] bpf_ringbuf_reserve+0x5c/0x70 [ 171.725852][ T8330] bpf_prog_fe0ed97373b08409+0x2e/0x4b [ 171.725865][ T8330] bpf_trace_run3+0x33c/0x5b0 [ 171.725889][ T8330] ? lockdep_hardirqs_on+0x9d/0x150 [ 171.725907][ T8330] ? __pfx_bpf_trace_run3+0x10/0x10 [ 171.725931][ T8330] ? task_work_run+0x251/0x310 [ 171.725954][ T8330] ? percpu_counter_add_batch+0xff/0x1f0 [ 171.725976][ T8330] ? __fput+0x74c/0x9f0 [ 171.725989][ T8330] ? task_work_run+0x251/0x310 [ 171.726013][ T8330] ? task_work_run+0x251/0x310 [ 171.726035][ T8330] kmem_cache_free+0x36b/0x410 [ 171.726061][ T8330] task_work_run+0x251/0x310 [ 171.726093][ T8330] ? _raw_spin_unlock+0x28/0x50 [ 171.726119][ T8330] ? __pfx_task_work_run+0x10/0x10 [ 171.726145][ T8330] ? syscall_exit_to_user_mode+0xa3/0x340 [ 171.726164][ T8330] syscall_exit_to_user_mode+0x13f/0x340 [ 171.726182][ T8330] do_syscall_64+0x100/0x230 [ 171.726201][ T8330] ? clear_bhb_loop+0x45/0xa0 [ 171.726220][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.726236][ T8330] RIP: 0033:0x7fc0bb78e169 [ 171.726250][ T8330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.726264][ T8330] RSP: 002b:00007ffd7226bc08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 171.726281][ T8330] RAX: 0000000000000000 RBX: 00007fc0bb9b7ba0 RCX: 00007fc0bb78e169 [ 171.726292][ T8330] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 171.726302][ T8330] RBP: 00007fc0bb9b7ba0 R08: 0000000000000090 R09: 000000087226beff [ 171.726313][ T8330] R10: 00000000003ffd4c R11: 0000000000000246 R12: 0000000000029ecb [ 171.726323][ T8330] R13: 00007fc0bb9b6160 R14: ffffffffffffffff R15: 00007ffd7226bd20 [ 171.726344][ T8330] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 172.185123][ T8358] syzkaller0: entered allmulticast mode [ 172.617709][ T975] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 172.929981][ T1325] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.051020][ T1325] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.162433][ T1325] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.262274][ T1325] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.386672][ T1325] vlan2: left promiscuous mode [ 173.392712][ T1325] : left promiscuous mode [ 173.397331][ T1325] bond_slave_0: left promiscuous mode [ 173.404811][ T1325] bond_slave_1: left promiscuous mode [ 173.410800][ T1325] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 173.418273][ T1325] bridge0: port 3(vlan2) entered disabled state [ 173.425849][ T1325] bridge_slave_1: left allmulticast mode [ 173.432608][ T1325] bridge_slave_1: left promiscuous mode [ 173.438412][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.449971][ T1325] bridge_slave_0: left allmulticast mode [ 173.455770][ T1325] bridge_slave_0: left promiscuous mode [ 173.461792][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.605246][ T1325]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.615011][ T1325] bond_slave_0: left allmulticast mode [ 173.621989][ T1325]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.631854][ T1325] bond_slave_1: left allmulticast mode [ 173.640722][ T1325]  (unregistering): (slave wlan1): Releasing backup interface [ 173.650029][ T1325] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 173.659934][ T1325]  (unregistering): Released all slaves [ 173.670390][ T1325] bond0 (unregistering): Released all slaves [ 173.922139][ T1325] hsr_slave_0: left promiscuous mode [ 173.928116][ T1325] hsr_slave_1: left promiscuous mode [ 173.934055][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.943560][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.951749][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.961109][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.970510][ T1325] veth0_macvtap: left promiscuous mode [ 173.976042][ T1325] veth1_vlan: left promiscuous mode [ 173.981683][ T1325] veth0_vlan: left promiscuous mode [ 174.033574][ T1325] pimreg3 (unregistering): left allmulticast mode [ 174.277426][ T5925] lo speed is unknown, defaulting to 1000 [ 174.284524][ T5925] infiniband syz0: ib_query_port failed (-19) [ 178.368197][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 180.927877][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available