last executing test programs: 2.717091167s ago: executing program 4 (id=709): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x0, 0x298}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)}}], 0x1, 0x4010) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETGROUP(r5, 0x400454ce, 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r4}}, 0x18}}, 0x4090) 2.183036436s ago: executing program 4 (id=718): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000000)=0x80, 0x800) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010100}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa0044802}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r2, 0x200, 0x8, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 2.108461955s ago: executing program 3 (id=721): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0xffe0}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x7, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.93265738s ago: executing program 4 (id=723): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={0x0}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f00000002c0), &(0x7f0000000440)=r2}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/63, 0x3f}], 0x1}, 0x3}], 0x1, 0x120, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000080)={0xffff0000, 0x4000000, 0xd0, 0x7f}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x80, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x35d}, {0x8, 0xb, 0x0, 0x0, 0x74}, {0x8, 0x20, 0x0, 0x0, 0xf41c}, {0xfffffffffffffd43, 0x1d}, {0x8, 0x5, 0x0, 0x0, 0x11afd9d5}, {0x8, 0x16, 0x0, 0x0, 0x9}, {0x8, 0x15, 0x0, 0x0, 0x50}, {0x8, 0x819, 0x0, 0x0, 0x2}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x80}}, 0x0) 1.831860707s ago: executing program 1 (id=725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000680)=@ethtool_regs={0x12}}) 1.744799356s ago: executing program 3 (id=727): r0 = socket$nl_audit(0x10, 0x3, 0x9) socket$igmp6(0xa, 0x3, 0x2) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)={0x420}, 0x420}}, 0x40000) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$igmp6(0xa, 0x3, 0x2) (async) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)={0x420}, 0x420}}, 0x40000) (async) 1.727017662s ago: executing program 0 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x5, 0x601, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000340), &(0x7f0000000540)=@tcp, 0x3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000000000910095", @ANYRES64=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 1.611474522s ago: executing program 1 (id=729): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000440)={r1}, &(0x7f00000001c0)=0x8) r3 = socket$netlink(0x10, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000711091331fc2397830e9e9c4593d97695325a39e0f083cd1198e68f8df14911a818a862b68e3000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r3, &(0x7f00000000c0), 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x26, 0xffffffffffffff34) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000080)={@multicast1, @empty, 0x0, "90fc37852a192ea1b376efee14a7aa1c3009929129c42d06f5e30377f2428d08", 0x2c0b, 0x6, 0x100, 0x400}, 0x3c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000002300)={0x0, @loopback, 0x4e22, 0x3, 'sed\x00', 0x14, 0xa, 0x12}, 0x2c) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYRESHEX=r8, @ANYBLOB="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", @ANYRES16=r7, @ANYRESHEX=r5, @ANYRESHEX=r4, @ANYRESDEC=r8, @ANYRES64=r8, @ANYRES32, @ANYRES8=r8, @ANYRES32=r7], 0x44}}, 0x40) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect(r6, &(0x7f0000001080)=@ax25={{0x3, @null, 0x3}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x38}}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x78, 0x3, 0x3, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7ff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x96cd}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xe3e}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xe}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x2}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) 1.609209598s ago: executing program 4 (id=731): mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x3, 0x5}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "5525806486d2fbc8", "dfc9b7de1f415879cc4beba88c8f823d", "0af88b35", "12676cceeb30a278"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 1.604199716s ago: executing program 3 (id=732): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000000)=0x60, 0x40800) connect$nfc_llcp(r0, &(0x7f00000002c0)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x7, 0x38, "311bb8c31b61b90ec3ff8e66c1d27f149ecb8ab571b0f95b56b7b4b8bfc1c02a1e0cd71b00ae2d9be34bcc0825204e723c33d02b79c6981fd68d9e01b7c9da", 0x20}, 0x60) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r3, 0xe4}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c2fd493fdad1d89d51d547ccd7db1a4bd93164efd5e55e1f6fae000128009000100626f6e6400acc461ff9bc1de62a41750ad8962c1d8785aee6ea61fc4"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$tipc(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)="b000181d0cb40d81bda6a48c3a8ada17351d0b7bb2848770422b469b0990675f332622af6e753bc1717398f18a487cab4a0abd262122eba57c6ea5ab3f89a743b5a3cc17665000bb370ec927c51848bef856daeee381a910362e9abd33e1601a0dd63ad009a38c66134335249cd20eddf50434f457d175fb7fe334a19c71f2e3191b67f17a6fe10080faebe9dbf12c34163b1f886f791a1de24000aec9be0485f94fe464d5a6199e522ae57aec972bf19bb30d6dfe5ac81ecc4d42c73dce98f667ff7e21480438da2c20922e0cbefeb7caf1f95ce811b7862f5e248d0c9beb5d3991a28c67d61c626e85baf1be4225c99b3f5ab444d5c3", 0xf7}, {&(0x7f0000000940)="f2b2f68edb3bc6c1f5131d59cd86a47c7f17ce05ca7b32864a88171e91491f9ae344eecbf4ffa5f9e1ba8a23c3229aa68ea4b01f6252bfde487e40bd82091172eba9678a258f38e560c247afb9afd661001bacfa64f7b252ee2a8a02be01f4b1a274d643c0cc0fc7c567f2fec5d5c7b195c5", 0x72}], 0x2, &(0x7f0000000a00)="b24a3298c901c6a1fabd983a03bbdb08f2fb647dd811bb143321c0e0f88a9abef9f8daaf800034390fedaef35ca8c0a9ff83bccb661501b6de4df3dd1c00cc3931b9f4e617207fbae586c224956b01bf5c", 0x51, 0x40000}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 1.456483836s ago: executing program 1 (id=733): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x101}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.319558835s ago: executing program 2 (id=734): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) r0 = socket(0x10, 0x80002, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.201408167s ago: executing program 0 (id=735): r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x3, 0x4, @loopback, 0x6}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b703000000090001db020a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a200"/212], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) 1.088058912s ago: executing program 1 (id=736): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000240)) socket$kcm(0x11, 0x3, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000140012800900010076657468000000000400008008000300000000000500110001"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) (async) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0xfffd, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f000000089090000cdc39c897b161d0a3d2bd4b836954268e611c00aab9715732c9fb72382b7f820d70da9b3621f02bf77789211581f4894e5", 0x4b}], 0x1}, 0x24008009) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) 1.03188075s ago: executing program 2 (id=737): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1ef8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000300)={0x1, 0xd}) 1.030866055s ago: executing program 0 (id=738): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x2, @remote, 0x4}}, [0x4, 0x7b, 0x4, 0x6, 0x9, 0x7ff, 0x71, 0xffffffffffffff8b, 0x8, 0x63e, 0x9, 0xf, 0x0, 0x4cb2, 0xffffffff]}, &(0x7f0000000100)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x2, @remote, 0x4}}, [0x4, 0x7b, 0x4, 0x6, 0x9, 0x7ff, 0x71, 0xffffffffffffff8b, 0x8, 0x63e, 0x9, 0xf, 0x0, 0x4cb2, 0xffffffff]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0xff}, &(0x7f0000000180)=0x8) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev}, &(0x7f0000000200)=0x10, 0x100800) getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000240)={@loopback, @broadcast, @multicast2}, &(0x7f0000000280)=0xc) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x40010, r0, 0xa8266000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) syz_emit_ethernet(0x104e, &(0x7f00000002c0)={@multicast, @local, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@mpls_uc={0x8847, {[{0x0, 0x0, 0x1}, {0x1}, {0x2}], @ipv4=@udp={{0xa, 0x4, 0x2, 0x0, 0x1030, 0x65, 0x0, 0x0, 0x11, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, {[@rr={0x7, 0x13, 0x76, [@private=0xa010101, @broadcast, @local, @multicast2]}]}}, {0x4e22, 0x4e24, 0x1008, 0x0, @opaque="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"}}}}}}, &(0x7f0000001340)={0x1, 0x1, [0x94c, 0xdbe, 0x667, 0xd59]}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000001380)) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000013c0)={r3, 0x247, 0x80000000, 0x5}) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000001400)) (async) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000001400)) syz_genetlink_get_family_id$SEG6(&(0x7f0000001480), r4) (async) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480), r4) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000001540)={&(0x7f0000001440), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3ff, 0x1, 0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0c0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000001540)={&(0x7f0000001440), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3ff, 0x1, 0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0c0) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000001580)=0x800, &(0x7f00000015c0)=0x4) (async) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000001580)=0x800, &(0x7f00000015c0)=0x4) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000001640), r4) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0xc040) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000001980)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001780)={0x19c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x368a}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7639}, @TIPC_NLA_NODE_ID={0x8e, 0x3, "096cde64b76a71b18607e8de0fb5e0180c253e7ee0d2a12ac5b7d634c9cf0c404a2d902e8af313ae6a428ce31eeb963cc52c89e04d97a72d6516cf3aa8afc51ff2b209dc8c2d92162e1068e4bd6a50fef76e0f229b7fd9f871868e0c73da998799e4b12f143366d2ceacc3e7a789ca98937a58d9237e7286760a3e1715de66ca077efe91d26d990efb1b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd2a6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f00000019c0)=0xfffffffc, 0x4) (async) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f00000019c0)=0xfffffffc, 0x4) socketpair(0x23, 0x80000, 0x8001, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0xf501, 0x0) r9 = socket$caif_stream(0x25, 0x1, 0x2) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x0, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@bloom_filter={0x1e, 0x6, 0xfffffc00, 0x3, 0x2100, r4, 0x6, '\x00', 0x0, r4, 0x5, 0x4, 0x0, 0x9}, 0x50) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000001b40)=0x9) socketpair(0x2, 0x4, 0x2, &(0x7f0000001b80)) (async) socketpair(0x2, 0x4, 0x2, &(0x7f0000001b80)={0xffffffffffffffff}) connect$netrom(r10, &(0x7f0000001bc0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@default, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast]}, 0x48) (async) connect$netrom(r10, &(0x7f0000001bc0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@default, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast]}, 0x48) 974.762769ms ago: executing program 3 (id=739): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="61202a3a2a2039c90d00"], 0xa) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x533442ca3857e764, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x44b, 0x70bd2b, 0x25dfdbff, {0x7a, 0x0, 0x0, 0x0, 0xd42a}}, 0x20}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000080) 944.115078ms ago: executing program 4 (id=740): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x8, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newnexthop={0x18, 0x68, 0x901}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000019c0)=""/4084, 0xff4}, {&(0x7f0000000a40)=""/193, 0xc1}], 0x2}}], 0x1, 0x10000, 0x0) 799.633154ms ago: executing program 1 (id=741): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x1, @bcast, @bpq0, 0x2, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6214, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x8915, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042abd7000eaffffff000003e4", @ANYRES32=r6, @ANYBLOB="03000000c0100600186d3b8008020000736974000c000280080003000a010100"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x80}, 0x1, 0xba01}, 0x80c4) r7 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}], 0x18}, 0x40000) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0x6}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) 799.128315ms ago: executing program 2 (id=742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) (async) write$tun(r0, &(0x7f0000000300)={@val, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x15, 0x2c, 0x64, 0x0, 0xc2, 0x6, 0x0, @local, @broadcast}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x1, 0x200, 0x0, 0x4, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x46) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010d3c8cff2eb506e8e19ff45793a964bd995ee74febf3e43a02a5edd401c2647b2a37ecc3b25fef4b85bec7392aa85e0599f63c5aad3ab7d53c99fd8edab3b0a53dd063365d41c1ef42687d8f8c14a7a26b1f17cfbc0ac381672728399f550d8b8e037b5b91777d8349e77e65a784220ed", @ANYRES8=0x0, @ANYRES64, @ANYBLOB="7bec552a013af6fc0cd158be1999e3b69e65d403c490afd9d027f77180691ddcf35df64f3346aa02afa291ab0d0c014d0cae55c8862c86ea389fc98a0a63c27fcdf4fe32aaa3f732858d0ee524010a6fee0e10801b7ba5bc8fb9c48b930757d6f80ec68e132b61354ff4455eed740e1b863e54648c641938692bcf743ff3df4eddb92c50a0eb96882a035108a7", @ANYRES64=r0], 0x48}}, 0x400400c0) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async, rerun: 32) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_data=&(0x7f0000000040)="41fdc08d320e1286a182d2100e0da105acc81021e8d2c9e4b51872c4c995b9fb"}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r5, &(0x7f00000001c0)="bc918bffb3771c2bae5d0e57c3164d2be5", 0xffffffffffffffea, 0x0, 0x0, 0x0) (async) pselect6(0xfffffffffffffeef, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) (async) ioctl$sock_netdev_private(r4, 0x289f4, &(0x7f0000000000)) (async, rerun: 64) socket$qrtr(0x2a, 0x2, 0x0) (rerun: 64) 704.345803ms ago: executing program 0 (id=743): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x3, 0x33) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 682.14572ms ago: executing program 3 (id=744): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @remote}}, [0x0, 0xe13d, 0x5, 0xcfe, 0x5, 0x7, 0x12, 0x5, 0x2, 0x40000000000, 0x6, 0xe507, 0x1ff, 0x9, 0x7fffffffffffffff]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r2, @in={{0x2, 0x4e21, @loopback}}, [0xfffffffffffffff4, 0x7, 0x80, 0xab, 0x1, 0x0, 0x7fffffff, 0x6, 0x2, 0x1, 0x7f, 0xffffffffffffffff, 0x6, 0x9fa, 0xa]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={r2, 0xc72}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e22, 0xb5c, @mcast2, 0x2}}, 0xcd9c, 0x8, 0x0, 0xe, 0x11, 0x4, 0x6}, &(0x7f00000003c0)=0x9c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000400)={r2, 0x8000}, 0x8) r5 = accept4$rose(r0, &(0x7f0000000440)=@short={0xb, @remote, @default, 0x1, @rose}, &(0x7f0000000480)=0x1c, 0x80000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000004c0)={r4, 0x2000000}, &(0x7f0000000500)=0x8) r6 = socket$inet(0x2, 0x801, 0x8) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r7, 0x510, 0xf8b9, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x40) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000680)) sendmsg$inet_sctp(r1, &(0x7f0000000880)={&(0x7f00000006c0)=@in6={0xa, 0x4e23, 0x574, @private0, 0xb0e}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000700)="98d2b62ca2ba0e3d7e8c4c069b5fcb4ec2dad09ca8382ec24dcbb3ff", 0x1c}], 0x1, &(0x7f0000000780)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}, @sndinfo={0x20, 0x84, 0x2, {0x81, 0x4, 0x4, 0xede, r2}}, @authinfo={0x18, 0x84, 0x6, {0x100}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x82c1, 0x8202, 0x81, 0xef4, 0x6, 0x0, 0x4, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x8204, 0x4, 0x25a2, r3}}], 0x100}, 0x4004) ppoll(&(0x7f00000008c0)=[{r1, 0x80}], 0x1, &(0x7f0000000900), &(0x7f0000000940)={[0x9]}, 0x8) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000980)={r3, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x101, 0x5}, &(0x7f0000000a40)=0x90) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000a80)={r2, 0xd6, "047a28a69a986aeeec53af8b030ac867cc9f78041b6c63efa70251f04846cc2027bc215cac02151832c20957d227161f84659e79d1ba7d85c0ae36d627a43f49a30bcf68106cf1b559770703a6fa078a2bc2b51b3768789b5f138ae273bb3150823511832c87a4ed3ce0ae614b1422ec2c7dd927fd178586be2d7c5f648f10b920642f2fa8b86847e12a70772194451c4f6aa71ad036365fc461a7d25c28829f19bfb0215f3679219f2161d3413187df135299d992eb145a8c85582d774e1c811749c56979c62a1836413036e4a1885e4abed456289d"}, &(0x7f0000000b80)=0xde) pselect6(0x40, &(0x7f0000000bc0)={0x5, 0x4e5, 0xffffffff80000001, 0x80000000, 0x7, 0xffffffffffffff0d, 0x457, 0x80000001}, &(0x7f0000000c00)={0x40, 0x2b, 0x7, 0x70, 0x3, 0x5, 0x800, 0x9}, &(0x7f0000000c40)={0x8, 0x4, 0x5, 0x4, 0x4, 0x5, 0x40, 0xe}, &(0x7f0000000c80)={0x77359400}, &(0x7f0000000d00)={&(0x7f0000000cc0)={[0x8]}, 0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000d40)={'nicvf0\x00', 0xb}) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000d80)='syz1\x00', 0x200002, 0x0) openat$cgroup(r10, &(0x7f0000000dc0)='syz0\x00', 0x200002, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f0000000e00)={0x9, 0xe}) r11 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000e40), &(0x7f0000000e80)=0x10, 0x80000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000ec0)={0x2, 'macsec0\x00', {0x6}}) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f0000000f00)={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7f, 0x2, 0x2, 0x400, 0x2000000000000000, 0x20000}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000f80)={r9, @in={{0x2, 0x4e21, @multicast2}}, 0x3, 0x80, 0x5, 0xe3, 0x40, 0x1, 0x9}, &(0x7f0000001040)=0x9c) 106.554214ms ago: executing program 0 (id=745): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) pwritev(r0, &(0x7f0000000800)=[{&(0x7f0000000240)="81b47bd584ff3b0d351d4d1f166d63d9bffd51836e0469e63a45c0f4f2a92dd57d0b21720030e0a09af1811fd8a08cf51f5477363c4529db20bc2d374845e2805f3b68b1cb0fc8ad464f1e623289336cdb7ab96cf6450b9ddaf6b6234d8fa1480d0d21921b8babecacf24c10f9938f4b743831b1910279ea9db59b97d54e9b5e35246475e964aa5abb7575516a0e87109483b6ee5b1ffec8a2506101200b7e2df6514b358a786d7ddbdd2a26914527edd1a917536054625c4da3a31f94770f471f04fe00ef2d406179e8cf8d44ba97db4d8f79", 0xd3}, {&(0x7f0000000500)="d2f8de5c5c8169ba6b419bb4902da5d5cb2545c8bc6d0b931d8275c46cc5f8a9ec70c9caf9f09b50438b27d75d25dd981f64a936704a56112de8d3c14d356d3f6f453ad17b022f87dfbb7b15c5ee6f591096df323d1a11d6f4b7118d4cf8e03d25bd2c98d79d759273551a1e6b54b3ec2a824a6ce760a5b680e4ac15a7bfe7ae06f362046d968dfbcaf60fdbd4bb2f1313bc6b799485a446bb9099a3828d967a2f97dd3f1a", 0xa5}, {&(0x7f0000000340)="15f55837c832ad1c37938fe67e40fc2483a33a92da5f06d73527a33360", 0x1d}, {&(0x7f00000006c0)="e933f60c524450ed1c8e5e275a7e1f0e8b9f3b2c4089a76ad751dec5a36067354c42a3bf541b3fa13c86b647fe8d1958bcd5b93b58edc732aa8522458d5229943a9c11b97ff574f94406f9b6e3b1a82dcb528772e635b9084e562e0bc43a22c604cf98b1a0ab724fba82134b5f0581f3392056396a417463042b2d709b900fef1d1a0148e8916d972dc8a1aaf68756cf893dbb2d59dfb8cda2809a35075c0e06f489a680f827fa47c3612b9b886d51efc0c6", 0xb2}, {&(0x7f0000000480)="34a0f726f8fcd570ee7ce289019927eb2bbe22bc3b10af248303f1d58af3615e42bf99fa4e022c6e872fd21c399bbb1582be761bc9885f5ff3fd", 0x3a}, {&(0x7f00000005c0)="4ad06d0477d7f8584fbd1dc685dea5e2dfa343a66ecf857c76c19693b1be1ec5adb07849895c8af784154aa80ec05799ad5dbe5b", 0x34}, {&(0x7f0000000780)="83432ad59df3f781c07ad570e51eb98cda3c52ded4dcb4b6f2fa1eb04252718d66fa9896f860b0a5ce20c7a7db1472c2e7575ab803bd275ac1a4d2a770ae268529335931558049b4d579b00501ffd5ac0726b76af37d91", 0x57}], 0x7, 0xfff, 0x9) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1, 0x8d, 0xc, {}, {0x0, 0xea60}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "25696cebfc24467c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8110}, 0x40004) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) 103.115418ms ago: executing program 2 (id=746): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x8000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @array]}}, &(0x7f0000000f40)=""/4087, 0x3e, 0xff7, 0x1}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x7, 0x8000, 0x3, 0x4, {{0x44, 0x4, 0x0, 0x0, 0x110, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast2, @loopback, {[@generic={0x4f, 0xa, "29ac2667d9347f2c"}, @timestamp={0x44, 0xc, 0xce, 0x0, 0x5, [0x9, 0xc3b2]}, @rr={0x7, 0x1b, 0xf5, [@remote, @multicast2, @multicast2, @multicast2, @private=0xa010100, @remote]}, @noop, @timestamp={0x44, 0x14, 0xd5, 0x0, 0x1, [0x10000, 0x7, 0x2, 0x0]}, @timestamp_addr={0x44, 0x24, 0xb4, 0x1, 0x6, [{@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x9}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x32}]}, @timestamp={0x44, 0x14, 0x45, 0x0, 0x2, [0x0, 0xf, 0x6, 0x10000]}, @timestamp={0x44, 0x24, 0xda, 0x0, 0x1, [0x5, 0x5, 0x6b, 0x200, 0x5, 0x6, 0xffff, 0x37d7]}, @noop, @cipso={0x86, 0x59, 0xffffffffffffffff, [{0x2, 0x5, "1b8f31"}, {0x1, 0x10, "24b41b42bc1e4818505433da3110"}, {0x1, 0x7, "1b24b18539"}, {0x5, 0xc, "7184de18cf742d6d8e94"}, {0x6, 0x2}, {0x5, 0x4, "29ee"}, {0x5, 0xf, "e64d665d42577838753b67821a"}, {0x2, 0xf, "27113b31745fa7274c798f4487"}, {0x1, 0x7, "a06d404faa"}]}]}}}}}) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e1e, @remote}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_buf(r3, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x3c, 0x26, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0x1}, {0xfff2, 0xfff1}, {0x10, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x24841) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) 91.158897ms ago: executing program 3 (id=747): ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x132, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)='team_slave_0\x00', 0xfff, 0x7, 0x52d4}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r0, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20008000) 71.267937ms ago: executing program 0 (id=748): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1ffffffffffffe42}}, 0x40) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000600)=@hci, 0x80, &(0x7f0000000580)}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) shutdown(r0, 0x1) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ffdaef862b", 0x48}], 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) recvmsg(r1, &(0x7f0000000540)={&(0x7f0000000180)=@x25={0x9, @remote}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/119, 0x77}], 0x1, &(0x7f0000000340)=""/162, 0xa2}, 0x100) shutdown(r0, 0x1) 70.518812ms ago: executing program 1 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) recvmmsg$unix(r5, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1}}], 0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000001, 0x4, 0x3, 0x4, 0x0, 0x5, 0x8, 0x5, 0x802}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000440)="745c8cc61de5501494e43de8f92bcbd4d046e187fcfa535f34e584c45c336774091d721f91c04ea0e2041238e96d519cbe7d7f2d35fa99ce767dc587507b2a7f5e50fac33cf997b34755f43a41c8da329eb6bbf900497999a76c73175b6e5a55f4d272987eb9089bb6feeee4849c3d45784565ff281210f8d73879fe62f06aad0251aaf1324faa7ae9c0d62429", 0x8d}], 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x24}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r10, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r11, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000020}, 0x24004014) 66.579222ms ago: executing program 2 (id=750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r1, 0x2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 48.953972ms ago: executing program 2 (id=751): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) 0s ago: executing program 4 (id=752): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0xf, {{0x2, 0x4e22, @loopback}}, 0x0, 0x3, [{{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e22, @loopback}}]}, 0x210) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x6, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000240)=0x2e, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0xc000) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000440)=0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, r3, 0x0, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x67f}, {0x6, 0x16, 0x5}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x44ff}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000600)={r4, 0x98, 0xffffffffffffff4b, 0x7fff}) ioctl$PPPIOCGIDLE64(r5, 0x8010743f, &(0x7f0000000640)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8801) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x3, 0x2, 0x1, @empty, @private0, 0x7800, 0x8, 0x1000, 0x5}}) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@private=0xa010102, @in=@empty, 0x4e21, 0xf9f4, 0x4e21, 0x1, 0xa, 0x80, 0x80, 0x0, r11, 0xffffffffffffffff}, {0x7fff, 0x740a51a2, 0x3, 0x4, 0x10000, 0x7, 0x2713, 0x5}, {0xd, 0xff, 0x9, 0x1000}, 0x80000000, 0x6e6bb1, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0x2b}, 0x2, @in6=@empty, 0x3503, 0x3, 0x2, 0x0, 0x7, 0x2, 0x7}}, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000a00), 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x118, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x118}, 0x1, 0x0, 0x0, 0xd0f8d61e577864cc}, 0x40000) getsockopt$IP_SET_OP_GET_FNAME(r9, 0x1, 0x53, &(0x7f0000000c40)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000c80)=0x2c) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r6) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, r12, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x14}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x13}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000e40), &(0x7f0000000e80)=0x8) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x44}}, 0x4004000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [ 79.416582][ T5852] cgroup: Unknown subsys name 'net' [ 79.566518][ T5852] cgroup: Unknown subsys name 'cpuset' [ 79.575997][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.351913][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.033527][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.042398][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.050564][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.059582][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.073347][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.092149][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.101060][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.111035][ T5186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.119716][ T5186] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.128175][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.136709][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.151682][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.159358][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.177706][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.188402][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.193054][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.205464][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.213262][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.221454][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.233143][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.264769][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.273680][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.283314][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.293401][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.302763][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.745835][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 85.029928][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 85.061451][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 85.235239][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.242454][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.251437][ T5862] bridge_slave_0: entered allmulticast mode [ 85.259057][ T5862] bridge_slave_0: entered promiscuous mode [ 85.273781][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 85.286666][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 85.310330][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.317778][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.325329][ T5862] bridge_slave_1: entered allmulticast mode [ 85.333170][ T5862] bridge_slave_1: entered promiscuous mode [ 85.469752][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.477008][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.484686][ T5871] bridge_slave_0: entered allmulticast mode [ 85.491862][ T5871] bridge_slave_0: entered promiscuous mode [ 85.516323][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.529490][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.558935][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.567095][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.574921][ T5871] bridge_slave_1: entered allmulticast mode [ 85.582059][ T5871] bridge_slave_1: entered promiscuous mode [ 85.674925][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.682305][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.690387][ T5863] bridge_slave_0: entered allmulticast mode [ 85.698310][ T5863] bridge_slave_0: entered promiscuous mode [ 85.726280][ T5862] team0: Port device team_slave_0 added [ 85.747845][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.755203][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.762388][ T5863] bridge_slave_1: entered allmulticast mode [ 85.770270][ T5863] bridge_slave_1: entered promiscuous mode [ 85.779986][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.806308][ T5862] team0: Port device team_slave_1 added [ 85.825384][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.833144][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.840408][ T5873] bridge_slave_0: entered allmulticast mode [ 85.847581][ T5873] bridge_slave_0: entered promiscuous mode [ 85.871923][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.895004][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.902216][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.910239][ T5878] bridge_slave_0: entered allmulticast mode [ 85.918393][ T5878] bridge_slave_0: entered promiscuous mode [ 85.925460][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.933153][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.940408][ T5873] bridge_slave_1: entered allmulticast mode [ 85.947640][ T5873] bridge_slave_1: entered promiscuous mode [ 86.013266][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.020992][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.028432][ T5878] bridge_slave_1: entered allmulticast mode [ 86.036078][ T5878] bridge_slave_1: entered promiscuous mode [ 86.077449][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.091733][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.103662][ T5871] team0: Port device team_slave_0 added [ 86.110504][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.117721][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.145666][ T5867] Bluetooth: hci0: command tx timeout [ 86.148503][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.205496][ T5871] team0: Port device team_slave_1 added [ 86.212648][ T5867] Bluetooth: hci1: command tx timeout [ 86.227289][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.234648][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.260998][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.276611][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.294506][ T5867] Bluetooth: hci3: command tx timeout [ 86.296909][ T5870] Bluetooth: hci2: command tx timeout [ 86.304532][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.330875][ T5863] team0: Port device team_slave_0 added [ 86.339291][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.373204][ T5870] Bluetooth: hci4: command tx timeout [ 86.387137][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.411385][ T5863] team0: Port device team_slave_1 added [ 86.467140][ T5878] team0: Port device team_slave_0 added [ 86.476707][ T5878] team0: Port device team_slave_1 added [ 86.483659][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.490986][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.516949][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.600913][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.608510][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.635787][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.655266][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.662330][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.688830][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.707604][ T5862] hsr_slave_0: entered promiscuous mode [ 86.714136][ T5862] hsr_slave_1: entered promiscuous mode [ 86.723166][ T5873] team0: Port device team_slave_0 added [ 86.729977][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.737087][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.763788][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.777475][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.784662][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.811525][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.835695][ T5873] team0: Port device team_slave_1 added [ 86.869271][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.876531][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.904149][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.005683][ T5871] hsr_slave_0: entered promiscuous mode [ 87.012210][ T5871] hsr_slave_1: entered promiscuous mode [ 87.019121][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 87.031192][ T5871] Cannot create hsr debugfs directory [ 87.110232][ T5863] hsr_slave_0: entered promiscuous mode [ 87.117862][ T5863] hsr_slave_1: entered promiscuous mode [ 87.129336][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 87.135940][ T5863] Cannot create hsr debugfs directory [ 87.173678][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.180751][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.212637][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.265232][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.276637][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.307900][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.348546][ T5878] hsr_slave_0: entered promiscuous mode [ 87.360485][ T5878] hsr_slave_1: entered promiscuous mode [ 87.367593][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 87.378812][ T5878] Cannot create hsr debugfs directory [ 87.647118][ T5873] hsr_slave_0: entered promiscuous mode [ 87.654009][ T5873] hsr_slave_1: entered promiscuous mode [ 87.660366][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 87.666259][ T5873] Cannot create hsr debugfs directory [ 88.108083][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.120917][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.153904][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.184229][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.212975][ T5870] Bluetooth: hci0: command tx timeout [ 88.265097][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.283748][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.294688][ T5870] Bluetooth: hci1: command tx timeout [ 88.319294][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.331532][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.373212][ T5870] Bluetooth: hci3: command tx timeout [ 88.376356][ T5867] Bluetooth: hci2: command tx timeout [ 88.433731][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.450009][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.457338][ T5867] Bluetooth: hci4: command tx timeout [ 88.468841][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.481879][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.608658][ T5878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.625381][ T5878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.638938][ T5878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.650425][ T5878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.688930][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.786553][ T5873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.800962][ T5873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.812119][ T5873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.839316][ T5873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.881835][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.901475][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.936609][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.944299][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.995408][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.017573][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.025062][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.043866][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.051141][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.089812][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.129709][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.136890][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.209996][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.232299][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.239470][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.264637][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.324943][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.337182][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.344353][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.364569][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.440724][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.447990][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.492261][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.499526][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.559081][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.616720][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.624053][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.669873][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.677180][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.097343][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.200878][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.293794][ T5867] Bluetooth: hci0: command tx timeout [ 90.345123][ T5862] veth0_vlan: entered promiscuous mode [ 90.377750][ T5867] Bluetooth: hci1: command tx timeout [ 90.462685][ T5867] Bluetooth: hci2: command tx timeout [ 90.464056][ T5870] Bluetooth: hci3: command tx timeout [ 90.507527][ T5862] veth1_vlan: entered promiscuous mode [ 90.521977][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.533532][ T5870] Bluetooth: hci4: command tx timeout [ 90.551602][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.607253][ T5863] veth0_vlan: entered promiscuous mode [ 90.636900][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.662581][ T5863] veth1_vlan: entered promiscuous mode [ 90.672886][ T5862] veth0_macvtap: entered promiscuous mode [ 90.706658][ T5862] veth1_macvtap: entered promiscuous mode [ 90.811955][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.829096][ T5871] veth0_vlan: entered promiscuous mode [ 90.842349][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.861642][ T5863] veth0_macvtap: entered promiscuous mode [ 90.878403][ T5863] veth1_macvtap: entered promiscuous mode [ 90.904247][ T5871] veth1_vlan: entered promiscuous mode [ 90.929264][ T1136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.942196][ T1136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.961121][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.985276][ T5878] veth0_vlan: entered promiscuous mode [ 90.996079][ T1136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.006252][ T1136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.047048][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.069294][ T5878] veth1_vlan: entered promiscuous mode [ 91.126725][ T1161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.136629][ T1161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.189883][ T1161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.206005][ T1161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.254388][ T5871] veth0_macvtap: entered promiscuous mode [ 91.312201][ T5871] veth1_macvtap: entered promiscuous mode [ 91.364513][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.377138][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.386736][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.388920][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.419511][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.465857][ T5878] veth0_macvtap: entered promiscuous mode [ 91.485031][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.519772][ T5873] veth0_vlan: entered promiscuous mode [ 91.524190][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.545031][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.551823][ T5878] veth1_macvtap: entered promiscuous mode [ 91.565468][ T1161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.597965][ T1161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.607868][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.622352][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.648206][ T5873] veth1_vlan: entered promiscuous mode [ 91.669402][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.679961][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.698428][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.727462][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.806928][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.859135][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.895779][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.927643][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.966541][ T5983] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 91.990756][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.010346][ T5873] veth0_macvtap: entered promiscuous mode [ 92.036036][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.055501][ T5873] veth1_macvtap: entered promiscuous mode [ 92.062595][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.136267][ T24] cfg80211: failed to load regulatory.db [ 92.230501][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.289083][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.300982][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.329024][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.373282][ T5870] Bluetooth: hci0: command tx timeout [ 92.454813][ T5870] Bluetooth: hci1: command tx timeout [ 92.530165][ T3509] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.539329][ T5870] Bluetooth: hci2: command tx timeout [ 92.539354][ T5867] Bluetooth: hci3: command tx timeout [ 92.566993][ T3509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.613011][ T5867] Bluetooth: hci4: command tx timeout [ 92.640250][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.654191][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.695919][ T3509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.707228][ T6008] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET) [ 92.721661][ T3509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.722868][ T6002] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.782338][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.793706][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.841954][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.864506][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.200746][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.235515][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.421655][ T6026] netem: unknown loss type 0 [ 93.441264][ T6026] netem: change failed [ 93.487693][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.529774][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.084846][ T6052] openvswitch: netlink: Message has 4 unknown bytes. [ 94.319277][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 94.404185][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 94.471358][ T6069] netlink: 156 bytes leftover after parsing attributes in process `syz.1.24'. [ 94.819821][ T6081] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.896520][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 95.297614][ T6098] netlink: 44 bytes leftover after parsing attributes in process `syz.3.31'. [ 95.408545][ T6104] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 95.533847][ T6110] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 95.591599][ T6112] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 96.006186][ T6127] netlink: 'syz.3.39': attribute type 21 has an invalid length. [ 96.035297][ T6127] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 96.096375][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 96.353640][ T6147] warning: `syz.3.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.631489][ T6154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.46'. [ 96.759027][ T6165] netlink: 'syz.4.49': attribute type 4 has an invalid length. [ 96.832438][ T6168] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 96.843272][ T6168] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 97.129699][ T6176] pim6reg1: entered promiscuous mode [ 97.154813][ T6176] pim6reg1: entered allmulticast mode [ 97.345400][ T6185] vxcan3: entered promiscuous mode [ 97.771153][ T6203] nbd: must specify at least one socket [ 97.781660][ T6203] nbd: must specify at least one socket [ 97.855108][ T6206] __nla_validate_parse: 2 callbacks suppressed [ 97.855128][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.61'. [ 97.918973][ T6206] netlink: 'syz.1.61': attribute type 2 has an invalid length. [ 97.947456][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 98.128370][ T6218] C: renamed from team_slave_0 (while UP) [ 98.156337][ T6218] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 98.190513][ T6218] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 98.616506][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 98.733056][ T6244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.807884][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 99.241863][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 99.424567][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 99.448852][ T6269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.696226][ T6285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.83'. [ 99.791594][ T6289] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 99.799900][ T6277] syzkaller0: entered promiscuous mode [ 99.805923][ T6277] syzkaller0: entered allmulticast mode [ 99.832647][ T6289] netlink: 128 bytes leftover after parsing attributes in process `syz.1.87'. [ 99.856941][ T6289] netlink: 'syz.1.87': attribute type 2 has an invalid length. [ 99.890524][ T6289] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 100.096485][ T6297] netlink: 'syz.4.88': attribute type 83 has an invalid length. [ 100.735449][ T6311] Zero length message leads to an empty skb [ 101.698210][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 101.960550][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 102.034635][ T6325] netlink: 'syz.2.96': attribute type 3 has an invalid length. [ 102.462044][ T6340] bridge_slave_0: left allmulticast mode [ 102.507266][ T6340] bridge_slave_0: left promiscuous mode [ 102.556221][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.649122][ T6340] bridge_slave_1: left allmulticast mode [ 102.763938][ T6340] bridge_slave_1: left promiscuous mode [ 102.785397][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.856347][ T6340] bond0: (slave bond_slave_0): Releasing backup interface [ 102.887226][ T6340] bond0: (slave bond_slave_1): Releasing backup interface [ 102.945077][ T6340] team0: Port device team_slave_0 removed [ 102.997980][ T6340] team0: Port device team_slave_1 removed [ 103.025749][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.062745][ T6340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.100866][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.148679][ T6340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.284126][ T6360] tipc: Started in network mode [ 103.290556][ T6360] tipc: Node identity f20196da4194, cluster identity 4711 [ 103.302235][ T6360] tipc: Enabled bearer , priority 0 [ 103.525971][ T6371] __nla_validate_parse: 6 callbacks suppressed [ 103.525991][ T6371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.111'. [ 103.593229][ T6361] syzkaller0: entered promiscuous mode [ 103.605387][ T6361] syzkaller0: entered allmulticast mode [ 103.629441][ T6361] tipc: Resetting bearer [ 103.643168][ T6352] tipc: Resetting bearer [ 104.355562][ T24] tipc: Node number set to 3012925146 [ 104.908660][ T6352] tipc: Disabling bearer [ 104.931779][ T6387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.951773][ T6392] lo speed is unknown, defaulting to 1000 [ 105.111212][ T6395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.146257][ T6392] lo speed is unknown, defaulting to 1000 [ 105.160865][ T6392] lo speed is unknown, defaulting to 1000 [ 105.212168][ T6392] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.259056][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 105.309401][ T6392] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.417623][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 105.462015][ T6392] lo speed is unknown, defaulting to 1000 [ 105.496051][ T6410] macvlan2: entered promiscuous mode [ 105.521794][ T6410] macvlan2: entered allmulticast mode [ 105.528941][ T6410] bond1: entered promiscuous mode [ 105.540269][ T6410] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.560920][ T6410] bond1: left promiscuous mode [ 105.620788][ T6392] lo speed is unknown, defaulting to 1000 [ 105.634317][ T6392] lo speed is unknown, defaulting to 1000 [ 105.648024][ T6419] openvswitch: netlink: Actions may not be safe on all matching packets [ 105.659371][ T6392] lo speed is unknown, defaulting to 1000 [ 105.690664][ T6392] lo speed is unknown, defaulting to 1000 [ 105.720588][ T6419] openvswitch: netlink: Flow actions attr not present in new flow. [ 105.796876][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.126'. [ 105.910524][ T30] audit: type=1800 audit(1758108435.540:2): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.128" name="memory.events" dev="tmpfs" ino=164 res=0 errno=0 [ 106.006344][ T30] audit: type=1804 audit(1758108435.570:3): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.128" name="/newroot/29/memory.events" dev="tmpfs" ino=164 res=1 errno=0 [ 106.343921][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 106.469362][ T6446] vlan2: entered promiscuous mode [ 106.492597][ T6446] bridge0: entered promiscuous mode [ 106.545959][ T6445] netlink: 'syz.1.137': attribute type 29 has an invalid length. [ 106.566334][ T6450] netlink: 'syz.1.137': attribute type 29 has an invalid length. [ 106.577882][ T6449] netlink: 'syz.1.137': attribute type 29 has an invalid length. [ 107.163164][ T6479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.146'. [ 107.218790][ T6481] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.716564][ T6499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.732444][ T6501] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.057423][ T6507] syzkaller1: entered promiscuous mode [ 108.117055][ T6507] syzkaller1: entered allmulticast mode [ 108.195301][ T6520] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 108.384607][ T3509] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 108.436134][ T6527] netlink: 'syz.1.157': attribute type 12 has an invalid length. [ 108.452850][ T5867] Bluetooth: hci4: command tx timeout [ 108.490148][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 108.539528][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 108.563913][ T6539] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 108.572192][ T5952] IPVS: starting estimator thread 0... [ 108.642409][ T6523] syz_tun: entered promiscuous mode [ 108.685848][ T6540] IPVS: using max 27 ests per chain, 64800 per kthread [ 108.720481][ T6523] syz_tun: left promiscuous mode [ 108.808811][ T6530] netlink: 'syz.4.159': attribute type 5 has an invalid length. [ 109.157740][ T6557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.168'. [ 109.452995][ T6571] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 109.486722][ T6571] netlink: 'syz.3.169': attribute type 3 has an invalid length. [ 109.521348][ T6571] netlink: 'syz.3.169': attribute type 235 has an invalid length. [ 109.684536][ T6581] bridge_slave_0: left allmulticast mode [ 109.699060][ T6581] bridge_slave_0: left promiscuous mode [ 109.735494][ T6577] netlink: 56 bytes leftover after parsing attributes in process `syz.0.173'. [ 109.752227][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.855297][ T6581] bridge_slave_1: left allmulticast mode [ 109.872375][ T6581] bridge_slave_1: left promiscuous mode [ 109.890615][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.928997][ T6581] bond0: (slave bond_slave_0): Releasing backup interface [ 109.954499][ T6581] bond0: (slave bond_slave_1): Releasing backup interface [ 110.024557][ T6581] team0: Port device team_slave_0 removed [ 110.044620][ T6581] team0: Port device team_slave_1 removed [ 110.066131][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.069724][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 110.082711][ T6581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.101626][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.109377][ T6581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.201566][ T6597] bridge_slave_1: left allmulticast mode [ 110.221574][ T6597] bridge_slave_1: left promiscuous mode [ 110.237306][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.264411][ T6597] bridge_slave_0: left allmulticast mode [ 110.319245][ T6597] bridge_slave_0: left promiscuous mode [ 110.356912][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.535723][ T6604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.586109][ T5973] lo speed is unknown, defaulting to 1000 [ 110.657535][ T6616] netlink: 60 bytes leftover after parsing attributes in process `syz.0.179'. [ 110.835907][ T6621] netlink: 232 bytes leftover after parsing attributes in process `syz.4.184'. [ 110.893272][ T6625] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 110.921920][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'. [ 110.927065][ T6625] netlink: 220 bytes leftover after parsing attributes in process `syz.1.183'. [ 111.135749][ T6636] ip6gre1: entered allmulticast mode [ 111.386038][ T6647] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.189'. [ 111.482763][ T6647] netlink: zone id is out of range [ 111.515902][ T6647] netlink: zone id is out of range [ 111.544885][ T6647] netlink: zone id is out of range [ 111.575301][ T6647] netlink: zone id is out of range [ 111.604400][ T6647] netlink: zone id is out of range [ 111.643031][ T6647] netlink: get zone limit has 8 unknown bytes [ 111.687485][ T6657] netlink: 132 bytes leftover after parsing attributes in process `syz.4.192'. [ 111.812143][ T6654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.875851][ T6662] hsr0 speed is unknown, defaulting to 1000 [ 111.891396][ T6662] hsr0 speed is unknown, defaulting to 1000 [ 111.941239][ T6662] hsr0 speed is unknown, defaulting to 1000 [ 111.983613][ T6662] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 111.994817][ T6654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.036185][ T6662] hsr0 speed is unknown, defaulting to 1000 [ 112.045797][ T6662] hsr0 speed is unknown, defaulting to 1000 [ 112.060996][ T6662] hsr0 speed is unknown, defaulting to 1000 [ 112.079258][ T6662] hsr0 speed is unknown, defaulting to 1000 [ 112.096419][ T6662] hsr0 speed is unknown, defaulting to 1000 [ 112.132052][ T6654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.340074][ T6654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.832749][ T6685] openvswitch: netlink: Unknown key attributes 2 [ 112.935567][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.973531][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.061815][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.134924][ T1136] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.751435][ T6713] netlink: 'syz.4.207': attribute type 10 has an invalid length. [ 113.767027][ T6713] __nla_validate_parse: 4 callbacks suppressed [ 113.767045][ T6713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.207'. [ 114.148887][ T6713] batadv0: entered promiscuous mode [ 114.154382][ T6713] batadv0: entered allmulticast mode [ 114.162040][ T6713] bridge0: port 3(batadv0) entered blocking state [ 114.170351][ T6713] bridge0: port 3(batadv0) entered disabled state [ 114.191530][ T6713] bridge0: port 3(batadv0) entered blocking state [ 114.198580][ T6713] bridge0: port 3(batadv0) entered forwarding state [ 114.386769][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 114.432584][ T6722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.211'. [ 114.503307][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 114.523374][ T6735] netlink: 40 bytes leftover after parsing attributes in process `syz.1.214'. [ 114.523711][ T3509] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 114.541905][ T3509] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 114.746867][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 115.131416][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.217'. [ 115.213052][ T6749] netlink: 'syz.2.217': attribute type 7 has an invalid length. [ 115.248354][ T6749] netlink: 'syz.2.217': attribute type 8 has an invalid length. [ 115.269772][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 115.303211][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 115.328299][ T6761] vlan2: entered allmulticast mode [ 115.359672][ T6761] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 115.723286][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 116.028086][ T6784] tipc: Started in network mode [ 116.047858][ T6784] tipc: Node identity 3aefdb9c9984, cluster identity 4711 [ 116.083343][ T6784] tipc: Enabled bearer , priority 0 [ 116.116843][ T6778] syzkaller0: MTU too low for tipc bearer [ 116.136007][ T6778] tipc: Disabling bearer [ 116.676514][ T6817] openvswitch: netlink: Multiple metadata blocks provided [ 117.528625][ T6861] syzkaller1: entered promiscuous mode [ 117.534681][ T6861] syzkaller1: entered allmulticast mode [ 118.038827][ T6876] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 118.691893][ T6914] netlink: 'syz.2.264': attribute type 1 has an invalid length. [ 119.149661][ T6923] __nla_validate_parse: 14 callbacks suppressed [ 119.149684][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'. [ 119.234197][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.271'. [ 119.241831][ T6948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.272'. [ 119.243720][ T6944] netlink: 'syz.4.271': attribute type 11 has an invalid length. [ 119.257513][ T6946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.272'. [ 119.305264][ T1136] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.314860][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.271'. [ 119.325684][ T1136] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.342805][ T6944] netlink: 'syz.4.271': attribute type 11 has an invalid length. [ 119.409647][ T1136] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.445252][ T1136] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.518296][ T6955] tipc: Enabled bearer , priority 12 [ 119.527060][ T6956] netlink: 'syz.2.275': attribute type 2 has an invalid length. [ 119.569358][ T6961] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20002 [ 119.576624][ T6956] netlink: 'syz.2.275': attribute type 2 has an invalid length. [ 119.718990][ T6964] netlink: 72 bytes leftover after parsing attributes in process `syz.1.276'. [ 119.892106][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 119.937381][ T979] IPVS: starting estimator thread 0... [ 119.949324][ T6974] tipc: Started in network mode [ 119.972783][ T6974] tipc: Node identity ac1414aa, cluster identity 4711 [ 120.010332][ T6974] tipc: Enabled bearer , priority 10 [ 120.046242][ T6978] netlink: 56 bytes leftover after parsing attributes in process `syz.1.281'. [ 120.063604][ T6975] IPVS: using max 25 ests per chain, 60000 per kthread [ 120.633657][ T43] tipc: Node number set to 2741754780 [ 121.122643][ T24] tipc: Node number set to 2886997162 [ 121.580793][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 121.633352][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 122.077223][ T7054] netlink: 'syz.0.302': attribute type 5 has an invalid length. [ 122.223049][ T7060] IPv4: Oversized IP packet from 127.202.26.0 [ 122.279789][ T7060] IPVS: lc: FWM 3 0x00000003 - no destination available [ 122.287368][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 122.308950][ T7066] tipc: Disabling bearer [ 122.348227][ T7065] tipc: New replicast peer: 255.255.255.255 [ 122.379659][ T7065] tipc: Enabled bearer , priority 10 [ 122.453834][ T7073] veth1_macvtap: left promiscuous mode [ 122.473772][ T7073] macsec0: entered promiscuous mode [ 122.479038][ T7073] macsec0: entered allmulticast mode [ 122.560494][ T7082] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 122.598545][ T7075] veth1_macvtap: entered promiscuous mode [ 122.604587][ T7075] veth1_macvtap: entered allmulticast mode [ 122.616783][ T7075] macsec0: left promiscuous mode [ 122.622195][ T7075] macsec0: left allmulticast mode [ 122.628743][ T7075] veth1_macvtap: left allmulticast mode [ 122.984226][ T7091] netem: invalid attributes len -24 [ 123.016201][ T7091] netem: change failed [ 123.261860][ T7108] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 123.534212][ T7128] ip6gretap0: entered promiscuous mode [ 123.541124][ T7128] syz_tun: entered promiscuous mode [ 123.603716][ T7132] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 123.761824][ T7132] bond2: entered promiscuous mode [ 123.767688][ T7132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.443063][ T7136] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.460808][ T7136] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 124.474883][ T7136] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 124.590671][ T7168] __nla_validate_parse: 7 callbacks suppressed [ 124.590691][ T7168] netlink: 44 bytes leftover after parsing attributes in process `syz.2.327'. [ 124.610475][ T7136] bond2: (slave wireguard0): making interface the new active one [ 124.618862][ T7136] wireguard0: entered promiscuous mode [ 124.627811][ T7136] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 124.645082][ T7137] unknown channel width for channel at 909000KHz? [ 124.660741][ T7148] netlink: 'syz.0.324': attribute type 29 has an invalid length. [ 124.911845][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'. [ 125.222441][ T7193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.562813][ T7209] netlink: 72 bytes leftover after parsing attributes in process `syz.2.339'. [ 125.833873][ T7219] ve: renamed from ipvlan1 [ 125.870711][ T7221] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 126.004528][ T7228] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 126.050081][ T7225] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.345'. [ 126.580157][ T7252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.019496][ T7271] netlink: 'syz.4.357': attribute type 2 has an invalid length. [ 127.048496][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 127.379692][ T7284] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 127.439782][ T7289] netlink: 580 bytes leftover after parsing attributes in process `syz.0.362'. [ 127.484137][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 127.563196][ T7284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.693691][ T7292] bond2: (slave gretap1): making interface the new active one [ 127.751370][ T7292] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 127.781606][ T7309] Bluetooth: MGMT ver 1.23 [ 128.191650][ T7320] tipc: Enabling of bearer rejected, failed to enable media [ 128.216307][ T7320] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 128.243277][ T7320] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 128.271938][ T7320] netlink: 'syz.2.371': attribute type 2 has an invalid length. [ 128.296650][ T7320] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 128.770985][ T7343] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 128.857517][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 129.010088][ T7352] netlink: 'syz.3.382': attribute type 12 has an invalid length. [ 129.151161][ T7355] netlink: 'syz.0.381': attribute type 1 has an invalid length. [ 129.178731][ T7355] netlink: 'syz.0.381': attribute type 1 has an invalid length. [ 129.389974][ T7362] tipc: Enabled bearer , priority 0 [ 129.403117][ T7362] syzkaller0: entered promiscuous mode [ 129.408888][ T7362] syzkaller0: entered allmulticast mode [ 129.428326][ T7362] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 129.545116][ T7362] tipc: Resetting bearer [ 129.560931][ T7361] tipc: Resetting bearer [ 129.597565][ T7361] tipc: Disabling bearer [ 129.812874][ T5867] Bluetooth: hci0: command tx timeout [ 130.104587][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 130.154409][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 130.180465][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 130.754421][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 130.768978][ T7400] netlink: 84 bytes leftover after parsing attributes in process `syz.2.398'. [ 131.092044][ T7408] bond3: entered allmulticast mode [ 131.098272][ T7408] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.106407][ T7408] bridge0: port 1(bond3) entered blocking state [ 131.115473][ T7408] bridge0: port 1(bond3) entered disabled state [ 131.131487][ T7408] bond3: entered promiscuous mode [ 131.146016][ T7408] bridge0: port 1(bond3) entered blocking state [ 131.152663][ T7408] bridge0: port 1(bond3) entered forwarding state [ 131.215463][ T49] bridge0: port 1(bond3) entered disabled state [ 131.884360][ T7454] netlink: 604 bytes leftover after parsing attributes in process `syz.3.412'. [ 132.031840][ T7447] netlink: 'syz.3.412': attribute type 29 has an invalid length. [ 132.064709][ T7450] netlink: 'syz.3.412': attribute type 29 has an invalid length. [ 132.215703][ T7465] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 132.271145][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 132.305122][ T7465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.498012][ T7472] bond3 (unregistering): Released all slaves [ 132.527251][ T7480] tipc: Enabled bearer , priority 0 [ 132.544548][ T7482] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.419'. [ 132.557067][ T7485] syzkaller0: entered promiscuous mode [ 132.564600][ T7485] syzkaller0: entered allmulticast mode [ 132.613141][ T7466] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 132.795513][ T7466] tipc: Resetting bearer [ 132.846491][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 133.039738][ T7462] tipc: Resetting bearer [ 133.084912][ T7538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.092421][ T7538] IPv6: NLM_F_CREATE should be set when creating new route [ 133.119860][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.133299][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.347572][ T7462] tipc: Disabling bearer [ 133.677991][ T7554] netlink: zone id is out of range [ 134.106430][ T7577] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.437'. [ 134.134746][ T7581] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 134.361320][ T7581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.386514][ T7596] bond3: left promiscuous mode [ 134.402013][ T7596] bridge0: port 1(bond3) entered disabled state [ 134.608547][ T7604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.878762][ T7584] bond1 (unregistering): Released all slaves [ 135.161899][ T7622] netlink: 'syz.1.450': attribute type 30 has an invalid length. [ 135.632046][ T7651] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 135.657808][ T7651] __nla_validate_parse: 2 callbacks suppressed [ 135.657828][ T7651] netlink: 17 bytes leftover after parsing attributes in process `syz.2.459'. [ 135.964467][ T7661] netlink: 192 bytes leftover after parsing attributes in process `syz.2.462'. [ 136.084247][ T7666] tls_set_device_offload: netdev not found [ 136.875504][ T7715] IPVS: set_ctl: invalid protocol: 136 10.1.1.0:20002 [ 136.958864][ T7715] IPVS: set_ctl: invalid protocol: 136 10.1.1.0:20002 [ 137.300833][ T7727] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 137.401658][ T7737] veth0_to_team: entered promiscuous mode [ 137.415553][ T7732] nbd: couldn't find a device at index -373156329 [ 137.424166][ T7737] veth0_to_team: entered allmulticast mode [ 137.770322][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.488'. [ 137.798144][ T7760] netlink: 996 bytes leftover after parsing attributes in process `syz.4.488'. [ 138.027371][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 138.061823][ T7770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.491'. [ 138.169617][ T7779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.491'. [ 138.329639][ T7784] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 138.438836][ T7770] "syz.0.491" (7770) uses obsolete ecb(arc4) skcipher [ 138.458601][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.497'. [ 138.679257][ T7784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.790852][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 138.949974][ T7812] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.503'. [ 139.635484][ T7842] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 139.684866][ T7842] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 139.693504][ T7842] gretap2: entered promiscuous mode [ 139.699206][ T7842] gretap2: entered allmulticast mode [ 139.722439][ T7839] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 139.872209][ T7847] lo speed is unknown, defaulting to 1000 [ 139.946697][ T7847] hsr0 speed is unknown, defaulting to 1000 [ 140.745297][ T7893] __nla_validate_parse: 3 callbacks suppressed [ 140.745317][ T7893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.527'. [ 141.018544][ T7899] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 141.026647][ T7899] netlink: 216 bytes leftover after parsing attributes in process `syz.3.530'. [ 141.803106][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 141.866828][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 141.902293][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 141.915720][ T7936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.539'. [ 142.112828][ T7949] netlink: 64 bytes leftover after parsing attributes in process `syz.3.542'. [ 142.151260][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 142.207131][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'. [ 142.247886][ T7953] netlink: 'syz.2.544': attribute type 20 has an invalid length. [ 142.251646][ T7951] syzkaller0: entered promiscuous mode [ 142.295641][ T7951] syzkaller0: entered allmulticast mode [ 142.332171][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 142.363911][ T7953] netlink: 'syz.2.544': attribute type 20 has an invalid length. [ 142.366395][ T7519] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.392421][ T7519] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.468773][ T7951] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 142.523023][ T7519] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.762397][ T7981] sctp: [Deprecated]: syz.0.552 (pid 7981) Use of int in maxseg socket option. [ 142.762397][ T7981] Use struct sctp_assoc_value instead [ 143.008544][ T7989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.148727][ T7519] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.195024][ T7985] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 144.442214][ T8002] xt_l2tp: invalid flags combination: 0 [ 144.535580][ T8005] tipc: Started in network mode [ 144.540513][ T8005] tipc: Node identity 4a200d61bcac, cluster identity 4711 [ 144.563412][ T8009] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 144.583162][ T8005] tipc: Enabled bearer , priority 0 [ 144.610959][ T8012] syzkaller0: entered promiscuous mode [ 144.635253][ T8012] syzkaller0: entered allmulticast mode [ 144.688472][ T8019] trusted_key: syz.1.565 sent an empty control message without MSG_MORE. [ 144.791761][ T8012] syzkaller0: left promiscuous mode [ 144.806045][ T8012] syzkaller0: left allmulticast mode [ 144.863712][ T8025] C: renamed from team_slave_0 [ 144.896990][ T8025] netlink: 'syz.0.561': attribute type 1 has an invalid length. [ 144.941787][ T8025] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 145.128350][ T8003] tipc: Resetting bearer [ 145.196405][ T8003] tipc: Disabling bearer [ 145.268425][ T8040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.334973][ T8041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.357473][ T8041] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 145.370495][ T8041] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 145.378572][ T8048] Driver unsupported XDP return value 0 on prog (id 136) dev N/A, expect packet loss! [ 145.759433][ T8057] __nla_validate_parse: 8 callbacks suppressed [ 145.759454][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 145.793128][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 145.842251][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 145.876826][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 145.932414][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 145.968323][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 146.000593][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 146.065440][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 146.110736][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 146.120794][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 147.061787][ T7519] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.113663][ T7519] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.122483][ T7519] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.161466][ T7519] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.187769][ T5236] udevd[5236]: worker [5911] terminated by signal 33 (Unknown signal 33) [ 147.651947][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.660166][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.808167][ T8130] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 148.082365][ T8124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.133831][ T8124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.315108][ T8147] netlink: 'syz.3.598': attribute type 21 has an invalid length. [ 148.369852][ T8124] vxcan3: left promiscuous mode [ 148.420404][ T5952] lo speed is unknown, defaulting to 1000 [ 148.433937][ T5952] syz2: Port: 1 Link DOWN [ 148.471905][ T7529] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.532957][ T7529] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.541920][ T7529] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.581661][ T7529] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.623003][ T8148] syzkaller1: entered promiscuous mode [ 148.628540][ T8148] syzkaller1: entered allmulticast mode [ 148.640104][ T8156] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 148.742315][ T7529] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.785118][ T7529] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.828520][ T7529] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.850015][ T7529] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.171223][ T8179] IPVS: set_ctl: invalid protocol: 4 172.20.20.62:20002 [ 149.479638][ T8188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.516442][ T8189] tipc: Enabled bearer , priority 0 [ 149.536003][ T8189] syzkaller0: entered promiscuous mode [ 149.554055][ T8189] syzkaller0: entered allmulticast mode [ 149.575225][ T8189] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 149.646590][ T8198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.688000][ T8189] tipc: Resetting bearer [ 149.699570][ T8187] tipc: Resetting bearer [ 149.720305][ T8187] tipc: Disabling bearer [ 149.770393][ T8205] netlink: 'syz.2.620': attribute type 10 has an invalid length. [ 149.838056][ T8205] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 149.923600][ T8200] nbd0: detected capacity change from 0 to 127 [ 149.931933][ T5867] block nbd0: Receive control failed (result -32) [ 149.953208][ T8209] netlink: 'syz.1.621': attribute type 1 has an invalid length. [ 150.177644][ T8223] netlink: 'syz.0.625': attribute type 49 has an invalid length. [ 150.316692][ T8230] netlink: 'syz.1.628': attribute type 11 has an invalid length. [ 150.446244][ T8236] netlink: 'syz.3.630': attribute type 1 has an invalid length. [ 150.562816][ T8242] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 150.582925][ T8242] netlink: 'syz.2.633': attribute type 11 has an invalid length. [ 151.016000][ T8270] netlink: 'syz.2.642': attribute type 11 has an invalid length. [ 151.105141][ T8274] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.158495][ T8277] __nla_validate_parse: 50 callbacks suppressed [ 151.158519][ T8277] netlink: 68 bytes leftover after parsing attributes in process `syz.0.645'. [ 151.176479][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 151.191608][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.645'. [ 151.199998][ T8281] netlink: 'syz.2.648': attribute type 21 has an invalid length. [ 151.216855][ T8279] netlink: 'syz.3.647': attribute type 2 has an invalid length. [ 151.360882][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 151.430454][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'. [ 151.525885][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 151.536102][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 151.586471][ T8299] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 151.596826][ T43] IPVS: starting estimator thread 0... [ 151.702725][ T8300] IPVS: using max 25 ests per chain, 60000 per kthread [ 152.040971][ T8308] tipc: Enabled bearer , priority 0 [ 152.050562][ T8308] syzkaller0: entered promiscuous mode [ 152.059025][ T8308] syzkaller0: entered allmulticast mode [ 152.073077][ T8308] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 152.093244][ T8308] tipc: Resetting bearer [ 152.107492][ T8307] tipc: Resetting bearer [ 152.125959][ T8307] tipc: Disabling bearer [ 152.421671][ T8324] netlink: 224 bytes leftover after parsing attributes in process `syz.3.665'. [ 152.517809][ T8329] xt_l2tp: invalid flags combination: 0 [ 152.529855][ T8329] xt_l2tp: invalid flags combination: 0 [ 152.808362][ T8353] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.672'. [ 153.047321][ T8365] sctp: [Deprecated]: syz.3.675 (pid 8365) Use of int in maxseg socket option. [ 153.047321][ T8365] Use struct sctp_assoc_value instead [ 153.431856][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.681'. [ 154.953200][ T8468] validate_nla: 3 callbacks suppressed [ 154.953222][ T8468] netlink: 'syz.1.707': attribute type 1 has an invalid length. [ 155.045080][ T8468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.116682][ T8469] bond3: (slave gretap2): making interface the new active one [ 155.146674][ T8469] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 155.198392][ T8475] vlan4: entered allmulticast mode [ 155.204038][ T8475] bond3: entered allmulticast mode [ 155.214387][ T8475] gretap2: entered allmulticast mode [ 155.270667][ T8490] IPVS: set_ctl: invalid protocol: 1 100.1.0.252:20004 [ 155.376151][ T8497] !€ÿ: renamed from bond_slave_0 [ 155.847162][ T8522] netlink: 'syz.2.726': attribute type 10 has an invalid length. [ 155.869641][ T8517] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 156.074715][ T8531] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 156.091486][ T8536] IPv6: sit1: Disabled Multicast RS [ 156.137300][ T8536] sit1: entered allmulticast mode [ 156.377371][ T8541] pim6reg: entered allmulticast mode [ 156.394221][ T8544] __nla_validate_parse: 9 callbacks suppressed [ 156.394241][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 156.431009][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 156.441748][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 156.468920][ T8544] netlink: 'syz.2.734': attribute type 11 has an invalid length. [ 156.658701][ T8554] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.737'. [ 156.669010][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 157.022816][ T8577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.741'. [ 157.148943][ T8587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.741'. [ 157.636236][ T8598] [ 157.638729][ T8598] ====================================================== [ 157.646032][ T8598] WARNING: possible circular locking dependency detected [ 157.653056][ T8598] syzkaller #0 Not tainted [ 157.657469][ T8598] ------------------------------------------------------ [ 157.664485][ T8598] syz.3.747/8598 is trying to acquire lock: [ 157.670392][ T8598] ffffffff8e21e7e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 157.680069][ T8598] [ 157.680069][ T8598] but task is already holding lock: [ 157.687528][ T8598] ffff888142fe8a78 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 157.697820][ T8598] [ 157.697820][ T8598] which lock already depends on the new lock. [ 157.697820][ T8598] [ 157.708230][ T8598] [ 157.708230][ T8598] the existing dependency chain (in reverse order) is: [ 157.717348][ T8598] [ 157.717348][ T8598] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 157.726137][ T8598] lock_acquire+0x120/0x360 [ 157.731264][ T8598] blk_alloc_queue+0x538/0x620 [ 157.736647][ T8598] __blk_mq_alloc_disk+0x15c/0x340 [ 157.742293][ T8598] nbd_dev_add+0x46c/0xae0 [ 157.747238][ T8598] nbd_init+0x168/0x1f0 [ 157.752014][ T8598] do_one_initcall+0x233/0x820 [ 157.757391][ T8598] do_initcall_level+0x104/0x190 [ 157.763030][ T8598] do_initcalls+0x59/0xa0 [ 157.768057][ T8598] kernel_init_freeable+0x334/0x4b0 [ 157.773867][ T8598] kernel_init+0x1d/0x1d0 [ 157.778725][ T8598] ret_from_fork+0x436/0x7d0 [ 157.783921][ T8598] ret_from_fork_asm+0x1a/0x30 [ 157.789212][ T8598] [ 157.789212][ T8598] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 157.796602][ T8598] lock_acquire+0x120/0x360 [ 157.801651][ T8598] fs_reclaim_acquire+0x72/0x100 [ 157.807199][ T8598] prepare_alloc_pages+0x153/0x610 [ 157.812919][ T8598] __alloc_frozen_pages_noprof+0x123/0x370 [ 157.819428][ T8598] __alloc_pages_noprof+0xa/0x30 [ 157.825064][ T8598] pcpu_populate_chunk+0x182/0xb30 [ 157.830710][ T8598] pcpu_alloc_noprof+0xcbf/0x1720 [ 157.836297][ T8598] bpf_map_alloc_percpu+0xbc/0x1b0 [ 157.841940][ T8598] prealloc_init+0x225/0x630 [ 157.847057][ T8598] htab_map_alloc+0x6ce/0xc70 [ 157.852258][ T8598] map_create+0xaa0/0x14d0 [ 157.857287][ T8598] __sys_bpf+0x60f/0x870 [ 157.862226][ T8598] __x64_sys_bpf+0x7c/0x90 [ 157.867430][ T8598] do_syscall_64+0xfa/0x3b0 [ 157.872543][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.879043][ T8598] [ 157.879043][ T8598] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 157.886957][ T8598] validate_chain+0xb9b/0x2140 [ 157.892417][ T8598] __lock_acquire+0xab9/0xd20 [ 157.897716][ T8598] lock_acquire+0x120/0x360 [ 157.903135][ T8598] __mutex_lock+0x187/0x1350 [ 157.908338][ T8598] pcpu_alloc_noprof+0x286/0x1720 [ 157.913893][ T8598] sbitmap_init_node+0x1e1/0x630 [ 157.919446][ T8598] sbitmap_queue_init_node+0x3e/0x4d0 [ 157.925430][ T8598] blk_mq_init_tags+0x110/0x280 [ 157.931325][ T8598] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 157.937401][ T8598] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 157.943818][ T8598] nbd_start_device+0x17f/0xb10 [ 157.949287][ T8598] nbd_genl_connect+0x135b/0x18f0 [ 157.954836][ T8598] genl_family_rcv_msg_doit+0x212/0x300 [ 157.960907][ T8598] genl_rcv_msg+0x60e/0x790 [ 157.966114][ T8598] netlink_rcv_skb+0x208/0x470 [ 157.971485][ T8598] genl_rcv+0x28/0x40 [ 157.975998][ T8598] netlink_unicast+0x82c/0x9e0 [ 157.981468][ T8598] netlink_sendmsg+0x805/0xb30 [ 157.986758][ T8598] __sock_sendmsg+0x21c/0x270 [ 157.991964][ T8598] ____sys_sendmsg+0x505/0x830 [ 157.997691][ T8598] ___sys_sendmsg+0x21f/0x2a0 [ 158.003078][ T8598] __x64_sys_sendmsg+0x19b/0x260 [ 158.008628][ T8598] do_syscall_64+0xfa/0x3b0 [ 158.013759][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.020171][ T8598] [ 158.020171][ T8598] other info that might help us debug this: [ 158.020171][ T8598] [ 158.030654][ T8598] Chain exists of: [ 158.030654][ T8598] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 158.030654][ T8598] [ 158.044598][ T8598] Possible unsafe locking scenario: [ 158.044598][ T8598] [ 158.052308][ T8598] CPU0 CPU1 [ 158.057756][ T8598] ---- ---- [ 158.063119][ T8598] lock(&q->q_usage_counter(io)#50); [ 158.068500][ T8598] lock(fs_reclaim); [ 158.075010][ T8598] lock(&q->q_usage_counter(io)#50); [ 158.082943][ T8598] lock(pcpu_alloc_mutex); [ 158.087448][ T8598] [ 158.087448][ T8598] *** DEADLOCK *** [ 158.087448][ T8598] [ 158.095599][ T8598] 6 locks held by syz.3.747/8598: [ 158.100619][ T8598] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 158.108818][ T8598] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 158.117791][ T8598] #2: ffff888024daf988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 158.129378][ T8598] #3: ffff888024daf8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 158.140702][ T8598] #4: ffff888142fe8a78 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 158.151668][ T8598] #5: ffff888142fe8ab0 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 158.162746][ T8598] [ 158.162746][ T8598] stack backtrace: [ 158.168722][ T8598] CPU: 1 UID: 0 PID: 8598 Comm: syz.3.747 Not tainted syzkaller #0 PREEMPT(full) [ 158.168742][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.168751][ T8598] Call Trace: [ 158.168758][ T8598] [ 158.168765][ T8598] dump_stack_lvl+0x189/0x250 [ 158.168787][ T8598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.168805][ T8598] ? __pfx__printk+0x10/0x10 [ 158.168828][ T8598] ? print_lock_name+0xde/0x100 [ 158.168850][ T8598] print_circular_bug+0x2ee/0x310 [ 158.168869][ T8598] check_noncircular+0x134/0x160 [ 158.168887][ T8598] validate_chain+0xb9b/0x2140 [ 158.168911][ T8598] __lock_acquire+0xab9/0xd20 [ 158.168936][ T8598] ? pcpu_alloc_noprof+0x286/0x1720 [ 158.168960][ T8598] lock_acquire+0x120/0x360 [ 158.168981][ T8598] ? pcpu_alloc_noprof+0x286/0x1720 [ 158.169008][ T8598] __mutex_lock+0x187/0x1350 [ 158.169025][ T8598] ? pcpu_alloc_noprof+0x286/0x1720 [ 158.169047][ T8598] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 158.169073][ T8598] ? kasan_save_track+0x4f/0x80 [ 158.169091][ T8598] ? kasan_save_track+0x3e/0x80 [ 158.169109][ T8598] ? __kasan_kmalloc+0x93/0xb0 [ 158.169128][ T8598] ? blk_mq_init_tags+0x85/0x280 [ 158.169149][ T8598] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 158.169164][ T8598] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 158.169181][ T8598] ? pcpu_alloc_noprof+0x286/0x1720 [ 158.169202][ T8598] ? nbd_genl_connect+0x135b/0x18f0 [ 158.169216][ T8598] ? genl_family_rcv_msg_doit+0x212/0x300 [ 158.169238][ T8598] ? genl_rcv_msg+0x60e/0x790 [ 158.169258][ T8598] ? __pfx___mutex_lock+0x10/0x10 [ 158.169273][ T8598] ? ____sys_sendmsg+0x505/0x830 [ 158.169292][ T8598] ? do_syscall_64+0xfa/0x3b0 [ 158.169308][ T8598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.169328][ T8598] pcpu_alloc_noprof+0x286/0x1720 [ 158.169356][ T8598] sbitmap_init_node+0x1e1/0x630 [ 158.169375][ T8598] ? __kasan_kmalloc+0x93/0xb0 [ 158.169396][ T8598] sbitmap_queue_init_node+0x3e/0x4d0 [ 158.169416][ T8598] blk_mq_init_tags+0x110/0x280 [ 158.169438][ T8598] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 158.169456][ T8598] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 158.169474][ T8598] ? kfree+0x18e/0x440 [ 158.169495][ T8598] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 158.169519][ T8598] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 158.169543][ T8598] ? sysfs_add_file_mode_ns+0x259/0x300 [ 158.169572][ T8598] nbd_start_device+0x17f/0xb10 [ 158.169589][ T8598] ? device_create_file+0xf4/0x1c0 [ 158.169608][ T8598] nbd_genl_connect+0x135b/0x18f0 [ 158.169627][ T8598] ? __pfx_nbd_genl_connect+0x10/0x10 [ 158.169646][ T8598] ? __nla_parse+0x40/0x60 [ 158.169662][ T8598] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 158.169687][ T8598] genl_family_rcv_msg_doit+0x212/0x300 [ 158.169718][ T8598] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 158.169744][ T8598] ? stack_trace_save+0x9c/0xe0 [ 158.169765][ T8598] genl_rcv_msg+0x60e/0x790 [ 158.169787][ T8598] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.169806][ T8598] ? __pfx_nbd_genl_connect+0x10/0x10 [ 158.169826][ T8598] netlink_rcv_skb+0x208/0x470 [ 158.169841][ T8598] ? __lock_acquire+0xab9/0xd20 [ 158.169863][ T8598] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.169883][ T8598] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.169904][ T8598] ? down_read+0x1ad/0x2e0 [ 158.169923][ T8598] genl_rcv+0x28/0x40 [ 158.169950][ T8598] netlink_unicast+0x82c/0x9e0 [ 158.169976][ T8598] ? __pfx_netlink_unicast+0x10/0x10 [ 158.170000][ T8598] ? netlink_sendmsg+0x642/0xb30 [ 158.170015][ T8598] ? skb_put+0x11b/0x210 [ 158.170033][ T8598] netlink_sendmsg+0x805/0xb30 [ 158.170053][ T8598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.170070][ T8598] ? aa_sock_msg_perm+0xf1/0x1d0 [ 158.170086][ T8598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.170103][ T8598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.170119][ T8598] __sock_sendmsg+0x21c/0x270 [ 158.170144][ T8598] ____sys_sendmsg+0x505/0x830 [ 158.170164][ T8598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.170186][ T8598] ? import_iovec+0x74/0xa0 [ 158.170207][ T8598] ___sys_sendmsg+0x21f/0x2a0 [ 158.170226][ T8598] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.170257][ T8598] ? __fget_files+0x2a/0x420 [ 158.170270][ T8598] ? __fget_files+0x3a0/0x420 [ 158.170286][ T8598] __x64_sys_sendmsg+0x19b/0x260 [ 158.170306][ T8598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.170329][ T8598] ? rcu_is_watching+0x15/0xb0 [ 158.170346][ T8598] ? do_syscall_64+0xbe/0x3b0 [ 158.170363][ T8598] do_syscall_64+0xfa/0x3b0 [ 158.170379][ T8598] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.170394][ T8598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.170409][ T8598] ? clear_bhb_loop+0x60/0xb0 [ 158.170426][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.170440][ T8598] RIP: 0033:0x7ff25918eba9 [ 158.170454][ T8598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.170467][ T8598] RSP: 002b:00007ff25a0c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.170484][ T8598] RAX: ffffffffffffffda RBX: 00007ff2593d5fa0 RCX: 00007ff25918eba9 [ 158.170496][ T8598] RDX: 0000000020008000 RSI: 0000200000001ac0 RDI: 0000000000000008 [ 158.170506][ T8598] RBP: 00007ff259211e19 R08: 0000000000000000 R09: 0000000000000000 [ 158.170515][ T8598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.170524][ T8598] R13: 00007ff2593d6038 R14: 00007ff2593d5fa0 R15: 00007fff916f12d8 [ 158.170540][ T8598] [ 158.748074][ T5867] block nbd1: Receive control failed (result -32) [ 158.748178][ T5870] block nbd1: Receive control failed (result -32) [ 158.792800][ T8598] nbd1: detected capacity change from 0 to 127