last executing test programs: 6.871199697s ago: executing program 1 (id=921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x880, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x5f, 0x61]}}, &(0x7f00000014c0)=""/2, 0x47, 0x2, 0x1}, 0x28) (async) read$rfkill(r7, &(0x7f0000000400), 0x8) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xe, 0x4}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x5}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x307000, 0x0) close(r13) (async) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x94) 6.406550948s ago: executing program 1 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x0, 0xd1f}, {{@in=@private=0xa010102, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x3, 0x0, 0x8, 0x100, 0x0, 0x80}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x10000000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff}, 0x2, @in6=@private1, 0x0, 0x5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c064}, 0x200c000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xb29, 0x14, 0x3}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f1, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x4d, 0x0, @wg=@data={0x4, 0x202, 0x1ff, "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"}}}}, 0x7ff) socket$netlink(0x10, 0x3, 0x0) socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) 3.767378927s ago: executing program 0 (id=932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = socket$inet6(0xa, 0xa, 0x5a88343c) getsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, &(0x7f0000000040)) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000060800008500000061000000850000000700000095000000000000001364db32b23fd30d2a5bae0da9e8e96679cb1755430dd4555d1ae30b0b4dea952ae0fa222f9ecdf5f1a981074bbd594eb509000000ec4086f0bac8219639fce832a6687d6f8633acf2bf24e1875d5187d1b8792385655463b19dc633a27035c529f4d6f05e60dde2ae883b7639685f7045772d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x8, 0x8, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r4, r5, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000005ba8ab3f24f2cf070f5e0d8ce453a75398d06e8961d4810832911d3a4179ab0737fd43c1647c1c0669f3bbab6f9473a3f33d3d3f4299071a7682f14f09398629dcda1975c3cf83ec026f6c6b896a32740cfd4536124822da411aa1da3f0600000000000000f11d05bea8d630d96e6302c88c0aad71d20fd942633e41c0880ba8c8063a59166a0d", @ANYRES16=r7, @ANYBLOB="c5cccd75df2922536a2ed47ef816d136a2e1b52bb87ecc1da27ee9c1081a231469148d158b"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) r8 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)=ANY=[], 0x32c}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x2}, {0xd, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendto(r9, 0x0, 0x0, 0x24044041, 0x0, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYRES8=r2], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002a80)={r2, &(0x7f00000019c0)="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", &(0x7f00000029c0)=""/161}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000ffff0000000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10}, 0x10}, 0x94) 3.634999348s ago: executing program 4 (id=933): r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'ip6gre0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x4, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xff, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x7, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x10}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000000)={0x200, 0x5}) 3.43185328s ago: executing program 4 (id=936): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000000f1c"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 3.049833264s ago: executing program 2 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x78, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond0\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000800) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 2.887059445s ago: executing program 4 (id=940): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb6c42c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004090) 2.868586676s ago: executing program 2 (id=941): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @bcast}, [@bcast, @rose, @rose, @netrom, @bcast, @remote, @netrom, @default]}, &(0x7f0000000400)=0x48) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000440)=0x9, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x2a}, 0x28) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (rerun: 64) r4 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01000af3e3fa2a75a079a57013f41734000000000000000000"], &(0x7f0000000280)=""/239, 0x1b, 0xef, 0x2}, 0x28) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xba, 0x6ce, 0x7, 0x3d29dca3, 0x8}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.843558437s ago: executing program 0 (id=942): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0xff6c) pread64(r1, 0x0, 0x0, 0x8) ioctl$int_in(r1, 0x73, 0x0) write$ppp(r1, &(0x7f0000000200)="bc72", 0x2) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20004090) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4044) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x24000080) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x6, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) r6 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000009c00000000000000000000000000000000000000000000000030850cbf420137b40000000000000044000500"/130], 0xfc}}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r8, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x20004814) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001780)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x11c0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x800, 0x2}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {}, {}, 0x1}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x7, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x5}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vlan0\x00', {0x506}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) 2.643459387s ago: executing program 2 (id=944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x2010, r2, 0x372d8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r4, 0x20, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10000004) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r6) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000002c000480edee27eae6d54d82fe1610050003000200000005000300020000000500037ce3d11df2c86d1cc400000000000500030002000000050003000200000008000100ffffff"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a010400000000010000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a0000080003400000011c08000640ffffff000c000980080001400000003900000000000000000000000700000af492f0ded4bbcbbc4b635e2f68ba42fde884911c913b710a0fff91415b00000071f80000"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c514000300ad81366772653000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r10}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r10, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x5, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x3}, @func={0x6, 0x0, 0x0, 0xc, 0x5}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}, @datasec={0x6, 0x3, 0x0, 0xf, 0x3, [{0x1, 0x7fff, 0x8000}, {0x2, 0x0, 0xdc}, {0x2, 0x7, 0x3}], "cd70d5"}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f0000000440)=""/161, 0x85, 0xa1, 0x1, 0x200}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0x474, 0x0, 0x2d84, r10, 0x3, '\x00', 0x0, r11, 0x4, 0x0, 0x3, 0xe}, 0x50) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000000)={@mcast2, 0x75}) 2.642895004s ago: executing program 4 (id=945): socket$kcm(0x11, 0x7, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="021831020800000000000000fddbdf25030005000000000002000300e00000010000000000000000030006000000000002000001ffffffff00000000000000003f130958fcad77d3fe93896c20e00e5d582c4a1ba41344ba0f2f8aecfb7c2b3142108045bb75529dcb587fe29429cbfc02343418c7fbf8d9e3f8059ce13187efbf9b81bfb6f8d86ce64a5af545e9061c9d3363994110fa2f598a43c55ba0db02c682c6cd257fabb3930453488d491ab10f08c214ff59950d3566d29cb55e034e34"], 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x9) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x4fd}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2c}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200000000000000000000000000000000000000810380ae1362bc060764252e395048e173833a3d96f007ee2ed6ef41a6871ca5652011ceeb67a341cfd7a076f12f8aaebc4fe6152938696cb0b5c8b193e7bde0afde29265d80b71aca4b2f8f58ac47ad5378f1a90a6dcfde65fa051aefc689a719174935c32f834bb412d8ddbbba365e79923d29d8d0e0c253c87ff6d83d36c8716b6b4bed5239adca0e5ea445dfbda4027523520a9c1a2ccf1d237f0b2625bd01"], 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$unix(0x1, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x200000000000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) 2.626807306s ago: executing program 1 (id=946): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000003e40)=ANY=[@ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB="000229bd3db6968045000300000000000000c0bc7fd063243ec50e05c3cc8ad4f338da00a96e81f42370b882f5f6b5912cc267972eb8c23f147200b08a78044a05f30be3b9d6d27a74c01172fb29015bff4761e5767ced52d7e9df07a91d373b1d569c5c1133172b00a581eccb24f264959c36de26e38c6ae0eb0d9b0f1b119fb6980765", @ANYRES32, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0xc042) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) 2.407049204s ago: executing program 0 (id=948): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffd0a, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r3, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000003c0), 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4814) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r1) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x2e, 0x9, 0x70bd27, 0x3, {0x4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2.347581824s ago: executing program 3 (id=949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f0000000400)={&(0x7f0000000280)=[{0x4, 0xffff, 0x9, 0x0, 0xb8000000}, {0x8443, 0x4, 0x2}, {0x5, 0x7, 0x6, 0x0, 0x8}, {0xc11, 0x0, 0x94, 0xfffffffffffffffa, 0x3}, {0x1, 0x9, 0xffffffff00000001, 0x2, 0x4040}, {0x542, 0x7f, 0x2, 0x6, 0x3fa}, {0x4, 0xfffffffffffffff4, 0x5, 0x4, 0xfffffffd}, {0x2, 0x3, 0x3ff, 0x8, 0x1}, {0x1, 0x0, 0x7, 0x8, 0x7}], 0x9, 0x28, 0x800, 0xc}) 2.299651043s ago: executing program 2 (id=950): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10) 2.154727247s ago: executing program 4 (id=951): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x80}}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'nicvf0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x62a82, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000007b40)) 2.094675897s ago: executing program 1 (id=952): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002"], 0x90}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x2e20e59c81451792) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000007f000000000000000000000091111700000bc30095f4ff00000000265622d38005933726238df27ec6e7e8d900944ae75c420a06b18e7dd437740be914e6c9683e6e8ee5550d79b4674bff2d5541e5b739eeddd4dd8cd411b78a5006b240784804682e7c127065d34a67b552d8b30000000000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300008000200000000000800070026093a0014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x880}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdaff, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x8810) 2.079166159s ago: executing program 3 (id=953): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x80001, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r3], 0x38}}, 0x0) 2.026438845s ago: executing program 0 (id=954): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x14, 0x4e22, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x80}, {0x10, 0x8}]}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x3a, 0x0, 0x8}, 0x28) 1.907738355s ago: executing program 1 (id=955): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'veth0_to_bond\x00', @random="0131013000"}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000540)={{r0, &(0x7f0000000000)=',#\x00', 0x221401, &(0x7f0000000080)={@align=0x80, {0x9, 0x6, 0x9, 0x8}}, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0xc}, 0x4, &(0x7f00000004c0)=[{0x3, 0x400, &(0x7f0000000140)='GPL\x00', &(0x7f0000000180)="41393397a8c2916c3549e8a71e0e043f095fb9a136fa90c3f2f4ffbbf55bd55036d465e3a6caf7bc1b749adcb1b48ff322fbd47dff06bb94601071533cda1055c0e5952b7069b6f9ca8aa27260c657a0b92e0d34b2e10e6d80c4a556bb6cc4cd9e8df5917ee91433123d464b4fa6dc75a2eeb456c192265126fbe64d899cb80b615856bbbee97740bc2231fc0d98a3a7cbd6de83ef78b0dd257b49d7b02883cd5f71d10dd22028ccbb8f2643af0072756e6f45b66e4390c99158c456514b8ba2509a6aa7a6cada6771eb970e458a076b7d41f5705ca8b30a3c5bc9768c5acb01d2422412e1", 0xe5, 0x70}, {0x2, 0xfffffff7, &(0x7f0000000280)='&:(.\x00', &(0x7f0000000740)="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", 0x10a}, {0x3, 0x5, &(0x7f0000000300)='$\x00', &(0x7f0000000340)="ebad409e6d9806490fd3b2f99674b98a7b3d97b22cd4250e855c16f6c4", 0x1d, 0x4a}, {0x3, 0xffffffff, &(0x7f0000000380)='GPL\x00', &(0x7f00000003c0)="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", 0xfb, 0x10}]}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000005c0), 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000600)) 1.906561624s ago: executing program 0 (id=956): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="980500002c0007012bbd7000ffdbdf25087c0000180001801400dd8008004700ac1414bb0800da00ff235e006c050380660503"], 0x598}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000380)) unshare(0x22020400) (async) unshare(0x22020400) socket(0x40000000015, 0x5, 0x0) (async) socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r6, 0x0, 0x20000000002) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000140)={'sit0\x00', 0x0}) 1.889226717s ago: executing program 3 (id=957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="9660", 0x2}], 0x1}}], 0x1, 0x4044805) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x9}, 0x1c) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000003340)=[{{&(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}}, {{&(0x7f0000000780)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000b00)=[{&(0x7f00000007c0)="f440fca9c0a5", 0x6}], 0x1}}], 0x2, 0x14048011) 1.787754918s ago: executing program 3 (id=958): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0xff6c) pread64(r1, 0x0, 0x0, 0x8) ioctl$int_in(r1, 0x73, 0x0) write$ppp(r1, &(0x7f0000000200)="bc72", 0x2) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20004090) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4044) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x24000080) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x6, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) r6 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000009c00000000000000000000000000000000000000000000000030850cbf420137b40000000000000044000500"/130], 0xfc}}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r8, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x20004814) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001780)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x11c0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x800, 0x2}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {}, {}, 0x1}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x7, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x5}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vlan0\x00', {0x506}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) 1.48180821s ago: executing program 3 (id=959): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) close(0x3) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r4) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0, @ANYBLOB="4b76f3b6"], 0x40c}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f00000001c0)=0x68) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) close(0x3) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r4) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0, @ANYBLOB="4b76f3b6"], 0x40c}}, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f00000001c0)=0x68) (async) 1.340708274s ago: executing program 2 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090027bd70001f0000000400000006000b"], 0x1c}, 0x1, 0x0, 0x0, 0x4042804}, 0x84) r1 = socket(0x1d, 0x2, 0x6) bind$can_raw(r1, &(0x7f0000000400), 0x10) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x0, 0xe]}, &(0x7f0000000080)=0x8) 146.452476ms ago: executing program 1 (id=961): socket$kcm(0x11, 0x7, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="021831020800000000000000fddbdf25030005000000000002000300e00000010000000000000000030006000000000002000001ffffffff00000000000000003f130958fcad77d3fe93896c20e00e5d582c4a1ba41344ba0f2f8aecfb7c2b3142108045bb75529dcb587fe29429cbfc02343418c7fbf8d9e3f8059ce13187efbf9b81bfb6f8d86ce64a5af545e9061c9d3363994110fa2f598a43c55ba0db02c682c6cd257fabb3930453488d491ab10f08c214ff59950d3566d29cb55e034e34"], 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x9) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x4fd}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2c}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200000000000000000000000000000000000000810380ae1362bc060764252e395048e173833a3d96f007ee2ed6ef41a6871ca5652011ceeb67a341cfd7a076f12f8aaebc4fe6152938696cb0b5c8b193e7bde0afde29265d80b71aca4b2f8f58ac47ad5378f1a90a6dcfde65fa051aefc689a719174935c32f834bb412d8ddbbba365e79923d29d8d0e0c253c87ff6d83d36c8716b6b4bed5239adca0e5ea445dfbda4027523520a9c1a2ccf1d237f0b2625bd01"], 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$unix(0x1, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x200000000000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) 124.290134ms ago: executing program 0 (id=962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x5c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f00000000c0)=0x401, 0x4) (async) vmsplice(r2, &(0x7f0000000800)=[{&(0x7f0000000f80)="4191062c14", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x9) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b119e00000000008510000002000000850000000001000000000007000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x7, 0x0, 0x9, 0x1, 0x6, 0x40, 0x10}]}, &(0x7f0000000340)='syzkaller\x00', 0x129b, 0xee, &(0x7f00000008c0)=""/238, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000009c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x0, 0xfffff6d6, 0xe}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000a40)=[{0x5, 0x5, 0xa, 0x6}, {0x4, 0x5, 0x9, 0xb}, {0x4, 0x4, 0xf, 0x7}, {0x2, 0x4, 0x4, 0x9}, {0x4, 0x1, 0xa, 0x2}, {0x0, 0x3, 0xa, 0x8}], 0x10, 0xffff0001}, 0x94) ioctl$XFS_IOC_OPEN_BY_HANDLE(r8, 0xc038586b, &(0x7f0000000c80)={r1, &(0x7f0000000b80)='\x00', 0x40100, &(0x7f0000000bc0)={@_ha_fsid={[0x5, 0x40]}, {0x524a, 0xf, 0x4, 0x8}}, 0xffffffff, &(0x7f0000000c00), &(0x7f0000000c40)=0x4}) close(r7) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) (async) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWCHAIN={0xf8, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x145700ed}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7b73b69c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x543b25d2}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_DELCHAIN={0x48, 0x5, 0xa, 0xcf170497f998699b, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_USERDATA={0x24, 0xc, "eb9310790359eed06446051d29c22895da8acc5b51097cf3a5305098c5ccce58"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) 106.421349ms ago: executing program 3 (id=963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x401, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10024}, 0x801) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x6b5b65a342975dcd}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x26c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xf0, 0x5b, "67dfe3fb308f6319f2552d70e3d36ed558128c8f1bdf61924fcdd4a413e4b5dd4fea46fc80dae848773caddaaa9154676f791bb1448be99baac4a16744c498b4fb7a38346bf7a2f64169b473a261844ab47cd5e92aa5be07bdf09c7c6dfd2c19d7be752f4bee63e6946641e678b6352a336f50d5f62a9858ef244a01db206b79c3300cd1cf6d11e86524cc865871b610c9b48c603eea2b0268864439438c60639a258f2e9e3e74c02b8e110682d48be615f8118f941d76262a22ac7087b9f11230dbbbb78d1fc85f04574228db22d53f9748657695183b85de258d20ba7e0e3b0e864c25eb1da88db5400071"}, @NL80211_ATTR_FRAME_MATCH={0xa0, 0x5b, "de30e9a4fcd93f7079c2b80767b5130f695c17858221f580824baffc54a33cd263f920793b6052ccb6bc9e948083284488fcbb4fc42a66659ba377e21f18090af45f4cef7b89b0c7d69ccc3b5b7978a4559dc3e80ac52d802585291e9c24aca3cb3a40bd2da41e92e9c62daefa2fc79bccfba6b4cb47c643ab0fa8e706d37c15d34d986703940565ce5eef68079ce8e8d23f74d3252452abb9813c7e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0xa6, 0x5b, "e9b94bd483c62011f623b78590a661b2de387ec87b19cc331d758c86ad0b1c41fdea5926c31eebbc8f935c85043dc04e0dc4bfae7cb0081ce9b9f8d34c7da7db8f4fb3efe120a6fa394d97ab1e5c17c90d0db1c6b683cd4cbddd5d4167dca41f9428729d43d833cfb3c5449fce203728d829e587eb0a9c0d52656e68395e512682b3f2dafce723444fa3a8759f9c65fa545cbb8772cc29de6d46f55d45af0d39ad7a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffd}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20008810}, 0x4040881) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x800) socketpair(0x21, 0x800, 0x2, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000600)={0x0, 0xf3, "48eb217e1885c1333cf2ead97e10bee46ef97926bc25dfeb54f322aad74517eac3e30780eed7645e10a6584d58fb65529813c99be2f7fc59fd18c12eed61a0b449d74393f65a18d034bdc2792722d241eddc58e97611d9dbd375945865a2b6cddb468665d7086814a1628ed0bf68fc5ae0b0562ff77255cd6ae146d66889bf7506042aecb009a1611a1fac97ca4fe7369f32ad80b13e5fa11376ce60b2215e43a40a6141a64f0cb44bbd491b6ba15d00d5239c500e7a3c1ce2f9dfdb211965673ed0706b0df1853c62e01735785dc680641d6cc38d46c3a916a27ea6dd984b791209e31dec2567881f84f153c058c4e21cf0c8"}, &(0x7f0000000700)=0xfb) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r6) syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r3) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000007c0)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000800)='blkio.bfq.io_service_time\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000840)) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f0000000b40)={&(0x7f0000000880), 0x9, &(0x7f00000008c0)=[{}, {}, {}], &(0x7f0000000b00)}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000bc0)={r5, 0x8001}, &(0x7f0000000c00)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000c40)={r9, 0xe, 0x30}, 0xc) setsockopt$rose(r3, 0x104, 0x3, &(0x7f0000000c80)=0xe, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000cc0)=@assoc_id=r9, 0x4) sendmsg$NFT_BATCH(r8, &(0x7f0000001080)={&(0x7f0000000d00), 0xc, &(0x7f0000001040)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x5}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e22}]}}, @NFT_MSG_DELFLOWTABLE={0x10c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}]}]}, @NFT_MSG_DELTABLE={0x134, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x2a, 0x6, "8bcf80e669196169a1b106964ad8f945ee3ce7375f847aba788fff1527da9d1a0b35b90abb35"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x84, 0x6, "982b246fa96d2bc09f77dd306ce7745443b7e3812eb3b5b73474d56a8d4fd7c24df693bb4dcea28e0d5bbce1401009eb7ed16e462f105a9efefc5092ef3e7cbef9627960cad50dbbb08511776274e29d0396a9f2b70a287c01c0664481df0722a26fb0cd9d85052bc55cb899d56056a7550ef65c4c110a272194ae1a02f40cf2"}, @NFTA_TABLE_USERDATA={0x44, 0x6, "be069caa77ab39dbdb9265df0295d25754149aff40bad755053d1d9086c6f5acbc05eddb05bfce7ba249c59f9d6a904a6d5f7bcd957cf63551b23c15ccdb4e7f"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x300}, 0x1, 0x0, 0x0, 0x4000000}, 0x60008004) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f00000010c0)=[@in6={0xa, 0x4e21, 0x3, @empty, 0x8}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0xcde2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}], 0x58) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001140)={'wlan1\x00'}) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x40, 0x0) ioctl$PPPIOCSPASS(r11, 0x40107447, &(0x7f0000001200)={0x8, &(0x7f00000011c0)=[{0x2, 0x8, 0x3, 0x78}, {0x80, 0xc, 0x8, 0xa9}, {0x7a, 0x6, 0x80, 0x8001}, {0x4e3, 0x6, 0xe, 0x7}, {0x80, 0x0, 0x8, 0x3ff}, {0x81, 0x8, 0x1d, 0xfff}, {0x9, 0x1, 0x5, 0xc6}, {0x7, 0x1, 0x7, 0x2}]}) r12 = accept4$bt_l2cap(r8, &(0x7f0000001240)={0x1f, 0x0, @none}, &(0x7f0000001280)=0xe, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000012c0)={'batadv_slave_1\x00'}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40081}, 0x4000040) 54.704314ms ago: executing program 4 (id=964): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0xfffffffd, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) unshare(0x22020400) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c) 0s ago: executing program 2 (id=965): socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001500)=""/225, 0xe1}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x9, 0x9}, &(0x7f0000000040)=0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r0, 0x1000, 0x30, 0xa7000, 0x82}, &(0x7f00000000c0)=0x18) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x130004e0}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000110901022cbd7000fcdbdf25020000099f9ad3a57eeb47faf9e6a7a8decfa57f69eb60013f43f2448f70d530293e14f7b248a6d55dc8989495735abf4f38d9d31c71922abdab07b94e8930a2bf42fe27df9a265a2064f9e997a57b54f914bb525ce07aabc10774740d88c194cd761bde4dd90f0e8e38908035ddac1e77d5040771144c88ef1b2293f2725f0ba548cc29f654280c6dea"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40800) (async) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x108}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) socket(0x11, 0x80000, 0x40) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) (async) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x10000000) (async) listen(r4, 0x220c) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 78.024309][ T5812] cgroup: Unknown subsys name 'net' [ 78.142644][ T5812] cgroup: Unknown subsys name 'cpuset' [ 78.152735][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.799043][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.329820][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.338172][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.358498][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.369386][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.381983][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.419431][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.432947][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.442743][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.452191][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.459890][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.467754][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.475261][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.484191][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.505885][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.514111][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.515177][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.522271][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.531673][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.542713][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.551820][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.559937][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.571296][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.580197][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.603548][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.621168][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.130145][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 84.184230][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 84.342238][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 84.445409][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 84.512655][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 84.531396][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.539191][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.546367][ T5831] bridge_slave_0: entered allmulticast mode [ 84.554032][ T5831] bridge_slave_0: entered promiscuous mode [ 84.596894][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.604343][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.611612][ T5831] bridge_slave_1: entered allmulticast mode [ 84.619105][ T5831] bridge_slave_1: entered promiscuous mode [ 84.626789][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.634035][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.641466][ T5824] bridge_slave_0: entered allmulticast mode [ 84.648843][ T5824] bridge_slave_0: entered promiscuous mode [ 84.704458][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.711682][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.718956][ T5824] bridge_slave_1: entered allmulticast mode [ 84.726183][ T5824] bridge_slave_1: entered promiscuous mode [ 84.794180][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.801690][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.808961][ T5828] bridge_slave_0: entered allmulticast mode [ 84.816447][ T5828] bridge_slave_0: entered promiscuous mode [ 84.826801][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.860313][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.867526][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.875399][ T5828] bridge_slave_1: entered allmulticast mode [ 84.882990][ T5828] bridge_slave_1: entered promiscuous mode [ 84.892427][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.914232][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.965305][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.020180][ T5831] team0: Port device team_slave_0 added [ 85.028223][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.049320][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.056488][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.064143][ T5830] bridge_slave_0: entered allmulticast mode [ 85.071709][ T5830] bridge_slave_0: entered promiscuous mode [ 85.094919][ T5831] team0: Port device team_slave_1 added [ 85.113566][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.124971][ T5824] team0: Port device team_slave_0 added [ 85.142787][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.150284][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.157717][ T5830] bridge_slave_1: entered allmulticast mode [ 85.165977][ T5830] bridge_slave_1: entered promiscuous mode [ 85.173647][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.187980][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.195717][ T5839] bridge_slave_0: entered allmulticast mode [ 85.203094][ T5839] bridge_slave_0: entered promiscuous mode [ 85.224256][ T5824] team0: Port device team_slave_1 added [ 85.264038][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.271588][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.278979][ T5839] bridge_slave_1: entered allmulticast mode [ 85.286563][ T5839] bridge_slave_1: entered promiscuous mode [ 85.294292][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.301533][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.327778][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.341021][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.348001][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.374218][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.397632][ T5828] team0: Port device team_slave_0 added [ 85.445739][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.453126][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.479194][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.490617][ T5827] Bluetooth: hci0: command tx timeout [ 85.496259][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.503577][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.529698][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.542545][ T5828] team0: Port device team_slave_1 added [ 85.556894][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.569919][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.593564][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.627838][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.634932][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.661052][ T5827] Bluetooth: hci3: command tx timeout [ 85.666803][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.677452][ T5827] Bluetooth: hci4: command tx timeout [ 85.677470][ T51] Bluetooth: hci2: command tx timeout [ 85.678295][ T5833] Bluetooth: hci1: command tx timeout [ 85.707537][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.728195][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.735595][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.762148][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.775790][ T5830] team0: Port device team_slave_0 added [ 85.823603][ T5830] team0: Port device team_slave_1 added [ 85.869270][ T5831] hsr_slave_0: entered promiscuous mode [ 85.875863][ T5831] hsr_slave_1: entered promiscuous mode [ 85.918810][ T5839] team0: Port device team_slave_0 added [ 85.930640][ T5824] hsr_slave_0: entered promiscuous mode [ 85.937046][ T5824] hsr_slave_1: entered promiscuous mode [ 85.943624][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 85.949953][ T5824] Cannot create hsr debugfs directory [ 85.966307][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.973521][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.999656][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.016965][ T5828] hsr_slave_0: entered promiscuous mode [ 86.023592][ T5828] hsr_slave_1: entered promiscuous mode [ 86.033489][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 86.039714][ T5828] Cannot create hsr debugfs directory [ 86.047938][ T5839] team0: Port device team_slave_1 added [ 86.075923][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.083141][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.109415][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.178072][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.185266][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.211510][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.257493][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.265324][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.291603][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.368217][ T5830] hsr_slave_0: entered promiscuous mode [ 86.378449][ T5830] hsr_slave_1: entered promiscuous mode [ 86.384779][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 86.390828][ T5830] Cannot create hsr debugfs directory [ 86.520566][ T5839] hsr_slave_0: entered promiscuous mode [ 86.527131][ T5839] hsr_slave_1: entered promiscuous mode [ 86.533720][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 86.539756][ T5839] Cannot create hsr debugfs directory [ 86.914930][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.953639][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.993262][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.012509][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.092884][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.106730][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.140374][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.153213][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.275924][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.306013][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.335315][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.361391][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.437198][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.451390][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.464526][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.500766][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.544503][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.563570][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.570572][ T5833] Bluetooth: hci0: command tx timeout [ 87.583582][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.590954][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.659603][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.666901][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.677877][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.703695][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.710851][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.723124][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.730895][ T5827] Bluetooth: hci4: command tx timeout [ 87.731796][ T51] Bluetooth: hci3: command tx timeout [ 87.736341][ T5827] Bluetooth: hci2: command tx timeout [ 87.749121][ T5833] Bluetooth: hci1: command tx timeout [ 87.759451][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.805778][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.834849][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.842052][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.857878][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.865197][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.994430][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.076340][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.127786][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.135036][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.183695][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.233548][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.240889][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.285927][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.328203][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.386136][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.415200][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.422430][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.434991][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.457355][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.464634][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.516209][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.545925][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.553250][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.570459][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.577818][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.605607][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.785103][ T5824] veth0_vlan: entered promiscuous mode [ 88.856863][ T5824] veth1_vlan: entered promiscuous mode [ 88.953642][ T5824] veth0_macvtap: entered promiscuous mode [ 88.992108][ T5824] veth1_macvtap: entered promiscuous mode [ 89.022376][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.116426][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.163665][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.222823][ T1110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.245136][ T1110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.257873][ T1110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.287079][ T1110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.300684][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.327814][ T5828] veth0_vlan: entered promiscuous mode [ 89.371788][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.416260][ T5828] veth1_vlan: entered promiscuous mode [ 89.432893][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.444402][ T5831] veth0_vlan: entered promiscuous mode [ 89.450409][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.472474][ T5831] veth1_vlan: entered promiscuous mode [ 89.556370][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.568331][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.589179][ T5839] veth0_vlan: entered promiscuous mode [ 89.604279][ T5830] veth0_vlan: entered promiscuous mode [ 89.629478][ T5831] veth0_macvtap: entered promiscuous mode [ 89.642449][ T5828] veth0_macvtap: entered promiscuous mode [ 89.648802][ T5833] Bluetooth: hci0: command tx timeout [ 89.670563][ T5831] veth1_macvtap: entered promiscuous mode [ 89.681823][ T5828] veth1_macvtap: entered promiscuous mode [ 89.696757][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.713085][ T5839] veth1_vlan: entered promiscuous mode [ 89.721056][ T5830] veth1_vlan: entered promiscuous mode [ 89.771138][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.784411][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.809824][ T5827] Bluetooth: hci4: command tx timeout [ 89.815286][ T5827] Bluetooth: hci1: command tx timeout [ 89.820880][ T5836] Bluetooth: hci2: command tx timeout [ 89.826369][ T5833] Bluetooth: hci3: command tx timeout [ 89.857584][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.868001][ T5839] veth0_macvtap: entered promiscuous mode [ 89.887520][ T1154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.899306][ T1154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.908069][ T1154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.982403][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.995896][ T1154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.007159][ T5839] veth1_macvtap: entered promiscuous mode [ 90.036623][ T5951] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.093619][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.105597][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.129223][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.142471][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.161225][ T5951] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.178167][ T5830] veth0_macvtap: entered promiscuous mode [ 90.211173][ T5830] veth1_macvtap: entered promiscuous mode [ 90.243855][ T5951] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.264335][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.272013][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.284811][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.321707][ T5951] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.366637][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.414599][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.424141][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.433962][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.452722][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.476712][ T71] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.492914][ T71] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.505188][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.535014][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.557076][ T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.566301][ T71] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.626415][ T71] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.637602][ T71] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.664066][ T5954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 90.673577][ T71] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.685032][ T5955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 90.713464][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.722379][ T71] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.736738][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.746734][ T71] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.755823][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.764631][ T71] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.791436][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.926471][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.960878][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.076645][ T5964] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 91.095952][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.115109][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.133178][ T5964] 8021q: VLANs not supported on ip6_vti0 [ 91.204966][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.230044][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.263337][ T5967] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8'. [ 91.304232][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.329348][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.732064][ T5833] Bluetooth: hci0: command tx timeout [ 91.888883][ T5833] Bluetooth: hci3: command tx timeout [ 91.894494][ T5827] Bluetooth: hci1: command tx timeout [ 91.900114][ T5836] Bluetooth: hci2: command tx timeout [ 91.903816][ T51] Bluetooth: hci4: command tx timeout [ 92.002578][ T797] cfg80211: failed to load regulatory.db [ 92.062729][ T6001] netlink: 'syz.4.17': attribute type 11 has an invalid length. [ 92.078054][ T6002] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15'. [ 92.088987][ T5988] syzkaller0: entered promiscuous mode [ 92.094602][ T5988] syzkaller0: entered allmulticast mode [ 92.130875][ T6002] openvswitch: netlink: Flow key attr not present in new flow. [ 92.150629][ T5992] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 92.467546][ T6014] syzkaller0: entered promiscuous mode [ 92.473225][ T6014] syzkaller0: entered allmulticast mode [ 92.512631][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21'. [ 92.542357][ T6016] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 92.604686][ T6019] Zero length message leads to an empty skb [ 92.670939][ T6021] netlink: 88 bytes leftover after parsing attributes in process `syz.4.23'. [ 92.720076][ T6016] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 94.252502][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.260890][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.267345][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 94.508629][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 94.641409][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.657880][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.709057][ T6078] netlink: 14 bytes leftover after parsing attributes in process `syz.4.32'. [ 94.945549][ T6078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.013836][ T6078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.090207][ T6078] bond0 (unregistering): Released all slaves [ 95.116598][ T6069] syzkaller0: entered promiscuous mode [ 95.122319][ T6069] syzkaller0: entered allmulticast mode [ 95.134406][ T1110] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.160543][ T1110] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.172430][ T1110] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.235465][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 95.279933][ T1110] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.390157][ T6096] syzkaller0: entered promiscuous mode [ 95.395863][ T6096] syzkaller0: entered allmulticast mode [ 95.402990][ T6098] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 95.417456][ T6098] syzkaller1: entered promiscuous mode [ 95.426888][ T6098] syzkaller1: entered allmulticast mode [ 95.444039][ T6096] ipt_ECN: cannot use operation on non-tcp rule [ 95.472691][ T6098] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 95.543994][ T6101] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.551927][ T6101] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.559864][ T6101] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.567725][ T6101] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.575593][ T6101] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.583709][ T6101] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.591650][ T6101] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.599669][ T6101] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.801606][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 95.934432][ T6105] netlink: 220 bytes leftover after parsing attributes in process `syz.0.43'. [ 95.959262][ T6105] tc_dump_action: action bad kind [ 96.022420][ T6116] Illegal XDP return value 4294967262 on prog (id 9) dev syz_tun, expect packet loss! [ 96.117096][ T6120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.47'. [ 96.162637][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.47'. [ 96.264665][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 96.489071][ T6138] syzkaller1: entered promiscuous mode [ 96.501494][ T6138] syzkaller1: entered allmulticast mode [ 96.640523][ T6144] netlink: 224 bytes leftover after parsing attributes in process `syz.4.54'. [ 96.759739][ T6148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.55'. [ 96.796094][ T6148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.55'. [ 96.807903][ T6148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.55'. [ 96.823701][ T6148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.55'. [ 97.015154][ T6154] netlink: 'syz.2.59': attribute type 10 has an invalid length. [ 97.031542][ T6154] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 97.284393][ T6164] netlink: 'syz.4.57': attribute type 11 has an invalid length. [ 98.093793][ T6194] netlink: 'syz.3.68': attribute type 1 has an invalid length. [ 98.407414][ T6207] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 98.494800][ T6207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.577703][ T6220] net_ratelimit: 47 callbacks suppressed [ 98.577724][ T6220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.671235][ T6224] netlink: 'syz.1.77': attribute type 1 has an invalid length. [ 98.686413][ T6220] netlink: 'syz.3.76': attribute type 10 has an invalid length. [ 98.776102][ T6220] syz_tun: entered promiscuous mode [ 98.867387][ T6220] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 98.991622][ T6227] nbd0: detected capacity change from 0 to 63 [ 99.028787][ T6234] block nbd0: NBD_DISCONNECT [ 99.051800][ T6234] block nbd0: Disconnected due to user request. [ 99.081968][ T6234] block nbd0: shutting down sockets [ 99.126620][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.136612][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 99.145664][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.155322][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 99.163327][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.172897][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 99.180771][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.190332][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 99.198307][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.430509][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read [ 99.448941][ T5845] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.491164][ T5845] Buffer I/O error on dev nbd0, logical block 1, async page read [ 99.508551][ T5845] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.537576][ T5845] Buffer I/O error on dev nbd0, logical block 2, async page read [ 99.565916][ T5845] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.597767][ T5845] Buffer I/O error on dev nbd0, logical block 3, async page read [ 99.619042][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.659825][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read [ 99.667701][ T5845] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 99.683149][ T5845] Buffer I/O error on dev nbd0, logical block 1, async page read [ 99.699876][ T5845] ldm_validate_partition_table(): Disk read failed. [ 99.727993][ T5845] Dev nbd0: unable to read RDB block 0 [ 99.738207][ T5845] nbd0: unable to read partition table [ 99.754779][ T5845] ldm_validate_partition_table(): Disk read failed. [ 99.769055][ T5845] Dev nbd0: unable to read RDB block 0 [ 99.775450][ T5845] nbd0: unable to read partition table [ 100.198699][ T6277] netlink: 'syz.1.92': attribute type 11 has an invalid length. [ 100.425267][ T6288] lo speed is unknown, defaulting to 1000 [ 100.500077][ T6288] lo speed is unknown, defaulting to 1000 [ 100.508268][ T6288] lo speed is unknown, defaulting to 1000 [ 100.717333][ T6288] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.807577][ T6304] lo speed is unknown, defaulting to 1000 [ 101.041798][ T6288] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.493033][ T6288] lo speed is unknown, defaulting to 1000 [ 101.529559][ T6288] lo speed is unknown, defaulting to 1000 [ 101.537380][ T6288] lo speed is unknown, defaulting to 1000 [ 101.583177][ T6288] lo speed is unknown, defaulting to 1000 [ 101.599174][ T6288] lo speed is unknown, defaulting to 1000 [ 102.090689][ T6349] xt_hashlimit: size too large, truncated to 1048576 [ 102.161317][ T6352] netlink: 'syz.3.113': attribute type 21 has an invalid length. [ 102.182019][ T6352] __nla_validate_parse: 150 callbacks suppressed [ 102.182065][ T6352] netlink: 128 bytes leftover after parsing attributes in process `syz.3.113'. [ 102.276282][ T6352] netlink: 'syz.3.113': attribute type 4 has an invalid length. [ 102.308589][ T6352] netlink: 3 bytes leftover after parsing attributes in process `syz.3.113'. [ 102.448851][ T6361] Bluetooth: MGMT ver 1.23 [ 102.750175][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 102.795562][ T6375] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 102.821520][ T6375] macvlan2: entered allmulticast mode [ 102.827193][ T6375] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 102.953371][ T6380] netlink: 64 bytes leftover after parsing attributes in process `syz.4.118'. [ 103.046624][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 103.115050][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 103.134165][ T6386] netlink: 'syz.0.121': attribute type 14 has an invalid length. [ 103.192313][ T6393] tipc: Started in network mode [ 103.228909][ T6393] tipc: Node identity a2b26a0bce5a, cluster identity 4711 [ 103.250049][ T6393] tipc: Enabled bearer , priority 0 [ 103.337024][ T6397] syzkaller0: entered promiscuous mode [ 103.365468][ T6397] syzkaller0: entered allmulticast mode [ 103.395680][ T6405] tipc: Resetting bearer [ 103.450350][ T6392] tipc: Resetting bearer [ 103.566293][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 103.575469][ T6392] tipc: Disabling bearer [ 103.613845][ T6408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.839136][ T6419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.336984][ T6438] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 104.463150][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 104.994561][ T6462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.145'. [ 105.280256][ T6470] syzkaller0: entered promiscuous mode [ 105.307800][ T6470] syzkaller0: entered allmulticast mode [ 105.813104][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 106.224348][ T6500] lo speed is unknown, defaulting to 1000 [ 106.329073][ T6500] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 106.643136][ T6504] lo speed is unknown, defaulting to 1000 [ 106.677310][ T5945] IPVS: starting estimator thread 0... [ 106.778752][ T6507] IPVS: using max 29 ests per chain, 69600 per kthread [ 108.197165][ T6470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.524176][ T6519] tipc: Failed to remove unknown binding: 66,1,1/0:467713455/467713458 [ 108.545484][ T6519] tipc: Failed to remove unknown binding: 66,1,1/0:467713455/467713458 [ 108.556239][ T6524] batman_adv: batadv0: Adding interface: gretap1 [ 108.564667][ T6524] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.591109][ T6524] batman_adv: batadv0: Interface activated: gretap1 [ 108.685025][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 108.730287][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 108.756849][ T6536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.764928][ T6536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.775566][ T6536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.784733][ T6536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.138968][ T6550] lo speed is unknown, defaulting to 1000 [ 109.221383][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 109.641778][ T6571] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.176'. [ 109.749291][ T6576] xt_connbytes: Forcing CT accounting to be enabled [ 109.923269][ T6573] bond0: entered allmulticast mode [ 109.929338][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.386276][ T6596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.183'. [ 110.406029][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 110.558991][ T6599] netlink: 40 bytes leftover after parsing attributes in process `syz.4.184'. [ 110.603390][ T6599] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 110.619378][ T6599] bridge0: port 3(team0) entered blocking state [ 110.647208][ T6599] bridge0: port 3(team0) entered disabled state [ 110.664497][ T6599] team0: entered allmulticast mode [ 110.679643][ T6599] team_slave_0: entered allmulticast mode [ 110.701311][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.184'. [ 110.728052][ T6599] team_slave_1: entered allmulticast mode [ 110.754350][ T6599] team0: entered promiscuous mode [ 110.771851][ T6599] team_slave_0: entered promiscuous mode [ 110.788807][ T6599] team_slave_1: entered promiscuous mode [ 110.795777][ T6599] bridge0: port 3(team0) entered blocking state [ 110.802534][ T6599] bridge0: port 3(team0) entered forwarding state [ 110.900355][ T6610] wg1: Master is either lo or non-ether device [ 111.351101][ T6632] dvmrp1: entered allmulticast mode [ 111.375503][ T6634] netlink: 32396 bytes leftover after parsing attributes in process `syz.2.191'. [ 111.390199][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 111.526834][ T6645] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 111.762605][ T6645] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.584881][ T6680] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 112.783454][ T6681] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 112.830284][ T6681] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 113.534664][ T6717] lo speed is unknown, defaulting to 1000 [ 113.770326][ T6727] __nla_validate_parse: 2 callbacks suppressed [ 113.770345][ T6727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.212'. [ 113.837205][ T6727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.212'. [ 113.911169][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 113.959945][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 114.507969][ T6761] netlink: 68 bytes leftover after parsing attributes in process `syz.1.218'. [ 114.529391][ T6744] nbd0: detected capacity change from 0 to 63 [ 114.563753][ T51] block nbd0: Receive control failed (result -32) [ 114.574641][ T5833] block nbd0: Receive control failed (result -32) [ 114.583871][ T5845] block nbd0: Dead connection, failed to find a fallback [ 114.598522][ T5845] block nbd0: shutting down sockets [ 114.605057][ T5845] blk_print_req_error: 138 callbacks suppressed [ 114.605080][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.632528][ T5845] buffer_io_error: 138 callbacks suppressed [ 114.632549][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.646504][ T5845] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.656306][ T5845] Buffer I/O error on dev nbd0, logical block 1, async page read [ 114.664849][ T5845] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.676667][ T5845] Buffer I/O error on dev nbd0, logical block 2, async page read [ 114.684665][ T5845] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.694774][ T5845] Buffer I/O error on dev nbd0, logical block 3, async page read [ 114.702797][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.740522][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.785769][ T5845] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.831632][ T5845] Buffer I/O error on dev nbd0, logical block 1, async page read [ 114.859118][ T5845] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.893614][ T5845] Buffer I/O error on dev nbd0, logical block 2, async page read [ 114.922801][ T5845] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.937192][ T5845] Buffer I/O error on dev nbd0, logical block 3, async page read [ 114.950290][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.968462][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.987634][ T5845] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.026871][ T5845] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.036156][ T5845] ldm_validate_partition_table(): Disk read failed. [ 115.085897][ T5845] Dev nbd0: unable to read RDB block 0 [ 115.099110][ T5845] nbd0: unable to read partition table [ 115.133433][ T5845] ldm_validate_partition_table(): Disk read failed. [ 115.151866][ T5845] Dev nbd0: unable to read RDB block 0 [ 115.158226][ T5845] nbd0: unable to read partition table [ 115.343392][ T6781] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 115.356576][ T6781] netlink: 224 bytes leftover after parsing attributes in process `syz.0.226'. [ 115.451663][ T6783] syzkaller0: entered promiscuous mode [ 115.463612][ T6783] syzkaller0: entered allmulticast mode [ 116.193296][ T6818] lo speed is unknown, defaulting to 1000 [ 116.204208][ T6822] tipc: Enabled bearer , priority 0 [ 116.219857][ T6822] syzkaller0: entered promiscuous mode [ 116.243439][ T6822] syzkaller0: entered allmulticast mode [ 116.268307][ T6824] tipc: Started in network mode [ 116.278595][ T6824] tipc: Node identity ac14140f, cluster identity 4711 [ 116.307214][ T6824] tipc: New replicast peer: 255.255.255.255 [ 116.324181][ T6824] tipc: Enabled bearer , priority 10 [ 116.384715][ T6822] tipc: Resetting bearer [ 116.464960][ T6820] tipc: Resetting bearer [ 116.511018][ T6820] tipc: Disabling bearer [ 117.129838][ T6862] netlink: 'syz.1.243': attribute type 8 has an invalid length. [ 117.308275][ T6869] ip6erspan0: entered allmulticast mode [ 117.319524][ T6868] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 117.441252][ T5945] tipc: Node number set to 2886997007 [ 117.489735][ T6874] erspan0: entered promiscuous mode [ 117.511097][ T6874] macsec1: entered promiscuous mode [ 117.537529][ T6874] erspan0: left promiscuous mode [ 119.636398][ T6913] netlink: 'syz.2.256': attribute type 11 has an invalid length. [ 119.882485][ T6917] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 119.884987][ T6918] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 120.414477][ T6934] syzkaller0: entered promiscuous mode [ 120.432015][ T6934] syzkaller0: entered allmulticast mode [ 120.453416][ T6934] netlink: 44 bytes leftover after parsing attributes in process `syz.3.263'. [ 120.592660][ T6940] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 120.603712][ T6937] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 120.630229][ T6941] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.264'. [ 120.641393][ T6940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.264'. [ 121.524754][ T6963] ieee802154 phy1 wpan1: encryption failed: -22 [ 121.555469][ T6967] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20003 [ 121.835497][ T6971] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 121.954799][ T6974] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 121.991908][ T6974] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 122.122213][ T6979] netlink: 'syz.3.274': attribute type 2 has an invalid length. [ 122.194562][ T6980] netlink: 'syz.3.274': attribute type 2 has an invalid length. [ 122.257110][ T6971] bond1: (slave gretap2): making interface the new active one [ 122.295853][ T6971] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 122.377799][ T6979] : entered promiscuous mode [ 122.419534][ T6980] : left promiscuous mode [ 122.970125][ T6995] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 123.363435][ T7009] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 123.387726][ T7009] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 123.653733][ T6884] Set syz1 is full, maxelem 65536 reached [ 123.875024][ T7028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.289'. [ 123.929842][ T7028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.289'. [ 123.978284][ T7034] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.294'. [ 124.033863][ T7024] netlink: 'syz.1.290': attribute type 21 has an invalid length. [ 124.062848][ T7024] netlink: 'syz.1.290': attribute type 22 has an invalid length. [ 124.079124][ T7024] netlink: 'syz.1.290': attribute type 23 has an invalid length. [ 124.119022][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 124.144548][ T7024] netlink: 136 bytes leftover after parsing attributes in process `syz.1.290'. [ 124.226683][ T5945] IPVS: starting estimator thread 0... [ 124.319561][ T7046] IPVS: using max 32 ests per chain, 76800 per kthread [ 124.537094][ T7060] syzkaller1: entered promiscuous mode [ 124.548479][ T7060] syzkaller1: entered allmulticast mode [ 124.579804][ T7061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.302'. [ 124.618744][ T7061] unsupported nlmsg_type 40 [ 124.746086][ T7066] sctp: [Deprecated]: syz.0.304 (pid 7066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.746086][ T7066] Use struct sctp_sack_info instead [ 125.245345][ T7079] lo speed is unknown, defaulting to 1000 [ 125.295306][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.305'. [ 125.341506][ T7087] netlink: 'syz.0.309': attribute type 63 has an invalid length. [ 125.351402][ T7087] netlink: 'syz.0.309': attribute type 1 has an invalid length. [ 125.442340][ T7094] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 125.834167][ T7093] warning: `syz.4.310' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.247484][ T7117] __nla_validate_parse: 1 callbacks suppressed [ 126.247507][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 126.843885][ T7147] netlink: 'syz.4.327': attribute type 9 has an invalid length. [ 126.919548][ T7147] netlink: 'syz.4.327': attribute type 6 has an invalid length. [ 126.956615][ T7151] lo speed is unknown, defaulting to 1000 [ 127.046564][ T7147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.060569][ T7154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'. [ 127.113247][ T7156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.328'. [ 127.124685][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 127.201338][ T7156] netlink: 'syz.2.328': attribute type 21 has an invalid length. [ 127.210962][ T7156] netlink: 128 bytes leftover after parsing attributes in process `syz.2.328'. [ 127.243495][ T7156] netlink: 3 bytes leftover after parsing attributes in process `syz.2.328'. [ 127.791954][ T7169] hashlimit_mt_check_common: 1 callbacks suppressed [ 127.791976][ T7169] xt_hashlimit: size too large, truncated to 1048576 [ 128.487810][ T7196] m1Ie5: entered promiscuous mode [ 128.674382][ T7203] netlink: 'syz.3.343': attribute type 9 has an invalid length. [ 128.715186][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 128.743037][ T7207] syzkaller0: entered promiscuous mode [ 128.748959][ T7207] syzkaller0: entered allmulticast mode [ 128.757949][ T7207] TC_ACT_REPEAT abuse ? [ 128.809054][ T7211] netlink: 'syz.0.341': attribute type 3 has an invalid length. [ 128.816863][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 128.904243][ T14] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.923484][ T14] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.015147][ T14] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.059483][ T7214] tipc: Enabled bearer , priority 0 [ 129.085715][ T14] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.111456][ T7214] syzkaller0: entered promiscuous mode [ 129.119318][ T7214] syzkaller0: entered allmulticast mode [ 129.173112][ T7214] netlink: 44 bytes leftover after parsing attributes in process `syz.1.345'. [ 129.260001][ T7213] tipc: Resetting bearer [ 129.348085][ T7213] tipc: Disabling bearer [ 129.396659][ T7227] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 129.407483][ T7227] netlink: 224 bytes leftover after parsing attributes in process `syz.2.346'. [ 129.447189][ T7232] x_tables: duplicate underflow at hook 3 [ 129.743679][ T7246] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 129.926085][ T7256] openvswitch: netlink: IP tunnel dst address not specified [ 130.006133][ T7259] syzkaller1: entered promiscuous mode [ 130.031874][ T7259] syzkaller1: entered allmulticast mode [ 130.251954][ T7270] lo speed is unknown, defaulting to 1000 [ 130.567198][ T7276] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 130.832357][ T7291] : renamed from veth0_to_bond (while UP) [ 131.274453][ T7312] __nla_validate_parse: 8 callbacks suppressed [ 131.274473][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 131.896478][ T7337] netlink: 'syz.2.378': attribute type 11 has an invalid length. [ 132.235702][ T7347] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.480371][ T7358] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 132.480371][ T7358] 3UH5rBn [ 132.532257][ T7360] netlink: 'syz.1.387': attribute type 1 has an invalid length. [ 132.644650][ T7362] lo speed is unknown, defaulting to 1000 [ 132.816799][ T7370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.393'. [ 132.826911][ T7373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.393'. [ 132.933911][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.971134][ T7370] geneve2: entered promiscuous mode [ 133.029104][ T7368] tipc: Enabling of bearer rejected, failed to enable media [ 133.499741][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 133.555132][ T7384] syzkaller1: entered promiscuous mode [ 133.564396][ T7384] syzkaller1: entered allmulticast mode [ 133.604893][ T7407] netlink: 132 bytes leftover after parsing attributes in process `syz.2.401'. [ 133.740404][ T7402] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 134.277534][ T7423] netlink: 876 bytes leftover after parsing attributes in process `syz.4.406'. [ 134.306371][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 134.362952][ T7428] netlink: 'syz.4.406': attribute type 13 has an invalid length. [ 134.399132][ T7428] gretap0: refused to change device tx_queue_len [ 134.419895][ T7428] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 134.461676][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 134.989391][ T7448] SET target dimension over the limit! [ 134.995635][ T7448] SET target dimension over the limit! [ 135.633697][ T7460] syzkaller1: entered promiscuous mode [ 135.660897][ T7460] syzkaller1: entered allmulticast mode [ 136.276524][ T7484] tap0: tun_chr_ioctl cmd 1074025677 [ 136.283202][ T7484] tap0: linktype set to 6 [ 136.292374][ T7481] lo speed is unknown, defaulting to 1000 [ 136.391396][ T7479] geneve1: entered promiscuous mode [ 136.851344][ T7489] netlink: 'syz.4.426': attribute type 33 has an invalid length. [ 137.344833][ T7503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.366646][ T7515] netlink: 180 bytes leftover after parsing attributes in process `syz.1.433'. [ 137.459674][ T7503] netlink: 'syz.2.430': attribute type 10 has an invalid length. [ 137.632542][ T7526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.829891][ T7500] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.837638][ T7500] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.884242][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'. [ 138.012611][ T7530] xt_hashlimit: overflow, rate too high: 0 [ 138.021346][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 138.086289][ T7500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.119275][ T7500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.215883][ T7500] geneve2: left promiscuous mode [ 138.251648][ T7503] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 138.274752][ T7524] wlan1: authenticate with 08:02:11:00:00:00 (local address=aa:aa:aa:aa:aa:17) [ 138.302039][ T7524] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 138.360241][ T1154] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.391514][ T1154] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.439849][ T1110] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 138.459093][ T5833] Bluetooth: hci4: link tx timeout [ 138.464874][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.476547][ T5833] Bluetooth: hci4: link tx timeout [ 138.483137][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.549185][ T71] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 138.639773][ T1154] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.665094][ T1154] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.693088][ T12] wlan1: authentication with 08:02:11:00:00:00 timed out [ 138.735563][ T7543] syzkaller1: entered promiscuous mode [ 138.755766][ T7543] syzkaller1: entered allmulticast mode [ 138.968287][ T7550] syz.3.438 (7550) used greatest stack depth: 17696 bytes left [ 138.973431][ T5833] Bluetooth: hci4: link tx timeout [ 138.981898][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.023269][ T5833] Bluetooth: hci4: link tx timeout [ 139.029141][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.059095][ T7553] syz.3.438 (7553) used greatest stack depth: 17472 bytes left [ 139.253091][ T7570] lo speed is unknown, defaulting to 1000 [ 139.273258][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 139.293642][ T5833] Bluetooth: hci4: link tx timeout [ 139.299765][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.008534][ T7600] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 140.012185][ T5833] Bluetooth: hci4: link tx timeout [ 140.021957][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.187672][ T5833] Bluetooth: hci4: link tx timeout [ 140.193639][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.339168][ T7615] <: renamed from bond_slave_0 [ 140.475987][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 140.518124][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 140.542288][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 140.561117][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 140.580512][ T7626] netlink: 'syz.0.454': attribute type 13 has an invalid length. [ 140.589873][ T7626] netlink: 'syz.0.454': attribute type 17 has an invalid length. [ 140.722713][ T7626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.755853][ T7626] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.799546][ T7626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.855031][ T7641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.457'. [ 141.196347][ T7656] netlink: 120 bytes leftover after parsing attributes in process `syz.0.459'. [ 141.250791][ T7656] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 141.299359][ T7656] netlink: 64 bytes leftover after parsing attributes in process `syz.0.459'. [ 141.340077][ T7655] lo speed is unknown, defaulting to 1000 [ 141.564255][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.889672][ T7670] lo speed is unknown, defaulting to 1000 [ 142.282201][ T7682] netlink: 'syz.0.468': attribute type 32 has an invalid length. [ 142.792507][ T7693] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 142.952148][ T7701] netlink: 32396 bytes leftover after parsing attributes in process `syz.1.474'. [ 143.007902][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.474'. [ 143.377349][ T7716] erspan1: entered allmulticast mode [ 143.657017][ T7723] netlink: 'syz.2.481': attribute type 2 has an invalid length. [ 143.679338][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 143.949361][ T7733] netlink: 'syz.2.484': attribute type 4 has an invalid length. [ 143.989611][ T7733] netlink: 156 bytes leftover after parsing attributes in process `syz.2.484'. [ 144.001481][ T7733] wlan1: mtu greater than device maximum [ 144.036596][ T7735] netlink: 48 bytes leftover after parsing attributes in process `syz.0.485'. [ 144.520233][ T7745] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 [ 144.742714][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 144.773575][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 144.790074][ T7755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.820924][ T7755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.393049][ T7755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.427266][ T7755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.878763][ T7777] syzkaller0: entered promiscuous mode [ 145.884392][ T7777] syzkaller0: entered allmulticast mode [ 146.071671][ T7780] syzkaller1: entered promiscuous mode [ 146.077407][ T7780] syzkaller1: entered allmulticast mode [ 146.154534][ T7785] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 146.383028][ T7785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.442022][ T7784] vlan0: entered allmulticast mode [ 146.447421][ T7784] bond4: entered allmulticast mode [ 146.683418][ T7798] netlink: 68 bytes leftover after parsing attributes in process `syz.2.504'. [ 146.713383][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 146.899021][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 147.134267][ T7823] IPVS: set_ctl: invalid protocol: 4 172.20.20.36:20004 [ 147.480370][ T7829] syzkaller1: entered promiscuous mode [ 147.486110][ T7829] syzkaller1: entered allmulticast mode [ 148.473920][ T7849] netlink: 31292 bytes leftover after parsing attributes in process `syz.0.518'. [ 148.548704][ T7849] netlink: 88 bytes leftover after parsing attributes in process `syz.0.518'. [ 148.888031][ T7860] lo speed is unknown, defaulting to 1000 [ 149.123462][ T7867] x_tables: unsorted underflow at hook 2 [ 149.932871][ T7893] syzkaller1: entered promiscuous mode [ 149.959151][ T7893] syzkaller1: entered allmulticast mode [ 150.114611][ T7907] netlink: 'syz.0.528': attribute type 1 has an invalid length. [ 150.139199][ T7904] netlink: 40 bytes leftover after parsing attributes in process `syz.4.527'. [ 150.159622][ T7904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.527'. [ 150.192085][ T7905] can: request_module (can-proto-0) failed. [ 150.240190][ T7904] bond0: entered promiscuous mode [ 150.246706][ T7904] gretap0: entered promiscuous mode [ 150.296974][ T7904] hsr1: entered promiscuous mode [ 150.409080][ T7916] netlink: 'syz.0.532': attribute type 2 has an invalid length. [ 150.438580][ T7916] netlink: 'syz.0.532': attribute type 9 has an invalid length. [ 150.458310][ T7912] tipc: Enabling of bearer rejected, already enabled [ 150.480236][ T7916] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.532'. [ 150.499012][ T7912] netlink: 'syz.1.530': attribute type 32 has an invalid length. [ 150.965361][ T7944] xt_hashlimit: size too large, truncated to 1048576 [ 151.102045][ T7949] netlink: 72 bytes leftover after parsing attributes in process `syz.3.537'. [ 151.400123][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 151.556907][ T7968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.542'. [ 151.716692][ T7972] netlink: 164 bytes leftover after parsing attributes in process `syz.0.542'. [ 151.769924][ T7968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.542'. [ 151.805047][ T5945] IPVS: starting estimator thread 0... [ 151.813778][ T7978] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20265 [ 151.861802][ T7984] IPVS: dh: FWM 3 0x00000003 - no destination available [ 151.904722][ T7980] IPVS: using max 25 ests per chain, 60000 per kthread [ 152.554462][ T8017] x_tables: duplicate underflow at hook 3 [ 152.918230][ T8028] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 152.928525][ T8029] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 152.948018][ T8026] lo speed is unknown, defaulting to 1000 [ 152.987563][ T8028] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 153.013257][ T8029] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 153.481896][ T8059] IPv6: addrconf: prefix option has invalid lifetime [ 153.921842][ T8071] __nla_validate_parse: 6 callbacks suppressed [ 153.921865][ T8071] netlink: 31292 bytes leftover after parsing attributes in process `syz.2.565'. [ 154.112550][ T8078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.566'. [ 154.320873][ T8080] syzkaller0: entered promiscuous mode [ 154.345795][ T8080] syzkaller0: entered allmulticast mode [ 154.537305][ T8089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.571'. [ 154.674900][ T8092] netlink: 32396 bytes leftover after parsing attributes in process `syz.4.573'. [ 154.733385][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 154.751012][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.772670][ T59] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.792466][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.816559][ T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.696006][ T8129] netlink: 100 bytes leftover after parsing attributes in process `syz.0.585'. [ 155.855826][ T8134] netlink: 31292 bytes leftover after parsing attributes in process `syz.2.586'. [ 155.912540][ T8135] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 155.935046][ T8141] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 156.032730][ T8135] team0: Port device dummy0 added [ 156.107201][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 156.261439][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 156.317320][ T8162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.322110][ T8160] netlink: 1 bytes leftover after parsing attributes in process `syz.1.594'. [ 156.564511][ T8169] lo speed is unknown, defaulting to 1000 [ 156.642889][ T8178] netlink: 'syz.2.598': attribute type 25 has an invalid length. [ 156.661843][ T7850] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.662275][ T8178] netlink: 'syz.2.598': attribute type 25 has an invalid length. [ 156.675875][ T7850] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.704819][ T7850] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.744997][ T7850] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.924852][ T8184] netlink: 'syz.4.602': attribute type 13 has an invalid length. [ 157.280303][ T8201] bridge0: port 3(vlan1) entered blocking state [ 157.287020][ T8201] bridge0: port 3(vlan1) entered disabled state [ 157.294923][ T8201] vlan1: entered allmulticast mode [ 157.301862][ T8201] bridge0: entered allmulticast mode [ 157.326299][ T8201] vlan1: left allmulticast mode [ 157.336913][ T8201] bridge0: left allmulticast mode [ 157.788656][ T8228] IPVS: sh: FWM 3 0x00000003 - no destination available [ 157.795877][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 157.826517][ T5944] IPVS: starting estimator thread 0... [ 157.832342][ T8226] lo speed is unknown, defaulting to 1000 [ 157.965723][ T8232] IPVS: using max 25 ests per chain, 60000 per kthread [ 158.162689][ T8240] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 158.619417][ T8231] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 159.117081][ T8274] __nla_validate_parse: 8 callbacks suppressed [ 159.117111][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'. [ 159.212521][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 159.230388][ T8281] netlink: 1 bytes leftover after parsing attributes in process `syz.0.624'. [ 159.576593][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 159.629238][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 159.665019][ T8309] netlink: 'syz.0.633': attribute type 11 has an invalid length. [ 159.795209][ T8312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.635'. [ 159.855694][ T8313] netlink: 32396 bytes leftover after parsing attributes in process `syz.4.634'. [ 159.865894][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 159.867185][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'. [ 159.888537][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 159.929001][ T8315] veth1_to_hsr: entered promiscuous mode [ 159.935382][ T8315] macvtap1: entered promiscuous mode [ 159.942864][ T8315] macvtap1: entered allmulticast mode [ 159.948648][ T8315] veth1_to_hsr: entered allmulticast mode [ 160.144310][ T8329] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 160.166412][ T8329] netlink: 96 bytes leftover after parsing attributes in process `syz.4.640'. [ 160.179119][ T8329] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 160.187076][ T8329] netlink: 'syz.4.640': attribute type 8 has an invalid length. [ 160.313279][ T8339] netlink: 'syz.2.643': attribute type 4 has an invalid length. [ 161.504069][ T8374] lo speed is unknown, defaulting to 1000 [ 163.388238][ T8472] netlink: 'syz.1.674': attribute type 12 has an invalid length. [ 163.564542][ T8469] lo speed is unknown, defaulting to 1000 [ 163.576535][ T8465] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 163.634208][ T8471] lo speed is unknown, defaulting to 1000 [ 163.982238][ T8487] lo speed is unknown, defaulting to 1000 [ 164.164667][ T8499] __nla_validate_parse: 18 callbacks suppressed [ 164.164687][ T8499] netlink: 68 bytes leftover after parsing attributes in process `syz.3.683'. [ 164.202968][ T8485] lo speed is unknown, defaulting to 1000 [ 164.279966][ T8503] netlink: 52 bytes leftover after parsing attributes in process `syz.4.685'. [ 164.303348][ T8503] netlink: 'syz.4.685': attribute type 1 has an invalid length. [ 164.709943][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 164.782640][ T8518] netlink: 'syz.0.688': attribute type 7 has an invalid length. [ 164.846853][ T8518] netlink: 'syz.0.688': attribute type 8 has an invalid length. [ 164.919309][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 165.298225][ T8533] lo speed is unknown, defaulting to 1000 [ 165.422777][ T8543] syz_tun: left promiscuous mode [ 165.581432][ T8545] lo speed is unknown, defaulting to 1000 [ 165.648993][ T8557] Bluetooth: MGMT ver 1.23 [ 165.743880][ T8557] : entered promiscuous mode [ 166.154102][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.704'. [ 166.226545][ T8592] netlink: 68 bytes leftover after parsing attributes in process `syz.0.703'. [ 166.277881][ T8579] netlink: 68 bytes leftover after parsing attributes in process `syz.2.702'. [ 166.973196][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.710'. [ 167.004163][ T8617] IPVS: set_ctl: invalid protocol: 30768 48.48.48.48:12336 [ 167.373144][ T8599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.694016][ T8636] netlink: 31292 bytes leftover after parsing attributes in process `syz.4.714'. [ 167.746298][ T8637] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 168.195768][ T8660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.246275][ T8666] netlink: 68 bytes leftover after parsing attributes in process `syz.4.718'. [ 168.542027][ T8623] lec:lec_atm_close: lec0: Shut down! [ 168.691178][ T8692] lo speed is unknown, defaulting to 1000 [ 168.702236][ T8686] nbd1: detected capacity change from 0 to 63 [ 168.720771][ T51] block nbd1: Receive control failed (result -32) [ 168.726634][ T5845] block nbd1: Send control failed (result -32) [ 168.828949][ T5845] block nbd1: Request send failed, requeueing [ 168.881130][ T1631] block nbd1: Dead connection, failed to find a fallback [ 168.889394][ T1631] block nbd1: shutting down sockets [ 168.894971][ T1631] blk_print_req_error: 138 callbacks suppressed [ 168.894985][ T1631] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.912686][ T1631] buffer_io_error: 138 callbacks suppressed [ 168.912703][ T1631] Buffer I/O error on dev nbd1, logical block 0, async page read [ 168.931901][ T5845] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.954069][ T5845] Buffer I/O error on dev nbd1, logical block 1, async page read [ 168.966770][ T5845] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.982029][ T5845] Buffer I/O error on dev nbd1, logical block 2, async page read [ 168.990598][ T5845] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.051889][ T5845] Buffer I/O error on dev nbd1, logical block 3, async page read [ 169.126821][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.182645][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.203233][ T5845] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.225528][ T8718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.730'. [ 169.265022][ T5845] Buffer I/O error on dev nbd1, logical block 1, async page read [ 169.279064][ T5845] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.289293][ T5845] Buffer I/O error on dev nbd1, logical block 2, async page read [ 169.297253][ T5845] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.307541][ T5845] Buffer I/O error on dev nbd1, logical block 3, async page read [ 169.316259][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.326275][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.335584][ T5845] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.382971][ T5845] Buffer I/O error on dev nbd1, logical block 1, async page read [ 169.444645][ T5845] ldm_validate_partition_table(): Disk read failed. [ 169.462499][ T8731] openvswitch: netlink: Flow actions attr not present in new flow. [ 169.474052][ T8727] netlink: 104 bytes leftover after parsing attributes in process `syz.1.731'. [ 169.492647][ T8731] ieee802154 phy1 wpan1: encryption failed: -22 [ 169.499422][ T5845] Dev nbd1: unable to read RDB block 0 [ 169.519211][ T5845] nbd1: unable to read partition table [ 169.558891][ T5845] ldm_validate_partition_table(): Disk read failed. [ 169.613922][ T8721] lo speed is unknown, defaulting to 1000 [ 169.615473][ T8727] tipc: Enabled bearer , priority 0 [ 169.651872][ T5845] Dev nbd1: unable to read RDB block 0 [ 169.665771][ T8729] syzkaller0: entered promiscuous mode [ 169.677996][ T5845] nbd1: unable to read partition table [ 169.696813][ T8729] syzkaller0: entered allmulticast mode [ 169.902590][ T8735] tipc: Resetting bearer [ 169.924532][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 169.953999][ T8749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.734'. [ 170.039250][ T8725] tipc: Resetting bearer [ 170.112532][ T8725] tipc: Disabling bearer [ 170.609591][ T51] Bluetooth: hci3: command tx timeout [ 170.619922][ T5945] lec:lec_start_xmit: lec0:No lecd attached [ 170.635333][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'. [ 171.047848][ T8802] xfrm1: entered allmulticast mode [ 171.105265][ T8804] netlink: 44 bytes leftover after parsing attributes in process `syz.4.748'. [ 171.120898][ T8800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.746'. [ 171.257173][ T8810] lo speed is unknown, defaulting to 1000 [ 171.412758][ T8817] netlink: 'syz.0.750': attribute type 21 has an invalid length. [ 171.481725][ T8817] netlink: 164 bytes leftover after parsing attributes in process `syz.0.750'. [ 171.493855][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.753'. [ 171.574655][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 172.381550][ T8873] sctp: [Deprecated]: syz.2.763 (pid 8873) Use of int in maxseg socket option. [ 172.381550][ T8873] Use struct sctp_assoc_value instead [ 172.449774][ T8873] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 172.631664][ T8873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.710820][ T8877] bond1: (slave veth5): Enslaving as an active interface with a down link [ 172.742144][ T8887] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 172.751898][ T8887] bond1: (slave batadv1): making interface the new active one [ 172.764208][ T8887] batadv1: entered promiscuous mode [ 172.779384][ T8887] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 172.792857][ T8890] ip6tnl0: Caught tx_queue_len zero misconfig [ 172.870890][ T8886] nbd2: detected capacity change from 0 to 127 [ 172.900707][ T5833] block nbd2: Receive control failed (result -32) [ 172.912596][ T5845] block nbd2: Send control failed (result -32) [ 172.919918][ T51] block nbd2: Receive control failed (result -32) [ 172.959175][ T5845] block nbd2: Request send failed, requeueing [ 173.015817][ T10] block nbd2: Dead connection, failed to find a fallback [ 173.023832][ T10] block nbd2: shutting down sockets [ 173.032347][ T5845] ldm_validate_partition_table(): Disk read failed. [ 173.054782][ T5845] Dev nbd2: unable to read RDB block 0 [ 173.061571][ T5845] nbd2: unable to read partition table [ 173.074360][ T5845] ldm_validate_partition_table(): Disk read failed. [ 173.083290][ T5845] Dev nbd2: unable to read RDB block 0 [ 173.090724][ T5845] nbd2: unable to read partition table [ 173.178103][ T8908] tipc: Started in network mode [ 173.183352][ T8908] tipc: Node identity 66cb0426b135, cluster identity 4711 [ 173.190813][ T8908] tipc: Enabled bearer , priority 0 [ 173.204189][ T8908] tipc: Resetting bearer [ 173.214974][ T8905] tipc: Disabling bearer [ 173.744331][ T8916] kthread_run failed with err -4 [ 174.022502][ T8933] Bluetooth: MGMT ver 1.23 [ 174.074256][ T8936] openvswitch: netlink: Key type 310 is out of range max 32 [ 174.635690][ T8958] syzkaller0: entered promiscuous mode [ 174.642353][ T8958] syzkaller0: entered allmulticast mode [ 174.666710][ T8963] __nla_validate_parse: 2 callbacks suppressed [ 174.666732][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.784'. [ 174.782136][ T8970] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.969085][ T8974] tc_dump_action: action bad kind [ 175.226991][ T8991] netlink: 64 bytes leftover after parsing attributes in process `syz.0.795'. [ 175.452367][ T9001] netlink: 'syz.1.799': attribute type 21 has an invalid length. [ 175.469861][ T9001] netlink: 128 bytes leftover after parsing attributes in process `syz.1.799'. [ 175.495526][ T9001] netlink: 'syz.1.799': attribute type 5 has an invalid length. [ 175.518607][ T9001] netlink: 3 bytes leftover after parsing attributes in process `syz.1.799'. [ 176.193084][ T5945] IPVS: starting estimator thread 0... [ 176.272967][ T9020] lo speed is unknown, defaulting to 1000 [ 176.298798][ T9026] IPVS: using max 24 ests per chain, 57600 per kthread [ 176.363704][ T7844] bond0: (slave <): interface is now down [ 176.364774][ T9037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.382689][ T7844] bond0: (slave bond_slave_1): interface is now down [ 176.419368][ T7844] bond0: (slave syz_tun): interface is now down [ 176.443443][ T7844] bond0: now running without any active interface! [ 176.448558][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 176.458626][ C1] lec:lec_tx_timeout: lec0 [ 176.464066][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 176.801015][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 176.876597][ T9057] syzkaller0: entered promiscuous mode [ 176.912400][ T9057] syzkaller0: entered allmulticast mode [ 177.227689][ T9077] netlink: 32396 bytes leftover after parsing attributes in process `syz.4.820'. [ 177.313447][ T9084] netlink: 'syz.3.823': attribute type 6 has an invalid length. [ 177.346079][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.820'. [ 177.848909][ T9110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.830'. [ 177.966322][ T9110] IPVS: sh: FWM 3 0x00000003 - no destination available [ 177.991829][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 178.097613][ T9113] lo speed is unknown, defaulting to 1000 [ 178.189481][ T9127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.834'. [ 178.634635][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.839'. [ 178.763982][ T9158] gre1: entered promiscuous mode [ 178.907539][ T9167] netlink: 'syz.0.844': attribute type 11 has an invalid length. [ 179.185849][ T9181] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 179.242134][ T9181] NCSI netlink: No device for ifindex 0 [ 180.040434][ T9219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.224589][ T9224] netlink: 'syz.4.856': attribute type 39 has an invalid length. [ 180.423936][ T9223] lo speed is unknown, defaulting to 1000 [ 180.448995][ T9236] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20002 [ 180.489929][ T9236] IPVS: dh: FWM 3 0x00000003 - no destination available [ 180.911764][ T9250] __nla_validate_parse: 4 callbacks suppressed [ 180.911786][ T9250] netlink: 164 bytes leftover after parsing attributes in process `syz.3.862'. [ 181.003173][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 181.231037][ T9264] netlink: 'syz.2.865': attribute type 1 has an invalid length. [ 181.510463][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 181.748541][ T9283] block nbd3: server does not support multiple connections per device. [ 181.758137][ T9283] block nbd3: shutting down sockets [ 181.946110][ T9293] lo speed is unknown, defaulting to 1000 [ 182.208380][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 182.216510][ C1] lec:lec_tx_timeout: lec0 [ 182.221611][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 182.343538][ T9309] netlink: 32396 bytes leftover after parsing attributes in process `syz.4.875'. [ 182.371139][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 183.056990][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 183.092683][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 183.111060][ T9348] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.882'. [ 183.428174][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 183.474569][ T9370] vlan3: entered allmulticast mode [ 183.491251][ T9370] bridge0: port 3(vlan3) entered blocking state [ 183.520557][ T9370] bridge0: port 3(vlan3) entered disabled state [ 183.590573][ T9370] vlan3: entered promiscuous mode [ 183.675236][ T9380] bridge0: port 3(syz_tun) entered blocking state [ 183.701331][ T9380] bridge0: port 3(syz_tun) entered disabled state [ 183.711541][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 183.734277][ T9380] syz_tun: entered allmulticast mode [ 183.766070][ T9380] syz_tun: entered promiscuous mode [ 183.789976][ T9380] bridge0: port 3(syz_tun) entered blocking state [ 183.796750][ T9380] bridge0: port 3(syz_tun) entered forwarding state [ 183.837980][ T9384] bridge_slave_1: left allmulticast mode [ 183.849417][ T9384] bridge_slave_1: left promiscuous mode [ 183.855298][ T9384] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.882431][ T9384] bridge_slave_0: left allmulticast mode [ 183.897203][ T9384] bridge_slave_0: left promiscuous mode [ 183.922036][ T9384] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.177788][ T9400] bridge_slave_1: left allmulticast mode [ 184.199127][ T9400] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.408484][ T621] batadv1: left promiscuous mode [ 184.619124][ T9426] netlink: 'syz.3.900': attribute type 3 has an invalid length. [ 184.648665][ T9426] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 184.849991][ T9436] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 184.878507][ T9439] netlink: 'syz.0.905': attribute type 1 has an invalid length. [ 184.926292][ T9439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.015814][ T9436] netlink: 'syz.1.904': attribute type 6 has an invalid length. [ 185.020670][ T9438] vlan2: entered allmulticast mode [ 185.028937][ T9438] bond6: entered allmulticast mode [ 185.036808][ T9443] netlink: 'syz.3.906': attribute type 3 has an invalid length. [ 185.051388][ T9443] netlink: 'syz.3.906': attribute type 3 has an invalid length. [ 185.364532][ T9469] netlink: 'syz.4.912': attribute type 3 has an invalid length. [ 185.616423][ T9478] bridge0: port 3(syz_tun) entered disabled state [ 185.623180][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.642089][ T9478] bridge0: entered allmulticast mode [ 185.709802][ T9479] macvtap0: entered promiscuous mode [ 185.763722][ T9487] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 185.793773][ T9479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.876085][ T9488] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 186.143949][ T9496] xt_hashlimit: size too large, truncated to 1048576 [ 186.296294][ T9504] syzkaller1: entered promiscuous mode [ 186.341256][ T9504] syzkaller1: entered allmulticast mode [ 186.438802][ T9516] __nla_validate_parse: 16 callbacks suppressed [ 186.438823][ T9516] netlink: 32396 bytes leftover after parsing attributes in process `syz.4.919'. [ 186.515838][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'. [ 186.737852][ T9519] syzkaller0: entered promiscuous mode [ 186.777080][ T9519] syzkaller0: entered allmulticast mode [ 186.862992][ T9534] tipc: Enabling of bearer rejected, failed to enable media [ 186.955049][ T9548] netlink: 'syz.2.926': attribute type 2 has an invalid length. [ 187.229655][ T9566] atomic_op ffff8880558e9998 conn xmit_atomic 0000000000000000 [ 187.241698][ T9564] netlink: 68 bytes leftover after parsing attributes in process `syz.0.928'. [ 187.968402][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 187.976705][ C1] lec:lec_tx_timeout: lec0 [ 187.981649][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 189.045208][ T9522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.075072][ T9527] syzkaller0: entered promiscuous mode [ 189.087349][ T9527] syzkaller0: entered allmulticast mode [ 189.096044][ T9565] syzkaller1: entered promiscuous mode [ 189.106203][ T9565] syzkaller1: entered allmulticast mode [ 189.179116][ T9519] lo speed is unknown, defaulting to 1000 [ 189.204394][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 189.215144][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.930'. [ 189.293210][ T9567] lo speed is unknown, defaulting to 1000 [ 189.753253][ T9597] netlink: 104 bytes leftover after parsing attributes in process `syz.4.936'. [ 189.795635][ T9595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.936'. [ 189.812123][ T9595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.936'. [ 189.902815][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 190.203847][ T9606] IPVS: sh: FWM 3 0x00000003 - no destination available [ 190.231132][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 190.486654][ T9615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.944'. [ 190.594819][ T9619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.760371][ T29] lo speed is unknown, defaulting to 1000 [ 190.766233][ T5829] lo speed is unknown, defaulting to 1000 [ 191.099835][ T9636] syzkaller0: entered promiscuous mode [ 191.112392][ T9636] syzkaller0: entered allmulticast mode [ 191.227679][ T9654] validate_nla: 1 callbacks suppressed [ 191.227700][ T9654] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 192.801978][ T9649] : renamed from veth0_to_bond (while UP) [ 192.818418][ T9663] __nla_validate_parse: 5 callbacks suppressed [ 192.818438][ T9663] netlink: 136 bytes leftover after parsing attributes in process `syz.3.959'. [ 192.852703][ T9663] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 192.988419][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 192.996569][ C1] lec:lec_tx_timeout: lec0 [ 193.002287][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 193.093054][ T9675] [ 193.095498][ T9675] ====================================================== [ 193.102554][ T9675] WARNING: possible circular locking dependency detected [ 193.109633][ T9675] syzkaller #0 Not tainted [ 193.114250][ T9675] ------------------------------------------------------ [ 193.121523][ T9675] syz.4.964/9675 is trying to acquire lock: [ 193.127453][ T9675] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 193.137809][ T9675] [ 193.137809][ T9675] but task is already holding lock: [ 193.145391][ T9675] ffff8880565aee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 193.155137][ T9675] [ 193.155137][ T9675] which lock already depends on the new lock. [ 193.155137][ T9675] [ 193.165660][ T9675] [ 193.165660][ T9675] the existing dependency chain (in reverse order) is: [ 193.174713][ T9675] [ 193.174713][ T9675] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 193.182685][ T9675] lock_sock_nested+0x41/0x100 [ 193.188031][ T9675] __inet6_bind+0x30c/0xf60 [ 193.193190][ T9675] mptcp_bind+0x110/0x1d0 [ 193.198083][ T9675] __sys_bind+0x2e3/0x410 [ 193.202987][ T9675] __x64_sys_bind+0x7a/0x90 [ 193.208101][ T9675] do_syscall_64+0x14d/0xf80 [ 193.213274][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.219739][ T9675] [ 193.219739][ T9675] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 193.227533][ T9675] lock_sock_nested+0x41/0x100 [ 193.232875][ T9675] inet_shutdown+0x6a/0x390 [ 193.237978][ T9675] nbd_mark_nsock_dead+0x2e9/0x560 [ 193.243695][ T9675] sock_shutdown+0x15e/0x260 [ 193.248862][ T9675] nbd_clear_sock+0x24/0x170 [ 193.254024][ T9675] nbd_config_put+0x2dd/0x580 [ 193.259281][ T9675] nbd_genl_connect+0x19d5/0x1cf0 [ 193.264975][ T9675] genl_family_rcv_msg_doit+0x22a/0x330 [ 193.271097][ T9675] genl_rcv_msg+0x61c/0x7a0 [ 193.276221][ T9675] netlink_rcv_skb+0x232/0x4b0 [ 193.281647][ T9675] genl_rcv+0x28/0x40 [ 193.286196][ T9675] netlink_unicast+0x80f/0x9b0 [ 193.291541][ T9675] netlink_sendmsg+0x813/0xb40 [ 193.296884][ T9675] ____sys_sendmsg+0x972/0x9f0 [ 193.302241][ T9675] ___sys_sendmsg+0x2a5/0x360 [ 193.307504][ T9675] __x64_sys_sendmsg+0x1bd/0x2a0 [ 193.313032][ T9675] do_syscall_64+0x14d/0xf80 [ 193.318198][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.324654][ T9675] [ 193.324654][ T9675] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 193.332377][ T9675] __mutex_lock+0x19f/0x1300 [ 193.337612][ T9675] nbd_queue_rq+0x37b/0x1100 [ 193.342837][ T9675] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 193.348936][ T9675] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 193.355833][ T9675] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 193.362376][ T9675] blk_mq_run_hw_queue+0x348/0x4f0 [ 193.368062][ T9675] blk_mq_dispatch_list+0xd16/0xe10 [ 193.373809][ T9675] blk_mq_flush_plug_list+0x48d/0x570 [ 193.379736][ T9675] __blk_flush_plug+0x3ed/0x4d0 [ 193.385137][ T9675] __submit_bio+0x28d/0x580 [ 193.390193][ T9675] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 193.396473][ T9675] block_read_full_folio+0x599/0x830 [ 193.402315][ T9675] filemap_read_folio+0x137/0x3b0 [ 193.407895][ T9675] do_read_cache_folio+0x358/0x590 [ 193.413566][ T9675] read_part_sector+0xb6/0x2b0 [ 193.418887][ T9675] adfspart_check_ICS+0xa5/0xa40 [ 193.424379][ T9675] bdev_disk_changed+0x7ba/0x1550 [ 193.429951][ T9675] blkdev_get_whole+0x380/0x510 [ 193.435351][ T9675] bdev_open+0x31e/0xd30 [ 193.440137][ T9675] blkdev_open+0x470/0x610 [ 193.445107][ T9675] do_dentry_open+0x785/0x14e0 [ 193.450431][ T9675] vfs_open+0x3b/0x340 [ 193.455069][ T9675] path_openat+0x2e08/0x3860 [ 193.460261][ T9675] do_file_open+0x23e/0x4a0 [ 193.465314][ T9675] do_sys_openat2+0x113/0x200 [ 193.470542][ T9675] __x64_sys_openat+0x138/0x170 [ 193.475961][ T9675] do_syscall_64+0x14d/0xf80 [ 193.481093][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.487647][ T9675] [ 193.487647][ T9675] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 193.494902][ T9675] __mutex_lock+0x19f/0x1300 [ 193.500043][ T9675] nbd_queue_rq+0xc6/0x1100 [ 193.505101][ T9675] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 193.511199][ T9675] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 193.518073][ T9675] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 193.524606][ T9675] blk_mq_run_hw_queue+0x348/0x4f0 [ 193.530262][ T9675] blk_mq_dispatch_list+0xd16/0xe10 [ 193.536025][ T9675] blk_mq_flush_plug_list+0x48d/0x570 [ 193.541948][ T9675] __blk_flush_plug+0x3ed/0x4d0 [ 193.547340][ T9675] __submit_bio+0x28d/0x580 [ 193.552393][ T9675] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 193.558585][ T9675] block_read_full_folio+0x599/0x830 [ 193.564427][ T9675] filemap_read_folio+0x137/0x3b0 [ 193.569995][ T9675] do_read_cache_folio+0x358/0x590 [ 193.575646][ T9675] read_part_sector+0xb6/0x2b0 [ 193.580953][ T9675] adfspart_check_ICS+0xa5/0xa40 [ 193.586436][ T9675] bdev_disk_changed+0x7ba/0x1550 [ 193.592010][ T9675] blkdev_get_whole+0x380/0x510 [ 193.597521][ T9675] bdev_open+0x31e/0xd30 [ 193.602347][ T9675] blkdev_open+0x470/0x610 [ 193.607325][ T9675] do_dentry_open+0x785/0x14e0 [ 193.612646][ T9675] vfs_open+0x3b/0x340 [ 193.617285][ T9675] path_openat+0x2e08/0x3860 [ 193.622463][ T9675] do_file_open+0x23e/0x4a0 [ 193.627602][ T9675] do_sys_openat2+0x113/0x200 [ 193.632933][ T9675] __x64_sys_openat+0x138/0x170 [ 193.638366][ T9675] do_syscall_64+0x14d/0xf80 [ 193.643507][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.649945][ T9675] [ 193.649945][ T9675] -> #3 (set->srcu){.+.+}-{0:0}: [ 193.657143][ T9675] __synchronize_srcu+0xca/0x300 [ 193.662663][ T9675] elevator_switch+0x1e8/0x7a0 [ 193.668066][ T9675] elevator_change+0x2cc/0x450 [ 193.673381][ T9675] elevator_set_default+0x36c/0x430 [ 193.679136][ T9675] blk_register_queue+0x366/0x430 [ 193.684740][ T9675] __add_disk+0x677/0xd50 [ 193.689620][ T9675] add_disk_fwnode+0xfb/0x480 [ 193.694869][ T9675] nbd_dev_add+0x72c/0xb50 [ 193.699830][ T9675] nbd_init+0x168/0x1f0 [ 193.704540][ T9675] do_one_initcall+0x250/0x8d0 [ 193.709856][ T9675] do_initcall_level+0x104/0x190 [ 193.715347][ T9675] do_initcalls+0x59/0xa0 [ 193.720238][ T9675] kernel_init_freeable+0x2a6/0x3e0 [ 193.725994][ T9675] kernel_init+0x1d/0x1d0 [ 193.730867][ T9675] ret_from_fork+0x51e/0xb90 [ 193.736012][ T9675] ret_from_fork_asm+0x1a/0x30 [ 193.741361][ T9675] [ 193.741361][ T9675] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 193.749232][ T9675] __mutex_lock+0x19f/0x1300 [ 193.754475][ T9675] elevator_change+0x1b3/0x450 [ 193.759804][ T9675] elevator_set_none+0xb5/0x140 [ 193.765201][ T9675] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 193.771560][ T9675] nbd_start_device+0x17f/0xb10 [ 193.776964][ T9675] nbd_genl_connect+0x165b/0x1cf0 [ 193.782535][ T9675] genl_family_rcv_msg_doit+0x22a/0x330 [ 193.788715][ T9675] genl_rcv_msg+0x61c/0x7a0 [ 193.793876][ T9675] netlink_rcv_skb+0x232/0x4b0 [ 193.799209][ T9675] genl_rcv+0x28/0x40 [ 193.803738][ T9675] netlink_unicast+0x80f/0x9b0 [ 193.809057][ T9675] netlink_sendmsg+0x813/0xb40 [ 193.814479][ T9675] ____sys_sendmsg+0x972/0x9f0 [ 193.819816][ T9675] ___sys_sendmsg+0x2a5/0x360 [ 193.825134][ T9675] __x64_sys_sendmsg+0x1bd/0x2a0 [ 193.830662][ T9675] do_syscall_64+0x14d/0xf80 [ 193.835804][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.842243][ T9675] [ 193.842243][ T9675] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 193.850976][ T9675] blk_alloc_queue+0x546/0x680 [ 193.856297][ T9675] __blk_mq_alloc_disk+0x197/0x390 [ 193.861992][ T9675] nbd_dev_add+0x499/0xb50 [ 193.866980][ T9675] nbd_init+0x168/0x1f0 [ 193.871734][ T9675] do_one_initcall+0x250/0x8d0 [ 193.877124][ T9675] do_initcall_level+0x104/0x190 [ 193.882636][ T9675] do_initcalls+0x59/0xa0 [ 193.887552][ T9675] kernel_init_freeable+0x2a6/0x3e0 [ 193.893317][ T9675] kernel_init+0x1d/0x1d0 [ 193.898205][ T9675] ret_from_fork+0x51e/0xb90 [ 193.903354][ T9675] ret_from_fork_asm+0x1a/0x30 [ 193.908775][ T9675] [ 193.908775][ T9675] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 193.916030][ T9675] __lock_acquire+0x15a5/0x2cf0 [ 193.921439][ T9675] lock_acquire+0xf0/0x2e0 [ 193.926434][ T9675] fs_reclaim_acquire+0x71/0x100 [ 193.931934][ T9675] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 193.938297][ T9675] __alloc_skb+0x1d0/0x7d0 [ 193.943282][ T9675] tcp_stream_alloc_skb+0x3f/0x580 [ 193.948947][ T9675] tcp_connect+0x1567/0x5440 [ 193.954136][ T9675] tcp_v4_connect+0x10f7/0x19b0 [ 193.959547][ T9675] tcp_v6_connect+0xbbb/0x1b10 [ 193.964874][ T9675] __inet_stream_connect+0x25a/0xdd0 [ 193.970721][ T9675] inet_stream_connect+0x66/0xa0 [ 193.976243][ T9675] kernel_connect+0x141/0x1c0 [ 193.981465][ T9675] smc_connect+0x7a5/0xd90 [ 193.986432][ T9675] __sys_connect+0x312/0x450 [ 193.991663][ T9675] __x64_sys_connect+0x7a/0x90 [ 193.996982][ T9675] do_syscall_64+0x14d/0xf80 [ 194.002126][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.008573][ T9675] [ 194.008573][ T9675] other info that might help us debug this: [ 194.008573][ T9675] [ 194.018815][ T9675] Chain exists of: [ 194.018815][ T9675] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 194.018815][ T9675] [ 194.031809][ T9675] Possible unsafe locking scenario: [ 194.031809][ T9675] [ 194.039388][ T9675] CPU0 CPU1 [ 194.044873][ T9675] ---- ---- [ 194.050264][ T9675] lock(k-sk_lock-AF_INET6); [ 194.054997][ T9675] lock(sk_lock-AF_INET6); [ 194.062042][ T9675] lock(k-sk_lock-AF_INET6); [ 194.069254][ T9675] lock(fs_reclaim); [ 194.073252][ T9675] [ 194.073252][ T9675] *** DEADLOCK *** [ 194.073252][ T9675] [ 194.081407][ T9675] 2 locks held by syz.4.964/9675: [ 194.086534][ T9675] #0: ffff88805670d9e0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xd90 [ 194.095819][ T9675] #1: ffff8880565aee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 194.105978][ T9675] [ 194.105978][ T9675] stack backtrace: [ 194.111915][ T9675] CPU: 1 UID: 0 PID: 9675 Comm: syz.4.964 Not tainted syzkaller #0 PREEMPT(full) [ 194.111940][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 194.111958][ T9675] Call Trace: [ 194.111968][ T9675] [ 194.111977][ T9675] dump_stack_lvl+0xe8/0x150 [ 194.112008][ T9675] print_circular_bug+0x2e1/0x300 [ 194.112040][ T9675] check_noncircular+0x12e/0x150 [ 194.112071][ T9675] __lock_acquire+0x15a5/0x2cf0 [ 194.112098][ T9675] ? inet_sk_rebuild_header+0x93/0x1da0 [ 194.112126][ T9675] ? rcu_is_watching+0x15/0xb0 [ 194.112153][ T9675] ? __lock_acquire+0x6b5/0x2cf0 [ 194.112179][ T9675] lock_acquire+0xf0/0x2e0 [ 194.112201][ T9675] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 194.112226][ T9675] fs_reclaim_acquire+0x71/0x100 [ 194.112247][ T9675] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 194.112266][ T9675] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 194.112286][ T9675] ? __alloc_skb+0x1d0/0x7d0 [ 194.112309][ T9675] ? ipv4_default_advmss+0x20/0x340 [ 194.112340][ T9675] __alloc_skb+0x1d0/0x7d0 [ 194.112366][ T9675] tcp_stream_alloc_skb+0x3f/0x580 [ 194.112383][ T9675] ? __asan_memset+0x22/0x50 [ 194.112401][ T9675] tcp_connect+0x1567/0x5440 [ 194.112440][ T9675] ? __pfx_tcp_connect+0x10/0x10 [ 194.112472][ T9675] ? __asan_memset+0x22/0x50 [ 194.112491][ T9675] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 194.112510][ T9675] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 194.112539][ T9675] ? sk_setup_caps+0x9ef/0xc40 [ 194.112567][ T9675] ? sk_setup_caps+0x29/0xc40 [ 194.112599][ T9675] tcp_v4_connect+0x10f7/0x19b0 [ 194.112626][ T9675] ? __pfx_tcp_v4_connect+0x10/0x10 [ 194.112642][ T9675] ? lockdep_hardirqs_on+0x7a/0x110 [ 194.112660][ T9675] ? tcp_v6_connect+0x62d/0x1b10 [ 194.112690][ T9675] tcp_v6_connect+0xbbb/0x1b10 [ 194.112725][ T9675] ? __pfx_tcp_v6_connect+0x10/0x10 [ 194.112754][ T9675] ? __pfx___resched_curr+0x10/0x10 [ 194.112782][ T9675] __inet_stream_connect+0x25a/0xdd0 [ 194.112812][ T9675] ? do_raw_spin_lock+0x12b/0x2f0 [ 194.112831][ T9675] ? __pfx___inet_stream_connect+0x10/0x10 [ 194.112858][ T9675] ? inet_stream_connect+0x51/0xa0 [ 194.112884][ T9675] ? __local_bh_enable_ip+0xd0/0x130 [ 194.112910][ T9675] inet_stream_connect+0x66/0xa0 [ 194.112937][ T9675] kernel_connect+0x141/0x1c0 [ 194.112956][ T9675] ? __pfx_kernel_connect+0x10/0x10 [ 194.112973][ T9675] ? do_raw_spin_lock+0x12b/0x2f0 [ 194.112995][ T9675] ? smc_connect+0xbd/0xd90 [ 194.113020][ T9675] ? __local_bh_enable_ip+0xd0/0x130 [ 194.113045][ T9675] smc_connect+0x7a5/0xd90 [ 194.113073][ T9675] __sys_connect+0x312/0x450 [ 194.113098][ T9675] ? __pfx___sys_connect+0x10/0x10 [ 194.113126][ T9675] ? rcu_is_watching+0x15/0xb0 [ 194.113155][ T9675] __x64_sys_connect+0x7a/0x90 [ 194.113185][ T9675] do_syscall_64+0x14d/0xf80 [ 194.113202][ T9675] ? trace_irq_disable+0x3b/0x150 [ 194.113217][ T9675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.113235][ T9675] ? clear_bhb_loop+0x40/0x90 [ 194.113255][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.113273][ T9675] RIP: 0033:0x7f8cf539c819 [ 194.113295][ T9675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.113311][ T9675] RSP: 002b:00007f8cf62e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 194.113330][ T9675] RAX: ffffffffffffffda RBX: 00007f8cf5615fa0 RCX: 00007f8cf539c819 [ 194.113345][ T9675] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000003 [ 194.113356][ T9675] RBP: 00007f8cf5432c91 R08: 0000000000000000 R09: 0000000000000000 [ 194.113367][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.113377][ T9675] R13: 00007f8cf5616038 R14: 00007f8cf5615fa0 R15: 00007ffc3889f1a8 [ 194.113398][ T9675] [ 194.483898][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.018383][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 198.026587][ C1] lec:lec_tx_timeout: lec0 [ 198.031283][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 202.032896][ T51] Bluetooth: hci4: link tx timeout [ 202.038069][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 203.038423][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 203.046542][ C1] lec:lec_tx_timeout: lec0 [ 203.051248][ C1] lec:lec_start_xmit: lec0:No lecd attached