last executing test programs: 5.257051965s ago: executing program 1 (id=564): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r4, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.905261276s ago: executing program 3 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.622146699s ago: executing program 1 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) getsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 4.271640532s ago: executing program 3 (id=572): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, 0x0}, 0x5) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r4, 0x2}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)='\x00'/14, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.845560898s ago: executing program 3 (id=577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x20fdb, 0x8, 0xffffffffffffffff, 0x8ffff}}, @TCA_CT_ZONE={0x6, 0x4, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x30004850) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r1, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x1e1, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89, 0x9, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x30, {0x2, 0xa, 0x2, 0x400, [0x6, 0x8000000000000001, 0x8001, 0xfff, 0xb8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x45, 0x0, 0x9, 0x1, 0x0, 0x8, 0x64}, @dstopts={0x88, 0xf, '\x00', [@padn={0x1, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0xe}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0xa, 0x2, [0x4000000000000, 0x2, 0x8162, 0x8, 0x100, 0x7, 0x3, 0x9]}}]}, @dstopts={0x0, 0x13, '\x00', [@generic={0x3, 0x49, "9f86ede23e4b5e46fd18f951f5293428bfc295cad0e6fdb5166386700881a5b42ba6584d508731faccfbfda607b975d139ac880ba0c02e3676a60122f381a290715f0be2b3edf289be"}, @jumbo, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x8}, @generic={0x67, 0x3e, "5b76d1f8828609f172173e9b6bdf401948dee242de0603816f355fda9a1321bbb3e89770928f478fdeceecb7523167c295b67126a259d8732fc4e90637c7"}]}], {0x4e24, 0x4e21, 0x51, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a707a89c26ea9352beaef40042f"}}}}}, 0x217) 3.668736064s ago: executing program 1 (id=581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0xa, 0x0, @void}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) accept4$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000280)=0x6e, 0x800) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, r4, 0xffffffffffffffff, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000040)='\x00', 0xffffffa9}}, 0x4000080) (async) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, r4, 0xffffffffffffffff, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000040)='\x00', 0xffffffa9}}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012c00b000100697036746e6c000020000280050009000402000014000200fe8000001b00000000000000000000bb08000400faa7276b"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 3.433360477s ago: executing program 3 (id=583): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ff}, {}, {0x7, 0x0, 0xb, 0x7}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ac}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r2, 0x100000af5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a80)={0x6, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@generic={0x6, 0x8, 0x5, 0xc4, 0x8}, @exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1ff}]}, &(0x7f0000000140)='GPL\x00', 0xf, 0x1000, &(0x7f00000009c0)=""/4096, 0x41100, 0x36, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000019c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001a00)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000001a40)=[{0x0, 0x3, 0x7, 0x3}, {0x3, 0x4, 0x8, 0xa}], 0x10, 0x3}, 0x94) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 3.42601696s ago: executing program 1 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fbdbdf210100000006000a004e230000050002000a000000140009"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) 3.298807447s ago: executing program 1 (id=586): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r2, r4, 0x8f5, 0x100000000000000) write$cgroup_type(r4, &(0x7f0000000180), 0x9) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES16=r3], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000003, 0x7ffffff9}, 0x10) write(r0, &(0x7f0000000100)="1800000016005f021dfffffffffffff80700000001000000", 0x18) 2.821094376s ago: executing program 0 (id=588): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.764635212s ago: executing program 0 (id=589): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000b06010200000000000000000000000005000100070000000900020073797a3100000000400007800c001a00"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.608211756s ago: executing program 0 (id=591): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) unshare(0x22020400) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5}, 0x50) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x98, &(0x7f00000006c0)=ANY=[@ANYBLOB="94bd41e5bfd9aaaaaaaaaaaa8847000000000000080000000000000000005ce83f2fd7f0adebb0ae1b63ec1c4bf8ae6f4a2d0b8a118805f19c56ccb1d2bb466479ec42b1c4308aed9c1656a9fb259d76a1949cc24c914767135382f330beb131aa5a4ff0600cb867ae59f68b41c4aa035af322d31d3f47dad185ccf576244553bae7aa592f7e4f2be18d773a4dbf662d7bc9a5f02769cb"], &(0x7f0000000840)={0x4, 0x4, [0x627, 0x46a, 0x79a, 0x419]}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r11, r9, 0x0, r8}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}]}}}]}, 0x3c}}, 0x4) 2.503324678s ago: executing program 3 (id=592): socket(0x2b, 0x1, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x917ba7244aaaf568, 0x4) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000ac0)={&(0x7f0000000980)=[{0x400, 0x777, 0x100000001, 0x3}, {0x6, 0x0, 0x7, 0x9}, {0x1, 0x6, 0x6, 0x3}, {0x8, 0x26dc, 0x40, 0x8}, {0x9, 0x1, 0x3, 0x100000000}, {0x10000, 0x610a}, {0xd229, 0x7, 0x4, 0x100000000}, {0x6, 0x2, 0x6, 0x8}, {0x2, 0x101, 0x100000000, 0xad6}, {0x9, 0x1, 0x5d84, 0x7b}], 0xa, 0x20, 0x2, 0x1}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0x10, 0x5, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d1392a4a2719302000000030b43026c26236925000400fe7f0004002dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00001800010000000000fedbdf2502001400fa040000001b007f00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c814) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000806000108000604"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000100000000004500002808000000008c5e944415b7b11540a66ff6821482e2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000190780002"], 0x32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x4, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000040)={@private0, 0x53}) sendmmsg$inet6(r10, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000006c0)="02", 0x1}, {&(0x7f00000000c0)="bd904973777c46c547c32a8770263f41622ba00949cef4ebe7354bb4376d878a7e5aef2f471e0d6ca412", 0x2a}, {&(0x7f0000000c00)="8f36efc679de6cc1ba19b15363f64f300dadfec0a2cc4fd03a8a98e76d14c56c418a9d8139c6d98212e3078a87101237ebbd421e5e5c84253c12f27fa758f116d3a3bd938920606bc1849b91e0e45d43b3e3c31644ccc5fbdc56e2e398528c7ce6dd04cd913065f057ef97b05e90f95f9bd3786eef170273da804581ffffffff70d369fc948a15fc5b45d2defad541059de93a107d1f785a22ef4175e7687715336acefd21aed2bbaf3987bd78e3844bfaad956b52925e1e59e7a7a155451ec56403c403f4c12f02d5ab15c9ee7dcaddfea242687b386dbc53dcd79246d83c130ae29ce66fd5cece132ab9540d9ef6b1f3beed00b6", 0xf5}, {&(0x7f0000000600)="5ca2b26543479c093d9a44e0ab0adfbd8377731b94f26d5c462daaa0b267d6d3ac7beacd97b78ea829d2175b65188d2027747a8562dbdb91e74370cc6ed94145a93b27b38a3c01caf7a7ec1373d9f4bc9e1eab58e287892dd3082b58c85c1b89fd4be206b32f2ca76465b7cece1680f8506ebbf7642b32ba342910cd6c6f7d5fed0fcc16a1fdc297a09326895fae3d91b80953af946a0d77317058012104c7f1eceaba2c228a07303c5c6a97c785e0854c", 0xb1}, {&(0x7f0000000b00)="0368576f87d8835cd07e6408dd5a8e0f04709bdf0f9232d8a9946ab0eabd00342f00ce643c324a8a5ad0ded0c49475e935c7acd9766b479ad853991e7ef8cda67a8d2fefeef3383882e10c0531a6a6bdb19b26180febe9efc6bc6cca212b70937d8499bb9f2314919245329e7f59527daf975dd724beabb69ae4f442c855a17a30ad97035a3b44168523a8d7949ff1c14aa99f06185769b00dd005e14ef30a1b9f0c07dc40cbfd0c1ef233e3ebe53db9c48699143ec697617b478fd6f9f6be06fcb807", 0xc3}, {&(0x7f0000000800)="947365cc8fb84c4721a945904c99467fa16b9a6beea944396f22af1d2c85d3aad87fe3cb7d0d9a16de4565a1131265694744fbbfb58de75258ab3fc8b3cdbb13ff72ae648c80bcdc2e886e1590e53d4d8ba6158c356ebbf7750aed9ffdcf36b3880029efacee44312f3f5aaa23a03e38a52fdf1570cd3915977270bf76cd4ac2b07bc4ba51aebb0dbf6eb50ff1a26259bdf159e7559cbc3eb9631ea136e621c6a5573c8125dac6b2c9ccc5d89c49fdbe64270952c2480849952241fa7a755c7a662726ef07a0481e9fe7e753697ea2e5f721b3eb53f1bb024df3ff60415b92c4065720b52b82628400584d623b7cafe7c30fc07d7db0", 0xf6}], 0x6}}], 0x2, 0x24000045) shutdown(r2, 0x1) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000017000000540006803c0004"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2.255483122s ago: executing program 4 (id=595): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xf9, 0x1, 0x50, @loopback, @loopback={0x0, 0xffff888101827518}, 0x80f, 0x40, 0x1, 0xfffffff8}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) 1.968425226s ago: executing program 0 (id=596): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$sock(r0, &(0x7f00000015c0)={&(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="fb02ab007be512211bc46ca152f394c525bb51097c0a6581ababf8961978c83c3876ea4c20b6647884869db3445f2fec0ec0aa1be5f6f3d94bbd08636511c83e1c9a2522c29825400718960e9fe9d8f3f776bf10187b0a87474e", 0x5a}], 0x2, &(0x7f0000001580)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}, 0x40) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x84}, 0x1, 0x0, 0x0, 0x24008850}, 0x40040) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x49be352db4b53a7c, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000200)={@val={0xa, 0x1b}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x18, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0xe}}}}}}}}, 0x52) close(r1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'wlan1\x00', 0x4000}) 1.967710194s ago: executing program 4 (id=597): r0 = socket$kcm(0x10, 0x3, 0x4) r1 = socket(0x1, 0x803, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000340)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x609, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @private2}]}}}]}, 0x4c}}, 0x2c000814) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) close(0x4) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r3, 0x300, 0x70bd2f, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_COMPAT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x8000) 1.92712312s ago: executing program 3 (id=598): syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f00000001c0)=ANY=[], 0xf}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5c17}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="d100000000000180c20000000800450000200000e000001190780000000000f15e6528b5ae6ecd0c908761040000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000023c0)={'wg0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002000010027bd7000000000000a000040000000001400010005001300010000ed6170eaa8c619a7be6c18dc262de6fff094e9876de850b7636c5ecb2505de531e4678f22cfd788b6a8139ee8201b40088e56c9e8c4c3cb8e5efccded6af994d2a20d0171dfae3a81989cb5c1e"], 0x24}}, 0x4008000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000004c0), &(0x7f0000000500)=0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bd", 0x41}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000b00)="74a4e85cc89d33547afbda9d629f9f9f20b9b051442633488e9e33357c312479a404b3704c8d07860bf96d27dfa418938111b5863b28d31d6185a51a0ad41082802e5ca3be41e7ceac5799eac6bb0ff074730031c7dca06f1e3f85a9c396610ab3bce2e140e31e878fe2bb2c4c9bbdf6cf9fc309342407cb59bd5086e9dd41ade97c48664286653e4c390266c307182581eb72c91b5a03000000000000001b4b977e05116405bcf3c2da0b1194f01177fdd42215aa0a0a16dc8da2444854aae3729ffa795dd6e19d7fd7bdc62087", 0xce}, {&(0x7f0000000880)="d82d33a6d81edc4b66cc88bf8c1a89a600010000000000006cab778d9631e23dc7b23087ca46c503e8b9bbf55511a47353213e9469564dc8aea385d25838f30a8b23ee20331856a97befcd9aaf4dba1e25357aa609052646e4f9b3f06de214eaa4734947274e4afa8de4aa82a84c49eb1e3b8fd516eee5361965121396212193511b759e4d514904f1d5f3f41448402e17471275634634c1", 0x83}, {&(0x7f0000000580)="4cc291a1339f36fedfa937c3d768baa73ddc72c419695988fc8177e38f1379e15e6745bbb565b5a19e98a179b04a46aeeb2ae125123d2bb33ca7f7a32c4b04399893a25cdc4147", 0x47}, {&(0x7f0000000640)="4f5d11a3bedb1e613a22193c7efc0895ad8a3a732fc9ac7b82813fb06350e990d28156283d5b74e91294a85de9d112834691b29f7b8de2d221534387bb87a9000000006d90826596c1f8831c143bb8e2e7acd2128a4925e5c6e0a2131998d6d58ff9c3db3eb27243ac492f85077253fe06879f2a950f0ab0a7b4ffd3b60a365836b69adfc1ca21956b58515c62ef1093700b02bdcbab80daeb72f080b97c93670977b6a834487fac91000000000000", 0xee}, {&(0x7f0000000700)="127e9e1fed85c92de6f35b0f5c5773cd2459424b46b24ee9f4a0a91f84a17ebf143111d986c7efde91a12cf09a83e70646f840c7c1dcf14a20e9e866989bc789469b60cef2dfd741ac914aab6751cf163f6acba335a266c0838f3be62539be506c2338c495277d70a1bb9021daa95c64d1c5e0134505179d0fef2933e0b19861951bb1bb630b9b4127f46b946ec1f7141b3ec2c9d11074b6ec41a314414c3f966cd19ab1ad99ddf83a1dd134358a68c0", 0xb0}, {&(0x7f00000007c0)="38efe9d712d905bf9f3d662a241229ad7ff87611e1aa1b7627a1f2079978a3", 0x1f}], 0x6}}], 0x2, 0x8810) sendmsg$alg(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x51, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x40001) recvmsg$unix(r6, &(0x7f0000000440)={0x0, 0x2d, &(0x7f0000000140)=[{&(0x7f0000001140)=""/4083, 0x1002}], 0x1}, 0x12062) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x68}}, 0x2004c891) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) socket$kcm(0x29, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) 1.577560491s ago: executing program 4 (id=599): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd8, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x35}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x800}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4bb7c845}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20008801}, 0x111) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0xfff1, 0x5}, {0x7, 0xffe2}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000080)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="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", 0x195) r10 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x40804}, 0x20004800) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@multicast1}, {@multicast1, 0x800000}]}, @generic={0x7, 0xd, "064d291a00000000d05c49"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1fff}}}}}}, 0x0) 1.509433592s ago: executing program 2 (id=600): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) syz_genetlink_get_family_id$batadv(0x0, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x508, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x438, 0x438, 0x438, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x4, 0x0, 'system_u:object_r:wireless_device_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {}, {}, 0xc8, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x1}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x401}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x1007, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.362435099s ago: executing program 2 (id=601): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0x43, 0x2, 0x6}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x31}, 0xfffffffe, 0x7}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x39, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18a0, 0x6}}]}, {0x4}, {0xc, 0x3, {0x20}}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r2, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x20, 0x5, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}, 0x3e) 1.165803116s ago: executing program 4 (id=602): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r3, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) 908.544343ms ago: executing program 0 (id=603): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r4, &(0x7f00000003c0)=""/4093, 0xffd, 0x202df) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) (rerun: 64) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r5, 0x0, 0x20000000}, 0x20) (async) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r6 = accept4(r2, 0x0, 0x0, 0x0) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r8 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="001d00f9ffffffffffffaaaaaaaaaaaa86dd"], 0x12) (async) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) (async) accept4(r6, &(0x7f0000000180)=@xdp, &(0x7f0000000200)=0x80, 0x800) (async) recvmsg$can_raw(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f00000000c0)=""/35, 0x23}], 0x2}, 0x1021) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_DELSET={0x168, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xffffffffffffffdb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0x0, 0x2, 0x1, 0x0, 0x200}, @NFTA_LIMIT_BURST={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_LIMIT_RATE={0x0, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_BURST={0x0, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPRESSIONS={0xf8, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d8}, 0x1, 0x0, 0x0, 0x24040811}, 0x20044004) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 908.115172ms ago: executing program 2 (id=604): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 775.867875ms ago: executing program 0 (id=605): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr, 0x80, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xd35, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r5, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0xc000) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) close(r3) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060000000085000000070000009500"/40], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "8181"}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile(r7, r8, 0x0, 0xffffffff000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r11, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 603.330114ms ago: executing program 2 (id=606): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000840)={&(0x7f0000000180), 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1fc, 0x12, 0x400, 0x70bd2d, 0x25dfdbfd, {0x2b, 0xe2, 0x1, 0x3, {0x4e22, 0x4e20, [0xe00000, 0xfff, 0x8, 0x4], [0x28, 0x4, 0xb, 0x7], r4, [0x0, 0x10000]}, 0x400, 0xf7a1}, [@INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "c880b80b3ae1416dc9181414bb08bf68e5ec279e7b2305341778ac2da7d1adc60e4d41461a0bb93b9b0da98cf4a247954d2a2a742050326d78b1642df603320b08c0d10ae4867974816ef374dd31739eba78ab93ac8ba29fd171ac809e150209e4464c44f639e6a3693391a55327c0667d1849790d465fd4f58c06c5e7d413e4d77aadb1c561bd9a8c07989314fa1721e98c17aa6d6f74bb5e5f00c4bd9cef94f08d81c17189e65ac33fab21d688c91e44161772a6a07664cda98ef13225854b71de04482e93990111"}, @INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "1c320a493742ee2e2bb8e1d07d7d574713ae4d02b50a19708cd7757ea4a4b9e08c20ea948a40135082e0461ab2b8cfbce8145e3d446ba55486aa44fbc4cfac9afcb35a2f631ba97a57441aea1c07ae94479c92e3a98f50948bc5da21b3f1610528356313551f9a9b72b4847fa1b23d8abfd6443d1be077e0d422d02ec521bde46001dc45d1ee614f0b76eda2abb19bb66cad8b7e81640c17e4654c1e461ee9add49f41624e27a62ba2fed3702afabf5c3e8fa7f2e3007d06b59d4939f2ebe91f7ecfa955cbde7b3e47e6e0310753bf7572cdfc4287f82877a5c64cec"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) close(r2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r5, 0x2e, 0x0, r5, @void, @value=0x0}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r6}, 0x8) close(r7) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, 0x4e21, 0x1, 0x4e21, 0x7, 0x2, 0x0, 0x80, 0x2, r0, r8}, {0x10001, 0x9, 0x9, 0x0, 0x8, 0x2, 0x7, 0x5}, {0x4, 0xc0cd, 0x8, 0x7fff}, 0x7, 0x6e6bbe, 0x2, 0x1, 0x1, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x3c}, 0xa, @in=@multicast2, 0x3502, 0x0, 0x2, 0xc, 0x9, 0x4, 0xfffffffa}}, 0xe8) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000314230c2abd7000ffdbdf250900020073797a30a600"], 0x60}, 0x1, 0x0, 0x0, 0x400488c5}, 0xc000) 537.363042ms ago: executing program 4 (id=607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x20044080) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b30ad0a21007c3cb8fe4f81000946b00", "6ef390e675e608f371455a4e", 0x400003, 0x2aca, 0x7e0, 0x87d42, 0x9e}}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x9, 0xfffffffff, 0x4053e5, 0x2}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r7) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000052790ef2dff4b588eb677972dc29027d6c926b20b4e70c672093f5845bc3752ee17bffa90a9dd3283eedf3b89f34844ac7ea4c30ad8ab179a67cb85dab2e5da07539cd43c7955d078746abe06090f04b32", @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf25210000001c002d8008000200000000000500010001000000050004000000000008000300", @ANYRES32=r11, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8840) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) 347.375498ms ago: executing program 4 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x200040, 0x0) close(r1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x800, 0x0, 0x0, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x5, 0x6361, 0x7, 0xffffffff, 0xfffffc01}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x72719ae315e4b9d1}, @TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x4, 0x2, 0x6}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) close(0xffffffffffffffff) close(0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040080) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a3177529d410eaadac3352686379a5e00000000080005400000797a31e3ffffff08000a40fffffffc0800034000000014140000000c0a010400000000000000000a0000061400000011008e69eb44eca283f2de940db12fde41e11cb9073a6f"], 0x80}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) r10 = socket$inet6(0xa, 0x4, 0x5) ioctl$XFS_IOC_ERROR_INJECTION(r10, 0x40085874, &(0x7f00000001c0)={r1, 0x5}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'veth0_to_batadv\x00', @local}) 324.439403ms ago: executing program 2 (id=609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c9"}]}], {0x14}}, 0x7c}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) bind$tipc(r2, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x2}}, 0x10) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {0x2, 0xfff1}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000003c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0x20, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbdf}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfb45}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @generic={0x0, 0x8, 0x5, 0x7, 0x401}, @generic={0x1, 0x3, 0x1, 0x4, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000140)={'sit0\x00', 0x400}) 105.153793ms ago: executing program 1 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) listen(r8, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r11, 0x0) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) 0s ago: executing program 2 (id=611): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000005500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)='C', 0x1}], 0x1, 0x6) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) splice(r8, 0x0, r9, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x2}, 0x8) setsockopt(r7, 0x84, 0x82, &(0x7f0000000280)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000040)="01f417bf8ed9c7f4c1ef", 0xa}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendfile(r5, r6, 0x0, 0xffffffff000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r10, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 83.457043][ T5613] cgroup: Unknown subsys name 'net' [ 83.551314][ T5613] cgroup: Unknown subsys name 'cpuset' [ 83.561152][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.216587][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.030909][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.042273][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.061550][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.074720][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.082349][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.089668][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.099568][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.106827][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.116329][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.123568][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.164790][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.174009][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.185370][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.199287][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.208536][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.278463][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.290585][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.299987][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.307275][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.312837][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.322871][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.334591][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.337329][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.359350][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.369952][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.191000][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.199146][ T5634] Bluetooth: hci1: command tx timeout [ 91.201775][ T50] Bluetooth: hci0: command tx timeout [ 91.206046][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.218169][ T5637] bridge_slave_0: entered allmulticast mode [ 91.225574][ T5637] bridge_slave_0: entered promiscuous mode [ 91.275994][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.283298][ T50] Bluetooth: hci2: command tx timeout [ 91.283490][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.297235][ T5637] bridge_slave_1: entered allmulticast mode [ 91.304572][ T5637] bridge_slave_1: entered promiscuous mode [ 91.376635][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.383922][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.391516][ T5628] bridge_slave_0: entered allmulticast mode [ 91.399270][ T5628] bridge_slave_0: entered promiscuous mode [ 91.408174][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.415467][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.423029][ T5628] bridge_slave_1: entered allmulticast mode [ 91.430685][ T5628] bridge_slave_1: entered promiscuous mode [ 91.437635][ T50] Bluetooth: hci4: command tx timeout [ 91.438255][ T5634] Bluetooth: hci3: command tx timeout [ 91.523952][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.533490][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.541387][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.548976][ T5641] bridge_slave_0: entered allmulticast mode [ 91.556866][ T5641] bridge_slave_0: entered promiscuous mode [ 91.576361][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.583814][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.591649][ T5629] bridge_slave_0: entered allmulticast mode [ 91.599230][ T5629] bridge_slave_0: entered promiscuous mode [ 91.619518][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.640674][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.648371][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.656334][ T5641] bridge_slave_1: entered allmulticast mode [ 91.664013][ T5641] bridge_slave_1: entered promiscuous mode [ 91.674087][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.683929][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.691265][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.698709][ T5629] bridge_slave_1: entered allmulticast mode [ 91.706087][ T5629] bridge_slave_1: entered promiscuous mode [ 91.714509][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.722176][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.729630][ T5643] bridge_slave_0: entered allmulticast mode [ 91.738108][ T5643] bridge_slave_0: entered promiscuous mode [ 91.772461][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.805486][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.812875][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.820599][ T5643] bridge_slave_1: entered allmulticast mode [ 91.828220][ T5643] bridge_slave_1: entered promiscuous mode [ 91.837058][ T5637] team0: Port device team_slave_0 added [ 91.888490][ T5637] team0: Port device team_slave_1 added [ 91.896837][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.908618][ T5628] team0: Port device team_slave_0 added [ 91.917085][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.952933][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.978669][ T5628] team0: Port device team_slave_1 added [ 91.986689][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.001064][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.058642][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.069007][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.076108][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.102767][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.116523][ T5641] team0: Port device team_slave_0 added [ 92.155524][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.165461][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.192162][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.192173][ T1222] cfg80211: failed to load regulatory.db [ 92.212407][ T5641] team0: Port device team_slave_1 added [ 92.219098][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.226107][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.252502][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.267905][ T5629] team0: Port device team_slave_0 added [ 92.307555][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.314749][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.341635][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.355614][ T5629] team0: Port device team_slave_1 added [ 92.363440][ T5643] team0: Port device team_slave_0 added [ 92.372003][ T5643] team0: Port device team_slave_1 added [ 92.431728][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.439027][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.465101][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.490156][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.497480][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.523821][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.546704][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.554006][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.580064][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.610273][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.617594][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.643640][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.655636][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.662791][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.689083][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.731151][ T5637] hsr_slave_0: entered promiscuous mode [ 92.738322][ T5637] hsr_slave_1: entered promiscuous mode [ 92.753047][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.760148][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.786231][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.803050][ T5628] hsr_slave_0: entered promiscuous mode [ 92.809804][ T5628] hsr_slave_1: entered promiscuous mode [ 92.816052][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 92.822121][ T5628] Cannot create hsr debugfs directory [ 92.863725][ T5641] hsr_slave_0: entered promiscuous mode [ 92.870309][ T5641] hsr_slave_1: entered promiscuous mode [ 92.876507][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 92.882616][ T5641] Cannot create hsr debugfs directory [ 93.005876][ T5629] hsr_slave_0: entered promiscuous mode [ 93.012720][ T5629] hsr_slave_1: entered promiscuous mode [ 93.019309][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 93.025086][ T5629] Cannot create hsr debugfs directory [ 93.107448][ T5643] hsr_slave_0: entered promiscuous mode [ 93.114152][ T5643] hsr_slave_1: entered promiscuous mode [ 93.121172][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 93.127069][ T5643] Cannot create hsr debugfs directory [ 93.277111][ T5634] Bluetooth: hci1: command tx timeout [ 93.287217][ T5634] Bluetooth: hci0: command tx timeout [ 93.357031][ T5634] Bluetooth: hci2: command tx timeout [ 93.517486][ T5634] Bluetooth: hci4: command tx timeout [ 93.517535][ T50] Bluetooth: hci3: command tx timeout [ 93.638179][ T5637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.655639][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.664759][ T5637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.675361][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.683896][ T5637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.695582][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.706029][ T5637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.716078][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.794521][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.809161][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.822229][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.832953][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.841623][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.852982][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.885490][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.898095][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.968998][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.981222][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.989825][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.001338][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.009682][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.022417][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.039969][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.051292][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.172271][ T5643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.183897][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.214968][ T5643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.225627][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.234134][ T5643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.245878][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.286711][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.294432][ T5643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.305346][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.393960][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.410289][ T5641] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.423328][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.438424][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.446017][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.460877][ T5641] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.472846][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.482970][ T5641] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.493911][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.502200][ T5641] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.512622][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.545267][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.552451][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.599284][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.659288][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.692162][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.739505][ T728] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.746700][ T728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.782398][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.789649][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.804146][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.850321][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.857585][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.889001][ T728] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.896197][ T728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.959405][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.012863][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.081843][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.095945][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.130483][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.137683][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.159162][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.166424][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.191106][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.198360][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.231115][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.238438][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.361301][ T50] Bluetooth: hci0: command tx timeout [ 95.361325][ T5634] Bluetooth: hci1: command tx timeout [ 95.438622][ T5634] Bluetooth: hci2: command tx timeout [ 95.597945][ T5634] Bluetooth: hci3: command tx timeout [ 95.602456][ T50] Bluetooth: hci4: command tx timeout [ 96.073881][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.451240][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.504229][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.751318][ T5629] veth0_vlan: entered promiscuous mode [ 96.777442][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.786714][ T5628] veth0_vlan: entered promiscuous mode [ 96.802457][ T5629] veth1_vlan: entered promiscuous mode [ 96.826592][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.847952][ T5628] veth1_vlan: entered promiscuous mode [ 96.920579][ T5629] veth0_macvtap: entered promiscuous mode [ 96.959780][ T5643] veth0_vlan: entered promiscuous mode [ 96.968854][ T5629] veth1_macvtap: entered promiscuous mode [ 96.998880][ T5637] veth0_vlan: entered promiscuous mode [ 97.033219][ T5641] veth0_vlan: entered promiscuous mode [ 97.047385][ T5637] veth1_vlan: entered promiscuous mode [ 97.059349][ T5643] veth1_vlan: entered promiscuous mode [ 97.068724][ T5628] veth0_macvtap: entered promiscuous mode [ 97.089468][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.104491][ T5641] veth1_vlan: entered promiscuous mode [ 97.112076][ T5628] veth1_macvtap: entered promiscuous mode [ 97.129807][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.171356][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.192969][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.203532][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.222979][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.243962][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.270023][ T5643] veth0_macvtap: entered promiscuous mode [ 97.289653][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.330933][ T5637] veth0_macvtap: entered promiscuous mode [ 97.351565][ T5643] veth1_macvtap: entered promiscuous mode [ 97.375136][ T5641] veth0_macvtap: entered promiscuous mode [ 97.389757][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.401700][ T5637] veth1_macvtap: entered promiscuous mode [ 97.432415][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.441464][ T5634] Bluetooth: hci1: command tx timeout [ 97.449894][ T5634] Bluetooth: hci0: command tx timeout [ 97.455353][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.473730][ T5641] veth1_macvtap: entered promiscuous mode [ 97.482840][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.504485][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.519005][ T5634] Bluetooth: hci2: command tx timeout [ 97.525868][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.546483][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.599831][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.610474][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.625488][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.641708][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.646271][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.658177][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.677781][ T50] Bluetooth: hci4: command tx timeout [ 97.683499][ T5634] Bluetooth: hci3: command tx timeout [ 97.704763][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.714618][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.747728][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.761131][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.773755][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.799257][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.808835][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.835837][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.848268][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.864186][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.902937][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.911913][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.949661][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.959056][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.002689][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.016037][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.151379][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.161749][ T5818] syzkaller0: entered promiscuous mode [ 98.163277][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.174192][ T5818] syzkaller0: entered allmulticast mode [ 98.208635][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 98.220322][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.230672][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.264892][ T5818] macsec1: entered promiscuous mode [ 98.271231][ T5818] dummy0: entered promiscuous mode [ 98.278487][ T5818] macsec1: entered allmulticast mode [ 98.283952][ T5818] dummy0: entered allmulticast mode [ 98.293297][ T5818] dummy0: left allmulticast mode [ 98.329987][ T24] dummy0: left promiscuous mode [ 98.344019][ T5819] Zero length message leads to an empty skb [ 98.357771][ T5820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 98.390114][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.402923][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.514144][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.530339][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.659711][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.687481][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.809391][ T5824] syzkaller0: entered promiscuous mode [ 98.829515][ T5824] syzkaller0: entered allmulticast mode [ 98.845981][ T5830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 98.852587][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.883001][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 98.894881][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.092679][ T728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.144813][ T728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.353106][ T5845] 8021q: VLANs not supported on xfrm0 [ 100.390191][ T5876] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 100.521395][ T5872] netlink: 'syz.3.15': attribute type 9 has an invalid length. [ 100.715949][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 100.759863][ T5885] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 100.907856][ T5885] bond1 (unregistering): Released all slaves [ 100.965942][ T5891] tipc: Enabling of bearer rejected, failed to enable media [ 101.465335][ T5922] xt_hashlimit: overflow, try lower: 6/0 [ 101.625307][ T5925] syz_tun: entered allmulticast mode [ 101.659325][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 101.785105][ T5925] syz_tun (unregistering): left allmulticast mode [ 102.056253][ T5923] syz.0.25 (5923) used greatest stack depth: 17408 bytes left [ 102.128199][ T5948] netlink: 144 bytes leftover after parsing attributes in process `syz.3.37'. [ 102.806034][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 103.178406][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 103.294138][ T5980] netlink: 'syz.1.46': attribute type 21 has an invalid length. [ 103.318827][ T5980] netlink: 'syz.1.46': attribute type 22 has an invalid length. [ 103.347064][ T5980] netlink: 'syz.1.46': attribute type 23 has an invalid length. [ 103.385464][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 103.428347][ T5980] netlink: 'syz.1.46': attribute type 25 has an invalid length. [ 103.461887][ T5980] netlink: 96 bytes leftover after parsing attributes in process `syz.1.46'. [ 103.534841][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 103.826676][ T6005] Bluetooth: MGMT ver 1.23 [ 104.221785][ T6019] RDS: rds_bind could not find a transport for 0:b3::, load rds_tcp or rds_rdma? [ 104.285753][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 104.684195][ T6047] netlink: 36 bytes leftover after parsing attributes in process `syz.4.66'. [ 105.025511][ T6058] syz.0.69 uses obsolete (PF_INET,SOCK_PACKET) [ 105.129001][ T6058] warning: `syz.0.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.284058][ T6067] netlink: 'syz.1.72': attribute type 7 has an invalid length. [ 105.310602][ T6062] netlink: 56 bytes leftover after parsing attributes in process `syz.4.70'. [ 105.462038][ T6067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.645510][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 105.713156][ T6078] Bluetooth: MGMT ver 1.23 [ 105.726394][ T6067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.774468][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 106.014629][ T6075] : entered promiscuous mode [ 106.023150][ T6092] netlink: 'syz.4.79': attribute type 1 has an invalid length. [ 106.036599][ T6078] openvswitch: : Dropping previously announced user features [ 106.045070][ T6092] netlink: 224 bytes leftover after parsing attributes in process `syz.4.79'. [ 106.059046][ T6092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.79'. [ 106.112664][ T6067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.253710][ T6067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.571167][ T1499] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.703201][ T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.788768][ T6128] Cannot find del_set index 0 as target [ 106.831765][ T5774] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.925454][ T1499] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.559432][ T30] audit: type=1800 audit(1779020936.131:2): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.86" name="memory.events" dev="tmpfs" ino=106 res=0 errno=0 [ 107.940105][ T6166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.883351][ T6208] __nla_validate_parse: 2 callbacks suppressed [ 108.883372][ T6208] netlink: 164 bytes leftover after parsing attributes in process `syz.1.107'. [ 108.884763][ T6206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.108'. [ 109.175378][ T6215] tipc: Enabling of bearer rejected, media not registered [ 109.263162][ T6223] tipc: Enabling of bearer rejected, media not registered [ 109.318522][ T6212] netlink: 56 bytes leftover after parsing attributes in process `syz.0.109'. [ 109.332438][ T6212] syzkaller0: entered promiscuous mode [ 109.339312][ T6212] syzkaller0: entered allmulticast mode [ 109.587481][ T6231] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 109.600155][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 110.052249][ T6256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.122'. [ 110.098535][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.122'. [ 110.535216][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.126'. [ 110.613937][ T6270] netlink: 'syz.0.126': attribute type 16 has an invalid length. [ 110.644883][ T6270] wg1: entered promiscuous mode [ 110.655667][ T6270] wg1: entered allmulticast mode [ 110.795952][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 111.028693][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 111.192538][ T6301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.133'. [ 111.258887][ T6301] tipc: Failed to obtain node identity [ 111.264673][ T6301] tipc: Enabling of bearer rejected, failed to enable media [ 111.492817][ T6317] ipt_REJECT: ECHOREPLY no longer supported. [ 111.555732][ T6317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.566828][ T6317] batadv_slave_0: entered allmulticast mode [ 111.579882][ T6317] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 111.619271][ T6326] netlink: 'syz.4.139': attribute type 21 has an invalid length. [ 111.929968][ T6337] netlink: 'syz.4.143': attribute type 11 has an invalid length. [ 111.978491][ T6329] netlink: 'syz.3.141': attribute type 2 has an invalid length. [ 112.432081][ T6352] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 112.580490][ T6352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.922071][ T6357] bond1: (slave gretap1): making interface the new active one [ 112.941765][ T6357] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 113.020075][ T6352] syzkaller0: entered promiscuous mode [ 113.025649][ T6352] syzkaller0: entered allmulticast mode [ 115.597674][ T6439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.724047][ T6441] __nla_validate_parse: 79 callbacks suppressed [ 115.724067][ T6441] netlink: 56 bytes leftover after parsing attributes in process `syz.0.167'. [ 115.801350][ T6441] netlink: 'syz.0.167': attribute type 12 has an invalid length. [ 115.839158][ T6441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.167'. [ 115.872810][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 116.818773][ T6491] vxlan0: entered promiscuous mode [ 116.842563][ T1499] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.871578][ T1499] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.995607][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 117.012315][ T1499] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.025723][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.180'. [ 117.039799][ T1499] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.114436][ T6494] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 117.163780][ T6494] ipt_ECN: cannot use operation on non-tcp rule [ 117.364519][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 117.410442][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 117.498764][ T6508] ip6tnl1: entered allmulticast mode [ 117.512605][ T5358] IPVS: starting estimator thread 0... [ 117.617026][ T6511] IPVS: using max 32 ests per chain, 76800 per kthread [ 117.730975][ T6516] netlink: 32 bytes leftover after parsing attributes in process `syz.3.186'. [ 117.754207][ T6517] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 117.754207][ T6517] Please contact the netfilter-devel mailing list or update your nftables rules. [ 117.819639][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 117.856796][ T5358] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 117.872354][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 117.902305][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 117.973507][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 118.329871][ T6538] netlink: 'syz.0.193': attribute type 13 has an invalid length. [ 118.343821][ T6538] netlink: 'syz.0.193': attribute type 17 has an invalid length. [ 118.377153][ T5358] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 118.557746][ T1222] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 118.574232][ T6544] xt_hashlimit: size too large, truncated to 1048576 [ 118.586238][ T6538] wg1: left promiscuous mode [ 118.602324][ T6538] wg1: left allmulticast mode [ 119.169676][ T6538] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 119.215489][ T6538] vxlan0: left promiscuous mode [ 119.500088][ T6590] bridge0: entered allmulticast mode [ 119.527416][ T6590] bridge0: left allmulticast mode [ 119.971173][ T6606] netlink: 'syz.4.212': attribute type 1 has an invalid length. [ 120.119780][ T6614] netlink: 'syz.2.217': attribute type 21 has an invalid length. [ 120.320176][ T6619] netlink: 'syz.3.219': attribute type 1 has an invalid length. [ 120.411712][ T6624] bond2: Invalid ad_actor_system MAC address. [ 120.419847][ T6624] bond2: option ad_actor_system: invalid value (7) [ 120.441849][ T6624] bond2 (unregistering): Released all slaves [ 120.790299][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.799781][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.032168][ T6635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.096453][ T6670] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 121.097611][ T6663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.266742][ T48] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.294240][ T48] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.343418][ T141] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.379639][ T141] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.445075][ T30] audit: type=1800 audit(1779020950.021:3): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.231" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=290 res=0 errno=0 [ 121.656382][ T6693] __nla_validate_parse: 8 callbacks suppressed [ 121.656402][ T6693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.234'. [ 121.835897][ T6702] Can't find ip_set type hash:ip,por [ 121.899977][ T6711] netlink: 13 bytes leftover after parsing attributes in process `syz.3.237'. [ 122.077096][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.655376][ T6752] netlink: 51 bytes leftover after parsing attributes in process `syz.1.247'. [ 125.002460][ T6718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.335992][ T6758] netlink: 'syz.1.252': attribute type 62 has an invalid length. [ 125.363049][ T6764] netlink: 11 bytes leftover after parsing attributes in process `syz.0.250'. [ 125.407537][ T6764] netlink: 'syz.0.250': attribute type 4 has an invalid length. [ 125.418861][ T6764] netlink: 17 bytes leftover after parsing attributes in process `syz.0.250'. [ 125.486615][ T6765] bond1: entered allmulticast mode [ 125.517468][ T6768] macvlan2: entered promiscuous mode [ 125.523437][ T6768] macvlan2: entered allmulticast mode [ 125.531558][ T6768] bond1: (slave macvlan2): Opening slave failed [ 125.641866][ T6764] syzkaller0: entered promiscuous mode [ 125.676210][ T6764] syzkaller0: entered allmulticast mode [ 126.187085][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.256'. [ 126.189232][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 126.382325][ T6791] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 126.444884][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 126.517622][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 126.598346][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 126.743789][ T6809] netlink: 5 bytes leftover after parsing attributes in process `syz.4.260'. [ 126.979042][ T6809] netlink: 5 bytes leftover after parsing attributes in process `syz.4.260'. [ 127.246267][ T6838] netlink: 'syz.1.269': attribute type 10 has an invalid length. [ 127.314363][ T6832] team0 (unregistering): Port device team_slave_0 removed [ 127.351245][ T6832] team0 (unregistering): Port device team_slave_1 removed [ 127.425971][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.267'. [ 127.436690][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.267'. [ 127.663618][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 127.681295][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 128.203284][ T6888] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 128.241744][ T6888] netlink: 280 bytes leftover after parsing attributes in process `syz.3.280'. [ 128.277352][ T6886] netlink: 'syz.1.279': attribute type 21 has an invalid length. [ 128.321427][ T6886] netlink: 132 bytes leftover after parsing attributes in process `syz.1.279'. [ 128.696401][ T6896] veth3: entered promiscuous mode [ 128.911240][ T6910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.938910][ T6910] netlink: 204044 bytes leftover after parsing attributes in process `syz.1.287'. [ 129.095672][ T6879] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 129.490236][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.291'. [ 130.557534][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 131.741490][ T7014] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 131.951689][ T7025] __nla_validate_parse: 4 callbacks suppressed [ 131.951708][ T7025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.315'. [ 132.032112][ T7014] netlink: 104 bytes leftover after parsing attributes in process `syz.0.314'. [ 132.058162][ T7020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.071328][ T7020] bond2: (slave bond3): making interface the new active one [ 132.079949][ T7020] bond2: (slave bond3): Enslaving as an active interface with an up link [ 132.189708][ T7027] netlink: 'syz.2.317': attribute type 34 has an invalid length. [ 132.205302][ T7025] openvswitch: netlink: Key type 142 is out of range max 32 [ 132.245135][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.315'. [ 132.642959][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 132.832486][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 132.943373][ T1499] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.980731][ T1499] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.002246][ T1499] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.028423][ T1499] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.119176][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.127333][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.479719][ T7083] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 133.507027][ T7083] netlink: 224 bytes leftover after parsing attributes in process `syz.1.333'. [ 133.720613][ T7093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.336'. [ 134.209486][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 134.339612][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 134.719685][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.336'. [ 134.818145][ T7119] : entered promiscuous mode [ 134.876712][ T7104] openvswitch: : Dropping previously announced user features [ 135.225102][ T7130] bond2: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 135.236175][ T7130] bond2: entered promiscuous mode [ 135.242376][ T7130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.453964][ T7138] xt_limit: Overflow, try lower: 324382443/0 [ 135.480857][ T7141] IPVS: length: 15 != 8 [ 135.491119][ T7144] netlink: 'syz.0.348': attribute type 32 has an invalid length. [ 135.675945][ T30] audit: type=1800 audit(1779020964.251:4): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.347" name=20 dev="tmpfs" ino=326 res=0 errno=0 [ 136.052958][ T7163] lo: entered allmulticast mode [ 136.445894][ T7174] openvswitch: netlink: Tunnel attr 149 out of range max 16 [ 136.889350][ T7194] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 137.226726][ T7195] bond2 (unregistering): Released all slaves [ 137.319533][ T7194] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 137.442864][ T7206] netlink: 'syz.0.363': attribute type 21 has an invalid length. [ 137.501942][ T7206] __nla_validate_parse: 4 callbacks suppressed [ 137.501960][ T7206] netlink: 128 bytes leftover after parsing attributes in process `syz.0.363'. [ 137.577897][ T7206] netlink: 'syz.0.363': attribute type 5 has an invalid length. [ 137.586922][ T7206] netlink: 'syz.0.363': attribute type 6 has an invalid length. [ 137.594865][ T7206] netlink: 3 bytes leftover after parsing attributes in process `syz.0.363'. [ 139.756935][ T7261] xt_HMARK: spi-set and port-set can't be combined [ 140.151106][ T7273] netlink: 'syz.1.379': attribute type 4 has an invalid length. [ 140.173590][ T7273] netlink: 3441 bytes leftover after parsing attributes in process `syz.1.379'. [ 140.399081][ T7284] netlink: 'syz.1.382': attribute type 83 has an invalid length. [ 141.165580][ T7318] netlink: 220 bytes leftover after parsing attributes in process `syz.3.389'. [ 141.203412][ T7318] netlink: 'syz.3.389': attribute type 2 has an invalid length. [ 144.213952][ T7335] netlink: 80 bytes leftover after parsing attributes in process `syz.3.393'. [ 144.507594][ T7354] IPVS: rr: FWM 3 0x00000003 - no destination available [ 144.792936][ T7363] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 144.803841][ T7362] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 145.315208][ T7362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.363492][ T7362] bond1: (slave bond2): making interface the new active one [ 145.412139][ T7362] bond1: (slave bond2): Enslaving as an active interface with an up link [ 146.111979][ T7407] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 146.335407][ T7414] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 146.365054][ T7414] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 146.557545][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 146.914881][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 146.973082][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 147.012268][ T7437] netlink: 'syz.2.417': attribute type 12 has an invalid length. [ 147.095089][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 147.134254][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 147.163821][ T7437] netlink: 'syz.2.417': attribute type 12 has an invalid length. [ 147.302726][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 147.341928][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 147.387441][ T7437] netlink: 'syz.2.417': attribute type 12 has an invalid length. [ 147.420615][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 147.466838][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 147.499954][ T7437] netlink: 'syz.2.417': attribute type 12 has an invalid length. [ 147.541339][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 147.586042][ T7437] netlink: 'syz.2.417': attribute type 12 has an invalid length. [ 147.634713][ T7437] netlink: 'syz.2.417': attribute type 12 has an invalid length. [ 148.223049][ T7492] xfrm1: entered promiscuous mode [ 148.248288][ T7492] xfrm1: entered allmulticast mode [ 148.875583][ T7516] IPv6: Can't replace route, no match found [ 148.916035][ T7516] IPv6: Can't replace route, no match found [ 149.236362][ T7528] syzkaller0: entered promiscuous mode [ 149.274349][ T7528] syzkaller0: entered allmulticast mode [ 149.513170][ T7544] __nla_validate_parse: 8 callbacks suppressed [ 149.513190][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 149.804881][ T7560] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 149.834906][ T7560] netlink: 'syz.2.449': attribute type 2 has an invalid length. [ 149.885981][ T7560] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 149.907452][ T7560] netlink: 'syz.2.449': attribute type 3 has an invalid length. [ 149.928542][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 150.171512][ T7580] netlink: 'syz.2.453': attribute type 1 has an invalid length. [ 150.304738][ T7581] gretap1: entered allmulticast mode [ 150.435592][ T7594] netlink: 2 bytes leftover after parsing attributes in process `syz.1.457'. [ 150.491886][ T7596] netlink: 256 bytes leftover after parsing attributes in process `syz.3.456'. [ 150.537852][ T7594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.457'. [ 150.561375][ T7594] nbd: must specify at least one socket [ 150.902676][ T7608] syzkaller0: entered promiscuous mode [ 150.920609][ T7608] syzkaller0: entered allmulticast mode [ 150.966573][ T7612] ip6gre1: entered promiscuous mode [ 150.999162][ T7612] ip6gre1: entered allmulticast mode [ 151.074062][ T7620] netlink: 36 bytes leftover after parsing attributes in process `syz.3.465'. [ 151.115450][ T7620] openvswitch: netlink: Flow key attr not present in new flow. [ 151.155945][ T7620] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 151.193085][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.466'. [ 151.218433][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 151.255113][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 151.269480][ T7626] gretap1: entered allmulticast mode [ 151.313237][ T7626] bond2: (slave gretap1): making interface the new active one [ 151.339934][ T7626] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 152.398171][ T7656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.475'. [ 153.964985][ T7672] bridge2: entered promiscuous mode [ 154.211992][ T141] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.258850][ T7687] tipc: Started in network mode [ 154.275791][ T7687] tipc: Node identity 6e35e83d745, cluster identity 4711 [ 154.316286][ T7687] tipc: Enabled bearer , priority 0 [ 154.344716][ T141] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.376573][ T141] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.424188][ T141] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.472097][ T7687] syzkaller0: entered promiscuous mode [ 154.490265][ T7687] syzkaller0: entered allmulticast mode [ 154.505238][ T7704] FAULT_INJECTION: forcing a failure. [ 154.505238][ T7704] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 154.527391][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.1.487 Not tainted syzkaller #0 PREEMPT(full) [ 154.527420][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.527441][ T7704] Call Trace: [ 154.527453][ T7704] [ 154.527462][ T7704] dump_stack_lvl+0xe8/0x150 [ 154.527498][ T7704] should_fail_ex+0x412/0x560 [ 154.527532][ T7704] _copy_from_user+0x2d/0xb0 [ 154.527563][ T7704] ___sys_sendmsg+0x1c6/0x360 [ 154.527583][ T7704] ? __lock_acquire+0x6b5/0x2cf0 [ 154.527610][ T7704] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.527668][ T7704] ? __fget_files+0x2a/0x420 [ 154.527691][ T7704] ? __fget_files+0x3a0/0x420 [ 154.527726][ T7704] __x64_sys_sendmsg+0x1bd/0x2a0 [ 154.527749][ T7704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.527779][ T7704] ? rcu_is_watching+0x15/0xb0 [ 154.527812][ T7704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.527834][ T7704] do_syscall_64+0x15f/0xf80 [ 154.527862][ T7704] ? trace_irq_disable+0x3b/0x140 [ 154.527892][ T7704] ? clear_bhb_loop+0x40/0x90 [ 154.527917][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.527936][ T7704] RIP: 0033:0x7fed2819ce59 [ 154.527964][ T7704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.527980][ T7704] RSP: 002b:00007fed29012028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.528005][ T7704] RAX: ffffffffffffffda RBX: 00007fed28415fa0 RCX: 00007fed2819ce59 [ 154.528019][ T7704] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 154.528031][ T7704] RBP: 00007fed29012090 R08: 0000000000000000 R09: 0000000000000000 [ 154.528042][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.528052][ T7704] R13: 00007fed28416038 R14: 00007fed28415fa0 R15: 00007fff98e6f158 [ 154.528092][ T7704] [ 154.863863][ T7707] tipc: Resetting bearer [ 155.048216][ T7722] netlink: 'syz.4.491': attribute type 11 has an invalid length. [ 155.074231][ T7683] tipc: Resetting bearer [ 155.079724][ T7722] netlink: 'syz.4.491': attribute type 4 has an invalid length. [ 155.111019][ T7722] netlink: 'syz.4.491': attribute type 6 has an invalid length. [ 155.125478][ T7683] tipc: Disabling bearer [ 155.149161][ T7722] __nla_validate_parse: 5 callbacks suppressed [ 155.149178][ T7722] netlink: 199556 bytes leftover after parsing attributes in process `syz.4.491'. [ 155.498697][ T7750] FAULT_INJECTION: forcing a failure. [ 155.498697][ T7750] name failslab, interval 1, probability 0, space 0, times 1 [ 155.525029][ T7750] CPU: 1 UID: 0 PID: 7750 Comm: syz.0.499 Not tainted syzkaller #0 PREEMPT(full) [ 155.525058][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.525070][ T7750] Call Trace: [ 155.525079][ T7750] [ 155.525087][ T7750] dump_stack_lvl+0xe8/0x150 [ 155.525118][ T7750] should_fail_ex+0x412/0x560 [ 155.525150][ T7750] should_failslab+0xa8/0x100 [ 155.525183][ T7750] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 155.525211][ T7750] ? __alloc_skb+0x186/0x7d0 [ 155.525239][ T7750] ? __alloc_skb+0x1d0/0x7d0 [ 155.525265][ T7750] ? __local_bh_enable_ip+0xd0/0x130 [ 155.525299][ T7750] __alloc_skb+0x1d0/0x7d0 [ 155.525332][ T7750] netlink_sendmsg+0x5d4/0xb40 [ 155.525365][ T7750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.525393][ T7750] ? aa_sock_msg_perm+0xf1/0x1b0 [ 155.525423][ T7750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.525455][ T7750] ____sys_sendmsg+0x972/0x9f0 [ 155.525474][ T7750] ? __might_fault+0xaf/0x130 [ 155.525507][ T7750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.525536][ T7750] ? import_iovec+0x73/0xa0 [ 155.525570][ T7750] ___sys_sendmsg+0x2a5/0x360 [ 155.525589][ T7750] ? __lock_acquire+0x6b5/0x2cf0 [ 155.525616][ T7750] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.525673][ T7750] ? __fget_files+0x2a/0x420 [ 155.525697][ T7750] ? __fget_files+0x3a0/0x420 [ 155.525731][ T7750] __x64_sys_sendmsg+0x1bd/0x2a0 [ 155.525754][ T7750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.525785][ T7750] ? __pfx_ksys_write+0x10/0x10 [ 155.525821][ T7750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.525843][ T7750] do_syscall_64+0x15f/0xf80 [ 155.525872][ T7750] ? trace_irq_disable+0x3b/0x140 [ 155.525902][ T7750] ? clear_bhb_loop+0x40/0x90 [ 155.525926][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.525946][ T7750] RIP: 0033:0x7fb38619ce59 [ 155.525965][ T7750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.525981][ T7750] RSP: 002b:00007fb38703a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.526000][ T7750] RAX: ffffffffffffffda RBX: 00007fb386415fa0 RCX: 00007fb38619ce59 [ 155.526014][ T7750] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 155.526025][ T7750] RBP: 00007fb38703a090 R08: 0000000000000000 R09: 0000000000000000 [ 155.526036][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.526046][ T7750] R13: 00007fb386416038 R14: 00007fb386415fa0 R15: 00007ffeea2fa678 [ 155.526076][ T7750] [ 155.866269][ T7749] netlink: 'syz.2.498': attribute type 10 has an invalid length. [ 156.102405][ T7766] netlink: 'syz.4.505': attribute type 4 has an invalid length. [ 156.144551][ T7771] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 156.231013][ T7768] netlink: 68 bytes leftover after parsing attributes in process `syz.0.504'. [ 156.527575][ T7785] netlink: 'syz.4.509': attribute type 10 has an invalid length. [ 156.556258][ T7785] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 156.715354][ T7799] netlink: 64 bytes leftover after parsing attributes in process `syz.3.513'. [ 156.829631][ T7783] nbd0: detected capacity change from 0 to 63 [ 156.858705][ T7790] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 156.870924][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 156.923003][ T5634] block nbd0: Receive control failed (result -104) [ 156.923492][ T50] block nbd0: Receive control failed (result -32) [ 157.124320][ T7811] hsr0: entered promiscuous mode [ 157.143528][ T7809] hsr0: left promiscuous mode [ 158.007532][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'. [ 158.200326][ T7815] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 158.421132][ T7815] bond4 (unregistering): Released all slaves [ 158.479816][ T7827] vlan2: entered promiscuous mode [ 158.485120][ T7827] bridge0: entered promiscuous mode [ 158.900468][ T7849] netlink: 48 bytes leftover after parsing attributes in process `syz.1.528'. [ 158.931904][ T7848] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 158.985750][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.995866][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.134748][ T9] IPVS: starting estimator thread 0... [ 159.144373][ T7860] netlink: 'syz.0.529': attribute type 29 has an invalid length. [ 159.187284][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 159.231822][ T7855] syzkaller1: entered promiscuous mode [ 159.245625][ T7855] syzkaller1: entered allmulticast mode [ 159.255253][ T7863] hsr0: entered promiscuous mode [ 159.264486][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 159.278645][ T7861] IPVS: using max 29 ests per chain, 69600 per kthread [ 159.294875][ T7866] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 159.418018][ T7866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.554110][ T7880] netlink: 'syz.4.533': attribute type 2 has an invalid length. [ 159.562118][ T7880] netlink: 'syz.4.533': attribute type 2 has an invalid length. [ 161.334414][ T7888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.533'. [ 162.255478][ T7928] netlink: 'syz.3.543': attribute type 4 has an invalid length. [ 162.318525][ T1222] IPVS: starting estimator thread 0... [ 162.462843][ T7904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.473057][ T7934] IPVS: using max 26 ests per chain, 62400 per kthread [ 162.498397][ T7904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.682416][ T7933] tipc: Enabled bearer , priority 10 [ 162.860972][ T7944] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 162.994974][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 163.020570][ T7954] netlink: 'syz.0.548': attribute type 1 has an invalid length. [ 163.122089][ T7958] netlink: 'syz.4.549': attribute type 1 has an invalid length. [ 163.146358][ T7904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.163708][ T7904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.353651][ T7958] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.525140][ T7904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.588525][ T7904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.852998][ T9] tipc: Node number set to 442886205 [ 163.943227][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 163.974514][ T7904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.036792][ T7904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.296758][ T7995] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.304106][ T7995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.313000][ T7995] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.320332][ T7995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.422082][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 164.493942][ T7995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.548673][ T7995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.563875][ T8000] netlink: 'syz.4.553': attribute type 12 has an invalid length. [ 164.625867][ T8015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.918648][ T8029] FAULT_INJECTION: forcing a failure. [ 164.918648][ T8029] name failslab, interval 1, probability 0, space 0, times 0 [ 164.960473][ T8029] CPU: 1 UID: 0 PID: 8029 Comm: syz.1.559 Not tainted syzkaller #0 PREEMPT(full) [ 164.960500][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.960512][ T8029] Call Trace: [ 164.960520][ T8029] [ 164.960528][ T8029] dump_stack_lvl+0xe8/0x150 [ 164.960557][ T8029] should_fail_ex+0x412/0x560 [ 164.960588][ T8029] should_failslab+0xa8/0x100 [ 164.960629][ T8029] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 164.960657][ T8029] ? __alloc_skb+0x1d0/0x7d0 [ 164.960684][ T8029] ? __local_bh_enable_ip+0xd0/0x130 [ 164.960709][ T8029] __alloc_skb+0x1d0/0x7d0 [ 164.960736][ T8029] ? netlink_ack_tlv_len+0x6c/0x210 [ 164.960759][ T8029] netlink_ack+0x146/0xa50 [ 164.960788][ T8029] ? trace_contention_end+0x3d/0x140 [ 164.960827][ T8029] netlink_rcv_skb+0x2b6/0x4b0 [ 164.960848][ T8029] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 164.960879][ T8029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.960915][ T8029] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.960934][ T8029] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.960957][ T8029] xfrm_netlink_rcv+0x79/0x90 [ 164.960988][ T8029] netlink_unicast+0x75c/0x8e0 [ 164.961029][ T8029] netlink_sendmsg+0x813/0xb40 [ 164.961061][ T8029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.961086][ T8029] ? aa_sock_msg_perm+0xf1/0x1b0 [ 164.961114][ T8029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 164.961145][ T8029] ____sys_sendmsg+0x972/0x9f0 [ 164.961164][ T8029] ? __might_fault+0xaf/0x130 [ 164.961197][ T8029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.961227][ T8029] ? import_iovec+0x73/0xa0 [ 164.961260][ T8029] ___sys_sendmsg+0x2a5/0x360 [ 164.961278][ T8029] ? __lock_acquire+0x6b5/0x2cf0 [ 164.961304][ T8029] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.961361][ T8029] ? __fget_files+0x2a/0x420 [ 164.961385][ T8029] ? __fget_files+0x3a0/0x420 [ 164.961420][ T8029] __x64_sys_sendmsg+0x1bd/0x2a0 [ 164.961443][ T8029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.961474][ T8029] ? __pfx_ksys_write+0x10/0x10 [ 164.961513][ T8029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.961535][ T8029] do_syscall_64+0x15f/0xf80 [ 164.961565][ T8029] ? trace_irq_disable+0x3b/0x140 [ 164.961596][ T8029] ? clear_bhb_loop+0x40/0x90 [ 164.961629][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.961649][ T8029] RIP: 0033:0x7fed2819ce59 [ 164.961667][ T8029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.961684][ T8029] RSP: 002b:00007fed29012028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.961705][ T8029] RAX: ffffffffffffffda RBX: 00007fed28415fa0 RCX: 00007fed2819ce59 [ 164.961720][ T8029] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 164.961732][ T8029] RBP: 00007fed29012090 R08: 0000000000000000 R09: 0000000000000000 [ 164.961743][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.961754][ T8029] R13: 00007fed28416038 R14: 00007fed28415fa0 R15: 00007fff98e6f158 [ 164.961785][ T8029] [ 165.375444][ T1499] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.394339][ T1499] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.513916][ T728] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.545050][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 165.562201][ T728] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.682472][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.690292][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.754840][ T8051] tipc: Can't bind to reserved service type 0 [ 165.804642][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.820090][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.966330][ T8044] bridge2: left promiscuous mode [ 166.003764][ T8047] bridge_slave_0: left allmulticast mode [ 166.013938][ T8047] bridge_slave_0: left promiscuous mode [ 166.031586][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.089643][ T8047] bridge_slave_1: left allmulticast mode [ 166.101288][ T8047] bridge_slave_1: left promiscuous mode [ 166.108168][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.131344][ T8047] bond0: (slave bond_slave_0): Releasing backup interface [ 166.143059][ T8058] netlink: 36 bytes leftover after parsing attributes in process `syz.1.570'. [ 166.155167][ T8047] bond0: (slave bond_slave_1): Releasing backup interface [ 166.170120][ T8047] team0: Port device team_slave_0 removed [ 166.188675][ T8047] team0: Port device team_slave_1 removed [ 166.202623][ T8047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.215470][ T8047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.225672][ T8047] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.265483][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.282597][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.339946][ T1499] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.354404][ T1499] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.364888][ T1499] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.383919][ T1499] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.401997][ T1499] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.412625][ T8062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.571'. [ 166.422467][ T1499] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.446528][ T1499] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.467020][ T1499] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.486326][ T1499] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.496071][ T1499] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.569884][ T728] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.591881][ T728] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.664914][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 166.724495][ T50] block nbd1: Receive control failed (result -1) [ 166.755368][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 166.782330][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 166.825873][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 167.889566][ T8127] netlink: 'syz.0.588': attribute type 11 has an invalid length. [ 167.897811][ T8127] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.588'. [ 167.965213][ T8129] netlink: 48 bytes leftover after parsing attributes in process `syz.0.589'. [ 168.292059][ T8140] syzkaller1: entered promiscuous mode [ 168.297887][ T8140] syzkaller1: entered allmulticast mode [ 168.702364][ T8146] tap0: tun_chr_ioctl cmd 1074025677 [ 168.720808][ T8146] tap0: linktype set to 778 [ 168.914799][ T8159] Bluetooth: MGMT ver 1.23 [ 169.266010][ T8168] xt_SECMARK: invalid mode: 4 [ 169.272230][ T8166] syzkaller0: entered promiscuous mode [ 169.284633][ T8166] syzkaller0: entered allmulticast mode [ 169.305788][ T8166] tipc: Started in network mode [ 169.316546][ T8166] tipc: Node identity 8204d5ebb347, cluster identity 4711 [ 169.333363][ T8166] tipc: Enabled bearer , priority 0 [ 169.355634][ T8165] tipc: Resetting bearer [ 169.423273][ T8165] tipc: Disabling bearer [ 169.455522][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 169.472069][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 169.507362][ T8171] netlink: 1 bytes leftover after parsing attributes in process `syz.2.601'. [ 169.557151][ T8171] syzkaller1: entered allmulticast mode [ 169.801875][ T8176] team1: entered promiscuous mode [ 169.828112][ T8176] team1: entered allmulticast mode [ 169.845496][ T8180] xt_TCPMSS: Only works on TCP SYN packets [ 169.852823][ T8176] 8021q: adding VLAN 0 to HW filter on device team1 [ 169.872640][ T8177] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 169.995508][ T8177] team2: entered promiscuous mode [ 170.016625][ T8177] team2: entered allmulticast mode [ 170.032631][ T8177] 8021q: adding VLAN 0 to HW filter on device team2 [ 170.495715][ T8201] syzkaller0: entered promiscuous mode [ 170.510537][ T8201] syzkaller0: entered allmulticast mode [ 170.585279][ T8201] tipc: Enabled bearer , priority 0 [ 170.623649][ T8201] tipc: Resetting bearer [ 170.646810][ T8201] tipc: Disabling bearer [ 170.766721][ T8201] veth0_to_batadv: mtu less than device minimum [ 170.921940][ T8207] [ 170.924339][ T8207] ====================================================== [ 170.931411][ T8207] WARNING: possible circular locking dependency detected [ 170.938744][ T8207] syzkaller #0 Not tainted [ 170.943199][ T8207] ------------------------------------------------------ [ 170.950333][ T8207] syz.1.610/8207 is trying to acquire lock: [ 170.956254][ T8207] ffffffff8f0ad188 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0 [ 170.965978][ T8207] [ 170.965978][ T8207] but task is already holding lock: [ 170.973375][ T8207] ffff888081168260 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 170.982838][ T8207] [ 170.982838][ T8207] which lock already depends on the new lock. [ 170.982838][ T8207] [ 170.993298][ T8207] [ 170.993298][ T8207] the existing dependency chain (in reverse order) is: [ 171.002353][ T8207] [ 171.002353][ T8207] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 171.010137][ T8207] lock_sock_nested+0x41/0x100 [ 171.015479][ T8207] inet_shutdown+0x6a/0x390 [ 171.020817][ T8207] nbd_mark_nsock_dead+0x2e9/0x560 [ 171.026495][ T8207] recv_work+0x1c2e/0x1d40 [ 171.031492][ T8207] process_scheduled_works+0xb5d/0x1860 [ 171.037600][ T8207] worker_thread+0xa53/0xfc0 [ 171.042764][ T8207] kthread+0x389/0x470 [ 171.047408][ T8207] ret_from_fork+0x514/0xb70 [ 171.052587][ T8207] ret_from_fork_asm+0x1a/0x30 [ 171.057926][ T8207] [ 171.057926][ T8207] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 171.065638][ T8207] __mutex_lock+0x1a3/0x1550 [ 171.070805][ T8207] nbd_queue_rq+0x37b/0x1100 [ 171.075968][ T8207] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 171.082099][ T8207] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 171.089007][ T8207] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 171.095561][ T8207] blk_mq_run_hw_queue+0x348/0x4f0 [ 171.101249][ T8207] blk_mq_dispatch_list+0xd16/0xe10 [ 171.107023][ T8207] blk_mq_flush_plug_list+0x48d/0x570 [ 171.112974][ T8207] __blk_flush_plug+0x3ed/0x4d0 [ 171.118395][ T8207] __submit_bio+0x28d/0x580 [ 171.123467][ T8207] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 171.129682][ T8207] block_read_full_folio+0x599/0x830 [ 171.135540][ T8207] filemap_read_folio+0x137/0x3b0 [ 171.141147][ T8207] do_read_cache_folio+0x358/0x590 [ 171.146832][ T8207] read_part_sector+0xb6/0x2b0 [ 171.152180][ T8207] adfspart_check_ICS+0xb1/0x960 [ 171.157693][ T8207] bdev_disk_changed+0x817/0x1770 [ 171.163300][ T8207] blkdev_get_whole+0x380/0x510 [ 171.168794][ T8207] bdev_open+0x31e/0xd30 [ 171.173634][ T8207] blkdev_open+0x470/0x610 [ 171.178621][ T8207] do_dentry_open+0x785/0x14e0 [ 171.183961][ T8207] vfs_open+0x3b/0x340 [ 171.188599][ T8207] path_openat+0x2e08/0x3860 [ 171.193768][ T8207] do_file_open+0x23e/0x4a0 [ 171.198936][ T8207] do_sys_openat2+0x113/0x200 [ 171.204192][ T8207] __x64_sys_openat+0x138/0x170 [ 171.209610][ T8207] do_syscall_64+0x15f/0xf80 [ 171.214771][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.221227][ T8207] [ 171.221227][ T8207] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 171.228540][ T8207] __mutex_lock+0x1a3/0x1550 [ 171.233691][ T8207] nbd_queue_rq+0xc6/0x1100 [ 171.238762][ T8207] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 171.244886][ T8207] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 171.251796][ T8207] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 171.258366][ T8207] blk_mq_run_hw_queue+0x348/0x4f0 [ 171.264058][ T8207] blk_mq_dispatch_list+0xd16/0xe10 [ 171.269831][ T8207] blk_mq_flush_plug_list+0x48d/0x570 [ 171.275822][ T8207] __blk_flush_plug+0x3ed/0x4d0 [ 171.281250][ T8207] __submit_bio+0x28d/0x580 [ 171.286317][ T8207] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 171.292518][ T8207] block_read_full_folio+0x599/0x830 [ 171.298373][ T8207] filemap_read_folio+0x137/0x3b0 [ 171.303970][ T8207] do_read_cache_folio+0x358/0x590 [ 171.309657][ T8207] read_part_sector+0xb6/0x2b0 [ 171.315000][ T8207] adfspart_check_ICS+0xb1/0x960 [ 171.320510][ T8207] bdev_disk_changed+0x817/0x1770 [ 171.326101][ T8207] blkdev_get_whole+0x380/0x510 [ 171.331526][ T8207] bdev_open+0x31e/0xd30 [ 171.336342][ T8207] blkdev_open+0x470/0x610 [ 171.341403][ T8207] do_dentry_open+0x785/0x14e0 [ 171.346730][ T8207] vfs_open+0x3b/0x340 [ 171.351363][ T8207] path_openat+0x2e08/0x3860 [ 171.356516][ T8207] do_file_open+0x23e/0x4a0 [ 171.361584][ T8207] do_sys_openat2+0x113/0x200 [ 171.366826][ T8207] __x64_sys_openat+0x138/0x170 [ 171.372249][ T8207] do_syscall_64+0x15f/0xf80 [ 171.377415][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.383872][ T8207] [ 171.383872][ T8207] -> #5 (set->srcu){.+.+}-{0:0}: [ 171.391063][ T8207] __synchronize_srcu+0xca/0x300 [ 171.396572][ T8207] elevator_switch+0x1e8/0x7a0 [ 171.401914][ T8207] elevator_change+0x2cc/0x450 [ 171.407260][ T8207] elevator_set_default+0x36c/0x430 [ 171.413040][ T8207] blk_register_queue+0x3e9/0x4e0 [ 171.418638][ T8207] __add_disk+0x677/0xd50 [ 171.423532][ T8207] add_disk_fwnode+0xfb/0x480 [ 171.428794][ T8207] nbd_dev_add+0x72c/0xb50 [ 171.433798][ T8207] nbd_init+0x168/0x1f0 [ 171.438521][ T8207] do_one_initcall+0x250/0x870 [ 171.443855][ T8207] do_initcall_level+0x104/0x190 [ 171.449367][ T8207] do_initcalls+0x59/0xa0 [ 171.454277][ T8207] kernel_init_freeable+0x2a6/0x3e0 [ 171.460052][ T8207] kernel_init+0x1d/0x1d0 [ 171.465035][ T8207] ret_from_fork+0x514/0xb70 [ 171.470189][ T8207] ret_from_fork_asm+0x1a/0x30 [ 171.475611][ T8207] [ 171.475611][ T8207] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 171.483563][ T8207] __mutex_lock+0x1a3/0x1550 [ 171.488810][ T8207] elevator_change+0x1b3/0x450 [ 171.494176][ T8207] elevator_set_none+0xb5/0x140 [ 171.499608][ T8207] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 171.505980][ T8207] nbd_start_device+0x17f/0xb10 [ 171.511401][ T8207] nbd_genl_connect+0x165b/0x1cf0 [ 171.516993][ T8207] genl_family_rcv_msg_doit+0x22a/0x330 [ 171.523123][ T8207] genl_rcv_msg+0x61c/0x7a0 [ 171.528200][ T8207] netlink_rcv_skb+0x232/0x4b0 [ 171.533532][ T8207] genl_rcv+0x28/0x40 [ 171.538082][ T8207] netlink_unicast+0x75c/0x8e0 [ 171.543423][ T8207] netlink_sendmsg+0x813/0xb40 [ 171.548748][ T8207] ____sys_sendmsg+0x972/0x9f0 [ 171.554075][ T8207] ___sys_sendmsg+0x2a5/0x360 [ 171.559320][ T8207] __x64_sys_sendmsg+0x1bd/0x2a0 [ 171.564820][ T8207] do_syscall_64+0x15f/0xf80 [ 171.569989][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.576456][ T8207] [ 171.576456][ T8207] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 171.585123][ T8207] blk_alloc_queue+0x546/0x680 [ 171.590551][ T8207] __blk_mq_alloc_disk+0x197/0x390 [ 171.596320][ T8207] nbd_dev_add+0x499/0xb50 [ 171.601307][ T8207] nbd_init+0x168/0x1f0 [ 171.606035][ T8207] do_one_initcall+0x250/0x870 [ 171.611367][ T8207] do_initcall_level+0x104/0x190 [ 171.616879][ T8207] do_initcalls+0x59/0xa0 [ 171.621777][ T8207] kernel_init_freeable+0x2a6/0x3e0 [ 171.627550][ T8207] kernel_init+0x1d/0x1d0 [ 171.632444][ T8207] ret_from_fork+0x514/0xb70 [ 171.637597][ T8207] ret_from_fork_asm+0x1a/0x30 [ 171.642934][ T8207] [ 171.642934][ T8207] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 171.650202][ T8207] fs_reclaim_acquire+0x71/0x100 [ 171.655727][ T8207] __kmalloc_cache_noprof+0x40/0x660 [ 171.661669][ T8207] cryptomgr_notify+0x85/0x930 [ 171.667007][ T8207] notifier_call_chain+0x1ad/0x3d0 [ 171.672685][ T8207] blocking_notifier_call_chain+0x6a/0x90 [ 171.678981][ T8207] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 171.684835][ T8207] crypto_alloc_tfm_node+0x13e/0x3f0 [ 171.690694][ T8207] crypto_alloc_sync_skcipher+0x39/0xd0 [ 171.696803][ T8207] rxkad_init+0x20/0xe0 [ 171.701528][ T8207] rxrpc_init_security+0x72/0x120 [ 171.707110][ T8207] af_rxrpc_init+0x13d/0x2e0 [ 171.712261][ T8207] do_one_initcall+0x250/0x870 [ 171.717593][ T8207] do_initcall_level+0x104/0x190 [ 171.723099][ T8207] do_initcalls+0x59/0xa0 [ 171.727996][ T8207] kernel_init_freeable+0x2a6/0x3e0 [ 171.733759][ T8207] kernel_init+0x1d/0x1d0 [ 171.738647][ T8207] ret_from_fork+0x514/0xb70 [ 171.743802][ T8207] ret_from_fork_asm+0x1a/0x30 [ 171.749128][ T8207] [ 171.749128][ T8207] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 171.757267][ T8207] down_read+0x47/0x2e0 [ 171.761988][ T8207] blocking_notifier_call_chain+0x54/0x90 [ 171.768278][ T8207] __crypto_register_alg+0x32b/0x3c0 [ 171.774157][ T8207] crypto_register_alg+0x447/0x810 [ 171.779846][ T8207] do_one_initcall+0x250/0x870 [ 171.785175][ T8207] do_initcall_level+0x104/0x190 [ 171.790685][ T8207] do_initcalls+0x59/0xa0 [ 171.795594][ T8207] kernel_init_freeable+0x2a6/0x3e0 [ 171.801360][ T8207] kernel_init+0x1d/0x1d0 [ 171.806261][ T8207] ret_from_fork+0x514/0xb70 [ 171.811420][ T8207] ret_from_fork_asm+0x1a/0x30 [ 171.816760][ T8207] [ 171.816760][ T8207] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 171.824375][ T8207] __lock_acquire+0x15a5/0x2cf0 [ 171.829799][ T8207] lock_acquire+0x106/0x350 [ 171.834883][ T8207] down_write+0x96/0x200 [ 171.839690][ T8207] crypto_alg_mod_lookup+0x211/0x5f0 [ 171.845538][ T8207] crypto_alloc_tfm_node+0x13e/0x3f0 [ 171.851388][ T8207] tls_set_sw_offload+0xa33/0x1780 [ 171.857079][ T8207] tls_setsockopt+0xef2/0x15c0 [ 171.862421][ T8207] do_sock_setsockopt+0x17c/0x1b0 [ 171.868018][ T8207] __x64_sys_setsockopt+0x13d/0x1b0 [ 171.873840][ T8207] do_syscall_64+0x15f/0xf80 [ 171.879016][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.885478][ T8207] [ 171.885478][ T8207] other info that might help us debug this: [ 171.885478][ T8207] [ 171.895727][ T8207] Chain exists of: [ 171.895727][ T8207] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 171.895727][ T8207] [ 171.908793][ T8207] Possible unsafe locking scenario: [ 171.908793][ T8207] [ 171.916366][ T8207] CPU0 CPU1 [ 171.921750][ T8207] ---- ---- [ 171.927131][ T8207] lock(sk_lock-AF_INET6); [ 171.931675][ T8207] lock(&nsock->tx_lock); [ 171.938636][ T8207] lock(sk_lock-AF_INET6); [ 171.945693][ T8207] lock(crypto_alg_sem); [ 171.950059][ T8207] [ 171.950059][ T8207] *** DEADLOCK *** [ 171.950059][ T8207] [ 171.958221][ T8207] 1 lock held by syz.1.610/8207: [ 171.963183][ T8207] #0: ffff888081168260 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 171.972972][ T8207] [ 171.972972][ T8207] stack backtrace: [ 171.978891][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.1.610 Not tainted syzkaller #0 PREEMPT(full) [ 171.978914][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.978924][ T8207] Call Trace: [ 171.978930][ T8207] [ 171.978937][ T8207] dump_stack_lvl+0xe8/0x150 [ 171.978959][ T8207] print_circular_bug+0x2e1/0x300 [ 171.978983][ T8207] check_noncircular+0x12e/0x150 [ 171.979007][ T8207] __lock_acquire+0x15a5/0x2cf0 [ 171.979034][ T8207] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 171.979053][ T8207] lock_acquire+0x106/0x350 [ 171.979072][ T8207] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 171.979100][ T8207] down_write+0x96/0x200 [ 171.979120][ T8207] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 171.979143][ T8207] ? __pfx_down_write+0x10/0x10 [ 171.979164][ T8207] ? crypto_larval_alloc+0x1bf/0x290 [ 171.979187][ T8207] crypto_alg_mod_lookup+0x211/0x5f0 [ 171.979211][ T8207] crypto_alloc_tfm_node+0x13e/0x3f0 [ 171.979235][ T8207] ? timer_init_key+0x161/0x2c0 [ 171.979267][ T8207] tls_set_sw_offload+0xa33/0x1780 [ 171.979306][ T8207] tls_setsockopt+0xef2/0x15c0 [ 171.979333][ T8207] ? __pfx_tls_setsockopt+0x10/0x10 [ 171.979360][ T8207] ? __fget_files+0x2a/0x420 [ 171.979383][ T8207] ? aa_sock_opt_perm+0xff/0x1a0 [ 171.979409][ T8207] ? sock_common_setsockopt+0x36/0xc0 [ 171.979434][ T8207] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 171.979458][ T8207] do_sock_setsockopt+0x17c/0x1b0 [ 171.979490][ T8207] __x64_sys_setsockopt+0x13d/0x1b0 [ 171.979520][ T8207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.979539][ T8207] do_syscall_64+0x15f/0xf80 [ 171.979567][ T8207] ? trace_irq_disable+0x3b/0x140 [ 171.979598][ T8207] ? clear_bhb_loop+0x40/0x90 [ 171.979620][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.979638][ T8207] RIP: 0033:0x7fed2819ce59 [ 171.979654][ T8207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.979668][ T8207] RSP: 002b:00007fed28ff1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.979685][ T8207] RAX: ffffffffffffffda RBX: 00007fed28416090 RCX: 00007fed2819ce59 [ 171.979698][ T8207] RDX: 0000000000000001 RSI: 000000000000011a RDI: 000000000000000c [ 171.979707][ T8207] RBP: 00007fed28232d6f R08: 0000000000000038 R09: 0000000000000000 [ 171.979717][ T8207] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 171.979728][ T8207] R13: 00007fed28416128 R14: 00007fed28416090 R15: 00007fff98e6f158 [ 171.979757][ T8207] [ 176.637002][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!