last executing test programs: 5.344134366s ago: executing program 1 (id=542): getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000005c0), &(0x7f0000000880)=0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f00000020c0)=""/4064, &(0x7f0000000000)=0xfe0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003a00010329bd7000fcffffff0800000023b2a7939867299ece21ed8d7784c5023cb5089ecfd1167c98402afcef6a191eb60a"], 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x804) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x4e22, 0x7fff, 0x4e22, 0x4, 0xa, 0xa0, 0x20, 0x1d, r4, r5}, {0xfffffffffffff730, 0xc42, 0x9, 0xa0, 0x100000000, 0xe, 0x280000, 0x3f34}, {0xfffffffffffffffc, 0xfffffffffffffffc, 0x7fff, 0x5}, 0xb5, 0x0, 0x3, 0x0, 0x1}, {{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x4064c39710449264, 0x3, 0x3, 0x2, 0x8}}, 0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000240)={0x16}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x44}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000040)=0x2002044) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0xe02024f) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 3.009933646s ago: executing program 1 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 2.688513962s ago: executing program 1 (id=550): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000011c0)=@nat={'nat\x00', 0x19, 0x2, 0xaf4, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000806], 0x0, &(0x7f0000000080), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x1, 0xf6, 'geneve0\x00', '\x00', 'veth1_to_batadv\x00', 'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @random="adddbdc69f3c", [0x0, 0xff, 0xff, 0xff, 0xff], 0xae, 0xae, 0xe6, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x5424469d, 0x8, 0x0, 0x2}}}], [], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x10}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x5, 0x0, 0x8906, 'veth1_macvtap\x00', 'veth0_vlan\x00', 'veth1_to_team\x00', 'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x8a6, 0x946, 0x97e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x9}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x200, 0x1}, {0x0, 0x2}, {0x6, 0x1}, {0x101, 0x3}, {0x4, 0x3}, {0x9, 0x3}, {0x7f, 0x1}, {0x307, 0x2}, {0x5}, {0x4000, 0x2}, {0x0, 0x3}], [{0x1ff, 0x7}, {0x9, 0xcef6}, {0xc, 0x6}, {0x7, 0x5e6}, {0xffff, 0x93a00000}, {0xfff, 0x9}, {0xff}, {0x622945ff, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x6, 0x5}], 0xa, 0x5}, {[{0x1, 0x2}, {0x7fffffff, 0x2}, {0x5, 0x3}, {0x7}, {0x1, 0x1}, {0x10000, 0x2}, {0x5}, {0x3}, {0x140000}, {0x2, 0x2}, {0xe, 0x2}], [{0x7fff, 0x10000}, {0xa, 0xf74c}, {0x200, 0x7fff}, {0x3, 0x6}, {0x40, 0x9}, {0xe, 0x1ff}, {0xc, 0x4}, {0x40, 0x4}, {0xfffffff7, 0x2}, {0x7fffffff, 0x3}, {0x81, 0x4}], 0x3, 0x3}, {[{0x6, 0x3}, {0x5}, {0x5, 0x2}, {0x8, 0x3}, {0x9, 0x3}, {0x5, 0x2}, {0x5, 0x3}, {0x1000}, {0x7fffffff}, {0xc3, 0x2}, {0x6, 0x3}], [{0x8008, 0x7}, {0x8}, {0x8, 0x8001}, {0x1f, 0x3}, {0x5086, 0xffffffff}, {0x9, 0x8}, {}, {0x8}, {0x8, 0x10000}, {0x3, 0x72}, {0x3, 0xda33}], 0x4, 0x7}, {[{0x9, 0x3}, {}, {0xd04c, 0x2}, {0xba}, {0x7}, {0x0, 0x1}, {0x7, 0x2}, {0x7, 0x2}, {0x40}, {0x4, 0x3}, {0x7, 0x3}], [{0x9, 0x4}, {0x3, 0x80}, {0x80000001, 0x7}, {0x8001, 0x8}, {0x5, 0x59b}, {0xca, 0x7}, {0x3, 0x2}, {0x0, 0x5}, {0xd4, 0x10001}, {0x372, 0x3}, {0x400, 0x4}], 0xb, 0x3}, {[{0xfffffe6b, 0x2}, {0xd74, 0x2}, {0x1}, {0xa, 0x2}, {0x5}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x3}, {0x1000, 0x3}, {0x7, 0x2}], [{0x800, 0x1}, {0x8, 0x9}, {0x3}, {0x6, 0x4}, {0xffff, 0xffffffff}, {0x8, 0x1}, {0x10001, 0x200}, {0x7fff, 0xfffffffd}, {0x7, 0x40}, {0x10}, {0xfffffffe, 0x8}], 0x1, 0x4}, {[{0x6}, {0x80000001, 0x2}, {0x2, 0x2}, {0x3}, {0x1000, 0x1}, {0x97, 0x3}, {0x6}, {0x9, 0x2}, {0x0, 0x1}, {0x10000, 0x2}, {0x3ff}], [{0xc, 0x5}, {0x80000001, 0x8}, {0xaa, 0x7}, {0xef2b, 0x400}, {0xfffffffc, 0x5888}, {0x4, 0x5}, {0x105, 0x2}, {0x5, 0x1}, {0x0, 0xffff}, {0x6, 0xa}, {0x9, 0x3}]}, {[{0x9, 0x1}, {0x80, 0x3}, {0x2, 0x1}, {0x3, 0x3}, {0xaa}, {0x1b9, 0x2}, {0x0, 0x3}, {0x4642}, {0x5}, {0x8, 0x2}, {0xfffffff9, 0x1}], [{0x0, 0x4e5c}, {0x6, 0x3}, {0x5, 0x3}, {0x4, 0x81}, {0x40, 0x10000}, {0x1, 0xffffffff}, {0x81, 0x5}, {0x3, 0xf}, {0xf, 0x80}, {0x5}, {0x400, 0x5}], 0x3, 0x9}, {[{0x81, 0x3}, {0x7, 0x2}, {0x451800}, {0x0, 0x1}, {0x4, 0x2}, {0x2}, {0x7, 0x2}, {0x7ff, 0x2}, {0x6, 0x3}, {0x3, 0x3}, {0x7, 0x3}], [{0x5}, {0x9, 0x579}, {0x7, 0xef}, {0xfffffffa, 0x9}, {0x20, 0x24}, {0x21a6a441, 0xbcd}, {0x417}, {0x7, 0x1}, {0x2, 0x81}, {0x1, 0x1}, {0x5, 0x5}], 0x3, 0x6}, {[{0x5, 0x1}, {0x0, 0x2}, {0x8000, 0x3}, {0x6, 0x2}, {0x401}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x3}, {0x2, 0x2}, {0x8a41, 0x3}, {0xac7, 0x1}], [{0x9, 0x3241}, {0x1c972339, 0x3ff}, {0x4, 0x4}, {0x8, 0xb64}, {0x80000001, 0xc8}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0xf}, {0x5, 0x2}, {0x5, 0x3ff}, {0x81, 0x2f}], 0x6, 0x4}, {[{0x4}, {0x340, 0x2}, {0x8, 0x2}, {0x80000001, 0x3}, {0x46d0, 0x2}, {0xfffffffc, 0x3}, {0x2, 0x2}, {0x8a, 0x1}, {0x100}, {0xc4a, 0x3}, {0x4000, 0x1}], [{0x6, 0x8000}, {0x200, 0x200}, {0x1000, 0x3}, {0x5, 0xb}, {0x7, 0x3}, {0xbcc, 0x1}, {0x80000001, 0x5}, {0x3ff, 0x784}, {0x8, 0x10000}, {0x8, 0x96}, {0x6, 0x9}], 0xa}, {[{0x4f5}, {0x6, 0x2}, {0x4, 0x1}, {0x2e}, {0x6, 0x1}, {0x2, 0x1}, {0x6b8, 0x2}, {0x6}, {0x7, 0x2}, {0x8, 0x3}, {0x3, 0x1}], [{0x2, 0x401}, {0x4, 0x3}, {0xffff, 0x3}, {0x9, 0x200}, {0x10000}, {0x7, 0x401}, {0x4a9f, 0xb}, {0x80000001, 0x6}, {0x7, 0x46}, {0xd5, 0x81}, {0x5, 0xe47}], 0x8, 0x1}], 0xb}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz0\x00', {0xa}}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz1\x00', {0x5}}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}]}, 0xb6c) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001100210400ff00000000000000000008000000000000000000000000000000000000000014000d00e000000200"/60], 0x3c}}, 0x0) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10, 0x80800) r4 = gettid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4) 2.444125109s ago: executing program 1 (id=552): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311be00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r4, 0x215eb000) r5 = socket(0x8, 0x3, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x5, 0x2, 0x3ff, "09650bced381"}}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340)={{0x84, @broadcast, 0x4e24, 0x3, 'wlc\x00', 0x15, 0x3240, 0x3a}, {@empty, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r1, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0xc3) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @rand_addr=0x64010102}, 0x10) 2.435040758s ago: executing program 3 (id=554): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="e566974e42e5f0878e6414000000", @ANYRES16=r1, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0x45880) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@typedef={0x3, 0x0, 0x0, 0xf, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x41}, 0x20) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) 2.24677878s ago: executing program 3 (id=555): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000100), 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x4040000) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x13c}}, 0x800) 2.155881438s ago: executing program 4 (id=556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000}, 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'xfrm0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140004"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.026987359s ago: executing program 4 (id=557): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.968289166s ago: executing program 2 (id=558): socket$kcm(0x10, 0x2, 0x0) 1.868746867s ago: executing program 3 (id=559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x22, 0x0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=ANY=[@ANYBLOB="202700002c0007012bbd7000ffdbdf25047c0000280301802103dd802001e98008004600", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000227082d57c5848d403e212111b7355941a4abee53192f9ad0ca4033342783801144c6ba1ea7845071729e825b33f1a20fe09b8762b86d910fab7e0264c14550e4b91c89f69764109add4c2854f000000e42303800c0001"], 0x2720}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) r5 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r6, 0x29, 0xcf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x6, 0x3) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000280)={0x80, r3, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 1.786395948s ago: executing program 2 (id=561): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r1 = accept4$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000140)=0x7) getpeername$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000600)={r2, 0x2, 0x8}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000a40)={'filter\x00', 0x1000, "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"}, &(0x7f0000001a80)=0x1024) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000001b00)={0xfffffffffffff6e0, 0x30, [0x7fff, 0xc, 0x0, 0x7], &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000001b40)=0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000001b80)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001bc0), r3) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) r6 = openat$cgroup_ro(r4, &(0x7f0000001c80)='pids.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000001cc0)={0x0, 0x6, 0x1, [0x96]}, &(0x7f0000001d00)=0xa) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000001d40)={r7, 0x400}, &(0x7f0000001d80)=0x8) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x738}]}, 0x2c}}, 0x4000000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001ec0)={0x7526, 0x6, 0x5, 0xb, 0x4, 0x0, [{0x9, 0x8, 0x4, '\x00', 0x1c0b}, {0x512e, 0x1, 0x8000000000000000, '\x00', 0x208}, {0x984, 0x9, 0xfffffffffffffff7}, {0x401, 0x6, 0x8, '\x00', 0x2685}]}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x1c, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8c5) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000002100)={0x0, 0x3, 0x10, 0x0, 0xf99}, &(0x7f0000002140)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000002180)={r9, 0x4}, 0x8) connect$netlink(0xffffffffffffffff, &(0x7f00000021c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000002300)={'syztnl1\x00', &(0x7f0000002280)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x4, 0x3ff, 0x50, @local, @loopback, 0x8000, 0x7800, 0xff, 0xb}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000002400)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x4c, r10, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x3c, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xc}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf0}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0xc000) openat$cgroup_pressure(r3, &(0x7f0000002540)='io.pressure\x00', 0x2, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000002640)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 1.59354036s ago: executing program 4 (id=562): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private2, 0x0, r5}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@private2, r5}, 0x14) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd7000fcbedf250200000008000b00", @ANYRES32=r5, @ANYBLOB="06000a004e220000"], 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x8c95) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000640)=0x100, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket(0x1, 0x803, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r13], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.544708531s ago: executing program 0 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x4, 0x100, @void}}}}}}}}, 0x32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) recvfrom(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x3, &(0x7f00000011c0)=@l2={0x1f, 0x4, @none, 0x6, 0x1}, 0x80) 1.543768288s ago: executing program 2 (id=564): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100006001"], 0x48}}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000004, 0x6b}, {@rand_addr=0x64010102, 0x4e20, 0x2000, 0x8, 0x48001}}, 0x44) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) gettid() (async) r7 = gettid() openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000001c0)={0x9}, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000000007000fbdbdf2531000000080003006147747883f31658b4306fd07e8b59859a24eea3d118d91b53ba3a04bbaf3da7aacc881972e8f6f401ae552114aa7d06b97a2739e7b2ec63a0f2f863c5c2845e2b6fdca71eb4419d160b259bec13dad891e658ef18a4f7bc862280fb868a07f2ac836085220f8d0d2ed74ecd78429673ab6935", @ANYRES32=r4, @ANYBLOB='\b\x00R\x00', @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000000007000fbdbdf2531000000080003006147747883f31658b4306fd07e8b59859a24eea3d118d91b53ba3a04bbaf3da7aacc881972e8f6f401ae552114aa7d06b97a2739e7b2ec63a0f2f863c5c2845e2b6fdca71eb4419d160b259bec13dad891e658ef18a4f7bc862280fb868a07f2ac836085220f8d0d2ed74ecd78429673ab6935", @ANYRES32=r4, @ANYBLOB='\b\x00R\x00', @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x48}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.512774452s ago: executing program 3 (id=565): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) writev(r5, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x80d4}, 0x40c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @null, @bpq0, 0x5, [@bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r9, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r2) 1.319637096s ago: executing program 2 (id=566): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r4], 0x2c}}, 0x4000000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r2, 0x0) pipe(0x0) (async) r5 = socket(0x14, 0x2, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, 0x0) (async) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) 1.152045782s ago: executing program 0 (id=567): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000800) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x4d, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r5, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x24008094) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f6c3cd8a839b6a2b074ee0800010027000000270000004600002900000000008490783fff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078002809c400050200000000000007000002d58838000391000000"], 0xfd6c) 1.150734139s ago: executing program 1 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa290800450000b00000000000119078000018000000000000004e20009c90782000000000000000e53861c2065f20a0d9925cc1cd73e61cacee60e07fb76f034de26b4983787ccd771acdf0d1e5c4a0c9b9c83a79c0243bdcdb6967099a29a91c2c7010f9e40507c72d997d0b476b2ba9faa8b111cd89ba28894a76c98006cd6639cafacf83f49d6327fc5fe697"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(streebog256)\x00'}, 0x58) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003cc0)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x40000000, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000011c0)={0x1, 0x80, @start={0x0, 0x0, "b22dccf3c91422704c492a75ed6144bbbad1a27c1a103fdc9557c1b8d954ca4a018e8b89e609b1e09233be8c5d8ff54dcfa9bec373e5a11e439e5ad88aa32c9f018dab69abe6ce03269c73bf755b20d7948a83916a05cedf6219e455a81d7abfe4c44293d40fb2a4b8bcd3228450cbbe2627f81fcf041dbd3046cb997152d58459357f1e5cd68079354b62e3dfc75e7c8bebe8aa29f667e239cec045dfdbc5e8b101aadc73e42aeb0d15815768312fe6b63aa5cf752f7606b522964db8ea994e693b0ac4727932f19874ee694b803a4475938aad8a34e41073ccebda8af3b7a54b7e94e339b7c9d0959298c5c0025ccbb890ea581c6fae65858e297e7301c7e79b26c960ad2c552242a32f800d8cd64dfeb5ac069f7a62342275a169e8712adc9670de7105e4936dbf1ba82e28f523a4076d7b95d06887ace84e20a04c9d07c929b9f560fb4fb32e3d95ef9273e0f19e17cfea8731170e720063b58d83c492fc34e090456633cea37fbc2e759835abed12787edbc9a603591d22cf0a5a0ff8e1aa9fcbd9574ab3cef62cc698d7b73a95cd359898ef0596a6921364314b78b479f5caf15110bb387932048db9152d361d6b795827e6eb71a43c1b3158c7b95dfc218e3bd1c136fc5c8d75d20e968c284d421743eb0a42172aadf93725ddeee037d129068d13e6066cb6b6ca5af3014b8ae7535de0436c545481143b28b0ee29f8646a24c876e256b4c0ef548762f775f262e786c6d00abe3faf32ed483efc62e886eacee335693cba79ddab17725024e789314a3023df5ab3fced83ce9a6e7d75b1f033ff6fd03c71ddc7c41d2fba462ce4f0865a3e85a3e1c9ab821dabb098a3cce4c2b39c54885abc2ad9a3eec7804cced65daa56a51064fa407508c9637fad7c9d0164e47b86958ddcaf2c9a505dc78b68623fbef969f76c5105513b04563c23799e447ebe09bd4205d2d98d6b504804795c5b56df9b9b93175936d68fed1be2ad0c2c36998f2a61103eb5a9927884241aad0ad6dff42da3590e43616b118283c135a0c28bbc4d760fdd17ec3c6b6b23b9d32f837ac93f3b76fcaa35b9e9fc8b922fd1c46e586169036ba459dfd4df33093a99f7ede80bd7563d0c71fb45de2d6dabf93f03fc57b49e9b38c87940d87b10975917197aaf8664b8360a2af56f661e1483e8ecb0ef4695b344d1f63935059b484f6e1d35c2ff0646371ef6a2e153ae51338794a7e585f92b90a982fd975979ea622efe88aacf5d93c11518a316bcad47638fe912cf80a26f9efded08861af732d2cc6b276fe4ae7cfbcaa119868080c95e8e7127a68c5be478322da36e0b0d00d05c8c300921f892559d1f67842994bfc28f24821a57c18cf26b827d00936089d6d23af3ac4c311b99c5a1742223eff304558aadeb596af1e6fb9b01dfb71c5925a559324e60da412890a0b56036", "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"}, [0x7, 0x9, 0x0, 0x5, 0x7, 0x4, 0x8, 0x9, 0xffffffffffffffff, 0x3, 0x3, 0x7fff, 0x0, 0xc2b, 0x9, 0xe, 0x7, 0xb, 0x7, 0x5c7d1cdf, 0x3, 0x100, 0x5, 0x6, 0xb, 0x6, 0x3, 0x81, 0x61, 0x40000000000, 0xfc69, 0x75, 0x1, 0xde88, 0x9, 0xb, 0x8, 0x0, 0x7, 0x4, 0x3, 0x7, 0x100000001, 0x2, 0x4, 0x8, 0xffffffffffff8000, 0x0, 0x9, 0x49, 0x8, 0x7, 0x0, 0x3, 0x6, 0x7, 0x4, 0x9, 0x5, 0xfff, 0x2, 0x9, 0x9, 0x2]}) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0xf, 0x1c, 0x66, 0x0, 0x80, 0x2, 0x0, @remote, @local}, "156b3485e766b1df"}}}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1f000000000000000000004bc0d5af00000008"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0x4}, 0x6) write(r10, &(0x7f0000000140)="41000200010001", 0x7) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r9], 0x2c}}, 0x4000000) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, 0x0, &(0x7f0000000400)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) 739.37953ms ago: executing program 4 (id=569): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0)='4', 0x1) tee(r2, r1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0xf}, 0x94) 657.265388ms ago: executing program 0 (id=570): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd2, 0xd2, 0x4, [@func={0xfffffffd, 0x0, 0x0, 0xc, 0x5}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x9}, {0x10, 0x4}]}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @var={0xf, 0x0, 0x0, 0xe, 0x5, 0x2}, @datasec={0xb, 0x6, 0x0, 0xf, 0x2, [{0x4, 0x5, 0x1ff}, {0x3, 0x2, 0x5}, {0x5, 0x7, 0x3ff}, {0x4, 0x5, 0x5}, {0x2, 0x2, 0x6}, {0x4, 0xb, 0xffff}], "7c9f"}, @float={0x5, 0x0, 0x0, 0x10, 0x2}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}, @restrict={0xa, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x4f]}}, &(0x7f0000000300)=""/119, 0xf0, 0x77, 0x1, 0xf}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x1d, 0x2, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000200000000000000084000000080000002001000000190000000000000000000020"], 0x58, 0x20004851}, 0x24000052) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fddbdf250300000008000400fffbffff3800018014000400fe880000000000000000000000000101080006"], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x80, r7, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x400c091) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000bd7b59ecd79d9621972c877429d00000100", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000001000000010000000900"/24, @ANYRES32=r3, @ANYBLOB], 0x50) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x4a}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x64}}, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r8, @ANYBLOB="0000000010000000b7080000000000007b8af8ff00000000bfa200000000000007020000ef7a6cdab703000008000006b7040000000000008500000082000000bf91000000000000b7028600000000000085f9ff0084000000b700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 456.772082ms ago: executing program 3 (id=571): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$unix(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18, 0x810}, 0x4000000) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYRESDEC=r7], 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYRES16=r6], 0x40}}, 0x0) 455.984103ms ago: executing program 0 (id=572): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2, @empty, 0x8}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000880)="fb8b4f6a3714e1fa54f7f1c12e800868f147bc16ae2166d7659ff61df9213df7f11dccd7ae4beb33b564ca7a3b222247d4458fd569eefcc9814e3bd68946840656d708b475a31679692410f16442488d20109257020723aa4ce69843e963ab879564416e00cf45508ca392e324c88591cf6a093c1e2e33a00213d8bd23dfcd600e4de6aa7d208634159c959bb5e7f26f31a7ad3161154c3e8d8574e51619367d1d7262d8a904939746665e326ee21725ee661858f55c70d653ccc833d8d7dfdad0328403fd66bea8cb447a26b2c61f278cd2554a3837606991978961cea62a36ec617897", 0xe4}, {&(0x7f0000000980)="e984b01380ea59dcc63ee004d84a13bfd9f8533b6afa1e91c1e9a9e22966075be9c52d4ef2b324a8366ef2c26794fdfa7123b89591b44434746ac77e81afb975013bc2899557f2f9f87f2b56588724cf3595d3d21591ad531defd875c6e519ed39d2faf2dcc154aa4cfa72f7322cff33114db3d0de7812c029d9d3ffbae8cd1b079438b8f9bee990076e550c", 0x8c}, {&(0x7f0000000a40)="a2ce4207ccda5be31946f24f8cdb6446c5934ff099f9171865194707aa7b1651a483feae95280a26783c8c5694cd28be500cbe953fa9c6da1c7bb9e19026b300d127198e3f4c34b91de19425a2a799e31f920e9d72101c1801b1", 0x5a}, {&(0x7f0000000ac0)="4374ce0b1d1234253833cd97569b1d9796c6d35220c329714f6f49b351f78abf78cb4b9a645f0c45a7e209b9b04784874990e6ba31eeb8187e27ac5ba379c43d27d3a0de22ea2c831281b364e738cbe62e9ae7e697518a00741b3f0ed187ab2988da922557781b8a47b662601bfaf26feca8e4ab64d67f75c412cacb61509654e4680d5dbe741118220c6639a5d849dc2f460dfa88093e75fe5f817bb27096eaaddc4ea481a78a55b21bfbe082243b2cba47868e58320d8108fd7d2aee8b8124f5ca600f47e18ac6223f9c1ebcf14fbb1f1f2dcb0ea70e9f", 0xd8}], 0x4, &(0x7f0000000c00)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0xc}}, @tclass={{0x14, 0x29, 0x43, 0x6}}], 0x48}}], 0x1, 0x20000000) connect$inet6(r0, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000200000183aff00000000000000000000ffffac1e0e58010000000000001000000000000000aa8700907800000000fe8000000000000000000000000000aa790fff63cd5564fb0321b9a8d0da1f263cc8fd494ff9ab1311e0a6380f8869a5c6d0c35a62687d5ee3e1cbbd3fb38afa2fa7165fdd7ca501bc0efeb6ebf05506872cd6fdc83a8d9149aa66645335d8a1daf1ba8d151e66fb51772edaebcf1a4576fb32ff42875c667caa078c9b75a092289efbffcabaff67bda3b812ea6fe3a38b"], 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x7, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100}, 0x94) 383.475612ms ago: executing program 4 (id=573): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x10, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)='\x00\x00\x00', 0x3}, {&(0x7f0000000400)="e06bd3f745", 0x5}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4040000) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xfea8, 0xa) 358.920984ms ago: executing program 2 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050027bd7000fe9bdf25060000000800030081e5ed1e43cdef103385b152b8305c4463ba2c8c743e14bbca8d025edf15ba410d9f02f4c507831901cd13483aed3bddcc9966527c3df2dd0a608c909461f99dc4d3a38a4ca69294e35f9c37c45c429274e28e6514baa32b855849607269fb64319bed1b236cb84aff07a01de0b1a870acabba995442793eebca3e2a1fa931d21a81cb26b7bc6a67c538f8c9b4d4e98a41a636502c623b8c9bbd7983d278c4178492248004bea82e6c9a3ab38ae80eb10eef0da719727b1e29", @ANYRES32=r3, @ANYBLOB="0500530000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) (async) close(r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050027bd7000fe9bdf25060000000800030081e5ed1e43cdef103385b152b8305c4463ba2c8c743e14bbca8d025edf15ba410d9f02f4c507831901cd13483aed3bddcc9966527c3df2dd0a608c909461f99dc4d3a38a4ca69294e35f9c37c45c429274e28e6514baa32b855849607269fb64319bed1b236cb84aff07a01de0b1a870acabba995442793eebca3e2a1fa931d21a81cb26b7bc6a67c538f8c9b4d4e98a41a636502c623b8c9bbd7983d278c4178492248004bea82e6c9a3ab38ae80eb10eef0da719727b1e29", @ANYRES32=r3, @ANYBLOB="0500530000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) 204.297715ms ago: executing program 0 (id=575): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x24010058) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 203.454461ms ago: executing program 4 (id=576): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r4, @ANYRES64=r1, @ANYRES32=r4, @ANYBLOB="01000800000000000000000000000000000000008edd0000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) setsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000080)=0x97b1, 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r8 = accept4(r7, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r8) r9 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002d41e65f122373abc000000000000000000000000000000000000b40dfb8b890558e8ee9089c33e1679c2818d5c4306f91e71dd034189987c4b92badd1f2a85fbc7e5e4382ee25b8994c86ffaec02ac7daeb4cf"], 0x50) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)="ce7c1ea802e6d0f203e3aa74fdb29828281772fab4e7409f6046b5d47598f376a575bb07b251698700df8e86134cacc6dc3308fa6db390aee8e97bee0fc9f44791576bfa087f8cbc", 0x48}, {&(0x7f00000002c0)="bf94b9f1911fb1d1830f3f6c13df539ad93c9972134ff529becb523a8adc9ad12aa3a6b56ce030147452e7916876bb4cd1ba2f67f1a33ebd85b25c7d4753bcecdc717f965a4852c01bb39957f4e1b98e8dec", 0x52}], 0x2) r11 = socket(0x15, 0x5, 0x101) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r11, 0x8983, &(0x7f0000000180)={0x6, 'wlan1\x00', {0x5}}) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000500)=ANY=[@ANYBLOB="b32c3f3de9058d31cf2d95a52a299c7ba79a0c11504ca90f2f4c5078fab91352840185396d820a460737fdd53cff301f469763690719eee4ff6b902dd76300000042ae22e00951088bb400000000"], 0xc) close(r10) 174.34739ms ago: executing program 1 (id=577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xfffffffd, '\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0xb7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 59.027045ms ago: executing program 2 (id=578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000005400128009000100626f6e64000000004400028005001d000000000005000d000100000008000b00", @ANYRES32=0x0, @ANYBLOB="080009000300000008000900000000080000000000000000050001000000000008000200", @ANYRES32, @ANYBLOB="0a000100ff"], 0x88}}, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r2, 0x1, 0x3, 0x3, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000084) 788.718µs ago: executing program 0 (id=579): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x40, 0x2, 0xfd, 0x2, 0x5, 0x2768}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 0s ago: executing program 3 (id=580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031411d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408200000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 77.397672][ T5831] cgroup: Unknown subsys name 'net' [ 77.530192][ T5831] cgroup: Unknown subsys name 'cpuset' [ 77.539023][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.212569][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.440386][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.446116][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.448192][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.457488][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.471905][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.480448][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.484066][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.489875][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.495282][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.503905][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.509927][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.523671][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.526141][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.531171][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.539677][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.545305][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.560475][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.562882][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.576228][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.577409][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.591326][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.592674][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.608837][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.625978][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.641761][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.280132][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 82.351057][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 82.467210][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 82.519611][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 82.635842][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.643716][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.651034][ T5846] bridge_slave_0: entered allmulticast mode [ 82.658585][ T5846] bridge_slave_0: entered promiscuous mode [ 82.689627][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 82.701803][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.709146][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.716508][ T5846] bridge_slave_1: entered allmulticast mode [ 82.723687][ T5846] bridge_slave_1: entered promiscuous mode [ 82.840665][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.848002][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.855393][ T5843] bridge_slave_0: entered allmulticast mode [ 82.863138][ T5843] bridge_slave_0: entered promiscuous mode [ 82.885493][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.895157][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.903830][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.911572][ T5845] bridge_slave_0: entered allmulticast mode [ 82.919057][ T5845] bridge_slave_0: entered promiscuous mode [ 82.927930][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.935159][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.942603][ T5843] bridge_slave_1: entered allmulticast mode [ 82.950095][ T5843] bridge_slave_1: entered promiscuous mode [ 82.973452][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.982888][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.990558][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.997996][ T5845] bridge_slave_1: entered allmulticast mode [ 83.005080][ T5845] bridge_slave_1: entered promiscuous mode [ 83.070067][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.077409][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.084563][ T5850] bridge_slave_0: entered allmulticast mode [ 83.092258][ T5850] bridge_slave_0: entered promiscuous mode [ 83.135155][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.144652][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.152013][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.159242][ T5850] bridge_slave_1: entered allmulticast mode [ 83.166452][ T5850] bridge_slave_1: entered promiscuous mode [ 83.186143][ T5846] team0: Port device team_slave_0 added [ 83.194651][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.207942][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.227684][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.234888][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.242416][ T5844] bridge_slave_0: entered allmulticast mode [ 83.249920][ T5844] bridge_slave_0: entered promiscuous mode [ 83.259297][ T5846] team0: Port device team_slave_1 added [ 83.265041][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.272356][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.279743][ T5844] bridge_slave_1: entered allmulticast mode [ 83.288371][ T5844] bridge_slave_1: entered promiscuous mode [ 83.297251][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.370943][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.412235][ T5843] team0: Port device team_slave_0 added [ 83.420547][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.430903][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.438444][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.464695][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.479693][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.491534][ T5845] team0: Port device team_slave_0 added [ 83.499268][ T5843] team0: Port device team_slave_1 added [ 83.514632][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.523108][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.549267][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.562761][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.573908][ T5845] team0: Port device team_slave_1 added [ 83.642077][ T5850] team0: Port device team_slave_0 added [ 83.650926][ T5850] team0: Port device team_slave_1 added [ 83.677345][ T5165] Bluetooth: hci3: command tx timeout [ 83.677444][ T5862] Bluetooth: hci1: command tx timeout [ 83.677928][ T5853] Bluetooth: hci4: command tx timeout [ 83.683314][ T5865] Bluetooth: hci2: command tx timeout [ 83.688815][ T5848] Bluetooth: hci0: command tx timeout [ 83.690333][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.712678][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.738846][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.764620][ T5844] team0: Port device team_slave_0 added [ 83.771230][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.778691][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.804987][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.817066][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.824245][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.850690][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.884697][ T5844] team0: Port device team_slave_1 added [ 83.890997][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.898084][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.924405][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.952621][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.959852][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.985839][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.021563][ T5846] hsr_slave_0: entered promiscuous mode [ 84.028749][ T5846] hsr_slave_1: entered promiscuous mode [ 84.036143][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.043108][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.069327][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.092350][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.099569][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.126740][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.139680][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.146701][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.172722][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.227673][ T5843] hsr_slave_0: entered promiscuous mode [ 84.234015][ T5843] hsr_slave_1: entered promiscuous mode [ 84.241090][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 84.247429][ T5843] Cannot create hsr debugfs directory [ 84.312686][ T5845] hsr_slave_0: entered promiscuous mode [ 84.319511][ T5845] hsr_slave_1: entered promiscuous mode [ 84.325865][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 84.331635][ T5845] Cannot create hsr debugfs directory [ 84.417749][ T5850] hsr_slave_0: entered promiscuous mode [ 84.424099][ T5850] hsr_slave_1: entered promiscuous mode [ 84.430575][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 84.436363][ T5850] Cannot create hsr debugfs directory [ 84.447984][ T5844] hsr_slave_0: entered promiscuous mode [ 84.454238][ T5844] hsr_slave_1: entered promiscuous mode [ 84.460704][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 84.466480][ T5844] Cannot create hsr debugfs directory [ 85.003941][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.019877][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.028260][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.038856][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.048022][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.058182][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.066583][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.076709][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.164275][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.177511][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.189981][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.201261][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.210504][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.220347][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.242582][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.252239][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.343580][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.357367][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.367651][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.378398][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.397110][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.410022][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.418661][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.430367][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.549870][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.559915][ T5844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.571336][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.588478][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.603587][ T5844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.631048][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.641498][ T5844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.649988][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.659593][ T5844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.741214][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.752094][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.756350][ T5848] Bluetooth: hci1: command tx timeout [ 85.760244][ T5165] Bluetooth: hci2: command tx timeout [ 85.765983][ T5853] Bluetooth: hci0: command tx timeout [ 85.770692][ T5862] Bluetooth: hci3: command tx timeout [ 85.782789][ T5865] Bluetooth: hci4: command tx timeout [ 85.784417][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.798647][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.808560][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.817046][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.826817][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.848124][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.859754][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.877756][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.885208][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.927667][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.935187][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.968764][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.027893][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.082700][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.089894][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.110179][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.128679][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.136049][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.161535][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.179940][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.187122][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.226955][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.234109][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.296831][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.417137][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.488293][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.496069][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.523215][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.542780][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.550237][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.624331][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.698715][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.740660][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.748193][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.784359][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.791624][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.908903][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.020651][ T5846] veth0_vlan: entered promiscuous mode [ 87.068590][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.142670][ T5846] veth1_vlan: entered promiscuous mode [ 87.262568][ T5845] veth0_vlan: entered promiscuous mode [ 87.301269][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.328348][ T5845] veth1_vlan: entered promiscuous mode [ 87.393790][ T5846] veth0_macvtap: entered promiscuous mode [ 87.468330][ T5846] veth1_macvtap: entered promiscuous mode [ 87.527876][ T5850] veth0_vlan: entered promiscuous mode [ 87.563771][ T5850] veth1_vlan: entered promiscuous mode [ 87.611691][ T5845] veth0_macvtap: entered promiscuous mode [ 87.627036][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.646125][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.682077][ T5845] veth1_macvtap: entered promiscuous mode [ 87.701373][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.771414][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.805504][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.815861][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.840309][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.842775][ T5865] Bluetooth: hci4: command tx timeout [ 87.851249][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.854587][ T5853] Bluetooth: hci2: command tx timeout [ 87.854619][ T5853] Bluetooth: hci0: command tx timeout [ 87.854640][ T5853] Bluetooth: hci3: command tx timeout [ 87.854667][ T5853] Bluetooth: hci1: command tx timeout [ 87.898831][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.910668][ T5850] veth0_macvtap: entered promiscuous mode [ 87.942555][ T5850] veth1_macvtap: entered promiscuous mode [ 87.968480][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.977383][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.005253][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.017151][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.123997][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.139081][ T5843] veth0_vlan: entered promiscuous mode [ 88.150500][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.154377][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.165364][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.220056][ T5843] veth1_vlan: entered promiscuous mode [ 88.229508][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.230472][ T1120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.237940][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.256003][ T1120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.281366][ T1120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.290255][ T1120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.350171][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.358233][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.379477][ T5844] veth0_vlan: entered promiscuous mode [ 88.424167][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.425841][ T5844] veth1_vlan: entered promiscuous mode [ 88.433325][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.524182][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.541094][ T5843] veth0_macvtap: entered promiscuous mode [ 88.555699][ T5843] veth1_macvtap: entered promiscuous mode [ 88.598820][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.613612][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.779335][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.788382][ T5965] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 88.824733][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.846130][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.866564][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.922504][ T5844] veth0_macvtap: entered promiscuous mode [ 88.946126][ T156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.961436][ T156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.978050][ T156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.993763][ T156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.022946][ T5844] veth1_macvtap: entered promiscuous mode [ 89.282441][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.321746][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.361856][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.422825][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.430612][ T5986] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7'. [ 89.465270][ T5985] Zero length message leads to an empty skb [ 89.492406][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.515467][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.530953][ T135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.564966][ T135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.575147][ T135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.613850][ T135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.860512][ T5994] batadv_slave_0: entered allmulticast mode [ 89.915822][ T5848] Bluetooth: hci1: command tx timeout [ 89.921673][ T5853] Bluetooth: hci3: command tx timeout [ 89.921711][ T5862] Bluetooth: hci2: command tx timeout [ 89.928300][ T5865] Bluetooth: hci4: command tx timeout [ 89.932835][ T5165] Bluetooth: hci0: command tx timeout [ 89.953280][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.023256][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.039676][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.192736][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.236837][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.488196][ T6006] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13'. [ 90.894422][ T6030] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20'. [ 91.131401][ T6034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19'. [ 91.226782][ T6034] warning: `syz.4.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.633030][ T6048] Bluetooth: MGMT ver 1.23 [ 91.681067][ T6047] netlink: 32 bytes leftover after parsing attributes in process `syz.3.25'. [ 91.803714][ T6054] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 92.183899][ T808] cfg80211: failed to load regulatory.db [ 92.222591][ T6070] Bluetooth: MGMT ver 1.23 [ 92.251926][ T6070] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.31'. [ 92.282868][ T6074] bridge0: port 3(macsec1) entered blocking state [ 92.301992][ T6074] bridge0: port 3(macsec1) entered disabled state [ 92.324608][ T6074] macsec1: entered allmulticast mode [ 92.374811][ T6074] macsec1: left allmulticast mode [ 92.990005][ T6100] vlan2: entered promiscuous mode [ 93.020305][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.39'. [ 93.020777][ T6100] bridge0: entered promiscuous mode [ 93.169787][ T6105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.38'. [ 93.329617][ T6114] syz.3.42 uses obsolete (PF_INET,SOCK_PACKET) [ 94.151678][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.53'. [ 94.449757][ T6174] __nla_validate_parse: 11 callbacks suppressed [ 94.449782][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 94.613212][ T6179] netlink: 'syz.0.59': attribute type 25 has an invalid length. [ 94.630757][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 94.771409][ T1120] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.810242][ T1120] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.852343][ T1120] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.899860][ T1120] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.963261][ T6188] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 95.208887][ T6203] vlan0: entered promiscuous mode [ 95.275209][ T6210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.70'. [ 95.320312][ T6205] netlink: 'syz.2.69': attribute type 6 has an invalid length. [ 95.343430][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 95.783888][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 95.962036][ T6240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.79'. [ 96.019632][ T6240] netlink: 48 bytes leftover after parsing attributes in process `syz.1.79'. [ 96.024819][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 96.281490][ T6256] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.84'. [ 96.305303][ T6256] netlink: 256 bytes leftover after parsing attributes in process `syz.4.84'. [ 96.756374][ T6276] syzkaller0: entered promiscuous mode [ 96.782684][ T6276] syzkaller0: entered allmulticast mode [ 96.832778][ T6279] 0: reclassify loop, rule prio 0, protocol 800 [ 97.365112][ T6290] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 97.394899][ T6290] bond1: option packets_per_slave: allowed values 0 - 65535 [ 97.435079][ T6308] netlink: 'syz.2.98': attribute type 6 has an invalid length. [ 97.450018][ T6308] netlink: 'syz.2.98': attribute type 5 has an invalid length. [ 97.473783][ T6290] bond1 (unregistering): Released all slaves [ 97.511388][ T6295] gre1: entered promiscuous mode [ 97.517154][ T6295] gre1: entered allmulticast mode [ 98.061950][ T6327] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 98.424442][ T6338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.730218][ T6356] sctp: [Deprecated]: syz.4.117 (pid 6356) Use of int in maxseg socket option. [ 98.730218][ T6356] Use struct sctp_assoc_value instead [ 99.841434][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 121.913454][ T6386] __nla_validate_parse: 11 callbacks suppressed [ 121.913477][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.122'. [ 122.120051][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 122.538427][ T6422] netlink: 36 bytes leftover after parsing attributes in process `syz.3.132'. [ 122.576844][ T6424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.133'. [ 122.578998][ T6417] syzkaller0: entered promiscuous mode [ 122.627304][ T6417] syzkaller0: entered allmulticast mode [ 122.866659][ T6431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.874225][ T6431] bridge0: port 3(bond1) entered blocking state [ 122.896162][ T6431] bridge0: port 3(bond1) entered disabled state [ 122.911440][ T6431] bond1: entered allmulticast mode [ 122.942052][ T6431] bond1: entered promiscuous mode [ 122.954304][ T6431] bridge0: port 3(bond1) entered blocking state [ 122.961722][ T6431] bridge0: port 3(bond1) entered forwarding state [ 123.012683][ T135] bridge0: port 3(bond1) entered disabled state [ 123.019761][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 123.265467][ T6455] nbd: couldn't find a device at index 1048580 [ 123.512187][ T6463] wireguard: wg0: Could not create IPv4 socket [ 123.592484][ T6469] netlink: 232 bytes leftover after parsing attributes in process `syz.3.145'. [ 123.768626][ T6474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.148'. [ 123.988040][ T6476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.148'. [ 124.149365][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 124.212460][ T6496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.364606][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 126.668748][ T6474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.688464][ T6489] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 126.926509][ T6518] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 126.959584][ T6523] netlink: 'syz.1.161': attribute type 29 has an invalid length. [ 126.982825][ T6523] __nla_validate_parse: 2 callbacks suppressed [ 126.982845][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 127.038195][ T6526] netlink: 'syz.3.157': attribute type 39 has an invalid length. [ 127.322752][ T6529] syzkaller1: entered promiscuous mode [ 127.338543][ T6529] syzkaller1: entered allmulticast mode [ 127.907038][ T6566] tipc: Started in network mode [ 127.907428][ T6567] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.171'. [ 127.923241][ T6566] tipc: Node identity 8acffd08b2a9, cluster identity 4711 [ 127.947326][ T6566] tipc: Enabled bearer , priority 0 [ 127.961718][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 127.980582][ T6566] syzkaller0: entered promiscuous mode [ 127.999170][ T6566] syzkaller0: entered allmulticast mode [ 128.008961][ T6570] veth1_macvtap: left promiscuous mode [ 128.101144][ T6566] tipc: Resetting bearer [ 128.710993][ T6564] tipc: Resetting bearer [ 128.796299][ T6564] tipc: Disabling bearer [ 128.847087][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'. [ 129.255745][ T6566] infiniband syz1: set active [ 129.273994][ T6566] infiniband syz1: added bond_slave_1 [ 129.327118][ T6566] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 129.333490][ T6566] infiniband syz1: Couldn't open port 1 [ 129.374666][ T6566] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 129.419209][ T6566] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 129.472460][ T808] IPVS: starting estimator thread 0... [ 129.475647][ T6566] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 129.554055][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 129.585775][ T6639] IPVS: using max 24 ests per chain, 57600 per kthread [ 129.678310][ T6566] RDS/IB: syz1: added [ 129.694195][ T6566] smc: adding ib device syz1 with port count 1 [ 129.715289][ T6566] smc: ib device syz1 port 1 has no pnetid [ 129.773217][ T6649] netlink: 'syz.0.189': attribute type 1 has an invalid length. [ 129.954197][ T6655] IPv6: addrconf: prefix option has invalid lifetime [ 129.972138][ T6649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.982357][ T6647] syzkaller0: entered promiscuous mode [ 130.002005][ T6647] syzkaller0: entered allmulticast mode [ 130.178515][ T6657] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.191'. [ 130.474834][ T6664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'. [ 130.501959][ T6664] netlink: 80 bytes leftover after parsing attributes in process `syz.1.193'. [ 130.536313][ T6664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'. [ 130.561093][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 130.589336][ T6667] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 130.672993][ T6669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.907002][ T6679] gre1: entered promiscuous mode [ 130.931053][ T6679] gre1: entered allmulticast mode [ 132.135071][ T6724] __nla_validate_parse: 2 callbacks suppressed [ 132.135094][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 132.536443][ T6736] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 132.578666][ T6736] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 133.126214][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.148772][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.262099][ T6767] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 133.404082][ T6775] sctp: [Deprecated]: syz.1.216 (pid 6775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.404082][ T6775] Use struct sctp_sack_info instead [ 133.446164][ T6774] sctp: [Deprecated]: syz.1.216 (pid 6774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.446164][ T6774] Use struct sctp_sack_info instead [ 133.553170][ T6774] xt_ecn: cannot match TCP bits for non-tcp packets [ 133.745452][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 133.951835][ T6783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.219'. [ 134.329087][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 134.614516][ T6812] netlink: 256 bytes leftover after parsing attributes in process `syz.3.226'. [ 134.630299][ T6812] netlink: 256 bytes leftover after parsing attributes in process `syz.3.226'. [ 134.853850][ T6815] tipc: Started in network mode [ 134.875857][ T6815] tipc: Node identity 6aa1244abc86, cluster identity 4711 [ 134.900169][ T6815] tipc: Enabled bearer , priority 0 [ 135.089979][ T6818] syzkaller0: entered promiscuous mode [ 135.107350][ T6818] syzkaller0: entered allmulticast mode [ 135.119270][ T6818] tipc: Resetting bearer [ 135.233002][ T35] tipc: Resetting bearer [ 135.259224][ T6814] tipc: Resetting bearer [ 135.579548][ T6842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.235'. [ 136.812720][ T6814] tipc: Disabling bearer [ 136.970947][ T5928] tipc: Node number set to 3592889418 [ 137.094080][ T6854] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 137.144702][ T6855] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 137.187119][ T6855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.239'. [ 137.253720][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.284488][ T6854] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 137.310141][ T6855] batadv0: entered promiscuous mode [ 137.319520][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.242'. [ 137.331630][ T6855] batadv0: entered allmulticast mode [ 137.361560][ T6855] bond0: (slave batadv0): Releasing backup interface [ 137.387764][ T6855] bridge0: port 4(batadv0) entered blocking state [ 137.394747][ T6855] bridge0: port 4(batadv0) entered disabled state [ 137.646005][ T6877] bond1: Unable to set up delay as MII monitoring is disabled [ 137.656526][ T6877] bond1 (unregistering): Released all slaves [ 137.697108][ T135] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 137.707176][ T135] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 137.954894][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 138.323112][ T6906] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 138.503916][ T6912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.573180][ T6916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.257'. [ 138.818838][ T6922] netlink: 'syz.2.261': attribute type 6 has an invalid length. [ 138.862021][ T6927] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.263'. [ 138.901162][ T6927] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.263'. [ 138.939745][ T6927] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.263'. [ 138.977609][ T6927] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.263'. [ 139.014660][ T6927] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.263'. [ 139.061338][ T6927] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.263'. [ 139.110822][ T6936] tipc: Enabling of bearer rejected, failed to enable media [ 139.149812][ T6939] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 139.163933][ T6942] netlink: 'syz.1.268': attribute type 1 has an invalid length. [ 139.227807][ T6939] macsec1: entered promiscuous mode [ 139.469609][ T6942] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.602678][ T6962] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 139.825149][ T6984] openvswitch: netlink: IPv4 tun info is not correct [ 139.843961][ T6968] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 139.952409][ T6976] veth5: entered promiscuous mode [ 139.964480][ T6976] veth5: entered allmulticast mode [ 140.502116][ T6969] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 140.790869][ T7031] raw_sendmsg: syz.4.288 forgot to set AF_INET. Fix it! [ 141.032377][ T7042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.125461][ T7049] TCP: TCP_TX_DELAY enabled [ 141.142280][ T7049] delete_channel: no stack [ 141.995024][ T7088] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 142.044405][ T7091] netlink: 'syz.0.306': attribute type 1 has an invalid length. [ 142.501855][ T7110] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 142.912193][ T7131] __nla_validate_parse: 39 callbacks suppressed [ 142.912216][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 143.024173][ T7140] openvswitch: netlink: IP tunnel dst address not specified [ 143.049496][ T7127] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 143.807626][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 143.937249][ T7172] vlan2: entered promiscuous mode [ 143.969660][ T7172] bridge0: entered promiscuous mode [ 144.157552][ T1109] wlan1: Trigger new scan to find an IBSS to join [ 144.245945][ T7188] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 144.303715][ T7170] netlink: 36 bytes leftover after parsing attributes in process `syz.2.327'. [ 145.154537][ T7227] openvswitch: netlink: IPv4 tunnel dst address is zero [ 145.227946][ T7232] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 145.668310][ T7256] xt_hashlimit: size too large, truncated to 1048576 [ 145.787914][ T7254] geneve2: entered promiscuous mode [ 145.809625][ T7254] geneve2: entered allmulticast mode [ 145.865071][ T1178] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 145.904067][ T1178] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 145.974397][ T1178] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 146.007188][ T1178] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 146.462406][ T7280] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 146.480338][ T7282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.349'. [ 146.759616][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 146.813414][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 146.951395][ T7302] netlink: 'syz.1.358': attribute type 2 has an invalid length. [ 146.977651][ T7301] netlink: 'syz.1.358': attribute type 2 has an invalid length. [ 147.098631][ T7305] bridge_slave_0: left allmulticast mode [ 147.118752][ T1109] wlan1: Trigger new scan to find an IBSS to join [ 147.125626][ T7305] bridge_slave_0: left promiscuous mode [ 147.151761][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.221129][ T7305] bridge_slave_1: left allmulticast mode [ 147.237114][ T7305] bridge_slave_1: left promiscuous mode [ 147.253393][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.297911][ T7305] bond0: (slave bond_slave_0): Releasing backup interface [ 147.331179][ T7305] bond0: (slave bond_slave_1): Releasing backup interface [ 147.403927][ T7305] team0: Port device team_slave_0 removed [ 147.436869][ T7305] team0: Port device team_slave_1 removed [ 147.447473][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.457403][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.467148][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.474823][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.491512][ T7305] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.503514][ T7316] netlink: 'syz.3.361': attribute type 6 has an invalid length. [ 147.743112][ T7333] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 147.856957][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 148.198989][ T7352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.367'. [ 149.043110][ T7371] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 149.273117][ T7385] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 149.498230][ T7371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.657208][ T7401] netlink: 'syz.4.379': attribute type 58 has an invalid length. [ 149.665311][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.379'. [ 149.866525][ T7394] bond4: (slave bridge2): making interface the new active one [ 149.876890][ T7394] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 149.887044][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 149.905392][ T7380] syzkaller1: entered promiscuous mode [ 149.915228][ T7380] syzkaller1: entered allmulticast mode [ 150.156565][ T1120] wlan1: Trigger new scan to find an IBSS to join [ 150.321525][ T7422] netlink: 'syz.2.385': attribute type 10 has an invalid length. [ 150.370395][ T7422] veth0_vlan: left promiscuous mode [ 150.389428][ T7422] veth0_vlan: entered promiscuous mode [ 150.434242][ T7422] team0: Device veth0_vlan failed to register rx_handler [ 150.488602][ T7432] netlink: 'syz.1.388': attribute type 5 has an invalid length. [ 150.503736][ T7426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.540028][ T7432] netlink: 'syz.1.388': attribute type 12 has an invalid length. [ 150.573817][ T7432] netlink: 148 bytes leftover after parsing attributes in process `syz.1.388'. [ 150.592464][ T7432] netlink: 59 bytes leftover after parsing attributes in process `syz.1.388'. [ 150.652266][ T7442] openvswitch: netlink: Missing valid actions attribute. [ 150.682931][ T7442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.759189][ T7442] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 150.796483][ T7442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.061230][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.394'. [ 151.097669][ T1109] wlan1: Creating new IBSS network, BSSID b6:fc:77:b9:e7:8d [ 151.449349][ T7489] sctp: [Deprecated]: syz.1.401 (pid 7489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.449349][ T7489] Use struct sctp_sack_info instead [ 151.664493][ T7492] validate_nla: 2 callbacks suppressed [ 151.664514][ T7492] netlink: 'syz.1.401': attribute type 21 has an invalid length. [ 151.767171][ T7492] netlink: 128 bytes leftover after parsing attributes in process `syz.1.401'. [ 151.896932][ T7492] netlink: 'syz.1.401': attribute type 4 has an invalid length. [ 151.945620][ T7492] netlink: 'syz.1.401': attribute type 5 has an invalid length. [ 151.993313][ T7492] netlink: 3 bytes leftover after parsing attributes in process `syz.1.401'. [ 152.082233][ T7519] openvswitch: netlink: IP tunnel TTL not specified. [ 152.359862][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 152.633479][ T7538] geneve2: entered promiscuous mode [ 152.634449][ T7542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.659089][ T7538] geneve2: entered allmulticast mode [ 152.704045][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 152.756366][ T135] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.791509][ T135] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.827624][ T7555] netlink: 'syz.0.417': attribute type 1 has an invalid length. [ 152.873373][ T135] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.873532][ T7555] netlink: 'syz.0.417': attribute type 7 has an invalid length. [ 152.919920][ T135] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.968119][ T7555] netlink: 'syz.0.417': attribute type 8 has an invalid length. [ 153.331076][ T7573] __nla_validate_parse: 3 callbacks suppressed [ 153.331097][ T7573] netlink: 60 bytes leftover after parsing attributes in process `syz.4.427'. [ 153.422796][ T7569] can: request_module (can-proto-0) failed. [ 153.427977][ T7573] unsupported nlmsg_type 40 [ 153.653604][ T808] IPVS: starting estimator thread 0... [ 153.661493][ T7589] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20002 [ 153.807579][ T7594] IPVS: using max 26 ests per chain, 62400 per kthread [ 153.884935][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 153.996665][ T7606] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 154.033779][ T7610] IPVS: ip_vs_edit_dest(): server weight less than zero [ 154.052941][ T7606] netlink: 'syz.3.437': attribute type 2 has an invalid length. [ 154.114176][ T7614] netlink: 'syz.4.440': attribute type 5 has an invalid length. [ 154.121269][ T7606] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 154.129922][ T7611] syzkaller0: entered promiscuous mode [ 154.134086][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 154.151984][ T7611] syzkaller0: entered allmulticast mode [ 154.410964][ T7628] Cannot find add_set index 46338 as target [ 154.450459][ T7626] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 154.470880][ T7626] bond3 (unregistering): Released all slaves [ 154.611429][ T7638] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 155.271871][ T7672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.457'. [ 155.354176][ T7674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.458'. [ 155.518879][ T7684] ip6t_srh: unknown srh match flags 5F28 [ 155.858123][ T7696] sock: sock_set_timeout: `syz.2.464' (pid 7696) tries to set negative timeout [ 155.933257][ T7697] geneve2: entered promiscuous mode [ 155.946726][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 58807 - 0 [ 155.957414][ T7702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.468'. [ 155.977685][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 58807 - 0 [ 156.021045][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 58807 - 0 [ 156.102234][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 58807 - 0 [ 156.213734][ T7711] netlink: 56 bytes leftover after parsing attributes in process `syz.1.470'. [ 156.238837][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.470'. [ 156.273149][ T7711] netlink: 31 bytes leftover after parsing attributes in process `syz.1.470'. [ 156.305017][ T7711] netlink: 31 bytes leftover after parsing attributes in process `syz.1.470'. [ 156.341603][ T7715] veth0: entered promiscuous mode [ 156.545876][ T7730] delete_channel: no stack [ 156.692930][ T7722] veth0: left promiscuous mode [ 156.776935][ T7738] ip6t_srh: unknown srh invflags 4000 [ 156.794779][ T7738] ip6t_srh: unknown srh invflags 4000 [ 156.822908][ T7738] ip6t_srh: unknown srh invflags 4000 [ 156.844617][ T7738] ip6t_srh: unknown srh invflags 4000 [ 156.847339][ T7740] validate_nla: 4 callbacks suppressed [ 156.847357][ T7740] netlink: 'syz.2.479': attribute type 6 has an invalid length. [ 156.867062][ T7740] netlink: 'syz.2.479': attribute type 5 has an invalid length. [ 156.882340][ T7738] ip6t_srh: unknown srh invflags 4000 [ 156.910917][ T7738] ip6t_srh: unknown srh invflags 4000 [ 156.934307][ T7738] ip6t_srh: unknown srh invflags 4000 [ 156.959024][ T7738] ip6t_srh: unknown srh invflags 4000 [ 156.979457][ T7738] ip6t_srh: unknown srh invflags 4000 [ 156.996679][ T7738] ip6t_srh: unknown srh invflags 4000 [ 157.045989][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 157.057618][ T7745] syzkaller0: entered promiscuous mode [ 157.092694][ T7745] syzkaller0: entered allmulticast mode [ 158.294568][ T7779] syz.3.490 (7779) used greatest stack depth: 17944 bytes left [ 158.413629][ T7791] __nla_validate_parse: 9 callbacks suppressed [ 158.413652][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 158.515891][ T7798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.495'. [ 158.552528][ T7793] syzkaller0: entered promiscuous mode [ 158.562220][ T7793] syzkaller0: entered allmulticast mode [ 158.790188][ T7810] netem: unknown loss type 0 [ 158.797052][ T7810] netem: change failed [ 158.943810][ T7816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.500'. [ 158.968773][ T7817] netlink: 'syz.0.499': attribute type 4 has an invalid length. [ 158.983082][ T7817] netlink: 152 bytes leftover after parsing attributes in process `syz.0.499'. [ 159.038067][ T7817] .`: renamed from bond0 (while UP) [ 159.292654][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 159.340787][ T7835] netlink: 'syz.4.508': attribute type 21 has an invalid length. [ 159.362927][ T7835] netlink: 128 bytes leftover after parsing attributes in process `syz.4.508'. [ 159.428939][ T7835] netlink: 'syz.4.508': attribute type 4 has an invalid length. [ 159.458865][ T7835] netlink: 'syz.4.508': attribute type 5 has an invalid length. [ 159.484363][ T7835] netlink: 3 bytes leftover after parsing attributes in process `syz.4.508'. [ 159.556592][ T7842] ksmbd: Unknown IPC event: 3, ignore. [ 159.700863][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'. [ 159.782050][ T7850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.514'. [ 159.841839][ T7851] vlan2: entered allmulticast mode [ 159.866328][ T7851] bridge2: entered allmulticast mode [ 159.896385][ T5928] IPVS: starting estimator thread 0... [ 159.929031][ T7846] bridge2: port 1(bond3) entered blocking state [ 159.948956][ T7846] bridge2: port 1(bond3) entered disabled state [ 159.967639][ T7846] bond3: entered allmulticast mode [ 159.978597][ T7846] bond3: entered promiscuous mode [ 159.986555][ T7858] IPVS: using max 47 ests per chain, 112800 per kthread [ 160.016794][ T7864] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 160.059485][ T7864] netlink: 96 bytes leftover after parsing attributes in process `syz.0.517'. [ 160.942123][ T7866] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 161.265831][ T7912] vcan1: entered promiscuous mode [ 161.295628][ T7912] vcan1: entered allmulticast mode [ 161.364838][ T7921] vcan1: entered promiscuous mode [ 161.375279][ T7921] vcan1: entered allmulticast mode [ 161.611631][ T7938] bridge_slave_0: entered promiscuous mode [ 161.634056][ T7940] netlink: 'syz.4.535': attribute type 4 has an invalid length. [ 161.653468][ T7941] netlink: 'syz.4.535': attribute type 4 has an invalid length. [ 161.710822][ T7940] .`¹: renamed from bond0 (while UP) [ 162.273325][ T7968] dvmrp0: entered allmulticast mode [ 164.171232][ T7913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.259173][ T7971] __nla_validate_parse: 13 callbacks suppressed [ 164.259196][ T7971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.543'. [ 164.513473][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 164.964253][ T7995] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 164.985423][ T7988] bond0 (unregistering): Released all slaves [ 165.243049][ T8002] bond0: (slave ip6gretap1): making interface the new active one [ 165.267614][ T8002] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 165.285403][ T8002] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 165.300089][ T8002] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 165.438737][ T8017] syzkaller0: entered promiscuous mode [ 165.465194][ T8017] syzkaller0: entered allmulticast mode [ 165.539603][ T8021] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 165.562991][ T8021] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 165.579478][ T8021] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.559'. [ 165.671019][ T8028] netlink: 'syz.3.559': attribute type 7 has an invalid length. [ 165.705821][ T8028] netlink: 140 bytes leftover after parsing attributes in process `syz.3.559'. [ 165.991609][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 166.148720][ T8034] vlan3: entered allmulticast mode [ 166.178893][ T8034] bridge1: entered allmulticast mode [ 166.357263][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 166.381963][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 166.383083][ T8039] bond0 (unregistering): Released all slaves [ 166.399564][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 166.492989][ T8048] gretap1: entered promiscuous mode [ 166.528955][ T8048] batman_adv: batadv0: Adding interface: gretap1 [ 166.561228][ T8048] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 166.586307][ T8048] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 166.688249][ T8058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.079853][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 167.132774][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 167.311034][ T8075] [ 167.313450][ T8075] ====================================================== [ 167.320516][ T8075] WARNING: possible circular locking dependency detected [ 167.327561][ T8075] syzkaller #0 Not tainted [ 167.332085][ T8075] ------------------------------------------------------ [ 167.339296][ T8075] syz.4.576/8075 is trying to acquire lock: [ 167.345221][ T8075] ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 167.354845][ T8075] [ 167.354845][ T8075] but task is already holding lock: [ 167.362248][ T8075] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 167.372216][ T8075] [ 167.372216][ T8075] which lock already depends on the new lock. [ 167.372216][ T8075] [ 167.382635][ T8075] [ 167.382635][ T8075] the existing dependency chain (in reverse order) is: [ 167.391662][ T8075] [ 167.391662][ T8075] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 167.399576][ T8075] _raw_spin_lock_bh+0x36/0x50 [ 167.404915][ T8075] nr_rt_ioctl+0x40c/0xf90 [ 167.409910][ T8075] sock_do_ioctl+0x101/0x320 [ 167.415041][ T8075] sock_ioctl+0x5c6/0x7f0 [ 167.419900][ T8075] __se_sys_ioctl+0xfc/0x170 [ 167.425074][ T8075] do_syscall_64+0x15f/0xf80 [ 167.430202][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.436625][ T8075] [ 167.436625][ T8075] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 167.444626][ T8075] _raw_spin_lock_bh+0x36/0x50 [ 167.449920][ T8075] nr_rt_ioctl+0x215/0xf90 [ 167.454862][ T8075] sock_do_ioctl+0x101/0x320 [ 167.459986][ T8075] sock_ioctl+0x5c6/0x7f0 [ 167.464856][ T8075] __se_sys_ioctl+0xfc/0x170 [ 167.469979][ T8075] do_syscall_64+0x15f/0xf80 [ 167.475106][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.481527][ T8075] [ 167.481527][ T8075] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 167.489361][ T8075] __lock_acquire+0x15a5/0x2cf0 [ 167.494830][ T8075] lock_acquire+0x106/0x350 [ 167.499878][ T8075] _raw_spin_lock_bh+0x36/0x50 [ 167.505183][ T8075] nr_rt_device_down+0xbe/0x860 [ 167.510557][ T8075] nr_device_event+0x137/0x150 [ 167.515857][ T8075] notifier_call_chain+0x1ad/0x3d0 [ 167.521496][ T8075] netif_close_many+0x2ae/0x420 [ 167.526880][ T8075] netif_close+0x160/0x220 [ 167.531830][ T8075] dev_close+0x10a/0x220 [ 167.536624][ T8075] bpq_device_event+0x377/0x6a0 [ 167.542009][ T8075] notifier_call_chain+0x1ad/0x3d0 [ 167.547648][ T8075] __dev_notify_flags+0x16d/0x310 [ 167.553199][ T8075] netif_change_flags+0xe8/0x1a0 [ 167.558673][ T8075] dev_change_flags+0x130/0x270 [ 167.564223][ T8075] dev_ioctl+0x7b4/0x1150 [ 167.569084][ T8075] sock_do_ioctl+0x23e/0x320 [ 167.574292][ T8075] sock_ioctl+0x5c6/0x7f0 [ 167.579147][ T8075] __se_sys_ioctl+0xfc/0x170 [ 167.584263][ T8075] do_syscall_64+0x15f/0xf80 [ 167.589382][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.595940][ T8075] [ 167.595940][ T8075] other info that might help us debug this: [ 167.595940][ T8075] [ 167.606167][ T8075] Chain exists of: [ 167.606167][ T8075] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 167.606167][ T8075] [ 167.619998][ T8075] Possible unsafe locking scenario: [ 167.619998][ T8075] [ 167.627452][ T8075] CPU0 CPU1 [ 167.632818][ T8075] ---- ---- [ 167.638191][ T8075] lock(nr_neigh_list_lock); [ 167.642875][ T8075] lock(&nr_node->node_lock); [ 167.650163][ T8075] lock(nr_neigh_list_lock); [ 167.657453][ T8075] lock(nr_node_list_lock); [ 167.662067][ T8075] [ 167.662067][ T8075] *** DEADLOCK *** [ 167.662067][ T8075] [ 167.670208][ T8075] 2 locks held by syz.4.576/8075: [ 167.675230][ T8075] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 167.684302][ T8075] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 167.694317][ T8075] [ 167.694317][ T8075] stack backtrace: [ 167.700299][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.4.576 Not tainted syzkaller #0 PREEMPT(full) [ 167.700319][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.700328][ T8075] Call Trace: [ 167.700337][ T8075] [ 167.700345][ T8075] dump_stack_lvl+0xe8/0x150 [ 167.700372][ T8075] print_circular_bug+0x2e1/0x300 [ 167.700393][ T8075] check_noncircular+0x12e/0x150 [ 167.700413][ T8075] __lock_acquire+0x15a5/0x2cf0 [ 167.700441][ T8075] ? __lock_acquire+0x6b5/0x2cf0 [ 167.700465][ T8075] ? dsa_user_netdevice_event+0x495/0x2850 [ 167.700484][ T8075] ? packet_notifier+0x121/0xf70 [ 167.700505][ T8075] ? nr_rt_device_down+0xbe/0x860 [ 167.700519][ T8075] lock_acquire+0x106/0x350 [ 167.700541][ T8075] ? nr_rt_device_down+0xbe/0x860 [ 167.700556][ T8075] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 167.700576][ T8075] ? nr_rt_device_down+0xbe/0x860 [ 167.700589][ T8075] _raw_spin_lock_bh+0x36/0x50 [ 167.700608][ T8075] ? nr_rt_device_down+0xbe/0x860 [ 167.700621][ T8075] nr_rt_device_down+0xbe/0x860 [ 167.700635][ T8075] ? nr_device_event+0x12f/0x150 [ 167.700659][ T8075] nr_device_event+0x137/0x150 [ 167.700681][ T8075] notifier_call_chain+0x1ad/0x3d0 [ 167.700700][ T8075] netif_close_many+0x2ae/0x420 [ 167.700721][ T8075] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 167.700741][ T8075] ? __pfx_netif_close_many+0x10/0x10 [ 167.700763][ T8075] ? bond_netdev_event+0x231/0xfa0 [ 167.700784][ T8075] ? __neigh_ifdown+0x7fd/0x8c0 [ 167.700806][ T8075] netif_close+0x160/0x220 [ 167.700826][ T8075] ? __pfx_netif_close+0x10/0x10 [ 167.700852][ T8075] ? __asan_memset+0x22/0x50 [ 167.700868][ T8075] ? macvtap_device_event+0xd1/0x400 [ 167.700887][ T8075] dev_close+0x10a/0x220 [ 167.700902][ T8075] bpq_device_event+0x377/0x6a0 [ 167.700921][ T8075] notifier_call_chain+0x1ad/0x3d0 [ 167.700940][ T8075] __dev_notify_flags+0x16d/0x310 [ 167.700957][ T8075] ? __pfx___dev_notify_flags+0x10/0x10 [ 167.700971][ T8075] ? __dev_change_flags+0x5a0/0x7e0 [ 167.700988][ T8075] ? __pfx___dev_change_flags+0x10/0x10 [ 167.701005][ T8075] ? full_name_hash+0x92/0xe0 [ 167.701021][ T8075] netif_change_flags+0xe8/0x1a0 [ 167.701038][ T8075] dev_change_flags+0x130/0x270 [ 167.701054][ T8075] dev_ioctl+0x7b4/0x1150 [ 167.701079][ T8075] sock_do_ioctl+0x23e/0x320 [ 167.701101][ T8075] ? __pfx_sock_do_ioctl+0x10/0x10 [ 167.701119][ T8075] ? do_futex+0x395/0x420 [ 167.701138][ T8075] sock_ioctl+0x5c6/0x7f0 [ 167.701157][ T8075] ? __pfx_sock_ioctl+0x10/0x10 [ 167.701175][ T8075] ? __fget_files+0x2a/0x420 [ 167.701190][ T8075] ? __fget_files+0x3a0/0x420 [ 167.701204][ T8075] ? __fget_files+0x2a/0x420 [ 167.701219][ T8075] ? bpf_lsm_file_ioctl+0x9/0x20 [ 167.701239][ T8075] ? __pfx_sock_ioctl+0x10/0x10 [ 167.701257][ T8075] __se_sys_ioctl+0xfc/0x170 [ 167.701276][ T8075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.701291][ T8075] do_syscall_64+0x15f/0xf80 [ 167.701311][ T8075] ? trace_irq_disable+0x3b/0x140 [ 167.701330][ T8075] ? clear_bhb_loop+0x40/0x90 [ 167.701347][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.701362][ T8075] RIP: 0033:0x7f765619cdd9 [ 167.701377][ T8075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.701390][ T8075] RSP: 002b:00007f7656fe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.701406][ T8075] RAX: ffffffffffffffda RBX: 00007f7656415fa0 RCX: 00007f765619cdd9 [ 167.701418][ T8075] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 167.701428][ T8075] RBP: 00007f7656232d69 R08: 0000000000000000 R09: 0000000000000000 [ 167.701437][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.701447][ T8075] R13: 00007f7656416038 R14: 00007f7656415fa0 R15: 00007ffcec218528 [ 167.701463][ T8075] [ 168.113070][ T8084] syzkaller0: entered promiscuous mode [ 168.146174][ T8084] syzkaller0: entered allmulticast mode