last executing test programs: 44.011460654s ago: executing program 2 (id=301): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0xfff, 0x4, 0x5}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000d00)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4, @ANYBLOB="e3844996f6227e128f1c5bdadc60cdc55c8f9d882fd5cce19505053784abe8840d0bbb56ba8c3ce2c4394ba30a4698a1402816c817013907c14e3f18938991dc7068d143696b59d85e9b3d7897801f8f7e6bb072dfc3234b03dcd5"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) write$nci(r3, &(0x7f0000000e40)=ANY=[@ANYBLOB="5f05033c"], 0x1a) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 42.913754833s ago: executing program 0 (id=306): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) 42.775958386s ago: executing program 0 (id=307): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 42.692680545s ago: executing program 0 (id=308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000940), 0x56) sendmsg$kcm(r5, &(0x7f0000000980)={&(0x7f0000000b00)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="27030200080314000e00072f01000000000000113cfdcb00000080ed00", 0x1d}, {&(0x7f0000000c00)="9942d6af00007f8f", 0x8}], 0x2}, 0x0) 41.360695505s ago: executing program 0 (id=312): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x11, r2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000030805000000000000004c5fa95916f4478a8f6f46d200000000000005"], 0x28}}, 0x0) write(r0, &(0x7f0000000000)="010000000000000020", 0x9) 41.359436047s ago: executing program 1 (id=313): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e35619bf2be9082cfcd8fba0cd0f2934efacde0a223b473fe77f3e5ba760d3793b2b3589c9fb23ff943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xdd, 0x14d, 0x0, 0x0, @binary="0f46f1849e80333a72c47c602d9970739272ca25d0ed59ba2d54f2dbf1ce1d4305d0ef433df7b8370107edbc85bfb216efdc1b0b64d6a716ab6d8204ff7498a0d528471596a2bffd9f39f5d68ca46f729302ab4cb1bca132d999b0a04b1ddb2404cb28de890a87617e79217b4cafbcb340e885260db96e23db715cecc61ce445ad06cf189c29e6fb925cc6f1c5db4e1f43cd4f582f94a84bf0152dfada7b9826bbbfd394d745fd122010a19f7c2e459f59c5e8cccc8d9d0124b01020e16d5fa1f4882dc1043dec61df7983901630639c97157316c9285b79ba"}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) 41.276786189s ago: executing program 1 (id=314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x800) 41.248590855s ago: executing program 0 (id=316): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 41.199480779s ago: executing program 1 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x700, 0x0, 0xe59bca127d83b07a, 0xc574450d1af1b8ad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}}, 0x4050) 41.063414651s ago: executing program 1 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 41.001000783s ago: executing program 1 (id=319): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8932, &(0x7f00000000c0)={'dummy0\x00', @ifru_map={0x0, 0x6, 0x4, 0x2, 0xf9, 0xb}}) 40.775971535s ago: executing program 3 (id=321): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}}) 40.681624183s ago: executing program 2 (id=322): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4048c01}, 0x4040084) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000800)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24040075) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000003c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000640)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000000680)=[{{&(0x7f00000006c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000740)="000000001b", 0x5}], 0x1}}], 0x1, 0x20048000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) 40.546660456s ago: executing program 1 (id=323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000940), 0x56) sendmsg$kcm(r5, &(0x7f0000000980)={&(0x7f0000000b00)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="27030200080314000e00072f01000000000000113cfdcb00000080ed00", 0x1d}, {&(0x7f0000000c00)="9942d6af00007f8f", 0x8}], 0x2}, 0x0) 40.519530734s ago: executing program 2 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/245, 0xf5}, {&(0x7f0000000a00)=""/76, 0x4c}, {&(0x7f0000000a80)=""/4092, 0xffc}], 0x3}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001ac0)=""/4101, 0x1005}, {&(0x7f0000002b00)=""/4092, 0xffc}, {&(0x7f0000003b00)=""/213, 0xae}, {&(0x7f0000003c00)=""/91, 0x5b}], 0x4}}], 0x7, 0x2, 0x0) 40.459630192s ago: executing program 3 (id=325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 40.275396759s ago: executing program 2 (id=327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 40.176071761s ago: executing program 3 (id=328): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendto$inet(r0, 0x0, 0x0, 0x4001800, &(0x7f0000000040)={0x2, 0x1234, @local}, 0x10) 40.059870299s ago: executing program 2 (id=329): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, 0x20194, 0x10014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 39.742839647s ago: executing program 3 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000318000180140002006d61637674617030"], 0x3c}}, 0x0) 39.709402699s ago: executing program 2 (id=331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x4}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6}}]}, 0x40}}, 0x4894) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x8, 0x8001, 0x5, 0xfffffdff, 0x4004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xb, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000a40)={'syzkaller0\x00', @random="2b0100004ec6"}) 39.708210044s ago: executing program 4 (id=332): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 39.526536938s ago: executing program 3 (id=333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 39.487830769s ago: executing program 4 (id=334): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000000240)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 39.365240247s ago: executing program 0 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f4000000000000", 0x2c}], 0x1}, 0x20040000) 39.231300818s ago: executing program 4 (id=336): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}, {{&(0x7f0000001b80)=@phonet={0x23, 0x7, 0x3, 0x6}, 0x80, 0x0}}], 0x3, 0x0) 39.09735942s ago: executing program 4 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 38.926954089s ago: executing program 4 (id=338): socket(0x1e, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000700)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 38.717676857s ago: executing program 3 (id=339): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x38, 0x1000}}}}}}}, 0x0) 38.663955521s ago: executing program 4 (id=340): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20008000) recvfrom(r0, &(0x7f0000000440)=""/249, 0xf9, 0x40000161, 0x0, 0x0) 0s ago: executing program 32 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f4000000000000", 0x2c}], 0x1}, 0x20040000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.40' (ED25519) to the list of known hosts. [ 65.823274][ T5610] cgroup: Unknown subsys name 'net' [ 65.909683][ T5610] cgroup: Unknown subsys name 'cpuset' [ 65.912731][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.254646][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.467153][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.470610][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.472474][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.485472][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.499790][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.502467][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.503545][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.504670][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.506930][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.507148][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.509751][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.511866][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.512273][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.514827][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.515146][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.523244][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.523346][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.526643][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.532373][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.532684][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.533811][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.538907][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.539440][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.602748][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.603463][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.414515][ T5621] rdma_rxe: Failed to create IPv6 UDP tunnel [ 70.424579][ T5632] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.438196][ T5627] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.441088][ T5632] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.442569][ T5632] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.486798][ T5622] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.624582][ T5630] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.770919][ T5632] infiniband rxe0: set active [ 70.771330][ T5632] infiniband rxe0: added rxe_eth0 [ 70.798817][ T5632] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 70.798854][ T5632] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 70.798888][ T5632] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 70.804179][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.834416][ T5632] RDS/IB: rxe0: added [ 70.834742][ T5632] smc: adding ib device rxe0 with port count 1 [ 70.834817][ T5632] smc: ib device rxe0 port 1 has no pnetid [ 70.873563][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.876200][ T5632] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.136965][ T5632] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.271086][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.271156][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.465076][ T5632] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.587591][ T5628] Bluetooth: hci2: command tx timeout [ 71.587591][ T5642] Bluetooth: hci4: command tx timeout [ 71.587762][ T5642] Bluetooth: hci1: command tx timeout [ 71.587770][ T5628] Bluetooth: hci0: command tx timeout [ 71.666981][ T5642] Bluetooth: hci3: command tx timeout [ 71.687659][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.688557][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.688981][ T5621] bridge_slave_0: entered allmulticast mode [ 71.691070][ T5621] bridge_slave_0: entered promiscuous mode [ 71.695556][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.695650][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.695759][ T5621] bridge_slave_1: entered allmulticast mode [ 71.700445][ T5621] bridge_slave_1: entered promiscuous mode [ 71.797090][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.797558][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.797662][ T5622] bridge_slave_0: entered allmulticast mode [ 71.799575][ T5622] bridge_slave_0: entered promiscuous mode [ 71.801767][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.801875][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.802241][ T5622] bridge_slave_1: entered allmulticast mode [ 71.803873][ T5622] bridge_slave_1: entered promiscuous mode [ 71.820051][ T5632] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.888072][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.950915][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.972590][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.015642][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.030036][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.030422][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.030538][ T5627] bridge_slave_0: entered allmulticast mode [ 72.032510][ T5627] bridge_slave_0: entered promiscuous mode [ 72.039820][ T5621] team0: Port device team_slave_0 added [ 72.070834][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.071036][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.071411][ T5630] bridge_slave_0: entered allmulticast mode [ 72.073254][ T5630] bridge_slave_0: entered promiscuous mode [ 72.076167][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.076261][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.077772][ T5627] bridge_slave_1: entered allmulticast mode [ 72.080331][ T5627] bridge_slave_1: entered promiscuous mode [ 72.084384][ T5621] team0: Port device team_slave_1 added [ 72.133892][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.133988][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.134067][ T5630] bridge_slave_1: entered allmulticast mode [ 72.135032][ T5630] bridge_slave_1: entered promiscuous mode [ 72.180078][ T5622] team0: Port device team_slave_0 added [ 72.218899][ T5622] team0: Port device team_slave_1 added [ 72.221205][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.224106][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.226175][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.228497][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.228509][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.228535][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.282425][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.297929][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.297944][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.297965][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.313966][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.313981][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.314001][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.333507][ T5632] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.338156][ T5630] team0: Port device team_slave_0 added [ 72.365273][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.365288][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.365308][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.370103][ T5627] team0: Port device team_slave_0 added [ 72.374984][ T5630] team0: Port device team_slave_1 added [ 72.407810][ T5627] team0: Port device team_slave_1 added [ 72.516238][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.516254][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.516274][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.566133][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.566148][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.566183][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.571429][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.571443][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.571463][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.618221][ T5621] hsr_slave_0: entered promiscuous mode [ 72.621285][ T5621] hsr_slave_1: entered promiscuous mode [ 72.649995][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.650010][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.650031][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.692303][ T5622] hsr_slave_0: entered promiscuous mode [ 72.696292][ T5622] hsr_slave_1: entered promiscuous mode [ 72.700723][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 72.700864][ T5622] Cannot create hsr debugfs directory [ 72.778382][ T5627] hsr_slave_0: entered promiscuous mode [ 72.778989][ T5627] hsr_slave_1: entered promiscuous mode [ 72.779379][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 72.779396][ T5627] Cannot create hsr debugfs directory [ 72.849889][ T5630] hsr_slave_0: entered promiscuous mode [ 72.851187][ T5630] hsr_slave_1: entered promiscuous mode [ 72.851592][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 72.851609][ T5630] Cannot create hsr debugfs directory [ 73.311766][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.328997][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.334092][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.342855][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.344300][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.357410][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.372114][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.382826][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.502184][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.505090][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.537922][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.540675][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.541538][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.545452][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.546285][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.557158][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.573219][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.573379][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.573743][ T5632] bridge_slave_0: entered allmulticast mode [ 73.575391][ T5632] bridge_slave_0: entered promiscuous mode [ 73.579991][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.580084][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.580448][ T5632] bridge_slave_1: entered allmulticast mode [ 73.582043][ T5632] bridge_slave_1: entered promiscuous mode [ 73.662703][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.666231][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.666629][ T5642] Bluetooth: hci1: command tx timeout [ 73.666653][ T5642] Bluetooth: hci4: command tx timeout [ 73.666672][ T5642] Bluetooth: hci0: command tx timeout [ 73.666691][ T5642] Bluetooth: hci2: command tx timeout [ 73.734781][ T5632] team0: Port device team_slave_0 added [ 73.743690][ T5632] team0: Port device team_slave_1 added [ 73.746530][ T5633] Bluetooth: hci3: command tx timeout [ 73.795424][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.795439][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.795459][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.798401][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.798414][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.798434][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.843131][ T5627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.854009][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.854795][ T5627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.888229][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.907827][ T5632] hsr_slave_0: entered promiscuous mode [ 73.909392][ T5632] hsr_slave_1: entered promiscuous mode [ 73.910095][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 73.910416][ T5632] Cannot create hsr debugfs directory [ 73.911346][ T5627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.922731][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.935950][ T5627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.942483][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.059072][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.082911][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.088294][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.090532][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.098706][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.137659][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.140537][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.141410][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.144370][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.204443][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.254966][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.255061][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.302510][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.305419][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.311780][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.311875][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.312610][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.317549][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.358036][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.360895][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.383608][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.386272][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.409962][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.456031][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.480847][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.509253][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.509316][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.524197][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.524282][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.554897][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.579879][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.579938][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.615756][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.615859][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.672151][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.782967][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.834219][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.834318][ T1210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.873214][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.873315][ T1210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.942218][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.049050][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.091398][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.091499][ T1210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.123788][ T205] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.123890][ T205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.550828][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.746800][ T5633] Bluetooth: hci2: command tx timeout [ 75.746834][ T5633] Bluetooth: hci0: command tx timeout [ 75.746854][ T5633] Bluetooth: hci4: command tx timeout [ 75.746874][ T5633] Bluetooth: hci1: command tx timeout [ 75.773370][ T5621] veth0_vlan: entered promiscuous mode [ 75.791689][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.826963][ T5642] Bluetooth: hci3: command tx timeout [ 75.842089][ T5621] veth1_vlan: entered promiscuous mode [ 75.930844][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.023162][ T5621] veth0_macvtap: entered promiscuous mode [ 76.062013][ T5622] veth0_vlan: entered promiscuous mode [ 76.078271][ T5621] veth1_macvtap: entered promiscuous mode [ 76.119962][ T5622] veth1_vlan: entered promiscuous mode [ 76.154284][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.197575][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.340921][ T5622] veth0_macvtap: entered promiscuous mode [ 76.390733][ T5622] veth1_macvtap: entered promiscuous mode [ 76.457597][ T205] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.457859][ T205] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.457896][ T205] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.457927][ T205] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.473452][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.571930][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.589200][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.592084][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.603663][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.603681][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.697527][ T5627] veth0_vlan: entered promiscuous mode [ 76.702363][ T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.702381][ T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.726293][ T5630] veth0_vlan: entered promiscuous mode [ 76.758713][ T5627] veth1_vlan: entered promiscuous mode [ 76.769225][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.769301][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.769334][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.769365][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.815775][ T5630] veth1_vlan: entered promiscuous mode [ 76.820603][ T5632] veth0_vlan: entered promiscuous mode [ 76.874205][ T5621] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.894527][ T5632] veth1_vlan: entered promiscuous mode [ 76.933895][ T5627] veth0_macvtap: entered promiscuous mode [ 76.947363][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.947381][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.986941][ T5627] veth1_macvtap: entered promiscuous mode [ 77.044493][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.044512][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.054184][ T5630] veth0_macvtap: entered promiscuous mode [ 77.071564][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.106205][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.107386][ T5630] veth1_macvtap: entered promiscuous mode [ 77.143269][ T5632] veth0_macvtap: entered promiscuous mode [ 77.173891][ T5632] veth1_macvtap: entered promiscuous mode [ 77.187336][ T1134] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.188042][ T1134] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.188081][ T1134] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.188113][ T1134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.214173][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.279770][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.291244][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.327662][ T5830] nbd3: detected capacity change from 0 to 63 [ 77.352318][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.407190][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.408169][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.408217][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.408248][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.408276][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.408306][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.408335][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.408362][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.410645][ T5830] block nbd3: NBD_DISCONNECT [ 77.411285][ T5830] block nbd3: Disconnected due to user request. [ 77.411300][ T5830] block nbd3: shutting down sockets [ 77.452354][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.452514][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 77.453359][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.453431][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 77.453499][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 77.453558][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 77.453611][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 77.488851][ T2403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 77.488881][ T2403] Buffer I/O error on dev nbd3, logical block 0, async page read [ 77.488914][ T2403] Buffer I/O error on dev nbd3, logical block 1, async page read [ 77.488927][ T2403] Buffer I/O error on dev nbd3, logical block 2, async page read [ 77.488939][ T2403] Buffer I/O error on dev nbd3, logical block 3, async page read [ 77.489429][ T2403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 77.489453][ T2403] Buffer I/O error on dev nbd3, logical block 0, async page read [ 77.489465][ T2403] Buffer I/O error on dev nbd3, logical block 1, async page read [ 77.489596][ T2403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 77.489735][ T2403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 77.489914][ T2403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 77.490068][ T2403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 77.490204][ T2403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 77.490267][ T5625] ldm_validate_partition_table(): Disk read failed. [ 77.490754][ T5625] Dev nbd3: unable to read RDB block 0 [ 77.491416][ T5625] nbd3: unable to read partition table [ 77.529891][ T5625] ldm_validate_partition_table(): Disk read failed. [ 77.531075][ T5625] Dev nbd3: unable to read RDB block 0 [ 77.541969][ T5625] nbd3: unable to read partition table [ 77.692507][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.692525][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.827757][ T5633] Bluetooth: hci4: command tx timeout [ 77.827788][ T5633] Bluetooth: hci0: command tx timeout [ 77.827832][ T5633] Bluetooth: hci2: command tx timeout [ 77.827913][ T5642] Bluetooth: hci1: command tx timeout [ 77.921909][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.921928][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.953599][ T5642] Bluetooth: hci3: command tx timeout [ 78.074805][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.074825][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.075765][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.075780][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.320208][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.320227][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.478536][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.478557][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.553465][ T5828] Zero length message leads to an empty skb [ 79.248843][ T5867] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 79.927959][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 80.099376][ T5896] netlink: 256 bytes leftover after parsing attributes in process `syz.2.28'. [ 80.099686][ T5896] unsupported nlmsg_type 40 [ 80.170113][ T5898] syz_tun: entered allmulticast mode [ 80.207549][ T5897] syz_tun: left allmulticast mode [ 81.417667][ T5928] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 81.631107][ T49] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.527569][ T5883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.655653][ T5965] warning: `syz.4.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.694824][ T5969] syz_tun: entered allmulticast mode [ 82.710177][ T5966] syz_tun: left allmulticast mode [ 82.725701][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 83.229330][ T5988] netlink: 'syz.0.53': attribute type 2 has an invalid length. [ 83.290621][ T5991] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 84.514878][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 84.543171][ T6011] syzkaller1: entered promiscuous mode [ 84.543194][ T6011] syzkaller1: entered allmulticast mode [ 86.366307][ T6077] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 86.640228][ T1958] cfg80211: failed to load regulatory.db [ 86.812618][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 86.812641][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 87.034866][ T6103] batman_adv: batadv0: Adding interface: syzkaller0 [ 87.034883][ T6103] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.034910][ T6103] batman_adv: batadv0: Interface activated: syzkaller0 [ 87.085517][ T6102] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 87.103212][ T6102] batman_adv: batadv0: Removing interface: syzkaller0 [ 87.195748][ T6110] block nbd0: not configured, cannot reconfigure [ 87.535204][ T6122] syzkaller1: entered promiscuous mode [ 87.535226][ T6122] syzkaller1: entered allmulticast mode [ 87.696456][ T6136] tipc: Started in network mode [ 87.696477][ T6136] tipc: Node identity , cluster identity 4711 [ 87.696490][ T6136] tipc: Failed to obtain node identity [ 87.696514][ T6136] tipc: Enabling of bearer rejected, failed to enable media [ 88.402329][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 88.477179][ T6169] ip_tables: iptables: counters copy to user failed while replacing table [ 89.256905][ T6195] ip_tables: iptables: counters copy to user failed while replacing table [ 89.981678][ T6226] netlink: 156 bytes leftover after parsing attributes in process `syz.1.136'. [ 91.292903][ T6240] netlink: 76 bytes leftover after parsing attributes in process `syz.3.138'. [ 91.456969][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 91.562136][ T6253] netlink: 'syz.4.144': attribute type 2 has an invalid length. [ 91.639098][ T6252] netlink: 'syz.1.143': attribute type 5 has an invalid length. [ 91.737727][ T6263] Bluetooth: MGMT ver 1.23 [ 91.786049][ T6259] syzkaller1: entered promiscuous mode [ 91.786071][ T6259] syzkaller1: entered allmulticast mode [ 91.997937][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 92.297679][ T6290] pimreg: entered allmulticast mode [ 92.472255][ T6298] netlink: 'syz.4.162': attribute type 25 has an invalid length. [ 92.472276][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 92.504965][ T6298] netlink: 'syz.4.162': attribute type 25 has an invalid length. [ 92.504985][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 92.518200][ T1489] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.518241][ T1489] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.518271][ T1489] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.518300][ T1489] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.910471][ T6317] TC_ACT_REPEAT abuse ? [ 93.024834][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055915c00: rx timeout, send abort [ 93.025867][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055915c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.227683][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 93.945532][ T6354] raw_sendmsg: syz.2.178 forgot to set AF_INET. Fix it! [ 94.244624][ T6371] syzkaller0: entered promiscuous mode [ 94.244644][ T6371] syzkaller0: entered allmulticast mode [ 94.481936][ T6381] batman_adv: batadv0: Adding interface: syzkaller0 [ 94.481953][ T6381] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.481977][ T6381] batman_adv: batadv0: Interface activated: syzkaller0 [ 95.185884][ T6392] syzkaller0: entered promiscuous mode [ 95.185907][ T6392] syzkaller0: entered allmulticast mode [ 95.215466][ T6380] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 95.277363][ T6380] batman_adv: batadv0: Removing interface: syzkaller0 [ 97.257432][ T6443] syzkaller0: entered promiscuous mode [ 97.257455][ T6443] syzkaller0: entered allmulticast mode [ 97.469208][ T6455] syzkaller0: entered promiscuous mode [ 97.469230][ T6455] syzkaller0: entered allmulticast mode [ 97.841323][ T6489] syzkaller0: entered promiscuous mode [ 97.841340][ T6489] syzkaller0: entered allmulticast mode [ 97.958979][ T6492] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 97.978302][ T6492] bond1: entered promiscuous mode [ 97.978797][ T6492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.000261][ T6492] ipvlan2: entered allmulticast mode [ 98.000275][ T6492] bond1: entered allmulticast mode [ 98.001693][ T6492] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 98.001705][ T6492] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 98.001713][ T6492] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 98.003882][ T6492] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 98.129186][ T6495] syzkaller0: entered promiscuous mode [ 98.129201][ T6495] syzkaller0: entered allmulticast mode [ 98.374620][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'. [ 100.562534][ T6467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.762557][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'. [ 100.824433][ T6516] vlan2: entered allmulticast mode [ 100.824455][ T6516] bridge2: entered allmulticast mode [ 100.842279][ T6516] bridge2: port 1(erspan0) entered blocking state [ 100.844120][ T6516] bridge2: port 1(erspan0) entered disabled state [ 100.844265][ T6516] erspan0: entered allmulticast mode [ 100.854498][ T6516] erspan0: entered promiscuous mode [ 100.855653][ T6516] bridge2: port 1(erspan0) entered blocking state [ 100.855759][ T6516] bridge2: port 1(erspan0) entered forwarding state [ 100.872914][ T6518] syzkaller0: entered promiscuous mode [ 100.872934][ T6518] syzkaller0: entered allmulticast mode [ 101.150387][ T6532] syzkaller0: entered promiscuous mode [ 101.150408][ T6532] syzkaller0: entered allmulticast mode [ 101.154171][ T6530] syzkaller0: entered promiscuous mode [ 101.154190][ T6530] syzkaller0: entered allmulticast mode [ 101.465056][ T6543] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 101.682258][ T6546] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 101.711211][ T6546] bond1 (unregistering): Released all slaves [ 101.798197][ T6534] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.908092][ T6549] syz_tun: entered allmulticast mode [ 101.944223][ T6550] bridge1: entered promiscuous mode [ 101.959710][ T6550] bond1: (slave bridge1): making interface the new active one [ 101.961662][ T6550] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 102.123325][ T6554] syzkaller0: entered promiscuous mode [ 102.123351][ T6554] syzkaller0: entered allmulticast mode [ 103.723298][ T6576] syzkaller0: entered promiscuous mode [ 103.723319][ T6576] syzkaller0: entered allmulticast mode [ 103.731281][ T6578] syzkaller0: entered promiscuous mode [ 103.731301][ T6578] syzkaller0: entered allmulticast mode [ 103.925016][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 103.959161][ T6603] syzkaller0: entered promiscuous mode [ 103.959181][ T6603] syzkaller0: entered allmulticast mode [ 103.980937][ T6606] TC_ACT_REPEAT abuse ? [ 104.071786][ T6613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.247'. [ 104.257413][ T6618] syzkaller1: entered promiscuous mode [ 104.257438][ T6618] syzkaller1: entered allmulticast mode [ 104.352703][ T6611] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 104.981313][ T6659] netlink: 'syz.2.258': attribute type 4 has an invalid length. [ 105.018849][ T6656] syzkaller0: entered promiscuous mode [ 105.018870][ T6656] syzkaller0: entered allmulticast mode [ 105.023438][ T6661] tc action pedit 'at' offset 5 out of bounds [ 105.023457][ T6661] tc action pedit 'at' offset 5 out of bounds [ 105.023466][ T6661] tc action pedit 'at' offset 5 out of bounds [ 105.023476][ T6661] tc action pedit 'at' offset 5 out of bounds [ 105.023487][ T6661] tc action pedit 'at' offset 5 out of bounds [ 105.023866][ T6661] tc action pedit 'at' offset 5 out of bounds [ 105.023878][ T6661] tc action pedit 'at' offset 5 out of bounds [ 105.023888][ T6661] tc action pedit 'at' offset 5 out of bounds [ 105.023898][ T6661] tc action pedit 'at' offset 5 out of bounds [ 105.023908][ T6661] tc action pedit 'at' offset 5 out of bounds [ 105.023932][ T6661] 0: reclassify loop, rule prio 0, protocol 800 [ 105.043457][ T6655] tc action pedit unable to extract header offset for header type (0x5) [ 105.043475][ T6655] tc action pedit unable to extract header offset for header type (0x5) [ 105.043485][ T6655] tc action pedit unable to extract header offset for header type (0x5) [ 105.043495][ T6655] tc action pedit unable to extract header offset for header type (0x5) [ 105.043505][ T6655] tc action pedit unable to extract header offset for header type (0x5) [ 105.043515][ T6655] tc action pedit unable to extract header offset for header type (0x5) [ 105.043526][ T6655] tc action pedit unable to extract header offset for header type (0x5) [ 105.043536][ T6655] tc action pedit unable to extract header offset for header type (0x5) [ 105.043546][ T6655] tc action pedit unable to extract header offset for header type (0x5) [ 105.043556][ T6655] tc action pedit unable to extract header offset for header type (0x5) [ 105.043576][ T6655] 0: reclassify loop, rule prio 0, protocol 800 [ 105.239539][ T6665] ip_tables: iptables: counters copy to user failed while replacing table [ 105.405030][ T6673] syzkaller0: entered promiscuous mode [ 105.405051][ T6673] syzkaller0: entered allmulticast mode [ 105.803452][ T6686] syzkaller0: entered promiscuous mode [ 105.803474][ T6686] syzkaller0: entered allmulticast mode [ 105.990610][ T6692] syzkaller0: entered promiscuous mode [ 105.990631][ T6692] syzkaller0: entered allmulticast mode [ 106.168584][ T6697] syzkaller0: entered promiscuous mode [ 106.168605][ T6697] syzkaller0: entered allmulticast mode [ 106.172914][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.273'. [ 106.172935][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.273'. [ 106.261217][ T6699] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 106.300401][ T6699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.379365][ T6699] veth3: entered allmulticast mode [ 106.403000][ T6699] bond2: (slave veth3): Enslaving as an active interface with a down link [ 106.448628][ T6707] bond2: (slave veth0_to_bond): making interface the new active one [ 106.450326][ T6707] veth0_to_bond: entered promiscuous mode [ 106.450744][ T6707] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 106.543247][ T6699] macvlan2: entered promiscuous mode [ 106.543268][ T6699] macvlan2: entered allmulticast mode [ 106.549148][ T6699] bond2: entered promiscuous mode [ 106.559760][ T6699] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.564528][ T6699] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 106.564750][ T6699] bond2: left promiscuous mode [ 106.650195][ T6718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.244574][ T6735] syzkaller0: entered promiscuous mode [ 108.244596][ T6735] syzkaller0: entered allmulticast mode [ 108.246783][ T6736] syzkaller0: entered promiscuous mode [ 108.246801][ T6736] syzkaller0: entered allmulticast mode [ 108.283013][ T6746] syz_tun: entered allmulticast mode [ 108.287438][ T6748] syz_tun: left allmulticast mode [ 108.725421][ T6765] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 108.725531][ T6765] syzkaller1: linktype set to 769 [ 108.796816][ T6775] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 108.796816][ T6775] Please contact the netfilter-devel mailing list or update your nftables rules. [ 108.864726][ T6777] syzkaller0: entered promiscuous mode [ 108.864748][ T6777] syzkaller0: entered allmulticast mode [ 109.509039][ T6785] syzkaller0: entered promiscuous mode [ 109.509064][ T6785] syzkaller0: entered allmulticast mode [ 109.515754][ T6799] syzkaller0: entered promiscuous mode [ 109.515776][ T6799] syzkaller0: entered allmulticast mode [ 110.733020][ T43] nci: nci_rsp_packet: unsupported rsp opcode 0xf05 [ 111.711660][ T6816] syzkaller0: entered promiscuous mode [ 111.711685][ T6816] syzkaller0: entered allmulticast mode [ 111.729240][ T6821] syzkaller0: entered promiscuous mode [ 111.729260][ T6821] syzkaller0: entered allmulticast mode [ 113.494064][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.622455][ T6806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.457667][ T6889] syzkaller0: entered promiscuous mode [ 114.457689][ T6889] syzkaller0: entered allmulticast mode [ 114.529106][ T6895] Cannot find set identified by id 0 to match [ 115.043884][ T6912] syzkaller0: entered promiscuous mode [ 115.043905][ T6912] syzkaller0: entered allmulticast mode [ 115.122384][ T6912] tipc: Started in network mode [ 115.122414][ T6912] tipc: Node identity 029b783a6761, cluster identity 4711 [ 115.157294][ T6912] tipc: Enabled bearer , priority 0 [ 115.280282][ T6916] syzkaller0: entered promiscuous mode [ 115.280303][ T6916] syzkaller0: entered allmulticast mode [ 115.304995][ T6912] tipc: Resetting bearer [ 115.331596][ T6918] netlink: 'syz.4.334': attribute type 2 has an invalid length. [ 115.394077][ T5642] Bluetooth: hci4: link tx timeout [ 115.394096][ T5642] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.485389][ T6911] tipc: Resetting bearer [ 115.541747][ T6911] tipc: Disabling bearer [ 116.062529][ T6934] xt_hashlimit: size too large, truncated to 1048576 [ 117.593742][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 117.593999][ T5628] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 117.601885][ T5628] Bluetooth: hci2: Injecting HCI hardware error event [ 117.604674][ T5628] Bluetooth: hci2: hardware error 0x00 [ 125.496381][ C0] sched: DL replenish lagged too much [ 134.251841][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.259061][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.736156][ T5628] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 195.793624][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.809102][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.973650][ T4941] Bluetooth: hci3: command 0x0406 tx timeout [ 198.017776][ T4941] Bluetooth: hci1: command 0x0406 tx timeout [ 249.952929][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 259.292030][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.307498][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.796821][ T32] INFO: task kworker/1:1:30 blocked for more than 143 seconds. [ 272.796859][ T32] Not tainted syzkaller #0 [ 272.796869][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.796882][ T32] task:kworker/1:1 state:D stack:25256 pid:30 tgid:30 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 272.796939][ T32] Workqueue: events_power_efficient crda_timeout_work [ 272.796986][ T32] Call Trace: [ 272.796997][ T32] [ 272.797011][ T32] __schedule+0x17db/0x58f0 [ 272.797036][ T32] ? update_protect_slice+0x128/0x210 [ 272.797071][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 272.797105][ T32] ? __pfx___schedule+0x10/0x10 [ 272.797134][ T32] ? schedule+0x90/0x2b0 [ 272.797156][ T32] schedule+0x164/0x2b0 [ 272.797178][ T32] schedule_preempt_disabled+0x13/0x30 [ 272.797198][ T32] __mutex_lock+0x7c1/0x1550 [ 272.797225][ T32] ? __mutex_lock+0x5d4/0x1550 [ 272.797250][ T32] ? crda_timeout_work+0x16/0x80 [ 272.797272][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 272.797309][ T32] ? rcu_is_watching+0x16/0xb0 [ 272.797334][ T32] ? process_scheduled_works+0x97a/0x1630 [ 272.797360][ T32] crda_timeout_work+0x16/0x80 [ 272.797379][ T32] process_scheduled_works+0xc3d/0x1630 [ 272.797442][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 272.797475][ T32] ? assign_work+0x3cf/0x5d0 [ 272.797502][ T32] worker_thread+0xa47/0xfb0 [ 272.797555][ T32] kthread+0x38b/0x480 [ 272.797574][ T32] ? __pfx_worker_thread+0x10/0x10 [ 272.797597][ T32] ? __pfx_kthread+0x10/0x10 [ 272.797618][ T32] ret_from_fork+0x514/0xb70 [ 272.797640][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 272.797659][ T32] ? __switch_to+0xc89/0x1420 [ 272.797687][ T32] ? __pfx_kthread+0x10/0x10 [ 272.797707][ T32] ret_from_fork_asm+0x1a/0x30 [ 272.797742][ T32] [ 272.797889][ T32] INFO: task kworker/1:8:5750 blocked for more than 143 seconds. [ 272.797903][ T32] Not tainted syzkaller #0 [ 272.797912][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.797919][ T32] task:kworker/1:8 state:D stack:24520 pid:5750 tgid:5750 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 272.797965][ T32] Workqueue: events reg_todo [ 272.797984][ T32] Call Trace: [ 272.797990][ T32] [ 272.798001][ T32] __schedule+0x17db/0x58f0 [ 272.798041][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 272.798074][ T32] ? __pfx___schedule+0x10/0x10 [ 272.798103][ T32] ? schedule+0x90/0x2b0 [ 272.798126][ T32] schedule+0x164/0x2b0 [ 272.798148][ T32] schedule_preempt_disabled+0x13/0x30 [ 272.798167][ T32] __mutex_lock+0x7c1/0x1550 [ 272.798193][ T32] ? __mutex_lock+0x5d4/0x1550 [ 272.798219][ T32] ? reg_process_self_managed_hints+0x8d/0x160 [ 272.798241][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 272.798261][ T32] ? reg_process_self_managed_hint+0x1ab/0x4d0 [ 272.798280][ T32] ? __pfx_reg_process_self_managed_hint+0x10/0x10 [ 272.798308][ T32] ? reg_todo+0x8da/0xa40 [ 272.798333][ T32] reg_process_self_managed_hints+0x8d/0x160 [ 272.798355][ T32] reg_todo+0x8df/0xa40 [ 272.798378][ T32] ? process_scheduled_works+0x97a/0x1630 [ 272.798410][ T32] process_scheduled_works+0xc3d/0x1630 [ 272.798467][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 272.798498][ T32] ? assign_work+0x3cf/0x5d0 [ 272.798529][ T32] worker_thread+0xa47/0xfb0 [ 272.798568][ T32] ? __kthread_parkme+0x71/0x1f0 [ 272.798606][ T32] kthread+0x38b/0x480 [ 272.798625][ T32] ? __pfx_worker_thread+0x10/0x10 [ 272.798648][ T32] ? __pfx_kthread+0x10/0x10 [ 272.798668][ T32] ret_from_fork+0x514/0xb70 [ 272.798690][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 272.798709][ T32] ? __switch_to+0xc89/0x1420 [ 272.798738][ T32] ? __pfx_kthread+0x10/0x10 [ 272.798758][ T32] ret_from_fork_asm+0x1a/0x30 [ 272.798793][ T32] [ 272.798815][ T32] [ 272.798815][ T32] Showing all locks held in the system: [ 272.798823][ T32] locks held by kthreadd/2: 2, last CPU#0: [ 272.798835][ T32] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 272.798884][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 272.798932][ T32] locks held by kworker/0:0/9: 4, last CPU#0: [ 272.798950][ T32] #0: ffff88807fc8a140 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.799004][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.799065][ T32] #2: ffff888076b3aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 272.799114][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 272.799159][ T32] locks held by kworker/0:1/10: 2, last CPU#0: [ 272.799172][ T32] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.799221][ T32] #1: ffffc900000f7c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.799271][ T32] locks held by kworker/u8:0/12: 4, last CPU#0: [ 272.799283][ T32] #0: ffff88807aa80940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.799332][ T32] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.799381][ T32] #2: ffff888076a9d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 272.799435][ T32] #3: ffff88807b9ff028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 272.799483][ T32] locks held by kworker/u8:1/13: 2, on CPU#1: [ 272.799496][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.799545][ T32] #1: ffffc90000127c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.799603][ T32] locks held by kworker/R-mm_pe/14: 1, on CPU#1: [ 272.799613][ T32] #0: ffffffff8fbf92e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 272.799662][ T32] locks held by kworker/1:0/25: 3, last CPU#1: [ 272.799674][ T32] #0: ffff88803326b940 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.799727][ T32] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.799798][ T32] #2: ffff888076911440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 272.799846][ T32] locks held by kworker/1:1/30: 3, on CPU#1: [ 272.799859][ T32] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.799907][ T32] #1: ffffc90000a57c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.799964][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 [ 272.800008][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 272.800020][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 272.800065][ T32] locks held by kworker/R-write/34: 1, on CPU#0: [ 272.800077][ T32] #0: ffffffff8fbf92e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 272.800129][ T32] locks held by kworker/u8:2/43: 3, last CPU#0: [ 272.800141][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.800190][ T32] #1: ffffc90000b37c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 272.800238][ T32] #2: ffff8880690a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420