last executing test programs: 3.306103735s ago: executing program 3 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1], 0x8c}, 0x1, 0xba01}, 0x0) 3.282747812s ago: executing program 3 (id=70): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.423495785s ago: executing program 3 (id=103): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 2.415979214s ago: executing program 3 (id=105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 951.534607ms ago: executing program 2 (id=201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000000040120000006e7000000100000000200002000a00000000800000000000000000000200000000000000aa000000000d0001007564703a73"], 0x6c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)}], 0x1, &(0x7f0000000500)=""/55, 0x37}, 0x80}], 0x1, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 887.487969ms ago: executing program 3 (id=205): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x4001c00) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x40) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)={0x188, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb9, 0x4, "b1111a98b13764ed95f84452179ff7d0dc8fc939cda424a625a322ca4c4a5a844a8d3337e475efcfe4efd4c752623d522ff7777689e1852f6bd71cbc4b18048f256aadcf85c96c3e04a01ac2f95a2b76c9946fe54597615c6a508af01742838ba2d3de6b174d4aad88eae4804521b481388129110719839db236ff547181324db9100ac1f515117529ef6c2d6a037f86de9e43ccf140fdc5c0224b356b35f1cb6cc7700a271cfd0d27cbad1f5b17bd6fb79bf4b057"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "a09bfc7870c510a2f971504aa9eaabfe731d8f3ba1c19e1eefcaed6a3e4c374c9df833976c54732a4ae1a08a656f86fea6abd6a683f2edbf528116a8449b0be0e6a5b81f13a650abc52171b2543a53a20de9950cf33f29f10cf34096536a03f87d2fa43979cf9accea966bb04bb8e0283dc23bda8b47e109377265d91b788193dfb687b295db0564081790f0b813e3c9678de9b1f67deb3742a74e1d4896d7038d1f7bd70bd27670af0a9d50"}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20004804}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7, r8}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r8}, 0x38) 821.21534ms ago: executing program 3 (id=207): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000400000000000007000000000300000000"], 0x0, 0x44}, 0x28) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) connect$unix(r4, &(0x7f0000000140)=@abs={0x1}, 0x6e) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 349.962273ms ago: executing program 4 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 338.407231ms ago: executing program 4 (id=241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe0, 0x4636, 0xd6, 0xc8, 0x81, 0x8001, 0x6, 0xbf5c, 0x7, 0x1, 0x1, 0x1, 0x7, 0xff, 0x40, 0x4, 0x5, 0x80000000, 0x1000, 0xfffffffb, 0xcfb, 0x2, 0x7fff, 0x95, 0x15e5, 0x3, 0xff, 0x3, 0x81, 0xfffffffe, 0x3, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x101, 0x30, 0x0, 0x100, 0x1, 0xf4, 0x6, 0x200, 0x1, 0xfffffffd, 0xffffffff, 0x3, 0x1ff, 0x4, 0x8a03, 0x6, 0x1, 0x2, 0x9, 0x2, 0x9c8, 0x9, 0x200, 0x231e, 0xfff, 0xf, 0x0, 0x7, 0x8000, 0x5, 0x8, 0x2, 0xfffffffb, 0x2, 0x4, 0x7fffffff, 0x5, 0x9, 0x6, 0x6, 0x9, 0xae, 0x2, 0x101, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xfffffffe, 0x6, 0xd, 0x64b, 0x1efe, 0x6e1c, 0xfffffff9, 0x2, 0x1, 0x5, 0x94, 0x3, 0x5, 0x1, 0x9, 0x0, 0xfffff6e4, 0xec0, 0x7, 0x8, 0x7e, 0xd081, 0x1, 0x1, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x8, 0x2f, 0x7, 0x9, 0x2, 0x7ff, 0xa38, 0x6, 0x327, 0x101, 0x2, 0x2, 0x1, 0x3, 0xd46, 0x5, 0x338, 0x40, 0x1b8beb60, 0x20000, 0x240, 0x7, 0x0, 0x0, 0x9, 0x8, 0x1, 0x3f0, 0x40, 0x0, 0x0, 0x1, 0xfffffe01, 0x3, 0xfffffffd, 0x2, 0x0, 0x98, 0x8, 0x200, 0x40, 0x4, 0x6, 0x8, 0x4, 0x9, 0x8, 0xf1b, 0x0, 0xfffffffe, 0x10000, 0x0, 0x81, 0x9, 0x3, 0x3, 0x3, 0x5, 0xfffffff7, 0x7, 0x5, 0x5, 0x9, 0x1ff, 0x2, 0x1000, 0x80000000, 0xfffffffc, 0x5, 0xff, 0x40, 0x7f, 0x9, 0xfffffc01, 0x0, 0x7f, 0x200, 0x8, 0x7, 0x5, 0x6, 0x8, 0x40, 0x1, 0x7, 0x7, 0x7fff, 0x301, 0x9, 0x4, 0x7f, 0x80000000, 0xd, 0x3, 0x101, 0x6e, 0x6, 0x3, 0x40000000, 0x3, 0x0, 0x9, 0x0, 0xfffffff8, 0x90b, 0xfe, 0x200, 0x2000000, 0x3, 0x200, 0xffffff01, 0x7, 0xfffffff1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x6e3000, 0x4, 0x6, 0x3, 0xdda, 0x4, 0x6, 0xfffffffd, 0x5, 0x80, 0x1000, 0x1, 0x0, 0x2, 0x7ff, 0x6, 0xfffffff8, 0xc, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x592, 0xc6a3, 0x4, 0x81, 0x120, 0x40, 0x2, 0x3, 0x6, 0xc0000000, 0xe, 0x8, 0xf, 0x1000, 0x48e, 0x6, 0x1, 0x4, 0x1b70, 0xff, 0x1, 0xffffffff, 0x1, 0x0, 0xdd6, 0x80000001, 0xffff, 0x0, 0x4, 0x80000000, 0xfff, 0x7fff, 0x136d, 0x9, 0x5, 0xfffffffa, 0x7, 0x0, 0x8, 0x8, 0xa97b, 0x81, 0x0, 0x8, 0x1, 0x1b93d89b, 0x2400000, 0xfffffffa, 0xff52, 0x6, 0x6, 0x1, 0x670, 0x7ff, 0x8, 0xbb7, 0x5, 0x8, 0x7fff, 0x1, 0x3, 0x6, 0xfffffff7, 0x4, 0x764, 0x1, 0x80000000, 0x7fffffff, 0xb3, 0x2, 0xfc69, 0xffff0000, 0x0, 0x7, 0x400, 0x8, 0x1, 0x8, 0xa8d, 0x1, 0xffff7fff, 0x0, 0x5, 0xfffffff7, 0x94, 0x4, 0x8, 0xffff, 0x8, 0xfffffff5, 0x200, 0x9, 0x6, 0x3, 0x800, 0xf, 0x1, 0xfffffff0, 0x3, 0xffff, 0x80, 0xae0, 0x4, 0x1, 0xfffffffe, 0x800, 0xcc, 0xfffffffe, 0x4, 0x9, 0x10001, 0x7, 0xe, 0x2, 0x6, 0x4, 0x5f3, 0x5, 0x4, 0x8, 0x2, 0x6, 0x7, 0x7, 0xffffffff, 0x97e9, 0x9, 0x400, 0x7, 0xfffffff7, 0x5, 0x15, 0x1000, 0x100, 0x9, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x4, 0x79, 0x3, 0x5, 0x3, 0x3, 0x401, 0x1, 0xffffff80, 0xda29, 0x9, 0x200, 0x3, 0x2, 0x4, 0x800, 0x87, 0x1, 0x2, 0x8d, 0xa0, 0x80000001, 0x8, 0x5, 0x0, 0x8, 0x1, 0x32a0, 0x2, 0x0, 0x7f, 0x7d, 0x9, 0x34, 0x8, 0x5, 0x9, 0x1, 0x0, 0x7, 0x1, 0x1, 0x200, 0x10, 0x3, 0x3, 0x8000, 0x0, 0xf, 0x8, 0x7, 0x101, 0x8, 0x637, 0x1, 0xfff, 0x3, 0x4, 0x94c0, 0x10001, 0x7fff, 0x9, 0x7, 0xf, 0x10001, 0x0, 0x101, 0x79a1, 0x3ef, 0x5, 0x4, 0x2, 0xffffff01, 0x3, 0xf, 0x8, 0x5, 0xb, 0x0, 0x8001, 0x80, 0x9, 0x80000001, 0x7, 0x6, 0x0, 0xffffffff, 0xfffffff7, 0x4, 0x8, 0x5, 0x7, 0x7, 0x80000000, 0x2, 0x3, 0x200, 0x8, 0x133, 0x3ff, 0x2, 0x6, 0x1, 0x7, 0x3, 0x4d800, 0x4d4, 0x7, 0xe, 0x7, 0x0, 0x9, 0x80000001, 0xbd8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x9, 0x9, 0x4, {0x6, 0x0, 0x6b, 0xffc0, 0x5, 0xb}, {0x7, 0x0, 0x800, 0x5, 0x8001, 0x7}, 0xffffff01, 0x8001, 0x3}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fc}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 292.782552ms ago: executing program 1 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000700000007000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 291.073569ms ago: executing program 0 (id=245): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x4001c00) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x40) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)={0x188, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb9, 0x4, "b1111a98b13764ed95f84452179ff7d0dc8fc939cda424a625a322ca4c4a5a844a8d3337e475efcfe4efd4c752623d522ff7777689e1852f6bd71cbc4b18048f256aadcf85c96c3e04a01ac2f95a2b76c9946fe54597615c6a508af01742838ba2d3de6b174d4aad88eae4804521b481388129110719839db236ff547181324db9100ac1f515117529ef6c2d6a037f86de9e43ccf140fdc5c0224b356b35f1cb6cc7700a271cfd0d27cbad1f5b17bd6fb79bf4b057"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "a09bfc7870c510a2f971504aa9eaabfe731d8f3ba1c19e1eefcaed6a3e4c374c9df833976c54732a4ae1a08a656f86fea6abd6a683f2edbf528116a8449b0be0e6a5b81f13a650abc52171b2543a53a20de9950cf33f29f10cf34096536a03f87d2fa43979cf9accea966bb04bb8e0283dc23bda8b47e109377265d91b788193dfb687b295db0564081790f0b813e3c9678de9b1f67deb3742a74e1d4896d7038d1f7bd70bd27670af0a9d50"}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20004804}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r7}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r7}, 0x38) 257.52566ms ago: executing program 4 (id=246): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001540)=[{{&(0x7f0000000500)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/127, 0x7f}], 0x1, &(0x7f00000012c0)=""/132, 0x84}, 0x200}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000c00)=""/250, 0xfa}, {&(0x7f00000003c0)=""/64, 0x40}, {&(0x7f0000000dc0)=""/169, 0xa9}, {&(0x7f0000000e80)=""/141, 0x8d}, {&(0x7f0000000f40)=""/176, 0xb0}, {&(0x7f0000001000)=""/134, 0x86}], 0x6, &(0x7f0000001140)=""/204, 0xcc}, 0x58}, {{&(0x7f00000006c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000000380)=""/27, 0x1b}], 0x2}, 0x1}, {{&(0x7f0000000840)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001240)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f0000000980)=""/28, 0x1c}, {&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/151, 0x97}, {&(0x7f0000001380)=""/204, 0xcc}, {0x0}, {&(0x7f0000001480)=""/165, 0xa5}], 0x7}}], 0x4, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400", @ANYRES32=0x1, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="00000000c79c7b19d5808847000000000000000000000002849d58ce7f2e82712ebe7944e60bbda2fa2ce0d411b54ff2e999ac51e1e91c6c01eb27270a1f72b67a7cff6e6021a40aa363d8a748ccb0a47e29d2bbdb14dff5606c8b2371cba2900d15f529e6108df3d0921d9f065e7b6cc722fd5ef2c81296cc96e7e2ee523fb5756a7547e6789476f92c914952a2b3ce1e7fa5b18fc819da184e794dac3584"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff7b) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000160e00000020c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 256.558197ms ago: executing program 1 (id=247): unshare(0x4020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r0}, 0x50) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 256.40743ms ago: executing program 1 (id=248): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f00000000c0)="d161b9e3c3499b7c3aded028133bd774efd4cd1c7b5ff296") 245.345887ms ago: executing program 4 (id=249): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2a, &(0x7f0000000100)=0x2, 0x4) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x4, 0x1000, 0x40048}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d00010075"], 0x54}}, 0x0) 223.78143ms ago: executing program 0 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x13c, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x2, 0x3, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xa, 0x1, 0xf5, 0x2}}]}, 0x13c}}, 0x240440c8) 222.395357ms ago: executing program 0 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 215.650834ms ago: executing program 1 (id=252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 199.00974ms ago: executing program 4 (id=253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x0, 0x0, 0x3}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 155.227441ms ago: executing program 0 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d61637365630000feff018008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 100.83632ms ago: executing program 4 (id=255): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) 98.700149ms ago: executing program 1 (id=256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe0, 0x4636, 0xd6, 0xc8, 0x81, 0x8001, 0x6, 0xbf5c, 0x7, 0x1, 0x1, 0x1, 0x7, 0xff, 0x40, 0x4, 0x5, 0x80000000, 0x1000, 0xfffffffb, 0xcfb, 0x2, 0x7fff, 0x95, 0x15e5, 0x3, 0xff, 0x3, 0x81, 0xfffffffe, 0x3, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x101, 0x30, 0x0, 0x100, 0x1, 0xf4, 0x6, 0x200, 0x1, 0xfffffffd, 0xffffffff, 0x3, 0x1ff, 0x4, 0x8a03, 0x6, 0x1, 0x2, 0x9, 0x2, 0x9c8, 0x9, 0x200, 0x231e, 0xfff, 0xf, 0x0, 0x7, 0x8000, 0x5, 0x8, 0x2, 0xfffffffb, 0x2, 0x4, 0x7fffffff, 0x5, 0x9, 0x6, 0x6, 0x9, 0xae, 0x2, 0x101, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xfffffffe, 0x6, 0xd, 0x64b, 0x1efe, 0x6e1c, 0xfffffff9, 0x2, 0x1, 0x5, 0x94, 0x3, 0x5, 0x1, 0x9, 0x0, 0xfffff6e4, 0xec0, 0x7, 0x8, 0x7e, 0xd081, 0x1, 0x1, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x8, 0x2f, 0x7, 0x9, 0x2, 0x7ff, 0xa38, 0x6, 0x327, 0x101, 0x2, 0x2, 0x1, 0x3, 0xd46, 0x5, 0x338, 0x40, 0x1b8beb60, 0x20000, 0x240, 0x7, 0x0, 0x0, 0x9, 0x8, 0x1, 0x3f0, 0x40, 0x0, 0x0, 0x1, 0xfffffe01, 0x3, 0xfffffffd, 0x2, 0x0, 0x98, 0x8, 0x200, 0x40, 0x4, 0x6, 0x8, 0x4, 0x9, 0x8, 0xf1b, 0x0, 0xfffffffe, 0x10000, 0x0, 0x81, 0x9, 0x3, 0x3, 0x3, 0x5, 0xfffffff7, 0x7, 0x5, 0x5, 0x9, 0x1ff, 0x2, 0x1000, 0x80000000, 0xfffffffc, 0x5, 0xff, 0x40, 0x7f, 0x9, 0xfffffc01, 0x0, 0x7f, 0x200, 0x8, 0x7, 0x5, 0x6, 0x8, 0x40, 0x1, 0x7, 0x7, 0x7fff, 0x301, 0x9, 0x4, 0x7f, 0x80000000, 0xd, 0x3, 0x101, 0x6e, 0x6, 0x3, 0x40000000, 0x3, 0x0, 0x9, 0x0, 0xfffffff8, 0x90b, 0xfe, 0x200, 0x2000000, 0x3, 0x200, 0xffffff01, 0x7, 0xfffffff1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x6e3000, 0x4, 0x6, 0x3, 0xdda, 0x4, 0x6, 0xfffffffd, 0x5, 0x80, 0x1000, 0x1, 0x0, 0x2, 0x7ff, 0x6, 0xfffffff8, 0xc, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x592, 0xc6a3, 0x4, 0x81, 0x120, 0x40, 0x2, 0x3, 0x6, 0xc0000000, 0xe, 0x8, 0xf, 0x1000, 0x48e, 0x6, 0x1, 0x4, 0x1b70, 0xff, 0x1, 0xffffffff, 0x1, 0x0, 0xdd6, 0x80000001, 0xffff, 0x0, 0x4, 0x80000000, 0xfff, 0x7fff, 0x136d, 0x9, 0x5, 0xfffffffa, 0x7, 0x0, 0x8, 0x8, 0xa97b, 0x81, 0x0, 0x8, 0x1, 0x1b93d89b, 0x2400000, 0xfffffffa, 0xff52, 0x6, 0x6, 0x1, 0x670, 0x7ff, 0x8, 0xbb7, 0x5, 0x8, 0x7fff, 0x1, 0x3, 0x6, 0xfffffff7, 0x4, 0x764, 0x1, 0x80000000, 0x7fffffff, 0xb3, 0x2, 0xfc69, 0xffff0000, 0x0, 0x7, 0x400, 0x8, 0x1, 0x8, 0xa8d, 0x1, 0xffff7fff, 0x0, 0x5, 0xfffffff7, 0x94, 0x4, 0x8, 0xffff, 0x8, 0xfffffff5, 0x200, 0x9, 0x6, 0x3, 0x800, 0xf, 0x1, 0xfffffff0, 0x3, 0xffff, 0x80, 0xae0, 0x4, 0x1, 0xfffffffe, 0x800, 0xcc, 0xfffffffe, 0x4, 0x9, 0x10001, 0x7, 0xe, 0x2, 0x6, 0x4, 0x5f3, 0x5, 0x4, 0x8, 0x2, 0x6, 0x7, 0x7, 0xffffffff, 0x97e9, 0x9, 0x400, 0x7, 0xfffffff7, 0x5, 0x15, 0x1000, 0x100, 0x9, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x4, 0x79, 0x3, 0x5, 0x3, 0x3, 0x401, 0x1, 0xffffff80, 0xda29, 0x9, 0x200, 0x3, 0x2, 0x4, 0x800, 0x87, 0x1, 0x2, 0x8d, 0xa0, 0x80000001, 0x8, 0x5, 0x0, 0x8, 0x1, 0x32a0, 0x2, 0x0, 0x7f, 0x7d, 0x9, 0x34, 0x8, 0x5, 0x9, 0x1, 0x0, 0x7, 0x1, 0x1, 0x200, 0x10, 0x3, 0x3, 0x8000, 0x0, 0xf, 0x8, 0x7, 0x101, 0x8, 0x637, 0x1, 0xfff, 0x3, 0x4, 0x94c0, 0x10001, 0x7fff, 0x9, 0x7, 0xf, 0x10001, 0x0, 0x101, 0x79a1, 0x3ef, 0x5, 0x4, 0x2, 0xffffff01, 0x3, 0xf, 0x8, 0x5, 0xb, 0x0, 0x8001, 0x80, 0x9, 0x80000001, 0x7, 0x6, 0x0, 0xffffffff, 0xfffffff7, 0x4, 0x8, 0x5, 0x7, 0x7, 0x80000000, 0x2, 0x3, 0x200, 0x8, 0x133, 0x3ff, 0x2, 0x6, 0x1, 0x7, 0x3, 0x4d800, 0x4d4, 0x7, 0xe, 0x7, 0x0, 0x9, 0x80000001, 0xbd8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x9, 0x9, 0x4, {0x6, 0x0, 0x6b, 0xffc0, 0x5, 0xb}, {0x7, 0x0, 0x800, 0x5, 0x8001, 0x7}, 0xffffff01, 0x8001, 0x3}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fc}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 76.998843ms ago: executing program 2 (id=257): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088", @ANYRES32=r1], 0x8c}, 0x1, 0xba01}, 0x0) 61.835862ms ago: executing program 2 (id=258): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000007700)) 47.772335ms ago: executing program 0 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.255538ms ago: executing program 2 (id=260): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001540)=[{{&(0x7f0000000500)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/127, 0x7f}], 0x1, &(0x7f00000012c0)=""/132, 0x84}, 0x200}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000c00)=""/250, 0xfa}, {&(0x7f00000003c0)=""/64, 0x40}, {&(0x7f0000000dc0)=""/169, 0xa9}, {&(0x7f0000000e80)=""/141, 0x8d}, {&(0x7f0000000f40)=""/176, 0xb0}, {&(0x7f0000001000)=""/134, 0x86}], 0x6, &(0x7f0000001140)=""/204, 0xcc}, 0x58}, {{&(0x7f00000006c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000000380)=""/27, 0x1b}], 0x2}, 0x1}, {{&(0x7f0000000840)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001240)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f0000000980)=""/28, 0x1c}, {&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/151, 0x97}, {&(0x7f0000000b40)=""/158, 0x9e}, {&(0x7f0000001480)=""/165, 0xa5}], 0x6}}], 0x4, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400", @ANYRES32=0x1, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="00000000c79c7b19d5808847000000000000000000000002849d58ce7f2e82712ebe7944e60bbda2fa2ce0d411b54ff2e999ac51e1e91c6c01eb27270a1f72b67a7cff6e6021a40aa363d8a748ccb0a47e29d2bbdb14dff5606c8b2371cba2900d15f529e6108df3d0921d9f065e7b6cc722fd5ef2c81296cc96e7e2ee523fb5756a7547e6789476f92c914952a2b3ce1e7fa5b18fc819da184e794dac3584"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff7b) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000160e00000020c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 25.626146ms ago: executing program 0 (id=261): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x4001c00) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x40) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)={0x188, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb9, 0x4, "b1111a98b13764ed95f84452179ff7d0dc8fc939cda424a625a322ca4c4a5a844a8d3337e475efcfe4efd4c752623d522ff7777689e1852f6bd71cbc4b18048f256aadcf85c96c3e04a01ac2f95a2b76c9946fe54597615c6a508af01742838ba2d3de6b174d4aad88eae4804521b481388129110719839db236ff547181324db9100ac1f515117529ef6c2d6a037f86de9e43ccf140fdc5c0224b356b35f1cb6cc7700a271cfd0d27cbad1f5b17bd6fb79bf4b057"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "a09bfc7870c510a2f971504aa9eaabfe731d8f3ba1c19e1eefcaed6a3e4c374c9df833976c54732a4ae1a08a656f86fea6abd6a683f2edbf528116a8449b0be0e6a5b81f13a650abc52171b2543a53a20de9950cf33f29f10cf34096536a03f87d2fa43979cf9accea966bb04bb8e0283dc23bda8b47e109377265d91b788193dfb687b295db0564081790f0b813e3c9678de9b1f67deb3742a74e1d4896d7038d1f7bd70bd27670af0a9d50"}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20004804}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r7}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r7}, 0x38) 18.323542ms ago: executing program 2 (id=262): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f00000000c0)="d161b9e3c3499b7c3aded028133bd774efd4cd1c7b5ff296a13c") 1.123209ms ago: executing program 1 (id=263): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2a, &(0x7f0000000100)=0x2, 0x4) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x4, 0x1000, 0x40048}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) 0s ago: executing program 2 (id=264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. [ 29.989981][ T6541] cgroup: Unknown subsys name 'net' [ 30.098106][ T6541] cgroup: Unknown subsys name 'cpuset' [ 30.099906][ T6541] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.275440][ T6541] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 32.387161][ T6554] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.401391][ T6562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.401541][ T6562] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.402043][ T6562] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.402167][ T6562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.402261][ T6562] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.402522][ T6562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.404653][ T6562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.404941][ T6562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.405019][ T6562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.408137][ T6564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.408182][ T6564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.409216][ T6564] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.409437][ T6564] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.409598][ T6564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.410177][ T6564] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.410799][ T6564] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.411080][ T6564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.411292][ T6564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.411674][ T6564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.412561][ T6564] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.414320][ T6564] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.414695][ T6564] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.415311][ T6564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.423513][ T6554] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.594727][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 32.597977][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 32.618614][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 32.621348][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 32.665157][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.665506][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.665601][ T6553] bridge_slave_0: entered allmulticast mode [ 32.666039][ T6553] bridge_slave_0: entered promiscuous mode [ 32.667919][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.667951][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.668001][ T6553] bridge_slave_1: entered allmulticast mode [ 32.668409][ T6553] bridge_slave_1: entered promiscuous mode [ 32.675692][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.675998][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.676082][ T6552] bridge_slave_0: entered allmulticast mode [ 32.676492][ T6552] bridge_slave_0: entered promiscuous mode [ 32.677470][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.677492][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.677545][ T6552] bridge_slave_1: entered allmulticast mode [ 32.677919][ T6552] bridge_slave_1: entered promiscuous mode [ 32.705578][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.706883][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.712113][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.727762][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.730722][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.731021][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.731084][ T6551] bridge_slave_0: entered allmulticast mode [ 32.731495][ T6551] bridge_slave_0: entered promiscuous mode [ 32.732256][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.732271][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.732328][ T6551] bridge_slave_1: entered allmulticast mode [ 32.732715][ T6551] bridge_slave_1: entered promiscuous mode [ 32.738270][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.738292][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.738345][ T6560] bridge_slave_0: entered allmulticast mode [ 32.738851][ T6560] bridge_slave_0: entered promiscuous mode [ 32.739544][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.739558][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.739716][ T6560] bridge_slave_1: entered allmulticast mode [ 32.740111][ T6560] bridge_slave_1: entered promiscuous mode [ 32.746143][ T6553] team0: Port device team_slave_0 added [ 32.753949][ T6552] team0: Port device team_slave_0 added [ 32.764322][ T6553] team0: Port device team_slave_1 added [ 32.770326][ T6552] team0: Port device team_slave_1 added [ 32.775395][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.779780][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.780660][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.787834][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.788875][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.792844][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.796421][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.797802][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.799182][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.804921][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.810961][ T6560] team0: Port device team_slave_0 added [ 32.811207][ T6563] chnl_net:caif_netlink_parms(): no params data found [ 32.816303][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.817316][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.817338][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.818445][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.818454][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.818469][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.833026][ T6560] team0: Port device team_slave_1 added [ 32.848263][ T6552] hsr_slave_0: entered promiscuous mode [ 32.849631][ T6552] hsr_slave_1: entered promiscuous mode [ 32.857722][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.858852][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.862733][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.872220][ T6551] team0: Port device team_slave_0 added [ 32.872983][ T6551] team0: Port device team_slave_1 added [ 32.876224][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.876246][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.876414][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.889558][ T6553] hsr_slave_0: entered promiscuous mode [ 32.889859][ T6553] hsr_slave_1: entered promiscuous mode [ 32.890030][ T6553] debugfs: 'hsr0' already exists in 'hsr' [ 32.890067][ T6553] Cannot create hsr debugfs directory [ 32.903806][ T6560] hsr_slave_0: entered promiscuous mode [ 32.905177][ T6560] hsr_slave_1: entered promiscuous mode [ 32.906300][ T6560] debugfs: 'hsr0' already exists in 'hsr' [ 32.907286][ T6560] Cannot create hsr debugfs directory [ 32.918827][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.918852][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.918868][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.919765][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.919774][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.919782][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.953506][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.953595][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.953656][ T6563] bridge_slave_0: entered allmulticast mode [ 32.954063][ T6563] bridge_slave_0: entered promiscuous mode [ 32.954744][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.954762][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.954806][ T6563] bridge_slave_1: entered allmulticast mode [ 32.955247][ T6563] bridge_slave_1: entered promiscuous mode [ 32.958625][ T6551] hsr_slave_0: entered promiscuous mode [ 32.958935][ T6551] hsr_slave_1: entered promiscuous mode [ 32.959855][ T6551] debugfs: 'hsr0' already exists in 'hsr' [ 32.959869][ T6551] Cannot create hsr debugfs directory [ 33.003198][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.004073][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.020283][ T6563] team0: Port device team_slave_0 added [ 33.030569][ T6563] team0: Port device team_slave_1 added [ 33.051805][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.053049][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.057267][ T6563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.069782][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.070929][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.074830][ T6563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.109254][ T6563] hsr_slave_0: entered promiscuous mode [ 33.110615][ T6563] hsr_slave_1: entered promiscuous mode [ 33.111946][ T6563] debugfs: 'hsr0' already exists in 'hsr' [ 33.112885][ T6563] Cannot create hsr debugfs directory [ 33.131777][ T6553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.135694][ T6553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.146143][ T6553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.148839][ T6553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.177764][ T6552] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.180439][ T6552] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.187732][ T6552] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.189946][ T6552] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.192934][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.192993][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.193166][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.193195][ T6553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.209497][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.209541][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.209604][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.209625][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.214943][ T6551] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.225062][ T6551] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.228591][ T6551] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.232399][ T6551] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.261431][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.272999][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.274364][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.275756][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.279677][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.291282][ T6560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.292536][ T6560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.295380][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.300291][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.300341][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.312604][ T6560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.315034][ T6560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.319094][ T6563] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.321466][ T6563] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.324017][ T6563] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.331765][ T6563] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.334526][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.334562][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.342259][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.359033][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.362376][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.362413][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.378321][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.378364][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.385760][ T6553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.387889][ T6553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.403209][ T6552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.403239][ T6552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.446127][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.453876][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.473806][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.476308][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.482233][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.488683][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.488723][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.494305][ T6563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.495256][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.495280][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.498228][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.512639][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.512679][ T708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.513288][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.513304][ T708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.520947][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.539132][ T6552] veth0_vlan: entered promiscuous mode [ 33.543513][ T687] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.543565][ T687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.544636][ T687] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.544655][ T687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.551747][ T6563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.551764][ T6563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.563885][ T6560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.565843][ T6560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.571998][ T6552] veth1_vlan: entered promiscuous mode [ 33.584818][ T6553] veth0_vlan: entered promiscuous mode [ 33.586398][ T6553] veth1_vlan: entered promiscuous mode [ 33.615209][ T6553] veth0_macvtap: entered promiscuous mode [ 33.616192][ T6553] veth1_macvtap: entered promiscuous mode [ 33.628814][ T6563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.652146][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.658657][ T6552] veth0_macvtap: entered promiscuous mode [ 33.669809][ T6551] veth0_vlan: entered promiscuous mode [ 33.672445][ T6552] veth1_macvtap: entered promiscuous mode [ 33.679006][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.680024][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.695720][ T6551] veth1_vlan: entered promiscuous mode [ 33.699738][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.699933][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.699955][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.699973][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.709684][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.730720][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.732200][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.734417][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.736067][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.749641][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.755373][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.755414][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.761379][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.765407][ T6551] veth0_macvtap: entered promiscuous mode [ 33.785257][ T6551] veth1_macvtap: entered promiscuous mode [ 33.802914][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.802945][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.805537][ T6560] veth0_vlan: entered promiscuous mode [ 33.821574][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.823178][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.824025][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.824037][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.833952][ T6560] veth1_vlan: entered promiscuous mode [ 33.844768][ T6563] veth0_vlan: entered promiscuous mode [ 33.853583][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.853645][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.853670][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.853690][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.863580][ T6553] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.868421][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.868451][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.878704][ T6560] veth0_macvtap: entered promiscuous mode [ 33.897530][ T6563] veth1_vlan: entered promiscuous mode [ 33.901193][ T6665] tipc: Started in network mode [ 33.902257][ T6665] tipc: Node identity d6c7223b4fc2, cluster identity 4711 [ 33.903573][ T6665] tipc: Enabled bearer , priority 0 [ 33.905670][ T6665] syzkaller0: entered promiscuous mode [ 33.907785][ T6665] syzkaller0: entered allmulticast mode [ 33.913455][ T6560] veth1_macvtap: entered promiscuous mode [ 33.941699][ T6563] veth0_macvtap: entered promiscuous mode [ 33.942708][ T6563] veth1_macvtap: entered promiscuous mode [ 33.945562][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.954180][ T6665] tipc: Resetting bearer [ 33.958944][ T6664] tipc: Resetting bearer [ 33.961993][ T6664] tipc: Disabling bearer [ 33.969720][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.974412][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.974870][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.979696][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.982290][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.996260][ T6669] Zero length message leads to an empty skb [ 33.998901][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.998934][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.004682][ T687] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.004801][ T687] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.004824][ T687] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.004844][ T687] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.015465][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.015525][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.015550][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.015565][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.115058][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.115099][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.142583][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.142608][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.145330][ T708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.145357][ T708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.162537][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.162564][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.193253][ T6685] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 34.199419][ T6683] tipc: Enabled bearer , priority 0 [ 34.202042][ T6683] tipc: Resetting bearer [ 34.207721][ T6686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'. [ 34.207761][ T6686] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 34.216001][ T6682] tipc: Disabling bearer [ 34.301013][ T6701] tipc: Started in network mode [ 34.301054][ T6701] tipc: Node identity 06e48d08cb26, cluster identity 4711 [ 34.301314][ T6701] tipc: Enabled bearer , priority 0 [ 34.303087][ T6688] tipc: Resetting bearer [ 34.325313][ T6688] tipc: Disabling bearer [ 34.441394][ T6722] netlink: 108 bytes leftover after parsing attributes in process `syz.4.26'. [ 34.463093][ T6724] tipc: Started in network mode [ 34.463993][ T6724] tipc: Node identity 2697c9596187, cluster identity 4711 [ 34.465713][ T6724] tipc: Enabled bearer , priority 0 [ 34.479980][ T6724] tipc: Resetting bearer [ 34.488423][ T6567] Bluetooth: hci4: command tx timeout [ 34.488565][ T6567] Bluetooth: hci3: command tx timeout [ 34.488620][ T6567] Bluetooth: hci2: command tx timeout [ 34.488671][ T6567] Bluetooth: hci0: command tx timeout [ 34.488800][ T52] Bluetooth: hci1: command tx timeout [ 34.500770][ T6723] tipc: Disabling bearer [ 34.620723][ T6746] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 34.634703][ T6750] netlink: 108 bytes leftover after parsing attributes in process `syz.0.41'. [ 34.733111][ T6764] tipc: Enabled bearer , priority 0 [ 34.736399][ T6764] tipc: Resetting bearer [ 34.751719][ T6763] tipc: Disabling bearer [ 34.791793][ T6775] netlink: 108 bytes leftover after parsing attributes in process `syz.4.53'. [ 34.828601][ T6780] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 34.957641][ T6796] syzkaller1: entered promiscuous mode [ 34.958719][ T6796] syzkaller1: entered allmulticast mode [ 34.992829][ T6802] syzkaller0: entered promiscuous mode [ 34.993898][ T6802] syzkaller0: entered allmulticast mode [ 35.023444][ T6808] netlink: 108 bytes leftover after parsing attributes in process `syz.3.68'. [ 35.082687][ T6813] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 35.178297][ T6663] IPVS: starting estimator thread 0... [ 35.183462][ T6826] tap0: tun_chr_ioctl cmd 1074025675 [ 35.184798][ T6826] tap0: persist disabled [ 35.206493][ T6836] netlink: 108 bytes leftover after parsing attributes in process `syz.2.80'. [ 35.267006][ T6832] IPVS: using max 47 ests per chain, 112800 per kthread [ 35.288422][ T6844] syzkaller0: entered promiscuous mode [ 35.288459][ T6844] syzkaller0: entered allmulticast mode [ 35.359779][ T6855] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 35.361442][ T6852] IPVS: stopping backup sync thread 6855 ... [ 35.373757][ T6624] IPVS: starting estimator thread 0... [ 35.409573][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 35.413231][ T6850] macsec1: entered promiscuous mode [ 35.414134][ T6850] syzkaller0: entered promiscuous mode [ 35.419225][ T6850] syzkaller0: left promiscuous mode [ 35.455687][ T6868] Bluetooth: MGMT ver 1.23 [ 35.456842][ T6856] IPVS: using max 59 ests per chain, 141600 per kthread [ 35.668798][ T6887] syzkaller0: entered promiscuous mode [ 35.669843][ T6887] syzkaller0: entered allmulticast mode [ 35.793362][ T6892] Bluetooth: MGMT ver 1.23 [ 35.910402][ T6907] syzkaller0: entered promiscuous mode [ 35.911529][ T6907] syzkaller0: entered allmulticast mode [ 35.928876][ T6910] netlink: 108 bytes leftover after parsing attributes in process `syz.2.106'. [ 36.155111][ T6624] IPVS: starting estimator thread 0... [ 36.158266][ T6925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.113'. [ 36.162908][ T6914] macsec1: entered promiscuous mode [ 36.164319][ T6914] syzkaller0: entered promiscuous mode [ 36.170408][ T6914] syzkaller0: left promiscuous mode [ 36.237660][ T6926] IPVS: using max 49 ests per chain, 117600 per kthread [ 36.322950][ T6609] IPVS: starting estimator thread 0... [ 36.402393][ T6962] IPVS: stopping backup sync thread 6963 ... [ 36.410142][ T6949] IPVS: using max 69 ests per chain, 165600 per kthread [ 36.566825][ T6562] Bluetooth: hci0: command tx timeout [ 36.566982][ T6562] Bluetooth: hci2: command tx timeout [ 36.567008][ T6562] Bluetooth: hci3: command tx timeout [ 36.567026][ T6562] Bluetooth: hci4: command tx timeout [ 36.567429][ T52] Bluetooth: hci1: command tx timeout [ 36.621302][ T6993] netlink: 'syz.2.145': attribute type 4 has an invalid length. [ 36.967821][ T7048] syzkaller0: entered promiscuous mode [ 36.967851][ T7048] syzkaller0: entered allmulticast mode [ 37.185447][ T7073] syzkaller0: entered promiscuous mode [ 37.186432][ T7073] syzkaller0: entered allmulticast mode [ 37.395749][ T7107] IPVS: stopping backup sync thread 7112 ... [ 37.405905][ T7110] syzkaller0: entered promiscuous mode [ 37.405942][ T7110] syzkaller0: entered allmulticast mode [ 37.568468][ T7142] macsec1: entered promiscuous mode [ 37.568867][ T7142] syzkaller0: entered promiscuous mode [ 37.570187][ T7142] batman_adv: batadv0: Adding interface: macsec1 [ 37.570197][ T7142] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.570211][ T7142] batman_adv: batadv0: Interface activated: macsec1 [ 37.590890][ T7140] batman_adv: batadv0: Interface deactivated: macsec1 [ 37.591177][ T7140] syzkaller0 (unregistering): left promiscuous mode [ 37.600699][ T7140] batman_adv: batadv0: Removing interface: macsec1 [ 37.615438][ T7149] syzkaller0: entered promiscuous mode [ 37.616471][ T7149] syzkaller0: entered allmulticast mode [ 37.683788][ T7157] syzkaller0: entered promiscuous mode [ 37.683820][ T7157] syzkaller0: entered allmulticast mode [ 37.865906][ T7182] macsec1: entered promiscuous mode [ 37.865938][ T7182] syzkaller0: entered promiscuous mode [ 37.872418][ T7182] syzkaller0: left promiscuous mode [ 37.895575][ T7190] syzkaller0: entered promiscuous mode [ 37.897893][ T7190] syzkaller0: entered allmulticast mode [ 37.913002][ T7192] syzkaller0: entered promiscuous mode [ 37.913028][ T7192] syzkaller0: entered allmulticast mode [ 38.124300][ T7218] syzkaller0: entered promiscuous mode [ 38.124330][ T7218] syzkaller0: entered allmulticast mode [ 38.143527][ T7220] macsec1: entered promiscuous mode [ 38.143555][ T7220] syzkaller0: entered promiscuous mode [ 38.145647][ T7220] syzkaller0: left promiscuous mode [ 38.153567][ T7222] syzkaller0: entered promiscuous mode [ 38.154522][ T7222] syzkaller0: entered allmulticast mode [ 38.340624][ T7226] [ 38.341049][ T7226] ====================================================== [ 38.342019][ T7226] WARNING: possible circular locking dependency detected [ 38.342977][ T7226] 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 Not tainted [ 38.343912][ T7226] ------------------------------------------------------ [ 38.344877][ T7226] syz.4.255/7226 is trying to acquire lock: [ 38.345697][ T7226] ffff0000c18a3988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x34/0x5c [ 38.347062][ T7226] [ 38.347062][ T7226] but task is already holding lock: [ 38.348159][ T7226] ffff0000cb223b58 (&q->q_usage_counter(io)#33){++++}-{0:0}, at: nbd_start_device+0x158/0xa48 [ 38.349697][ T7226] [ 38.349697][ T7226] which lock already depends on the new lock. [ 38.349697][ T7226] [ 38.351195][ T7226] [ 38.351195][ T7226] the existing dependency chain (in reverse order) is: [ 38.352470][ T7226] [ 38.352470][ T7226] -> #2 (&q->q_usage_counter(io)#33){++++}-{0:0}: [ 38.353853][ T7226] blk_alloc_queue+0x48c/0x54c [ 38.354724][ T7226] __blk_mq_alloc_disk+0x124/0x304 [ 38.355639][ T7226] nbd_dev_add+0x398/0x820 [ 38.356423][ T7226] nbd_init+0x15c/0x174 [ 38.357219][ T7226] do_one_initcall+0x250/0x990 [ 38.358022][ T7226] do_initcall_level+0x128/0x1c4 [ 38.358905][ T7226] do_initcalls+0x70/0xd0 [ 38.359635][ T7226] do_basic_setup+0x78/0x8c [ 38.360463][ T7226] kernel_init_freeable+0x268/0x39c [ 38.361360][ T7226] kernel_init+0x24/0x1dc [ 38.362104][ T7226] ret_from_fork+0x10/0x20 [ 38.362887][ T7226] [ 38.362887][ T7226] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 38.364125][ T7226] fs_reclaim_acquire+0x8c/0x118 [ 38.365035][ T7226] kmem_cache_alloc_lru_noprof+0x5c/0x3ec [ 38.366030][ T7226] alloc_inode+0xb4/0x19c [ 38.366761][ T7226] iget_locked+0x168/0x7b0 [ 38.367541][ T7226] kernfs_get_inode+0x58/0x66c [ 38.368372][ T7226] kernfs_get_tree+0x494/0x73c [ 38.369211][ T7226] sysfs_get_tree+0x48/0x120 [ 38.370025][ T7226] vfs_get_tree+0x90/0x28c [ 38.370785][ T7226] do_new_mount+0x278/0x7f4 [ 38.371555][ T7226] path_mount+0x5b4/0xde0 [ 38.372333][ T7226] __arm64_sys_mount+0x3e8/0x468 [ 38.373188][ T7226] invoke_syscall+0x98/0x2b8 [ 38.374049][ T7226] el0_svc_common+0x130/0x23c [ 38.374834][ T7226] do_el0_svc+0x48/0x58 [ 38.375544][ T7226] el0_svc+0x58/0x180 [ 38.376333][ T7226] el0t_64_sync_handler+0x84/0x12c [ 38.377162][ T7226] el0t_64_sync+0x198/0x19c [ 38.377912][ T7226] [ 38.377912][ T7226] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 38.379144][ T7226] __lock_acquire+0x1774/0x30a4 [ 38.379958][ T7226] lock_acquire+0x14c/0x2e0 [ 38.380693][ T7226] down_write+0x50/0xc0 [ 38.381363][ T7226] kernfs_remove+0x34/0x5c [ 38.382157][ T7226] sysfs_remove_dir+0xa8/0xec [ 38.382893][ T7226] __kobject_del+0xe8/0x2d4 [ 38.383691][ T7226] kobject_del+0x48/0x68 [ 38.384481][ T7226] elevator_change_done+0xd8/0x554 [ 38.385283][ T7226] elevator_change+0x2b8/0x3cc [ 38.386125][ T7226] elevator_set_none+0x48/0xac [ 38.387007][ T7226] blk_mq_update_nr_hw_queues+0x610/0x149c [ 38.387970][ T7226] nbd_start_device+0x158/0xa48 [ 38.388802][ T7226] nbd_genl_connect+0xf88/0x158c [ 38.389618][ T7226] genl_family_rcv_msg_doit+0x1d8/0x2bc [ 38.390504][ T7226] genl_rcv_msg+0x450/0x624 [ 38.391263][ T7226] netlink_rcv_skb+0x220/0x3fc [ 38.392039][ T7226] genl_rcv+0x38/0x50 [ 38.392734][ T7226] netlink_unicast+0x694/0x8c4 [ 38.393595][ T7226] netlink_sendmsg+0x648/0x930 [ 38.394402][ T7226] ____sys_sendmsg+0x490/0x7b8 [ 38.395229][ T7226] ___sys_sendmsg+0x204/0x278 [ 38.396029][ T7226] __arm64_sys_sendmsg+0x184/0x238 [ 38.396912][ T7226] invoke_syscall+0x98/0x2b8 [ 38.397675][ T7226] el0_svc_common+0x130/0x23c [ 38.398460][ T7226] do_el0_svc+0x48/0x58 [ 38.399129][ T7226] el0_svc+0x58/0x180 [ 38.399179][ T7250] syzkaller0: entered promiscuous mode [ 38.399206][ T7250] syzkaller0: entered allmulticast mode [ 38.401396][ T7226] el0t_64_sync_handler+0x84/0x12c [ 38.402276][ T7226] el0t_64_sync+0x198/0x19c [ 38.403076][ T7226] [ 38.403076][ T7226] other info that might help us debug this: [ 38.403076][ T7226] [ 38.404684][ T7226] Chain exists of: [ 38.404684][ T7226] &root->kernfs_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#33 [ 38.404684][ T7226] [ 38.406836][ T7226] Possible unsafe locking scenario: [ 38.406836][ T7226] [ 38.407927][ T7226] CPU0 CPU1 [ 38.408722][ T7226] ---- ---- [ 38.409613][ T7226] lock(&q->q_usage_counter(io)#33); [ 38.410460][ T7226] lock(fs_reclaim); [ 38.411507][ T7226] lock(&q->q_usage_counter(io)#33); [ 38.412709][ T7226] lock(&root->kernfs_rwsem); [ 38.413417][ T7226] [ 38.413417][ T7226] *** DEADLOCK *** [ 38.413417][ T7226] [ 38.414602][ T7226] 6 locks held by syz.4.255/7226: [ 38.415280][ T7226] #0: ffff800092abd030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50 [ 38.416472][ T7226] #1: ffff800092abce48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xf4/0x624 [ 38.417719][ T7226] #2: ffff0000cb2ea988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x98/0x149c [ 38.419418][ T7226] #3: ffff0000cb2ea8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa4/0x149c [ 38.420983][ T7226] #4: ffff0000cb223b58 (&q->q_usage_counter(io)#33){++++}-{0:0}, at: nbd_start_device+0x158/0xa48 [ 38.422548][ T7226] #5: ffff0000cb223b90 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: nbd_start_device+0x158/0xa48 [ 38.424244][ T7226] [ 38.424244][ T7226] stack backtrace: [ 38.425058][ T7226] CPU: 1 UID: 0 PID: 7226 Comm: syz.4.255 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 38.426774][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 38.428306][ T7226] Call trace: [ 38.428850][ T7226] show_stack+0x2c/0x3c (C) [ 38.429554][ T7226] __dump_stack+0x30/0x40 [ 38.430165][ T7226] dump_stack_lvl+0xd8/0x12c [ 38.430855][ T7226] dump_stack+0x1c/0x28 [ 38.431496][ T7226] print_circular_bug+0x324/0x32c [ 38.432231][ T7226] check_noncircular+0x154/0x174 [ 38.433024][ T7226] __lock_acquire+0x1774/0x30a4 [ 38.433735][ T7226] lock_acquire+0x14c/0x2e0 [ 38.434378][ T7226] down_write+0x50/0xc0 [ 38.435054][ T7226] kernfs_remove+0x34/0x5c [ 38.435826][ T7226] sysfs_remove_dir+0xa8/0xec [ 38.436627][ T7226] __kobject_del+0xe8/0x2d4 [ 38.437373][ T7226] kobject_del+0x48/0x68 [ 38.438070][ T7226] elevator_change_done+0xd8/0x554 [ 38.438902][ T7226] elevator_change+0x2b8/0x3cc [ 38.439615][ T7226] elevator_set_none+0x48/0xac [ 38.440379][ T7226] blk_mq_update_nr_hw_queues+0x610/0x149c [ 38.441290][ T7226] nbd_start_device+0x158/0xa48 [ 38.442043][ T7226] nbd_genl_connect+0xf88/0x158c [ 38.442840][ T7226] genl_family_rcv_msg_doit+0x1d8/0x2bc [ 38.443653][ T7226] genl_rcv_msg+0x450/0x624 [ 38.444345][ T7226] netlink_rcv_skb+0x220/0x3fc [ 38.445013][ T7226] genl_rcv+0x38/0x50 [ 38.445611][ T7226] netlink_unicast+0x694/0x8c4 [ 38.446308][ T7226] netlink_sendmsg+0x648/0x930 [ 38.447089][ T7226] ____sys_sendmsg+0x490/0x7b8 [ 38.447858][ T7226] ___sys_sendmsg+0x204/0x278 [ 38.448587][ T7226] __arm64_sys_sendmsg+0x184/0x238 [ 38.449388][ T7226] invoke_syscall+0x98/0x2b8 [ 38.450089][ T7226] el0_svc_common+0x130/0x23c [ 38.450820][ T7226] do_el0_svc+0x48/0x58 [ 38.451473][ T7226] el0_svc+0x58/0x180 [ 38.452136][ T7226] el0t_64_sync_handler+0x84/0x12c [ 38.452927][ T7226] el0t_64_sync+0x198/0x19c [ 38.455702][ T7251] syzkaller0: entered promiscuous mode [ 38.455730][ T7251] syzkaller0: entered allmulticast mode [ 38.498168][ T7226] nbd0: detected capacity change from 0 to 127 [ 38.501787][ T6567] block nbd0: Receive control failed (result -32) [ 38.503046][ T52] block nbd0: Receive control failed (result -32) [ 38.503715][ T6559] block nbd0: Send control failed (result -32) [ 38.503727][ T6559] block nbd0: Request send failed, requeueing [ 38.503818][ T6559] block nbd0: Dead connection, failed to find a fallback [ 38.503825][ T6559] block nbd0: shutting down sockets [ 38.503832][ T6559] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.503842][ T6559] Buffer I/O error on dev nbd0, logical block 1, async page read [ 38.503872][ T6559] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.503879][ T6559] Buffer I/O error on dev nbd0, logical block 2, async page read [ 38.503902][ T6559] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.503909][ T6559] Buffer I/O error on dev nbd0, logical block 3, async page read [ 38.503931][ T56] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.503938][ T56] Buffer I/O error on dev nbd0, logical block 0, async page read [ 38.507347][ T6559] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.507372][ T6559] Buffer I/O error on dev nbd0, logical block 0, async page read [ 38.507940][ T6559] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.507955][ T6559] Buffer I/O error on dev nbd0, logical block 1, async page read [ 38.507984][ T6559] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.507995][ T6559] Buffer I/O error on dev nbd0, logical block 2, async page read [ 38.508022][ T6559] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.508031][ T6559] Buffer I/O error on dev nbd0, logical block 3, async page read [ 38.508060][ T6559] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.508067][ T6559] Buffer I/O error on dev nbd0, logical block 0, async page read [ 38.508092][ T6559] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.508099][ T6559] Buffer I/O error on dev nbd0, logical block 1, async page read [ 38.508537][ T6559] ldm_validate_partition_table(): Disk read failed. [ 38.508832][ T6559] Dev nbd0: unable to read RDB block 0 [ 38.509133][ T6559] nbd0: unable to read partition table [ 38.529244][ T6559] ldm_validate_partition_table(): Disk read failed. [ 38.531650][ T6559] Dev nbd0: unable to read RDB block 0 [ 38.531982][ T6559] nbd0: unable to read partition table [ 38.647158][ T6567] Bluetooth: hci4: command tx timeout [ 38.647953][ T52] Bluetooth: hci1: command tx timeout [ 38.647974][ T52] Bluetooth: hci3: command tx timeout [ 38.647986][ T52] Bluetooth: hci2: command tx timeout [ 38.647996][ T52] Bluetooth: hci0: command tx timeout [ 40.726592][ T6562] Bluetooth: hci4: command tx timeout [ 40.726601][ T6567] Bluetooth: hci0: command tx timeout [ 40.726624][ T6567] Bluetooth: hci2: command tx timeout [ 40.726636][ T6567] Bluetooth: hci3: command tx timeout [ 40.726647][ T6567] Bluetooth: hci1: command tx timeout