last executing test programs: 3.198950786s ago: executing program 2 (id=801): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x200000000000000}, {}, 0x70bd28, 0x3500, 0xa, 0x4, 0x0, 0x22}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @offload={0xc}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.055759999s ago: executing program 2 (id=804): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x53}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) socket(0x38, 0x3, 0x5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x29, 0x0, &(0x7f0000000100)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x90) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x24000000) 2.96161808s ago: executing program 2 (id=805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40080}, 0xa, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/316], 0x13c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}]}, 0x3c}, 0x1, 0x620b}, 0x0) 2.816137347s ago: executing program 2 (id=809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}}, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x0, 0x70bd2b, 0x4d8d, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.041178298s ago: executing program 0 (id=820): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (rerun: 32) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) r4 = getpid() (async) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) (async) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000003c0)=r4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r6, 0x400, 0x3, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xe70}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008041}, 0x48004) (async) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0080}, 0x804) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r8, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040044}, 0x4000) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r0) (async, rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xfbf3095fe95755e4}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x890}, 0x4004004) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000940), r0) (async) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000980), 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r10, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000) (async) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000b00)) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44048}, 0x24000040) (async, rerun: 64) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c80), r0) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r11, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000e00)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000e40)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000e80)=0x0) (rerun: 64) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2020000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, r9, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008801}, 0x2400c804) 2.035994607s ago: executing program 3 (id=821): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) socket(0x2a, 0x2, 0x0) (async) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) connect$can_bcm(r2, &(0x7f0000000380)={0x1d, r5}, 0x10) (async) connect$can_bcm(r2, &(0x7f0000000380)={0x1d, r5}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x29, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x29, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x7800, 0x2, 0x3, {{0x20, 0x4, 0x1, 0x3c, 0x80, 0x66, 0x0, 0x2, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}, {[@end, @timestamp_addr={0x44, 0x24, 0x64, 0x1, 0xc, [{@broadcast, 0x2}, {@broadcast, 0x5}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010100, 0x3}]}, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x24, 0x30, 0x1, 0x0, [{@multicast2, 0x7}, {@multicast1, 0x8}, {@multicast2, 0xe}, {@rand_addr=0x64010102, 0x53b}]}, @ssrr={0x89, 0xb, 0x3b, [@rand_addr=0x64010100, @private=0xa010101]}, @lsrr={0x83, 0x13, 0xe6, [@multicast2, @remote, @rand_addr=0x64010101, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000100)={'tunl0\x00', r6, 0x700, 0x10, 0x8, 0x1, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x64, 0x0, 0x81, 0x2f, 0x0, @remote, @empty, {[@end]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.836816613s ago: executing program 0 (id=822): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x1, 0x5) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r10 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c000000002e000000000000", @ANYRES32=0x0, @ANYBLOB="c1900000a1540000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x24008810) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x7c}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1.629585375s ago: executing program 2 (id=825): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x14c}}, 0x0) listen(r1, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001200add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) close(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000000f000000018112000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018290000", @ANYRES32=0x1, @ANYBLOB="000000000a00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x4e, &(0x7f0000000400)=""/78, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x2, 0x1, 0x6}, {0x2, 0x5, 0xb, 0x5}, {0x3, 0x5, 0x10, 0x4}, {0x2, 0x2, 0x9, 0x7}, {0x4, 0x4, 0x8, 0x5}, {0x5, 0x1, 0xb, 0x6}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r7}, &(0x7f0000000300), &(0x7f0000000680)=r8}, 0x20) r9 = accept(r1, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, 0x0, &(0x7f00000002c0)=@tcp6=r9}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x7}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x30000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r11, 0x0, 0x0, 0x0) 1.524403873s ago: executing program 3 (id=826): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="03"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in=@private=0xa010102, 0x4e22, 0x40, 0x4e21, 0x7, 0xa, 0x0, 0x0, 0x33, r3, 0xee00}, {0x1, 0x1, 0x7fffffffffffffff, 0x9, 0x7fff, 0xa9e5a63, 0x1000, 0xa}, {0x7fff, 0x9, 0x5, 0x1}, 0x3, 0x2, 0x1, 0x1, 0x2, 0x1}, {{@in6=@private0, 0x4d2, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xf7, 0x10000, 0x0, 0x8}}, 0xe8) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x80, 0x3, 0x4, 0x2}, 0x210}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x38, 0x1, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) 1.276441182s ago: executing program 3 (id=829): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00030040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=r7], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r4, 0x1ff, 0x0, 0x6}) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7040, 0x0, r4, 0x10, '\x00', r7, r8, 0x3, 0x5, 0x4}, 0x50) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r11, 0x0, 0x6}, 0x18) r12 = socket(0x1e, 0x5, 0x0) listen(r12, 0x0) accept4$nfc_llcp(r12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="8fa7f0be5b23b4444a24d8772a28906fb4ffe7911dd56a37be5a9b0e886bc0ae0740d0d522d767adab3e3a29b977c2b1d447995d02d5e34872083c173254ec6fce2db0e7f96e0d63f429996eead696fbbaefab02dca9c2d041347f37ef689207b36522876e32cbd594ee3393a82bfa95539549d4e03867a9e0fc3faa353f56e79c27863db5fe81e7da9df4f243af4796057f9e7bca5449dc78095755c430b453b515b0c38d1d6cfd373ebe761c3920d2ca9289", @ANYRES16=r1, @ANYBLOB="bf172bbd7000fcdbdf251f00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x400c090) 1.208066139s ago: executing program 1 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00030040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 960.22876ms ago: executing program 4 (id=832): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xa9, "d13cc65ce16801d171125d336a3a4aea4f32286ebf0dea8e1f53d97f65207139bc73fb00ee1ba299deb803fbc05810c60cde9d950df1e2cfd19ee9f6c5cd81b0abb0ec94c87fc935d835d92e8ad5a0063d4b341b80f3fb6b88a470aca959970b129039615c8017bd5fa39c7dfa3e447447eee2665510efca54862c7b52f0fd6161b253b5b41c5a3556c85ada996d4eec9532fa5582550cf582eb62ca4711db2f9ff63ebeb8ce94d8cb"}, &(0x7f00000000c0)=0xb1) socketpair(0x10, 0x2, 0x7, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd27, 0x25dfdbff, {0x2, 0x14, 0x0, 0x80, 0x8, 0x0, 0x0, 0x4, 0x10001}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2b, 'devices'}, {0x2d, 'cpu'}, {0x2d, 'perf_event'}, {0x8f2c3558de1b8f10, 'rlimit'}, {0x2b, 'blkio'}, {0x2d, 'rdma'}, {0x2b, 'rdma'}, {0x2b, 'pids'}, {0x2d, 'net_cls'}, {0x2b, 'devices'}]}, 0x4d) pread64(r4, &(0x7f0000000300)=""/96, 0x60, 0xfffffffffffffffa) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000380)={'erspan0\x00', {0x2, 0x4e22, @local}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r6, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c54e21bd7dc9d252c5618069e8"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20018}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6d6423397648e45e}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r8, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f00000006c0)={{0x0, 0xfffffffffffffffe, 0x100000000, 0x8, 0x7fffffff, 0x5483, 0x9bb9, 0x8000, 0x5a, 0x3, 0x1000, 0x200, 0xffc, 0x8, 0xf5}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x28, r9, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x5d}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x78, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x80}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, 0x78}}, 0x48880) syz_genetlink_get_family_id$tipc2(&(0x7f0000001980), r3) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x20, r9, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x9}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8840) sendto$inet(r2, &(0x7f0000001ac0)="6cdf50c839f583762ccb7cd16217449206ba72982399cd9bd5569f591e198238eb2e8d516ca9a8b642669a2f9bf284fb0b4476b9fbab12a71ccb7f48e2242dcfc3a056b6a8a9abeb627f06dae9679353d2482fdbf1748a96f61e87cf617f8aeaa1e15bee19cb7800bcdbfa305a2b5710a78731b42ad58d04db69074696b8bd33be435c74c706cd5076780d96c61efd949db5236d24ebbc086e9c01748ab30d5cd978b3c3c2f4e8090a20911cca6693c1bce99e16773319ae", 0xb8, 0x44800, &(0x7f0000001b80)={0x2, 0x4e22, @broadcast}, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c00), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001c40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x2c, r11, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4841) write$tun(r3, &(0x7f0000001d40)={@void, @val={0x0, 0x4, 0x0, 0xa8, 0x7462, 0x8}, @x25={0x0, 0x8, 0xf, "84048e96ac903f745e9304a18dde54ca9957a4a26dd6e66c107c68bacb1dfaf2661316d49546611f7afec6f09099e4076b1a89088f699c72"}}, 0x45) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1800000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080d0}, 0x0) 867.962358ms ago: executing program 0 (id=833): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') ioctl$NS_GET_NSTYPE(r0, 0x8008b705, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000f40)="000000000000000000000000892f", 0xe}], 0x1}, 0x44000) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x5e) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) (async) syz_emit_ethernet(0x5e, &(0x7f0000000840)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) (async) r6 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r6, &(0x7f0000000200)="ef00dc03", 0x4, 0x4008000, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 866.05521ms ago: executing program 1 (id=834): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000003240)={0x1, 0x8, 0x10001, 0xc, 0x800}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x6, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1a, 0x63098bae, 0xa, 0xf41b, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) (async) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000000080)={'pimreg1\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x80, 0x700, 0xc, 0xff, {{0x1b, 0x4, 0x2, 0x8, 0x6c, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x34, 0x5, 0x1, 0x6, [{@loopback, 0x8}, {@loopback, 0x5}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast1, 0xff}, {@broadcast, 0x7ff}]}, @rr={0x7, 0x23, 0x50, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r8, 0x301, 0x70bd2b, 0x25dfdbfc, {{0x5}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x78}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x20040600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x22, 0x0, 0x0) (async) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r11, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="cb2dc9002b7a6a5faeb7f72521f6b29ef57b1f8405842e3f70862acc31504bdd1d48312ef73ae463c69b5bf6a7aac01e12738e34749cab033d634e6b4c528943d4ff6d99c9655905d7cfa7df57e51536a1458730f7614accb01dfd9686cfaddc04bfb47dadb9ec1a9c0e3ecd500af6c64255218af1811ae7afa349ff568d29f3359391d7551b2de3b6f243e900b28ce624324cf3c97d58983e114c7b5d0fd5da21740086590d4d6905f94d3fd1bd3d0f8bede4", 0xb3}], 0x1, &(0x7f0000000180)}}], 0x1, 0x40000c4) 648.577865ms ago: executing program 2 (id=835): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000011e00)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000480), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r5, 0x5, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r5, 0x48, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x40, @private2, 0xffff}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e24, 0x8, @remote, 0x6}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xd833, 0x200, 0x0, 0x7, r7}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000012480)={r8, 0x20, &(0x7f0000012440)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000124c0)=0x10) 647.925462ms ago: executing program 4 (id=836): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x2, 0x8, 0xa, @remote, @mcast1, 0x10, 0x40, 0x0, 0xc}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd5c8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f0000000300)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r8, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000100)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000180)='GPL\x00', 0x69, 0x5a, &(0x7f00000001c0)=""/90, 0x41100, 0x3, '\x00', r1, 0x17, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x0, 0x9, 0x8}, 0x10, 0x2409a, 0xffffffffffffffff, 0x1, &(0x7f0000000580)=[r3, 0xffffffffffffffff, r4, r5, r6, 0xffffffffffffffff, r7, r8], &(0x7f00000005c0)=[{0x5, 0x1, 0xf, 0xc}], 0x10, 0x200}, 0x94) 540.41875ms ago: executing program 0 (id=837): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x4}, {r3}, {r0, 0x2}, {r3, 0x2020}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={[0x2]}, 0x8) (async) ppoll(&(0x7f0000000040)=[{r2, 0x4}, {r3}, {r0, 0x2}, {r3, 0x2020}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={[0x2]}, 0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f, 0x0, 0x2}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_proto_private(r3, 0x89ec, &(0x7f00000000c0)="6078bef84473aa25e0ef4633432cc72a348e30079d580b3cc3e98f3b250ab4facbea119d80003d7bf797f0f12542ec618355d0e04f2cde5fbf7901d1d86fa17b5505b8e4f0835ead9171bcc0c9bdabe5c45a8cf443bdbb819677d747c8cc3a3b690000d3bd5a490eb6fbbb7d813a6a") (async) ioctl$sock_proto_private(r3, 0x89ec, &(0x7f00000000c0)="6078bef84473aa25e0ef4633432cc72a348e30079d580b3cc3e98f3b250ab4facbea119d80003d7bf797f0f12542ec618355d0e04f2cde5fbf7901d1d86fa17b5505b8e4f0835ead9171bcc0c9bdabe5c45a8cf443bdbb819677d747c8cc3a3b690000d3bd5a490eb6fbbb7d813a6a") 539.884516ms ago: executing program 1 (id=838): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8, 0x4}, {0xffff, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000001}) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) 456.852397ms ago: executing program 1 (id=839): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000880) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) 435.511903ms ago: executing program 4 (id=840): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000006380)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000029000000000000000001000000000000000000c204006cd694441390cb980000"], 0x28}}], 0xd5ad71a7e7af1179, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x2, 0x7, 0xfffffffffffffff9, 0x9, 0x8, 0x9}) 340.429428ms ago: executing program 0 (id=841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x100}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x8000) r3 = accept$unix(r2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000071400082abd7000ffdbdf2508000100000000000800010001000000050054000000000008000100010000000900020073797a32000000000900020073797a32007a61000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x85}, 0x8818) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x48}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 339.776023ms ago: executing program 3 (id=842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xcf}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000), 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 315.83376ms ago: executing program 1 (id=843): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x4a}, 0x28) 294.242452ms ago: executing program 4 (id=844): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) sendto$inet6(r0, &(0x7f0000000380)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37abcda1a297e0099c5ac0020c5b068030046d323456536016466fcb78dcaaf6c3efed495a46215be0000760636c035b1000000000000ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fb6e9aa241731ae9e0b39072", 0x91, 0x8000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 208.290162ms ago: executing program 3 (id=845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r4, 0x18dd9, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) r7 = socket$packet(0x11, 0x3, 0x300) recvfrom$l2tp6(r6, &(0x7f00000000c0)=""/119, 0x77, 0x10000, 0x0, 0xfffffffffffffe76) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="05020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="653e2c1b33aa13db999338910c0931d102a53e5e1d186c9a48d0b520805a5a4467ca26c29a5e945c69e587194bb63e7402ff04f4777f64b8593ea886120c114f1cca"], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) r9 = socket(0x2, 0x4, 0x7ff) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r9, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r10, 0x2, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000040)) 202.260287ms ago: executing program 1 (id=846): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="080000000000f49c7e6e6ee1bd11868f0a2c6036a1b3cb8781959f80dc0bc2b33de34096c8660cfc967823", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r2, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000180), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000000000000000000d02000000000051"], 0x0, 0x40}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r8 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getpeername(r9, 0x0, &(0x7f0000000000)) r10 = socket$rds(0x15, 0x5, 0x0) connect$rds(r10, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) getsockname$inet(r10, 0x0, &(0x7f0000000140)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r11) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x48, r14, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4000000000ffff}]}, 0x48}}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={0x40, r12, 0x205, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="0bf49244", 0xf40b}], 0x1, &(0x7f0000000f00)=ANY=[@ANYBLOB="80000000000000000000000007000000440a96418ecaca2e5e2b832395ffffffffac1414200a010100ac1414110a0101027f0000017f0000010a01010294040000443c09510a01010200007fff0a01010200000002ac1414aa00000002000000000000000400000000000000ffac1414aa00000000e00000010000046a000000140000000000000000000000010000000600000000000000110000000000000001000000010000000100000000000000110000000000000000000000010000006d000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="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"], 0x260}}], 0x1, 0x0) 192.000168ms ago: executing program 0 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "80"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private=0x400}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20048000) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "80"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private=0x400}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20048000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) (async) 177.183917ms ago: executing program 4 (id=848): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x4a}, 0x28) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x4, 0x0, &(0x7f0000000180)) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) 24.48445ms ago: executing program 4 (id=849): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'macsec0\x00', {}, 0x8000}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @local}, 0xc) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0x4}, 0x2b1}) 0s ago: executing program 3 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. [ 67.246802][ T5850] cgroup: Unknown subsys name 'net' [ 67.378473][ T5850] cgroup: Unknown subsys name 'cpuset' [ 67.387627][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.838314][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.311525][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.333233][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.340534][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.340940][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.348713][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.355830][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.362476][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.368845][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.379059][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.390484][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.393006][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.401540][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.412316][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.421546][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.435489][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.449737][ T5873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.511446][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.519657][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.519720][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.535503][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.539264][ T5880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.543949][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.550554][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.566232][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.573961][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.574045][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.590840][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.153498][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 72.270613][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 72.379102][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 72.460245][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 72.557396][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.565894][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.576021][ T5860] bridge_slave_0: entered allmulticast mode [ 72.583318][ T5860] bridge_slave_0: entered promiscuous mode [ 72.626083][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.633322][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.642654][ T5860] bridge_slave_1: entered allmulticast mode [ 72.651065][ T5860] bridge_slave_1: entered promiscuous mode [ 72.682634][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 72.738610][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.747293][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.755416][ T5861] bridge_slave_0: entered allmulticast mode [ 72.762848][ T5861] bridge_slave_0: entered promiscuous mode [ 72.817164][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.825144][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.832888][ T5861] bridge_slave_1: entered allmulticast mode [ 72.843012][ T5861] bridge_slave_1: entered promiscuous mode [ 72.858623][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.865978][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.873478][ T5874] bridge_slave_0: entered allmulticast mode [ 72.881786][ T5874] bridge_slave_0: entered promiscuous mode [ 72.892371][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.905821][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.961331][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.968922][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.976628][ T5874] bridge_slave_1: entered allmulticast mode [ 72.983818][ T5874] bridge_slave_1: entered promiscuous mode [ 73.017639][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.025262][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.032568][ T5871] bridge_slave_0: entered allmulticast mode [ 73.040006][ T5871] bridge_slave_0: entered promiscuous mode [ 73.090731][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.098493][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.106202][ T5871] bridge_slave_1: entered allmulticast mode [ 73.113337][ T5871] bridge_slave_1: entered promiscuous mode [ 73.123533][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.150327][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.163041][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.173763][ T5860] team0: Port device team_slave_0 added [ 73.182842][ T5860] team0: Port device team_slave_1 added [ 73.203911][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.290700][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.298116][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.305868][ T5862] bridge_slave_0: entered allmulticast mode [ 73.313389][ T5862] bridge_slave_0: entered promiscuous mode [ 73.350006][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.366632][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.378826][ T5861] team0: Port device team_slave_0 added [ 73.389259][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.398192][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.405891][ T5862] bridge_slave_1: entered allmulticast mode [ 73.412895][ T5862] bridge_slave_1: entered promiscuous mode [ 73.433498][ T5874] team0: Port device team_slave_0 added [ 73.443674][ T5874] team0: Port device team_slave_1 added [ 73.450939][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.458450][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.486969][ T5184] Bluetooth: hci0: command tx timeout [ 73.492893][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.518962][ T5861] team0: Port device team_slave_1 added [ 73.544615][ T5184] Bluetooth: hci1: command tx timeout [ 73.552754][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.560362][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.587328][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.624399][ T5184] Bluetooth: hci2: command tx timeout [ 73.624563][ T5867] Bluetooth: hci4: command tx timeout [ 73.630224][ T5880] Bluetooth: hci3: command tx timeout [ 73.643975][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.673958][ T5871] team0: Port device team_slave_0 added [ 73.694035][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.703963][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.711443][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.738727][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.751616][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.759434][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.787032][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.800718][ T5871] team0: Port device team_slave_1 added [ 73.821520][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.829181][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.856030][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.868735][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.875901][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.902597][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.978172][ T5862] team0: Port device team_slave_0 added [ 73.987939][ T5862] team0: Port device team_slave_1 added [ 74.019900][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.027329][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.053924][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.067403][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.074843][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.101512][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.153321][ T5860] hsr_slave_0: entered promiscuous mode [ 74.160069][ T5860] hsr_slave_1: entered promiscuous mode [ 74.215505][ T5874] hsr_slave_0: entered promiscuous mode [ 74.222236][ T5874] hsr_slave_1: entered promiscuous mode [ 74.229549][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 74.235399][ T5874] Cannot create hsr debugfs directory [ 74.275234][ T5861] hsr_slave_0: entered promiscuous mode [ 74.281800][ T5861] hsr_slave_1: entered promiscuous mode [ 74.288185][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 74.294128][ T5861] Cannot create hsr debugfs directory [ 74.301122][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.310517][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.337487][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.398897][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.406193][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.434855][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.489115][ T5871] hsr_slave_0: entered promiscuous mode [ 74.495837][ T5871] hsr_slave_1: entered promiscuous mode [ 74.501889][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 74.508418][ T5871] Cannot create hsr debugfs directory [ 74.704699][ T5862] hsr_slave_0: entered promiscuous mode [ 74.714680][ T5862] hsr_slave_1: entered promiscuous mode [ 74.720981][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 74.736091][ T5862] Cannot create hsr debugfs directory [ 75.078364][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.097336][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.137766][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.166600][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.232666][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.252943][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.273490][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.286568][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.373072][ T5874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.386532][ T5874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.412458][ T5874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.425523][ T5874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.537355][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.546643][ T5880] Bluetooth: hci0: command tx timeout [ 75.561455][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.597160][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.609394][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.625420][ T5880] Bluetooth: hci1: command tx timeout [ 75.705472][ T5184] Bluetooth: hci3: command tx timeout [ 75.705510][ T5867] Bluetooth: hci2: command tx timeout [ 75.711078][ T5880] Bluetooth: hci4: command tx timeout [ 75.741138][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.772792][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.780126][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.801655][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.824553][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.837178][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.844161][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.883791][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.891295][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.903684][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.911009][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.960494][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.995578][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.040249][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.047469][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.063676][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.089721][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.096896][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.117432][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.124826][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.170878][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.178636][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.281893][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.383603][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.513410][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.520884][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.556702][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.590628][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.597942][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.661925][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.698084][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.776704][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.783959][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.837261][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.848290][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.855552][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.948344][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.960556][ T5860] veth0_vlan: entered promiscuous mode [ 77.001679][ T5860] veth1_vlan: entered promiscuous mode [ 77.070262][ T5860] veth0_macvtap: entered promiscuous mode [ 77.119309][ T5860] veth1_macvtap: entered promiscuous mode [ 77.196123][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.208983][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.250881][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.298277][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.326903][ T5874] veth0_vlan: entered promiscuous mode [ 77.341008][ T1092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.393534][ T1092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.419304][ T5874] veth1_vlan: entered promiscuous mode [ 77.489403][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.616204][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.628338][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.636594][ T5880] Bluetooth: hci0: command tx timeout [ 77.700577][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.711427][ T5880] Bluetooth: hci1: command tx timeout [ 77.720647][ T5874] veth0_macvtap: entered promiscuous mode [ 77.730863][ T5874] veth1_macvtap: entered promiscuous mode [ 77.744041][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.762470][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.773913][ T5861] veth0_vlan: entered promiscuous mode [ 77.784577][ T5880] Bluetooth: hci4: command tx timeout [ 77.785708][ T5867] Bluetooth: hci3: command tx timeout [ 77.789994][ T5184] Bluetooth: hci2: command tx timeout [ 77.830992][ T5871] veth0_vlan: entered promiscuous mode [ 77.848810][ T5861] veth1_vlan: entered promiscuous mode [ 77.868066][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.883138][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.891764][ T5871] veth1_vlan: entered promiscuous mode [ 77.922425][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.998723][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.009856][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.039624][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.052014][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.112941][ T5862] veth0_vlan: entered promiscuous mode [ 78.132295][ T5861] veth0_macvtap: entered promiscuous mode [ 78.152052][ T5862] veth1_vlan: entered promiscuous mode [ 78.166050][ T5871] veth0_macvtap: entered promiscuous mode [ 78.176610][ T5861] veth1_macvtap: entered promiscuous mode [ 78.198697][ T5871] veth1_macvtap: entered promiscuous mode [ 78.313893][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.368626][ T5862] veth0_macvtap: entered promiscuous mode [ 78.387980][ T5991] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 78.398020][ T5991] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8'. [ 78.402885][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.418190][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.433551][ T5862] veth1_macvtap: entered promiscuous mode [ 78.462778][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.481060][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.497078][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.510088][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.546186][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.558093][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.625159][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.629017][ T5996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.634143][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.634202][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.636765][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.689647][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.692641][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.704733][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.711004][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.727432][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.789338][ T1114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.848704][ T1114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.854088][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 78.867584][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.881876][ T6001] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 78.909064][ T6001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.910886][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.053735][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.075265][ T6003] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.079845][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.130344][ T6005] bridge0: entered promiscuous mode [ 79.137527][ T6005] macvtap1: entered allmulticast mode [ 79.143022][ T6005] bridge0: entered allmulticast mode [ 79.152704][ T6005] bridge0: port 3(macvtap1) entered blocking state [ 79.160626][ T6005] bridge0: port 3(macvtap1) entered disabled state [ 79.170058][ T6005] bridge0: left allmulticast mode [ 79.176239][ T6005] bridge0: left promiscuous mode [ 79.210200][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.227862][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.377381][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.407799][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.436481][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.451635][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.515708][ T6013] dvmrp0: entered allmulticast mode [ 79.555819][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.584931][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.707094][ T5184] Bluetooth: hci0: command tx timeout [ 79.759344][ T6017] !: renamed from dummy0 (while UP) [ 79.786871][ T5184] Bluetooth: hci1: command tx timeout [ 79.833935][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.842601][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.864544][ T5184] Bluetooth: hci3: command tx timeout [ 79.866124][ T5867] Bluetooth: hci4: command tx timeout [ 79.870354][ T5184] Bluetooth: hci2: command tx timeout [ 81.272380][ T6076] warning: `syz.1.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.359771][ T6086] trusted_key: syz.4.32 sent an empty control message without MSG_MORE. [ 81.368601][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 81.406092][ T6086] netlink: 209616 bytes leftover after parsing attributes in process `syz.4.32'. [ 81.420792][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35'. [ 81.430845][ T6087] netlink: 32 bytes leftover after parsing attributes in process `syz.2.35'. [ 81.475366][ T6086] openvswitch: netlink: Port -9 exceeds max allowable 65535 [ 81.537392][ T6087] gretap1: entered promiscuous mode [ 81.544892][ T6087] gretap1: entered allmulticast mode [ 81.903638][ T6110] netlink: 'syz.3.39': attribute type 15 has an invalid length. [ 82.031291][ T6104] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 82.188850][ T6116] Illegal XDP return value 4264953722 on prog (id 10) dev N/A, expect packet loss! [ 82.197536][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43'. [ 82.285079][ T6120] veth0: entered promiscuous mode [ 82.623941][ T6133] netlink: 32 bytes leftover after parsing attributes in process `syz.0.46'. [ 82.761556][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.47'. [ 82.764554][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.47'. [ 83.462240][ T6160] tipc: Started in network mode [ 83.473200][ T6160] tipc: Node identity ac14140f, cluster identity 4711 [ 83.496644][ T6160] tipc: New replicast peer: 255.255.255.255 [ 83.515844][ T6160] tipc: Enabled bearer , priority 10 [ 83.527675][ T6155] syz.4.53 uses obsolete (PF_INET,SOCK_PACKET) [ 83.591128][ T6164] xt_l2tp: invalid flags combination: 8 [ 83.602669][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.793219][ T6179] ipvlan2: entered promiscuous mode [ 83.929643][ T6185] __nla_validate_parse: 2 callbacks suppressed [ 83.929662][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 84.230438][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 84.249432][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.357262][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.524177][ T6214] netlink: 64 bytes leftover after parsing attributes in process `syz.4.69'. [ 84.625532][ T848] tipc: Node number set to 2886997007 [ 84.659476][ T6212] syzkaller0: entered promiscuous mode [ 84.715161][ T6212] syzkaller0: entered allmulticast mode [ 84.812411][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 84.858922][ T6233] netlink: 92 bytes leftover after parsing attributes in process `syz.1.71'. [ 85.461239][ T6254] netlink: 'syz.4.77': attribute type 1 has an invalid length. [ 85.518800][ T6254] netlink: 'syz.4.77': attribute type 3 has an invalid length. [ 85.540760][ T6254] netlink: 'syz.4.77': attribute type 235 has an invalid length. [ 86.056915][ T6269] netlink: 'syz.3.80': attribute type 1 has an invalid length. [ 86.068002][ T6269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.80'. [ 86.130729][ T6270] netlink: 52 bytes leftover after parsing attributes in process `syz.3.80'. [ 86.740042][ T1214] cfg80211: failed to load regulatory.db [ 86.872038][ T6273] netlink: 44 bytes leftover after parsing attributes in process `syz.1.82'. [ 86.935611][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 86.968642][ T6278] nbd: must specify an index to disconnect [ 87.329607][ T6295] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 87.459165][ T6297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.87'. [ 87.760565][ T6318] netlink: 'syz.4.94': attribute type 29 has an invalid length. [ 87.787768][ T6318] netlink: 'syz.4.94': attribute type 29 has an invalid length. [ 87.883339][ T6326] Zero length message leads to an empty skb [ 88.266091][ T6344] sctp: failed to load transform for md5: -2 [ 88.398949][ T6358] delete_channel: no stack [ 88.909342][ T6388] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 89.023502][ T6392] __nla_validate_parse: 2 callbacks suppressed [ 89.023520][ T6392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.114'. [ 89.074002][ T6392] bond1: (slave bridge2): making interface the new active one [ 89.098268][ T6392] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 89.761198][ T6426] netlink: 'syz.0.127': attribute type 1 has an invalid length. [ 89.855615][ T6426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.934179][ T6427] bond2: (slave ip6erspan0): making interface the new active one [ 89.944169][ T6427] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 90.106643][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 90.254754][ T6458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.132'. [ 90.321726][ T6460] macsec1: entered promiscuous mode [ 90.330145][ T6460] macsec1: entered allmulticast mode [ 90.439924][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 90.454717][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 90.691470][ T6484] netlink: 'syz.4.138': attribute type 21 has an invalid length. [ 90.702897][ T6484] netlink: 132 bytes leftover after parsing attributes in process `syz.4.138'. [ 90.721900][ T6481] tipc: Started in network mode [ 90.721977][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 90.737277][ T6481] tipc: Node identity ceefaabf5793, cluster identity 4711 [ 90.746553][ T6481] tipc: Enabled bearer , priority 0 [ 90.757322][ T6481] syzkaller0: entered promiscuous mode [ 90.763509][ T6481] syzkaller0: entered allmulticast mode [ 90.806437][ T6481] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 90.897475][ T6481] tipc: Resetting bearer [ 90.913306][ T6492] sock: sock_timestamping_bind_phc: sock not bind to device [ 90.933532][ T6480] tipc: Resetting bearer [ 90.988876][ T6480] tipc: Disabling bearer [ 91.194838][ T6505] netlink: 300 bytes leftover after parsing attributes in process `syz.1.144'. [ 91.283039][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 91.342087][ T30] audit: type=1804 audit(1757552728.875:2): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.146" name="/newroot/24/cgroup.controllers" dev="tmpfs" ino=139 res=1 errno=0 [ 91.392837][ T6505] bond0: entered promiscuous mode [ 91.434442][ T6505] bond_slave_0: entered promiscuous mode [ 91.440503][ T6505] bond_slave_1: entered promiscuous mode [ 91.456288][ T30] audit: type=1800 audit(1757552728.875:3): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.146" name="cgroup.controllers" dev="tmpfs" ino=139 res=0 errno=0 [ 91.501322][ T6505] bond0: left promiscuous mode [ 91.511626][ T6505] bond_slave_0: left promiscuous mode [ 91.540277][ T6505] bond_slave_1: left promiscuous mode [ 91.642649][ T6523] tipc: Started in network mode [ 91.664667][ T6523] tipc: Node identity 262920b48a5b, cluster identity 4711 [ 91.693143][ T6523] tipc: Enabled bearer , priority 0 [ 91.829060][ T6540] netlink: 'syz.3.153': attribute type 2 has an invalid length. [ 91.840489][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 91.854077][ T6540] netlink: 'syz.3.153': attribute type 2 has an invalid length. [ 92.090872][ T6545] netlink: 'syz.2.150': attribute type 10 has an invalid length. [ 92.824538][ T5958] tipc: Node number set to 2893160628 [ 92.966781][ T6570] netlink: 'syz.4.156': attribute type 3 has an invalid length. [ 93.353013][ T6526] syzkaller0: entered promiscuous mode [ 93.358694][ T6526] syzkaller0: entered allmulticast mode [ 93.375590][ T6551] tipc: Resetting bearer [ 93.388974][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.398066][ T6545] bridge_slave_1: left allmulticast mode [ 93.403858][ T6545] bridge_slave_1: left promiscuous mode [ 93.412804][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.427712][ T6545] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 93.456850][ T6522] tipc: Resetting bearer [ 93.490897][ T6522] tipc: Disabling bearer [ 94.037941][ T6596] __nla_validate_parse: 3 callbacks suppressed [ 94.037958][ T6596] netlink: 360 bytes leftover after parsing attributes in process `syz.4.167'. [ 94.110873][ T6602] geneve2: entered promiscuous mode [ 94.119257][ T6602] geneve2: entered allmulticast mode [ 94.128246][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 94.281950][ T6602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.380322][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 94.395461][ T1092] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 94.470534][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.173'. [ 94.553848][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.172'. [ 94.643675][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 94.654978][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 94.691907][ T1092] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.692039][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 94.723094][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.744432][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 94.747289][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.766144][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.798634][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 95.147097][ T6655] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.625898][ T6677] netlink: 'syz.4.187': attribute type 2 has an invalid length. [ 95.635643][ T6677] netlink: 244 bytes leftover after parsing attributes in process `syz.4.187'. [ 95.674660][ T6683] netlink: 256 bytes leftover after parsing attributes in process `syz.3.188'. [ 95.741856][ T6691] tipc: Enabled bearer , priority 0 [ 95.751627][ T6691] syzkaller0: entered promiscuous mode [ 95.760956][ T6691] syzkaller0: entered allmulticast mode [ 95.780694][ T6691] tipc: Resetting bearer [ 95.844581][ T6689] tipc: Resetting bearer [ 95.911741][ T6689] tipc: Disabling bearer [ 95.985318][ T6602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.019272][ T6602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 96.183047][ T6602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.201656][ T6602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 96.300067][ T6602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.310701][ T6602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 96.341965][ T6720] syzkaller0: entered promiscuous mode [ 96.352482][ T6720] syzkaller0: entered allmulticast mode [ 96.397065][ T1092] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 96.405485][ T1092] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 96.421234][ T1092] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 96.430759][ T1092] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 96.449390][ T68] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 96.458754][ T68] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 96.476707][ T1092] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 96.488267][ T1092] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 96.590618][ T6723] syzkaller0: entered promiscuous mode [ 96.596335][ T6723] syzkaller0: entered allmulticast mode [ 96.659524][ T6724] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 96.876945][ T6727] netlink: 'syz.1.201': attribute type 21 has an invalid length. [ 96.891446][ T6727] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.905154][ T6727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.912611][ T6727] IPv6: NLM_F_CREATE should be set when creating new route [ 96.919960][ T6727] IPv6: NLM_F_CREATE should be set when creating new route [ 96.927338][ T6727] IPv6: NLM_F_CREATE should be set when creating new route [ 97.095683][ T6739] veth0_to_bond: entered allmulticast mode [ 97.855843][ T6780] netlink: 'syz.0.219': attribute type 8 has an invalid length. [ 97.907420][ T6784] netlink: 'syz.0.219': attribute type 8 has an invalid length. [ 98.362619][ T6806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.372730][ T6807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.382777][ T6806] netlink: 'syz.0.227': attribute type 6 has an invalid length. [ 98.392710][ T6806] netlink: 'syz.0.227': attribute type 5 has an invalid length. [ 98.568128][ T6813] tipc: Enabled bearer , priority 0 [ 98.579967][ T6813] syzkaller0: entered promiscuous mode [ 98.586017][ T6813] syzkaller0: entered allmulticast mode [ 98.612152][ T6813] tipc: Resetting bearer [ 98.629383][ T6811] tipc: Resetting bearer [ 98.675674][ T6811] tipc: Disabling bearer [ 98.872657][ T6824] netlink: 'syz.0.232': attribute type 9 has an invalid length. [ 98.980115][ T68] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.990863][ T6824] netlink: 'syz.0.232': attribute type 9 has an invalid length. [ 98.997654][ T68] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.009229][ T68] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.022421][ T68] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.093426][ T6829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.278626][ T6838] __nla_validate_parse: 14 callbacks suppressed [ 99.278644][ T6838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.238'. [ 99.553595][ T6853] nft_compat: unsupported protocol 0 [ 99.768858][ T6865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.247'. [ 99.776549][ T6867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.828559][ T6860] bond1 (unregistering): Released all slaves [ 99.836900][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 100.298901][ T30] audit: type=1107 audit(1757552737.845:4): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 100.401656][ T6897] netlink: 'syz.2.255': attribute type 2 has an invalid length. [ 100.574176][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 100.587888][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 100.605430][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 100.715964][ T6901] syzkaller1: entered promiscuous mode [ 100.721993][ T6901] syzkaller1: entered allmulticast mode [ 100.918109][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 100.976597][ T6920] netlink: 44 bytes leftover after parsing attributes in process `syz.1.259'. [ 101.028964][ T6928] netlink: zone id is out of range [ 101.035548][ T6928] netlink: zone id is out of range [ 101.053242][ T6928] netlink: del zone limit has 4 unknown bytes [ 101.208419][ T6934] netlink: 48 bytes leftover after parsing attributes in process `syz.3.263'. [ 101.262698][ T6935] netlink: 5240 bytes leftover after parsing attributes in process `syz.3.263'. [ 101.283774][ T6935] netlink: 'syz.3.263': attribute type 21 has an invalid length. [ 102.448944][ T6952] netlink: 'syz.1.266': attribute type 3 has an invalid length. [ 103.249362][ T6986] gretap0: entered promiscuous mode [ 103.342715][ T6991] tipc: Enabling of bearer rejected, failed to enable media [ 103.541512][ T6998] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 103.566335][ T6998] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 104.087706][ T7017] erspan0: entered promiscuous mode [ 104.111203][ T7017] gretap0: entered promiscuous mode [ 104.552490][ T7042] veth0: entered promiscuous mode [ 104.582532][ T7042] __nla_validate_parse: 13 callbacks suppressed [ 104.582550][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 104.624559][ T7048] tipc: Enabling of bearer rejected, failed to enable media [ 104.677781][ T7054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.296'. [ 104.914552][ T7064] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 104.922319][ T7064] netlink: 228 bytes leftover after parsing attributes in process `syz.0.298'. [ 104.959717][ T7064] pim6reg: entered allmulticast mode [ 105.059751][ T7072] xt_HMARK: spi-set and port-set can't be combined [ 105.171953][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 105.752587][ T24] IPVS: starting estimator thread 0... [ 105.847318][ T7106] IPVS: using max 33 ests per chain, 79200 per kthread [ 106.913688][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.311'. [ 106.927783][ T1214] IPVS: starting estimator thread 0... [ 106.934863][ T7112] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 107.013269][ T7121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.312'. [ 107.037880][ T7118] IPVS: using max 33 ests per chain, 79200 per kthread [ 107.168547][ T7132] netlink: 'syz.3.315': attribute type 29 has an invalid length. [ 107.200928][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 107.267408][ T7132] xt_time: unknown flags 0xf4 [ 107.431228][ T7145] netlink: 'syz.4.319': attribute type 5 has an invalid length. [ 107.661459][ T7165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.688463][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 107.730642][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 107.773303][ T7170] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 107.793441][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 107.813965][ T7170] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.349687][ T7199] tipc: Enabled bearer , priority 0 [ 108.409812][ T7199] tipc: Disabling bearer [ 108.531691][ T7211] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 108.570989][ T7215] netlink: 'syz.2.343': attribute type 21 has an invalid length. [ 108.596589][ T7215] netlink: 'syz.2.343': attribute type 6 has an invalid length. [ 108.691724][ T7215] syzkaller0: entered promiscuous mode [ 108.697496][ T7215] syzkaller0: entered allmulticast mode [ 109.090809][ T7234] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 109.689434][ T24] hid-generic 0005:0007:5505.0001: unknown main item tag 0x0 [ 109.726837][ T24] hid-generic 0005:0007:5505.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 109.838366][ T7248] fido_id[7248]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 110.756487][ T7273] __nla_validate_parse: 8 callbacks suppressed [ 110.756503][ T7273] netlink: 36 bytes leftover after parsing attributes in process `syz.0.356'. [ 110.764514][ T7266] netlink: 80 bytes leftover after parsing attributes in process `syz.3.354'. [ 110.812490][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 111.510276][ T7313] syz_tun: entered allmulticast mode [ 111.613515][ T7313] syz_tun: left allmulticast mode [ 111.670409][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 111.828373][ T7328] netlink: 68 bytes leftover after parsing attributes in process `syz.4.370'. [ 111.870569][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 111.881433][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.370'. [ 111.954062][ T7328] ieee802154 phy0 wpan0: encryption failed: -90 [ 112.619937][ T7386] sit0: entered promiscuous mode [ 112.625539][ T7386] netlink: 'syz.3.384': attribute type 1 has an invalid length. [ 112.634321][ T7386] netlink: 1 bytes leftover after parsing attributes in process `syz.3.384'. [ 112.770616][ T7391] netlink: 'syz.4.387': attribute type 10 has an invalid length. [ 112.987589][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.996063][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.274139][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.606296][ T7385] ipvlan2: left promiscuous mode [ 113.625982][ T7386] netlink: 830 bytes leftover after parsing attributes in process `syz.3.384'. [ 113.660801][ T7391] team0: Device veth1_macvtap failed to register rx_handler [ 113.862213][ T1114] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.882924][ T1114] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.907077][ T1114] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.940998][ T7416] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 113.955206][ T1114] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.012422][ T7416] dvmrp0: entered allmulticast mode [ 114.198398][ T7431] netlink: 44 bytes leftover after parsing attributes in process `syz.2.395'. [ 114.303264][ T7437] ipvlan2: entered promiscuous mode [ 115.085718][ T7475] x_tables: ip_tables: udp match: only valid for protocol 17 [ 115.142991][ T7479] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 115.280759][ T7479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.371554][ T7491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.380523][ T7491] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 115.398282][ T7491] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 115.879877][ T7533] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 115.913143][ T7526] macvlan2: entered allmulticast mode [ 116.145972][ T7538] __nla_validate_parse: 10 callbacks suppressed [ 116.145991][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.435'. [ 116.192855][ T7538] netlink: 'syz.4.435': attribute type 7 has an invalid length. [ 116.213783][ T7538] netlink: 'syz.4.435': attribute type 8 has an invalid length. [ 116.260649][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 116.344933][ T7540] team0: Port device team_slave_1 removed [ 116.510547][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.439'. [ 116.593245][ T7565] netlink: 52 bytes leftover after parsing attributes in process `syz.2.441'. [ 116.603949][ T7563] netlink: 52 bytes leftover after parsing attributes in process `syz.2.441'. [ 116.625369][ T7559] tipc: Enabling of bearer rejected, failed to enable media [ 116.698004][ T7559] Bluetooth: MGMT ver 1.23 [ 116.754717][ T7575] Bluetooth: MGMT ver 1.23 [ 117.071713][ T7599] netlink: 'syz.0.451': attribute type 1 has an invalid length. [ 117.084167][ T7599] netlink: 'syz.0.451': attribute type 1 has an invalid length. [ 117.117770][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 117.129123][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 117.148649][ T7602] gre0: entered promiscuous mode [ 117.156005][ T7604] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.453'. [ 117.310273][ T7611] netlink: 'syz.4.455': attribute type 11 has an invalid length. [ 117.348793][ T7611] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.455'. [ 117.372173][ T7608] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 117.598681][ T7625] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.462'. [ 117.621734][ T7625] netlink: zone id is out of range [ 117.646782][ T7625] netlink: zone id is out of range [ 117.680033][ T7625] netlink: zone id is out of range [ 117.688329][ T7625] netlink: zone id is out of range [ 117.694887][ T7625] netlink: get zone limit has 8 unknown bytes [ 118.490805][ T7676] netlink: 'syz.4.474': attribute type 11 has an invalid length. [ 118.568293][ T7674] delete_channel: no stack [ 118.597696][ T7679] netlink: zone id is out of range [ 118.602855][ T7679] netlink: zone id is out of range [ 118.654415][ T7679] netlink: zone id is out of range [ 118.765585][ T7679] syzkaller1: entered promiscuous mode [ 118.793904][ T7679] syzkaller1: entered allmulticast mode [ 119.071817][ T7709] xfrm1: entered allmulticast mode [ 119.201673][ T7713] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 119.365254][ T7715] bridge_slave_1: left allmulticast mode [ 119.383471][ T7715] bridge_slave_1: left promiscuous mode [ 119.402336][ T7715] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.433779][ T7715] bridge_slave_0: left allmulticast mode [ 119.440142][ T7715] bridge_slave_0: left promiscuous mode [ 119.446903][ T7715] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.458927][ T7727] netlink: 'syz.2.492': attribute type 10 has an invalid length. [ 119.637406][ T7722] team0 (unregistering): Port device team_slave_0 removed [ 119.646758][ T7722] team0 (unregistering): Port device team_slave_1 removed [ 120.046830][ T7751] veth1_to_bond: entered allmulticast mode [ 120.098150][ T7751] tap0: tun_chr_ioctl cmd 2148553947 [ 120.177535][ T7750] veth1_to_bond: left allmulticast mode [ 120.620514][ T7783] sctp: [Deprecated]: syz.2.510 (pid 7783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.620514][ T7783] Use struct sctp_sack_info instead [ 120.670720][ T7785] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 120.680784][ T7788] sctp: [Deprecated]: syz.2.510 (pid 7788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.680784][ T7788] Use struct sctp_sack_info instead [ 121.015479][ T7805] netlink: 'syz.2.516': attribute type 29 has an invalid length. [ 121.043075][ T7805] netlink: 'syz.2.516': attribute type 29 has an invalid length. [ 121.186852][ T7816] sctp: [Deprecated]: syz.1.519 (pid 7816) Use of int in maxseg socket option. [ 121.186852][ T7816] Use struct sctp_assoc_value instead [ 121.203343][ T7817] __nla_validate_parse: 20 callbacks suppressed [ 121.203361][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.515'. [ 121.470340][ T7833] netlink: 76 bytes leftover after parsing attributes in process `syz.1.527'. [ 121.488893][ T7833] nbd: illegal input index -8454144 [ 122.174390][ T7862] netlink: 48 bytes leftover after parsing attributes in process `syz.0.535'. [ 122.195155][ T7863] netlink: 181312 bytes leftover after parsing attributes in process `syz.0.535'. [ 122.489712][ T7875] sit0: entered promiscuous mode [ 122.518908][ T7875] netlink: 'syz.0.539': attribute type 1 has an invalid length. [ 122.572629][ T7875] netlink: 1 bytes leftover after parsing attributes in process `syz.0.539'. [ 122.737562][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 122.770971][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 122.771297][ T7888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.545'. [ 122.805991][ T7892] net_ratelimit: 6 callbacks suppressed [ 122.806005][ T7892] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 122.820285][ T7892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.831024][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 122.833159][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 122.840001][ T7892] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 122.840032][ T7892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.840431][ T7892] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 122.878479][ T7892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.914172][ T7902] netlink: 'syz.2.548': attribute type 1 has an invalid length. [ 122.952977][ T7892] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 122.990787][ T7892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.004910][ T7892] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 123.016903][ T7892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.112003][ T7909] ip6gre2: entered allmulticast mode [ 123.160973][ T7909] macvtap1: entered promiscuous mode [ 123.171581][ T7909] vlan0: entered promiscuous mode [ 123.221851][ T7911] netlink: 'syz.0.552': attribute type 12 has an invalid length. [ 123.360040][ T7920] netlink: 'syz.3.555': attribute type 39 has an invalid length. [ 123.716484][ T10] IPVS: starting estimator thread 0... [ 123.834431][ T7941] IPVS: using max 36 ests per chain, 86400 per kthread [ 124.192163][ T7963] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 124.659489][ T7991] netlink: 'syz.1.580': attribute type 58 has an invalid length. [ 126.021097][ T8060] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 126.297555][ T8081] __nla_validate_parse: 73 callbacks suppressed [ 126.297569][ T8081] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.605'. [ 126.387795][ T8081] syzkaller1: entered promiscuous mode [ 126.393370][ T8081] syzkaller1: entered allmulticast mode [ 126.648159][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 127.213896][ T8130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.622'. [ 127.330957][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'. [ 127.448731][ T8142] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 127.475452][ T8142] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 127.483883][ T8142] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 127.492126][ T8142] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 127.499956][ T8142] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 127.508547][ T8142] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 127.519865][ T8142] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 127.528418][ T8142] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 127.545621][ T8130] block nbd0: server does not support multiple connections per device. [ 127.558705][ T8142] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 127.568611][ T8142] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 127.576899][ T8130] block nbd0: shutting down sockets [ 127.628310][ T8144] batadv1: entered allmulticast mode [ 127.751373][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 127.781474][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 127.823224][ T8157] netlink: 244 bytes leftover after parsing attributes in process `syz.2.630'. [ 128.022240][ T8176] netlink: 56 bytes leftover after parsing attributes in process `syz.2.635'. [ 128.040424][ T8177] net_ratelimit: 121 callbacks suppressed [ 128.040453][ T8177] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 128.061310][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'. [ 128.097305][ T8176] netlink: 31 bytes leftover after parsing attributes in process `syz.2.635'. [ 128.106558][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 128.298563][ T8188] macvlan2: entered promiscuous mode [ 128.304073][ T8188] macvlan2: entered allmulticast mode [ 128.327413][ T8188] bond2: entered promiscuous mode [ 128.389154][ T8188] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.401790][ T8188] bond2: left promiscuous mode [ 129.393014][ T8246] tipc: Started in network mode [ 129.410925][ T8246] tipc: Node identity 72bfc3328b69, cluster identity 4711 [ 129.432548][ T8246] tipc: Enabled bearer , priority 0 [ 129.497001][ T8248] syzkaller0: entered promiscuous mode [ 129.502513][ T8248] syzkaller0: entered allmulticast mode [ 129.551446][ T8263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.650781][ T8248] tipc: Resetting bearer [ 129.821145][ T8276] Bluetooth: MGMT ver 1.23 [ 129.931108][ T8283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.998631][ T8238] tipc: Resetting bearer [ 130.045033][ T8238] tipc: Disabling bearer [ 130.410122][ T8305] `: renamed from bond0 (while UP) [ 130.463107][ T8309] syzkaller0: entered promiscuous mode [ 130.482159][ T8309] syzkaller0: entered allmulticast mode [ 130.522739][ T8315] pim6reg527: entered allmulticast mode [ 130.731774][ T8331] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 130.877552][ T8338] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 130.893761][ T8338] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 130.909635][ T8338] gretap2: entered promiscuous mode [ 130.920527][ T8338] gretap2: entered allmulticast mode [ 132.158348][ T8417] __nla_validate_parse: 25 callbacks suppressed [ 132.158364][ T8417] netlink: 44 bytes leftover after parsing attributes in process `syz.1.699'. [ 132.160075][ T8415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.252533][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 132.260729][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 132.301172][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 132.354670][ T8424] IPv6: NLM_F_REPLACE set, but no existing node found! [ 132.730623][ T8442] netlink: 666 bytes leftover after parsing attributes in process `syz.1.709'. [ 132.750616][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.760278][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.887953][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 132.958463][ T8460] netlink: 108 bytes leftover after parsing attributes in process `syz.2.713'. [ 133.031051][ T8460] netlink: 108 bytes leftover after parsing attributes in process `syz.2.713'. [ 133.072018][ T8460] netlink: 84 bytes leftover after parsing attributes in process `syz.2.713'. [ 133.086743][ T8467] validate_nla: 54 callbacks suppressed [ 133.086762][ T8467] netlink: 'syz.4.716': attribute type 2 has an invalid length. [ 133.102314][ T8467] netlink: 'syz.4.716': attribute type 2 has an invalid length. [ 133.368903][ T7760] tipc: Subscription rejected, illegal request [ 133.400726][ T8483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.722'. [ 133.503471][ T8489] erspan0: entered promiscuous mode [ 133.509446][ T8489] erspan0: entered allmulticast mode [ 133.515455][ T8490] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 133.657160][ T8493] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 133.805276][ T8505] tipc: Enabled bearer , priority 0 [ 133.850085][ T8505] tipc: Disabling bearer [ 134.103024][ T848] IPVS: starting estimator thread 0... [ 134.120073][ T8525] netlink: 'syz.1.735': attribute type 8 has an invalid length. [ 134.205967][ T8524] IPVS: using max 32 ests per chain, 76800 per kthread [ 134.528136][ T8549] sctp: [Deprecated]: syz.1.744 (pid 8549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.528136][ T8549] Use struct sctp_sack_info instead [ 134.725850][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.172674][ T8583] sctp: [Deprecated]: syz.0.752 (pid 8583) Use of int in max_burst socket option deprecated. [ 135.172674][ T8583] Use struct sctp_assoc_value instead [ 135.219293][ T8574] syzkaller0: entered promiscuous mode [ 135.225441][ T8574] syzkaller0: entered allmulticast mode [ 135.582638][ T8612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.690511][ T8617] netlink: 'syz.0.761': attribute type 1 has an invalid length. [ 136.028912][ T8639] !€ÿ: renamed from bond_slave_0 (while UP) [ 136.701447][ T8668] xfrm1: entered promiscuous mode [ 136.736010][ T8668] xfrm1: entered allmulticast mode [ 136.940409][ T8688] netlink: 'syz.2.783': attribute type 32 has an invalid length. [ 137.234074][ T8696] pim6reg527: entered allmulticast mode [ 137.423052][ T8703] sctp: [Deprecated]: syz.4.789 (pid 8703) Use of int in maxseg socket option. [ 137.423052][ T8703] Use struct sctp_assoc_value instead [ 137.597236][ T8718] netlink: 'syz.0.794': attribute type 83 has an invalid length. [ 137.612139][ T8719] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.798049][ T8729] netlink: 'syz.4.797': attribute type 1 has an invalid length. [ 137.875627][ T8734] gretap3: entered promiscuous mode [ 138.120880][ T8748] netlink: 'syz.4.802': attribute type 58 has an invalid length. [ 138.130108][ T8748] __nla_validate_parse: 18 callbacks suppressed [ 138.130125][ T8748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.802'. [ 138.155435][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 138.725392][ T8787] netlink: 124 bytes leftover after parsing attributes in process `syz.3.816'. [ 139.051520][ T8795] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 139.124813][ T8795] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 139.263208][ T8805] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 139.294518][ T8805] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 139.377918][ T8809] netlink: 88 bytes leftover after parsing attributes in process `syz.3.821'. [ 139.454693][ T8805] netlink: 88 bytes leftover after parsing attributes in process `syz.3.821'. [ 139.525392][ T8815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.602938][ T8821] netlink: 88 bytes leftover after parsing attributes in process `syz.0.822'. [ 139.649864][ T8823] netlink: 92 bytes leftover after parsing attributes in process `syz.2.825'. [ 139.729579][ T8833] netlink: 'syz.2.825': attribute type 4 has an invalid length. [ 139.900266][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'. [ 139.931941][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'. [ 139.942077][ T8844] netlink: 'syz.4.830': attribute type 3 has an invalid length. [ 139.951985][ T8840] bridge0: port 3(vlan2) entered blocking state [ 139.964991][ T8840] bridge0: port 3(vlan2) entered disabled state [ 139.977929][ T8840] vlan2: entered allmulticast mode [ 139.999404][ T8840] bridge0: entered allmulticast mode [ 140.020322][ T8840] vlan2: left allmulticast mode [ 140.027334][ T8840] bridge0: left allmulticast mode [ 140.051174][ T8844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.075102][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'. [ 140.102026][ T8850] bridge0: port 3(vlan2) entered blocking state [ 140.109045][ T8850] bridge0: port 3(vlan2) entered disabled state [ 140.115658][ T8850] vlan2: entered allmulticast mode [ 140.125811][ T8850] bridge0: entered allmulticast mode [ 140.134977][ T8850] vlan2: left allmulticast mode [ 140.147823][ T8850] bridge0: left allmulticast mode [ 141.227549][ T8895] [ 141.229907][ T8895] ====================================================== [ 141.236939][ T8895] WARNING: possible circular locking dependency detected [ 141.243954][ T8895] syzkaller #0 Not tainted [ 141.248356][ T8895] ------------------------------------------------------ [ 141.255353][ T8895] syz.1.846/8895 is trying to acquire lock: [ 141.261224][ T8895] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 141.270794][ T8895] [ 141.270794][ T8895] but task is already holding lock: [ 141.278143][ T8895] ffff888024f300a8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 141.288425][ T8895] [ 141.288425][ T8895] which lock already depends on the new lock. [ 141.288425][ T8895] [ 141.299070][ T8895] [ 141.299070][ T8895] the existing dependency chain (in reverse order) is: [ 141.308067][ T8895] [ 141.308067][ T8895] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 141.316839][ T8895] lock_acquire+0x120/0x360 [ 141.321860][ T8895] blk_alloc_queue+0x538/0x620 [ 141.327138][ T8895] __blk_mq_alloc_disk+0x15c/0x340 [ 141.332760][ T8895] nbd_dev_add+0x46c/0xae0 [ 141.337770][ T8895] nbd_init+0x168/0x1f0 [ 141.342437][ T8895] do_one_initcall+0x233/0x820 [ 141.347741][ T8895] do_initcall_level+0x104/0x190 [ 141.353186][ T8895] do_initcalls+0x59/0xa0 [ 141.358021][ T8895] kernel_init_freeable+0x334/0x4b0 [ 141.363730][ T8895] kernel_init+0x1d/0x1d0 [ 141.368583][ T8895] ret_from_fork+0x3fc/0x770 [ 141.373698][ T8895] ret_from_fork_asm+0x1a/0x30 [ 141.378984][ T8895] [ 141.378984][ T8895] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 141.386184][ T8895] lock_acquire+0x120/0x360 [ 141.391463][ T8895] fs_reclaim_acquire+0x72/0x100 [ 141.397009][ T8895] prepare_alloc_pages+0x153/0x610 [ 141.402623][ T8895] __alloc_frozen_pages_noprof+0x123/0x370 [ 141.408932][ T8895] __alloc_pages_noprof+0xa/0x30 [ 141.414377][ T8895] pcpu_populate_chunk+0x182/0xb30 [ 141.419996][ T8895] pcpu_alloc_noprof+0xcbf/0x16b0 [ 141.425528][ T8895] bpf_map_alloc_percpu+0xbc/0x1b0 [ 141.431151][ T8895] prealloc_init+0x225/0x630 [ 141.436259][ T8895] htab_map_alloc+0x6ce/0xc70 [ 141.441463][ T8895] map_create+0xaa0/0x14d0 [ 141.446396][ T8895] __sys_bpf+0x60f/0x870 [ 141.451150][ T8895] __x64_sys_bpf+0x7c/0x90 [ 141.456193][ T8895] do_syscall_64+0xfa/0x3b0 [ 141.461218][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.467638][ T8895] [ 141.467638][ T8895] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 141.475374][ T8895] validate_chain+0xb9b/0x2140 [ 141.480660][ T8895] __lock_acquire+0xab9/0xd20 [ 141.485851][ T8895] lock_acquire+0x120/0x360 [ 141.490871][ T8895] __mutex_lock+0x187/0x1350 [ 141.495973][ T8895] pcpu_alloc_noprof+0x286/0x16b0 [ 141.501511][ T8895] sbitmap_init_node+0x1e1/0x630 [ 141.506964][ T8895] sbitmap_queue_init_node+0x3e/0x4d0 [ 141.512841][ T8895] blk_mq_init_tags+0x110/0x280 [ 141.518199][ T8895] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 141.524172][ T8895] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 141.530489][ T8895] nbd_start_device+0x17f/0xb10 [ 141.535856][ T8895] nbd_genl_connect+0x135b/0x18f0 [ 141.541396][ T8895] genl_family_rcv_msg_doit+0x212/0x300 [ 141.547451][ T8895] genl_rcv_msg+0x60e/0x790 [ 141.552577][ T8895] netlink_rcv_skb+0x208/0x470 [ 141.557856][ T8895] genl_rcv+0x28/0x40 [ 141.562348][ T8895] netlink_unicast+0x82c/0x9e0 [ 141.567621][ T8895] netlink_sendmsg+0x805/0xb30 [ 141.572888][ T8895] __sock_sendmsg+0x219/0x270 [ 141.578071][ T8895] ____sys_sendmsg+0x505/0x830 [ 141.583342][ T8895] ___sys_sendmsg+0x21f/0x2a0 [ 141.588521][ T8895] __x64_sys_sendmsg+0x19b/0x260 [ 141.593967][ T8895] do_syscall_64+0xfa/0x3b0 [ 141.599001][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.605400][ T8895] [ 141.605400][ T8895] other info that might help us debug this: [ 141.605400][ T8895] [ 141.615611][ T8895] Chain exists of: [ 141.615611][ T8895] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 141.615611][ T8895] [ 141.629250][ T8895] Possible unsafe locking scenario: [ 141.629250][ T8895] [ 141.636685][ T8895] CPU0 CPU1 [ 141.642032][ T8895] ---- ---- [ 141.647379][ T8895] lock(&q->q_usage_counter(io)#49); [ 141.652742][ T8895] lock(fs_reclaim); [ 141.659234][ T8895] lock(&q->q_usage_counter(io)#49); [ 141.667120][ T8895] lock(pcpu_alloc_mutex); [ 141.671609][ T8895] [ 141.671609][ T8895] *** DEADLOCK *** [ 141.671609][ T8895] [ 141.679731][ T8895] 6 locks held by syz.1.846/8895: [ 141.684734][ T8895] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 141.692905][ T8895] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 141.701854][ T8895] #2: ffff888024e75988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 141.713244][ T8895] #3: ffff888024e758d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 141.724209][ T8895] #4: ffff888024f300a8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 141.734917][ T8895] #5: ffff888024f300e0 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 141.745874][ T8895] [ 141.745874][ T8895] stack backtrace: [ 141.751765][ T8895] CPU: 0 UID: 0 PID: 8895 Comm: syz.1.846 Not tainted syzkaller #0 PREEMPT(full) [ 141.751781][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.751796][ T8895] Call Trace: [ 141.751804][ T8895] [ 141.751812][ T8895] dump_stack_lvl+0x189/0x250 [ 141.751831][ T8895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.751850][ T8895] ? __pfx__printk+0x10/0x10 [ 141.751869][ T8895] ? print_lock_name+0xde/0x100 [ 141.751886][ T8895] print_circular_bug+0x2ee/0x310 [ 141.751902][ T8895] check_noncircular+0x134/0x160 [ 141.751918][ T8895] validate_chain+0xb9b/0x2140 [ 141.751939][ T8895] __lock_acquire+0xab9/0xd20 [ 141.751958][ T8895] ? pcpu_alloc_noprof+0x286/0x16b0 [ 141.751976][ T8895] lock_acquire+0x120/0x360 [ 141.751992][ T8895] ? pcpu_alloc_noprof+0x286/0x16b0 [ 141.752013][ T8895] __mutex_lock+0x187/0x1350 [ 141.752026][ T8895] ? pcpu_alloc_noprof+0x286/0x16b0 [ 141.752043][ T8895] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 141.752061][ T8895] ? kasan_save_track+0x4f/0x80 [ 141.752076][ T8895] ? kasan_save_track+0x3e/0x80 [ 141.752090][ T8895] ? __kasan_kmalloc+0x93/0xb0 [ 141.752105][ T8895] ? blk_mq_init_tags+0x85/0x280 [ 141.752120][ T8895] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 141.752138][ T8895] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 141.752151][ T8895] ? pcpu_alloc_noprof+0x286/0x16b0 [ 141.752167][ T8895] ? nbd_genl_connect+0x135b/0x18f0 [ 141.752184][ T8895] ? genl_family_rcv_msg_doit+0x212/0x300 [ 141.752199][ T8895] ? genl_rcv_msg+0x60e/0x790 [ 141.752214][ T8895] ? __pfx___mutex_lock+0x10/0x10 [ 141.752225][ T8895] ? ____sys_sendmsg+0x505/0x830 [ 141.752238][ T8895] ? do_syscall_64+0xfa/0x3b0 [ 141.752251][ T8895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.752269][ T8895] pcpu_alloc_noprof+0x286/0x16b0 [ 141.752291][ T8895] sbitmap_init_node+0x1e1/0x630 [ 141.752305][ T8895] ? __kasan_kmalloc+0x93/0xb0 [ 141.752322][ T8895] sbitmap_queue_init_node+0x3e/0x4d0 [ 141.752336][ T8895] blk_mq_init_tags+0x110/0x280 [ 141.752352][ T8895] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 141.752373][ T8895] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 141.752386][ T8895] ? kfree+0x18e/0x440 [ 141.752402][ T8895] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 141.752421][ T8895] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 141.752440][ T8895] ? sysfs_add_file_mode_ns+0x259/0x300 [ 141.752462][ T8895] nbd_start_device+0x17f/0xb10 [ 141.752481][ T8895] ? device_create_file+0xf4/0x1c0 [ 141.752495][ T8895] nbd_genl_connect+0x135b/0x18f0 [ 141.752516][ T8895] ? __pfx_nbd_genl_connect+0x10/0x10 [ 141.752536][ T8895] ? __nla_parse+0x40/0x60 [ 141.752555][ T8895] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 141.752573][ T8895] genl_family_rcv_msg_doit+0x212/0x300 [ 141.752591][ T8895] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 141.752611][ T8895] ? stack_trace_save+0x9c/0xe0 [ 141.752627][ T8895] genl_rcv_msg+0x60e/0x790 [ 141.752644][ T8895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.752657][ T8895] ? __pfx_nbd_genl_connect+0x10/0x10 [ 141.752679][ T8895] netlink_rcv_skb+0x208/0x470 [ 141.752696][ T8895] ? __lock_acquire+0xab9/0xd20 [ 141.752713][ T8895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.752727][ T8895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.752750][ T8895] ? down_read+0x1ad/0x2e0 [ 141.752763][ T8895] genl_rcv+0x28/0x40 [ 141.752776][ T8895] netlink_unicast+0x82c/0x9e0 [ 141.752796][ T8895] ? __pfx_netlink_unicast+0x10/0x10 [ 141.752813][ T8895] ? netlink_sendmsg+0x642/0xb30 [ 141.752824][ T8895] ? skb_put+0x11b/0x210 [ 141.752837][ T8895] netlink_sendmsg+0x805/0xb30 [ 141.752858][ T8895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.752871][ T8895] ? aa_sock_msg_perm+0xf1/0x1d0 [ 141.752884][ T8895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.752898][ T8895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.752910][ T8895] __sock_sendmsg+0x219/0x270 [ 141.752928][ T8895] ____sys_sendmsg+0x505/0x830 [ 141.752943][ T8895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.752960][ T8895] ? import_iovec+0x74/0xa0 [ 141.752977][ T8895] ___sys_sendmsg+0x21f/0x2a0 [ 141.752991][ T8895] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.753015][ T8895] ? __fget_files+0x2a/0x420 [ 141.753027][ T8895] ? __fget_files+0x3a0/0x420 [ 141.753041][ T8895] __x64_sys_sendmsg+0x19b/0x260 [ 141.753055][ T8895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.753072][ T8895] ? rcu_is_watching+0x15/0xb0 [ 141.753086][ T8895] ? do_syscall_64+0xbe/0x3b0 [ 141.753099][ T8895] do_syscall_64+0xfa/0x3b0 [ 141.753110][ T8895] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.753128][ T8895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.753140][ T8895] ? clear_bhb_loop+0x60/0xb0 [ 141.753154][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.753167][ T8895] RIP: 0033:0x7f5e2418eba9 [ 141.753188][ T8895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.753199][ T8895] RSP: 002b:00007f5e2509b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.753213][ T8895] RAX: ffffffffffffffda RBX: 00007f5e243d5fa0 RCX: 00007f5e2418eba9 [ 141.753223][ T8895] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 000000000000000d [ 141.753232][ T8895] RBP: 00007f5e24211e19 R08: 0000000000000000 R09: 0000000000000000 [ 141.753241][ T8895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.753249][ T8895] R13: 00007f5e243d6038 R14: 00007f5e243d5fa0 R15: 00007ffc4ee48398 [ 141.753263][ T8895] [ 142.347013][ T5867] block nbd0: Receive control failed (result -32) [ 142.351394][ T5184] block nbd0: Receive control failed (result -32) [ 142.377713][ T8895] nbd0: detected capacity change from 0 to 35184372088959 [ 142.386845][ T7012] block nbd0: Dead connection, failed to find a fallback [ 142.393990][ T7012] block nbd0: shutting down sockets [ 142.399437][ T7012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.408847][ T7012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.416937][ T7012] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.426276][ T7012] Buffer I/O error on dev nbd0, logical block 1, async page read [ 142.435910][ T7012] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.445064][ T7012] Buffer I/O error on dev nbd0, logical block 2, async page read [ 142.452909][ T7012] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.462043][ T7012] Buffer I/O error on dev nbd0, logical block 3, async page read [ 142.470011][ T7012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.479117][ T7012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.487215][ T7012] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.496427][ T7012] Buffer I/O error on dev nbd0, logical block 1, async page read [ 142.504352][ T7012] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.513451][ T7012] Buffer I/O error on dev nbd0, logical block 2, async page read [ 142.521364][ T7012] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.530506][ T7012] Buffer I/O error on dev nbd0, logical block 3, async page read [ 142.538648][ T7012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.547729][ T7012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.555620][ T7012] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.564686][ T7012] Buffer I/O error on dev nbd0, logical block 1, async page read [ 142.573461][ T7012] ldm_validate_partition_table(): Disk read failed. [ 142.580850][ T7012] Dev nbd0: unable to read RDB block 0 [ 142.587261][ T7012] nbd0: unable to read partition table [ 142.597355][ T7012] ldm_validate_partition_table(): Disk read failed. [ 142.606178][ T7012] Dev nbd0: unable to read RDB block 0 [ 142.613162][ T7012] nbd0: unable to read partition table