last executing test programs: 4m28.23286161s ago: executing program 4 (id=5555): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x1, {0x2, 0xff, 0x1}, 0x2}, 0x18) (async) setsockopt$inet6_mreq(r1, 0x29, 0x13, &(0x7f0000000500)={@empty}, 0x14) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff90}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) 4m27.535918872s ago: executing program 4 (id=5558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x9, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xde09c06f801dc930}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1001a29d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4894}, 0x42) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$cgroup_ro(r10, &(0x7f00000002c0)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000400)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000140)='-\x00', 0x101000, &(0x7f0000000180)={@align=0x8, {0x8000, 0x1, 0x8001}}, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x7fffffff}) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r12}]}, 0x40}, 0x1, 0x0, 0x0, 0xc040}, 0x4000040) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 4m22.743837188s ago: executing program 4 (id=5572): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000001c0)=0x2000000, 0x4) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0018"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000a0000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x47, 0x0, &(0x7f00000002c0)="b9ff0331894463eac0eddd39ffcee24a86d2763b8fda59ae6615d4afea0db6b030a550a0d2a5a3df4254dd3c0691dcc6c4de090d14a31a7e0900000000000000cadfcb54470e8f", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 4m21.702423892s ago: executing program 4 (id=5576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @local}) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400eeeddf54050000", @ANYRES16=r1, @ANYBLOB="01002abf7001ffdbdf2514000000180001801400020073797a5f74756e0000000000000000000800020003000000"], 0x34}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) 4m20.62613905s ago: executing program 4 (id=5579): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x70bd2d, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44040) 4m18.316196708s ago: executing program 4 (id=5585): r0 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401002abd700000dcdb25080001"], 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum={0xc, 0x3, 0x0, 0x6, 0x4, [{0xa, 0x1}, {0xa, 0xf87e}, {0x1, 0x5}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f, 0x61, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000040)=""/40, 0x46, 0x28, 0x1, 0x7}, 0x28) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x2, @multicast2}, {0x4, 0x4e23, @remote}, {0x2, 0x0, @multicast2}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='ipvlan1\x00', 0x8, 0xfffffffffffffff9}) 4m3.136567018s ago: executing program 32 (id=5585): r0 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401002abd700000dcdb25080001"], 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum={0xc, 0x3, 0x0, 0x6, 0x4, [{0xa, 0x1}, {0xa, 0xf87e}, {0x1, 0x5}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f, 0x61, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000040)=""/40, 0x46, 0x28, 0x1, 0x7}, 0x28) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x2, @multicast2}, {0x4, 0x4e23, @remote}, {0x2, 0x0, @multicast2}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='ipvlan1\x00', 0x8, 0xfffffffffffffff9}) 3m58.486952075s ago: executing program 3 (id=5620): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7, 0x8421, 0x9}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000080)=0x8000, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x0, 0x80010, r0, 0x16d89000) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='}-\x00', 0x141000, &(0x7f0000000100)={@align=0x1, {0x4, 0xff, 0x4, 0x3}}, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x8}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x9191, 0x8}], 0x1) r3 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000240), 0x0) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000005c0)={{r4, &(0x7f0000000280)=':&[.+*\x00', 0x20a00, &(0x7f00000002c0)={@_ha_fsid={[0x9, 0x8fc]}, {0x887, 0x7, 0x10, 0x9}}, 0x4625, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x6}, 0x2, &(0x7f0000000580)=[{0x3, 0x1, &(0x7f0000000380)='@@{\x00', &(0x7f00000003c0)="50f8a73232c7c80165b32635b8495df84bc0ca7323c5f98cd1ef65b49a9f0d1df6bda9d27f8e8e9b9d4efbdb4a65d91bd62882a623c606dc8814298a3621681437c28fdd9887087fd4993f43ec9691b383f15601f692d2c0908bfb2107c9b179466ed8fdf4d47e3d80c9354e8ac7c45bc8e28a08b11630059e7c07c59fcbebd3b7eb8b8d0dcc114058e8c68c2207e3a8b3c846bd9151c1f2c1298ba7b43dfc44b595a8aedb82fe608b70a7572660098947ba9d885ed8764c4839d98e545d63cd76cb4bf7b7089a001cbe336ddb1a095586b5f58ad1adc383a939c02282aae44714f800c1b39f79e281aef1eac0a80a12b10ac3add3cfc9ed9d", 0xf9, 0x12}, {0x2, 0x8, &(0x7f00000004c0)='\x18&^\xa0):.}.,]\x00', &(0x7f0000000500)="70b9d79f23c1052f8a97ed334c4bf7314416011d4f10f61dcc0d808f8e7ec8c2448f4746aaf772cb13c635a19ae26c043eeb4683fe07b19ef6de5c48bce26d84b1414b", 0x43, 0x32}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x1, 0x7, 0x7, 0x2, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x67, 0x0, 0x0, 0x29, 0x0, @loopback, @private=0xa010102, {[@noop]}}}}}) (async) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@report={0x5c, 0x20, 0x100, 0x70bd26, 0x25dfdbfc, {0x6c, {@in=@local, @in=@multicast1, 0x4e21, 0x0, 0x4e21, 0x0, 0x2, 0xc0, 0x60, 0x29, r7, r8}}, [@tfcpad={0x8, 0x16, 0x401}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8b}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x2000c011) (async) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xdc, 0x9, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'xfrm0\x00'}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}, @IPSET_ATTR_SKBPRIO={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x88}, @IPSET_ATTR_IFACE={0x14, 0x17, 'dummy0\x00'}, @IPSET_ATTR_COMMENT={0x8, 0x1a, '.}*\x00'}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000090}, 0x50) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r2) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x98, 0x13, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xfe745dccc957f436}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x2b, 0x8, "86209f9bf76ec0f54fdfebaa8b10866ef9be8b6897eb26cf49830a6cdb4987cda652ed4268453f"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x60, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', r7, r5, 0x2, 0x5}, 0x50) sendfile(r4, r10, 0x0, 0xfffffffffffffe6e) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x15, 0x12, &(0x7f0000000e80)=@raw=[@map_fd={0x18, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}], &(0x7f0000000f40)='syzkaller\x00', 0x2, 0x37, &(0x7f0000000f80)=""/55, 0x40f00, 0x20, '\x00', 0x0, @sk_reuseport=0x28, r2, 0x8, &(0x7f0000000fc0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001000)={0x3, 0xb, 0x80000000, 0x1}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, r5, r10, r10, r2, r5, r10, r2, r5], 0x0, 0x10, 0x800}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x80049367, &(0x7f0000001140)) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x1b, 0x5, 0x4b8, 0x350, 0x0, 0xffffffff, 0x1f8, 0x1f8, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, &(0x7f0000001180), {[{{@ip={@multicast1, @multicast1, 0xff000000, 0xffffffff, 'rose0\x00', 'pimreg\x00', {}, {}, 0x5c, 0x3, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x5, '20', 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @multicast2, @rand_addr=0x64010100, @gre_key=0x6, @port=0x4e23}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'nr0\x00', 'pim6reg\x00', {0xff}, {}, 0x88, 0x2, 0x18}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x81, 0x7fff, 0x1}}, @common=@set={{0x40}, {{0x2, [0x7, 0x9, 0x1, 0x4, 0x0, 0x5], 0x2, 0x2}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@local, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x64, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc, 0x2, 0x1}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv6=@private0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x65, @port=0x4e21}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x7}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x3, @private=0xa010102, @private=0xa010102, @port=0x4e24, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) sendmsg$key(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001740)={0x2, 0x1, 0xff, 0x2, 0x3c, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_sec_ctx={0x8, 0x18, 0x1, 0xa, 0x37, "c2d47c8d85fad0321ffee21c4045391845d0cf191b32a797aa338ae5abb21dbd34b8d566edf35841a57d21158e61eb3a737afb652eccf7"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e23, @local}}, @sadb_lifetime={0x4, 0x3, 0xffffffff, 0x921, 0x2, 0x5}, @sadb_address={0x3, 0x6, 0x6c, 0x80, 0x0, @in={0x2, 0x4e21, @private=0xa010100}}, @sadb_x_sec_ctx={0x19, 0x18, 0x7, 0xe, 0xba, "95565c40866f98b7f23f590d61335f5d88c91a03289a36da2c5f266cdd6f7badb3e2269d36b0996e1a2e2999a8f9e6aedf1a750deccba12b209c223ac5c64b685b024311d3d21bbbef6cb03d6dd396dfbbde4cfd5ccd9e5ee0b8814f91850cccd771a9a36cc40c68cf18a14660e3b5748e3b1ed1d1c383508e5fa55608f8e5f495974ba9ed9cae218a83063ed4b667b183a5043819978627ec9ce4ba86d8c33182b49333e0b1323d02734493348999849f4203523af6075cc80f"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x23, 0x65, 0x38, 0x2, 0x190000000}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private0, 0x8, 0x4, 0x14}]}, 0x1e0}}, 0x20) (async) sendmmsg(r5, &(0x7f00000019c0), 0x0, 0x1) (async) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000001a00)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000003cc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x26202440}, 0xc, &(0x7f0000003c80)={&(0x7f0000001a80)={0x21dc, r9, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfe, 0x4, "4cfde778375d49f8e37e8eb9bc60e2ff88776b853922a33d005f72c899539a134ee7adee4bc0c22fa5e6f1b2978b76abf92f868a6bc5e2db1755255a2e76d87ab898eceab4b4851cfef50246d541fb93684fa407d4609d39ba14ad3eb450171c2d7ee14a70b51bb87561db89f048e895e726f7b3ccdb611eaf88a9acf176388d838b8763500bfaa1975cdbb3043f7bb9c87b0873e0721c2949db8fe742556718b97dd9e614a9bede81d284b66416d93127f0afa362b544f7e9f635861ae4ae0bac09bc1dc120f82ea7079dfed07fbc37ae335e7c6a7e24ebc5dcabace2d9046258c0219e0f63ec60dd0101d159db41f40d5b39655b836c1c8384"}, @ETHTOOL_A_BITSET_MASK={0x67, 0x5, "96cc5cee73578fd85c7f8fab203e5483b83df2703a0f0fb9ee24db1e4d0f3efaa267acf721c7da1797ad34f516b032e7f38205b2220d5ca89b902c19861134a2b203056c0d5b942e33cf8d095f76db69eda5cdcd7d7276b08aaf37919a39991ad8c43f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe1e4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'REDIRECT\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x21dc}, 0x1, 0x0, 0x0, 0x50}, 0x50) (async) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003d00), r5) 3m57.883242774s ago: executing program 3 (id=5622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x576c525ee4fbf232}, 0x4000000) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000140)) r2 = accept4(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000200)=0x80, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x1a, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4a}, @void, @val={0xc, 0x99, {0x7fffffff, 0x37}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x48000) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xc}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0x60}, 0x1, 0x0, 0x0, 0x28090}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) vmsplice(r3, &(0x7f00000006c0)=[{&(0x7f0000000480)="4628319535cafd08bc3a3de6be77f7f5173016e89df71a6cd90c3529c6b76f05a6220fb0713e021da0eb62155c8b08952549ab464280fc7fcf93e97d9f795c665ab57392c7c332150bac9799c83e0d0d6037c56f6af8a172a6abc4e7fcff7f796b80a9d5521a149872a025c3a72838787ca753bdb0ea662555c1cd8b4397138377f6379208361dd9f8f2dd5f75ef63ab510c460768deed2e4edf619328a750a8342682443807155ef0d68b4ad53b960a090eda1342e395e897e155b44fce8b887ed3c9ec34d29b1a75c86c349f7f1d79c0636739156d4bfa41979f80bcd6fa48aeb86883", 0xe4}, {&(0x7f0000000580)="f6953d4a690f11fce8300fd678daa5956789db2ebd5b0a7704ead5586d9d5f3530580ef0245dc37324a0ce3966fe73555c63797bd96d49507391eaa79f8dfcafbf63c2d471d52564e9f640209d41a3ed41ba94cad9a6e360eb873b518b993d0a25378ba026ff15c31c009a702c1cae19b1f57d387e9fbf5660fa4e5c928e19d1641f51d86feb46cc95577b3b750d11e55df0359deb063377e42f5a4b2e", 0x9d}, {&(0x7f0000000640)="e448ed89e494423738c0e167149e5a6cead801f984b91cb393c7d602667909c74c15375e080904529c7ddb23eb177fe9501693e24313cc0b23b8b3ed36d8cf63d023aa098a688c11", 0x48}], 0x3, 0x5) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0xb1399772ced00313, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000740)={{r5}, "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"}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001740)={'dvmrp1\x00', 0x0}) r7 = socket(0x2a, 0xa, 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f0000001780)={0x0, r5}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2001020}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x40, 0xd, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800fb394405238c}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000018c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r6, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5ae, '\x00', r6, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@bloom_filter={0x1e, 0x6, 0x1, 0xff, 0x40008, 0x1, 0x5, '\x00', r6, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x7}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b80)={0x0, 0x8, 0x10}, 0xc) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x18, 0x3, &(0x7f0000001940)=@raw=[@ldst={0x2, 0x3, 0x2, 0x9, 0x1, 0x40, 0xfffffffffffffff0}, @map_fd={0x18, 0xa, 0x1, 0x0, r9}], &(0x7f0000001980)='syzkaller\x00', 0x1, 0x77, &(0x7f00000019c0)=""/119, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=[r10, r11, r12, r13, r2], 0x0, 0x10, 0x7f}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000001d40), r7) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001fc0)={0x6, 0x15, &(0x7f0000001d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3ff}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x56}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x7, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x8000}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000001e40)='GPL\x00', 0x7, 0xcf, &(0x7f0000001e80)=""/207, 0x40f00, 0x34, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001f80)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000020c0)={'erspan0\x00', &(0x7f0000002080)={'tunl0\x00', r6, 0x20, 0x1, 0x5, 0x3, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x65, 0x0, 0x5, 0x0, 0x0, @empty, @rand_addr=0x64010101, {[@generic={0x88, 0x2}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002100)={r14, r15, 0x25, 0x0, @void}, 0x10) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002180), r2) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x4c, r16, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0xe}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x4080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002380)={'syztnl2\x00', &(0x7f00000022c0)={'syztnl0\x00', r6, 0x7800, 0x80, 0x8, 0x2, {{0x1a, 0x4, 0x3, 0x3, 0x68, 0x68, 0x0, 0x6b, 0x0, 0x0, @empty, @rand_addr=0x64010102, {[@lsrr={0x83, 0x17, 0x33, [@broadcast, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback]}, @end, @timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0x7, [{@private=0xa010102, 0xa99}, {@local, 0x401}]}, @noop, @ssrr={0x89, 0x27, 0x46, [@multicast2, @multicast1, @rand_addr=0x64010102, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000002440)={'ip_vti0\x00', &(0x7f00000023c0)={'erspan0\x00', r17, 0x98, 0x40, 0xfff, 0xa153, {{0x10, 0x4, 0x3, 0x26, 0x40, 0x66, 0x0, 0xa, 0x4, 0x0, @empty, @loopback, {[@ssrr={0x89, 0xb, 0xec, [@private=0xa010100, @loopback]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x80}, @timestamp_addr={0x44, 0x14, 0xbc, 0x1, 0x2, [{@rand_addr=0x64010102, 0x400}, {@private=0xa010100, 0x4dc3}]}, @noop]}}}}}) 3m56.924246597s ago: executing program 3 (id=5623): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x1, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) unshare(0x20000400) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008"], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000780)={0x2cc, r9, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2b8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\'{[[[!!${]*)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+\xcc%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c48}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '}-\\}T+(]([-\\-($/{$!&\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "a3e577f878981792f4472a180430b3fca585302be9adcdce3791c24caa901df117f515e07780a59688d8c6f9c3a4d9584ad24a22202e333232d815a59c402a3479f3f64633909cdf309ae2d9c7ad09088626f7a4d91783de956a88e0a802c5eb74fb9c8cf885aad64fd66bee2b8581633449dc8314ccaa52340c2a83168b078ce15b92c1ed6785ad6e122bad92d7da597433083010089049afc54a93f4f23add184c0e6b91af2c385b225b4137920a2cc6810c9918e2a65be7f59dc5cd9eb18e187e0b6ca8c8aa253348a3c9de1ae6d6c71f2019a7f4eb6300bcddbcef"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "813f449bbd8f96fac5caf0f3240f60c328df568be2e3818ced8d5b0c59d2901a36a0f723698803"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xef=]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[^$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x559}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r11 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r11, 0x0, 0x100000, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) sendto$inet(r6, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 3m55.587565786s ago: executing program 3 (id=5628): socket$rxrpc(0x21, 0x2, 0xa) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x20000050) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x84) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xa0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x34, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}]}, 0x34}}, 0x0) 3m49.186040189s ago: executing program 3 (id=5635): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) socket(0x2000000000000021, 0x2, 0x2) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa0028000}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1800000014006b05c84e21000ab16d6e230675f811000000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x5f, 0x30, 0x30, 0x0, 0x5f]}}, &(0x7f0000000100)=""/85, 0x1f, 0x55, 0x1, 0x1000, 0x10000, @value=r3}, 0x28) socket$kcm(0x10, 0x2, 0x0) (async) epoll_create1(0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) close(r2) (async) socket(0x2000000000000021, 0x2, 0x2) (async) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa0028000}) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1800000014006b05c84e21000ab16d6e230675f811000000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x5f, 0x30, 0x30, 0x0, 0x5f]}}, &(0x7f0000000100)=""/85, 0x1f, 0x55, 0x1, 0x1000, 0x10000, @value=r3}, 0x28) (async) 3m48.392719262s ago: executing program 3 (id=5638): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) r0 = socket$packet(0x11, 0x3, 0x300) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)}}], 0x1, 0x8000) 3m33.088174404s ago: executing program 33 (id=5638): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) r0 = socket$packet(0x11, 0x3, 0x300) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)}}], 0x1, 0x8000) 3.107960921s ago: executing program 6 (id=6872): unshare(0x28000600) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000700)={'erspan0\x00', &(0x7f0000000580)={'ip_vti0\x00', r5, 0x10, 0x10, 0xc, 0x4, {{0x4c, 0x4, 0x0, 0x20, 0x130, 0x64, 0x0, 0x75, 0x4, 0x0, @private=0xa010100, @loopback, {[@cipso={0x86, 0x4a, 0x3, [{0x7, 0x11, "3c35d5eb28648b8155d5e3b6d1d41d"}, {0x0, 0x4, "46b6"}, {0x5, 0xf, "c3803f3a48e309c3f48cd2729a"}, {0x2, 0x4, 'F\\'}, {0x6, 0xe, "ac501fc2a8e7da8cc5b304c6"}, {0x7, 0xe, "ec1f28912a3ce3c8ba7561dc"}]}, @ssrr={0x89, 0x1f, 0x6b, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp={0x44, 0x8, 0x13, 0x0, 0x7, [0xfc8]}, @timestamp_prespec={0x44, 0x1c, 0xc6, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x6}, {@multicast1, 0xffff8001}]}, @cipso={0x86, 0x2b, 0x1, [{0x0, 0xb, "ab2675761ccf068267"}, {0x7, 0x3, 'B'}, {0x0, 0xe, "0aaa420ce5c3ede6d63efdb0"}, {0x6, 0x9, "f13c8a560eae9b"}]}, @timestamp_prespec={0x44, 0x34, 0xf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast2, 0x2}, {@broadcast, 0xb}, {@multicast2, 0x6}, {@loopback, 0xdc}, {@multicast1, 0xb0}]}, @timestamp={0x44, 0x1c, 0x12, 0x0, 0x0, [0x3ff, 0x1, 0x0, 0x0, 0x3, 0xcf48]}, @rr={0x7, 0x13, 0x30, [@broadcast, @loopback, @multicast1, @remote]}, @end]}}}}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.910508583s ago: executing program 6 (id=6874): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f00000001c0)=""/60, &(0x7f0000000200)=0x3c) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x880) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x8c, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb7dd256967c7126}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x5, 0x7f, 0x3895, 0x4}}]}]}}}]}, 0x8c}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.894223119s ago: executing program 1 (id=6875): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f800800014000000200080008"], 0x4c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffff7f}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.788115143s ago: executing program 0 (id=6876): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, 0x0, 0x20008890) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b56b900000000"], 0x20}}, 0x0) 2.737902377s ago: executing program 6 (id=6877): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002f8fe87a45bd7000010000000400000004001900"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080039030000000000000000000000000000b4d09b2087ec87970b41e76f5e980270d55717649ea62e5506a2839737b7418977a20b7953583dc11a439112d21b9e6865a18e7f02c6cacfccc5be80a7e1a09ccfbe0c702c4b0bfa4508a5c093e31b51083c3de72a4c8384", @ANYRESDEC=r1, @ANYBLOB="48000280"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 2.483387714s ago: executing program 0 (id=6878): sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="c8", 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xb44c, 0x700}, {r1, 0x2187}], 0x2, 0x403) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x210, 0x100, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@broadcast, @loopback, 0xff000000, 0x0, 0x1, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="51ac3a9fea72", {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x4, 0x5, 0x7, 0x7, 0x7, 0x300, 'wlan0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "5daebec57f2164811045513c3cc921a8e3e6709afbc7f694047d4eb7443f"}}, {{@arp={@loopback, @multicast1, 0xffffffff, 0xffffffff, 0xd, 0xb, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x4, 0xffff, 0xd, 0x8, 0x4, 0x35bd, 'dvmrp0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="db5bb883bbf8", @mac, @remote, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0xb8e04000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100273d7000ffdb7132172f0000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000000700000001000000180000000000010000000000000000009500000000000000970301000007000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000183000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="c8", 0x1, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xb44c, 0x700}, {r1, 0x2187}], 0x2, 0x403) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x210, 0x100, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@broadcast, @loopback, 0xff000000, 0x0, 0x1, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="51ac3a9fea72", {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x4, 0x5, 0x7, 0x7, 0x7, 0x300, 'wlan0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "5daebec57f2164811045513c3cc921a8e3e6709afbc7f694047d4eb7443f"}}, {{@arp={@loopback, @multicast1, 0xffffffff, 0xffffffff, 0xd, 0xb, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x4, 0xffff, 0xd, 0x8, 0x4, 0x35bd, 'dvmrp0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="db5bb883bbf8", @mac, @remote, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0xb8e04000) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r4) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100273d7000ffdb7132172f0000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000000700000001000000180000000000010000000000000000009500000000000000970301000007000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) (async) mmap(&(0x7f0000183000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 2.444590298s ago: executing program 6 (id=6879): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) unshare(0x400) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="280320ff6900140000007ef506be000000020000000088fb000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX], 0x10b8}, 0x20000c00) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x9) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7fff, 0x80000000, 0x3, 0x7de, 0x8, 0xd06, 0xae, 0x10000, 0x2, 0xe4ef, 0x6, 0x1000, 0x9, 0x7, 0x5, 0x9, 0x8000, 0x5, 0x4, 0x3, 0x8001, 0x80000001, 0x5, 0xd, 0x2, 0x0, 0x4, 0x6, 0x1, 0x8, 0x5, 0x10000, 0x2da, 0x4, 0x1, 0x0, 0x1ff, 0x9, 0x200, 0x8000, 0x7ff, 0xffff, 0x7, 0x65, 0x100, 0x6, 0x9, 0x4, 0x5, 0x5, 0x36a9, 0x5, 0x8, 0x3, 0x4, 0x7, 0x80, 0x2, 0xffffffff, 0x101, 0x1, 0x8, 0x8, 0x8, 0x4, 0x0, 0x3, 0xe9, 0xd, 0x8, 0x0, 0x35, 0x3, 0xd, 0x2, 0x28000, 0x254b, 0x5005, 0x5ecd715, 0x1, 0x5, 0xffffffff, 0xfff, 0x7f, 0x8, 0x800, 0x5, 0xd5, 0xaf, 0x8000, 0xe, 0x0, 0x2, 0xffffffff, 0x7ff, 0x9, 0x4, 0x1, 0x3904, 0x7, 0x1000, 0xfffffffd, 0x4, 0x7, 0x0, 0x1, 0x9, 0x0, 0x2, 0xfffffffa, 0x4, 0x0, 0x10001, 0x82f, 0xd117, 0x2, 0x2, 0x27, 0x5, 0x8, 0xd, 0xfffffff7, 0x7, 0x3ff, 0x0, 0x2, 0xffffff97, 0x3, 0x1000, 0x3, 0x5, 0x8000, 0x1, 0x400, 0xfffffff9, 0x4, 0x8, 0xffffffff, 0x98, 0x3984, 0x7, 0x3, 0x2, 0x9356, 0x3, 0x6, 0x7f, 0x7, 0x8, 0x8, 0xb61, 0x6, 0x0, 0x3, 0xdfb, 0xf, 0xb, 0x8, 0x0, 0x9, 0xd, 0x0, 0x8, 0x9, 0x5, 0x63fc, 0x9, 0xb893, 0x9, 0x40, 0x6, 0x2, 0x6124, 0xc, 0x74, 0x1ff, 0xc4dd, 0x101, 0x3, 0x9, 0x69, 0x4, 0x637, 0xff, 0x0, 0x2, 0x8, 0x3, 0xffffff29, 0x7ff, 0x3, 0x8ea4, 0x49, 0x0, 0x4, 0x6, 0x6, 0x1, 0x4d3, 0x8, 0x3, 0x4, 0x1aeb, 0x3, 0x4df85c2d, 0x10, 0x6, 0xffff, 0x93d9, 0x3, 0x78, 0x2d9, 0x7, 0x5, 0x3, 0x0, 0x2, 0x1, 0xa7, 0x8, 0x8, 0xe000000, 0x8001, 0x8000033, 0x9, 0x80000000, 0x6, 0x9, 0x0, 0x4, 0x7f800, 0x80000000, 0xf5cf, 0x1000000, 0xf, 0xfffffff7, 0x0, 0x6, 0x8, 0x6, 0xfffffff7, 0xfffffff4, 0x8, 0x4e7c, 0x800, 0x3, 0x5b0, 0xfffffff9, 0xfff, 0x96, 0x7f, 0x5, 0x1000, 0x80000001, 0x800]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x46e, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x100005, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3fe, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffffff, 0x3, 0x9, 0xc, 0x5, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x7, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x40005, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbba, 0x8000, 0xf, 0xf, 0xe, 0x3, 0x67, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c9, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x7, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x100710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x2, 0xe, 0x10003, 0x9, 0x9, 0x7, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x2, 0xdbec, {0x8, 0x0, 0xb55, 0x7, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x40885) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x9}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r11, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2.397740456s ago: executing program 5 (id=6880): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$FICLONE(r0, 0x40049409, r0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) close(r1) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0xc, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="e8bc86215a5500cca5322936bfc8c6ee96896e8db11fdecf95e01485cdf5b6571c145a56aaf13f59c79a3a53f424081fed7ac4bcc2f9f40f8c6b462b31d84898a99a342ee13400a674004294814024dae21a0c487afc039af150aecdb97b426cf44fbcc541c756927500ad4d6c8125ac2faa8da7f474f969e828356313cd6c4c3c6d15a2591e2bafcc506472a3a03cdceeb5a2acaa7487be6b561d06c729447337002edb93d9562219dcd9c81cba3f5f044c6dae9a3abc79b5cc96", @ANYBLOB="0000001400b702000014000000b7030800000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700f7ed7b16d8e6345066940000000000", @ANYBLOB="18000000000000000a00590b3d000000000000181100004d1a99978a68ff93e0a416c34d9dca0d9e177cdfa9eca71f9eb4c01827cc90c8f373f072bb8b4479d694a086dcb6937864e0a5ecdedc1b40c098c9c99beee156f34f6e0bbbbf7670", @ANYRES16=r4], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000c80)={'veth1_to_team\x00', &(0x7f0000000b80)=@ethtool_gstrings={0x1b, 0x5, 0x6, "dabf086af83c"}}) (async, rerun: 32) close(0x4) (async, rerun: 32) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f00000000c0)={0x80}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000100000000000000600000964634048843570e554800500000000"], &(0x7f0000000380)='GPL\x00', 0x1, 0xa2, &(0x7f00000003c0)=""/162, 0xd31ac48a2b4a85d8, 0x73, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x7, 0x3, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000010c0)="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", 0x1000, 0x8001, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) (async) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/226, 0xe2}, 0x7f}], 0x1, 0x1, 0x0) (async) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e20, 0x200081, @mcast2, 0x7fffffff}, {0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0xffffffffffffffff, {[0x2, 0x8, 0xfffffffd, 0x6, 0x800007, 0x4, 0x800007d7, 0x1ef51ae5]}}, 0x5c) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl(r8, 0x8b32, &(0x7f0000000040)) (async) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.396742475s ago: executing program 1 (id=6881): clock_gettime(0x6, &(0x7f0000000340)={0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) pread64(r2, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async) pread64(r2, &(0x7f0000002200)=""/87, 0x57, 0xfffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x46, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRESDEC=r6, @ANYRESOCT=r6], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x1) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x46, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRESDEC=r6, @ANYRESOCT=r6], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 2.207905141s ago: executing program 5 (id=6883): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/209, 0xd1}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000067080000feffffff180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000b40)={&(0x7f0000000200)={0x1d, r5}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x0, 0x4, 0x80000e1, {}, {0x77359400}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1}, 0x11, 0x3, 0x0, 0x0, "a888fc080ecb8b68230093bccbd6342b29cd34f5bc312fc0f07159f5b0a103971bfda89fb8c7f2a7b14648e6ed99b8a6e03c41cb509fb202c44244f673a2b792"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newtaction={0x310, 0x30, 0x51b, 0x0, 0x0, {}, [{0x2fc, 0x1, [@m_simple={0xa0, 0x14, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x2, 0x401, 0xa2}}, @TCA_DEF_PARMS={0x18, 0x2, {0xb49f, 0x3ff, 0x2, 0xfffffffd, 0x7}}]}, {0x42, 0x6, "053c909a8c7dcdbf0fc463c19fc7c515ab0ccb71aed6072650f7f6936278caae5dcb6f96cacfc3eb098b06d22a85f267c7d6f18023fca7bf9cdfae650da1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x204, 0x408, 0x0, 0x0, {{0x7}, {0x1b4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xffffffff}, @TCA_IPT_TARG={0x78, 0x6, {0x7, 'mangle\x00', 0x3, 0x9, "91c36897e9b8934e685354466600d9114b9b8d7467542c37c01f94d2749d5045b4048997dd44672c39289b3b0c41643d7ab4a0b7f18a0fc703c17d6aeeb49ddedfdc010ce8e0c4aea2f04caed06d"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xb9, 0x6, {0x2, 'filter\x00', 0x0, 0x8, "d5f2bcb01c3baf63526f036ed79221930aba34664b960a323603f2704aaebe5e549903d3f0b314ef91b40f4ba9fea89d754d7f3b618b7e20f049e7b61be64364c6286794bd5dea9aff0156e403ba2a8973b2e45b48f3a0f93f55df6e27d5af1cdf6cde04030792e54103bf145b8e8249a47d369c11735ee344b545302013e32add008dc4d5f9d25429c509a2a29626"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x2c, 0x6, "c88060ac758d2f9ce088835e4acc3805f3f50a6aee1036bc221abab35b611d264d4dc3cf15000044"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x310}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x20008000) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000006c0)={r6, &(0x7f00000005c0)='+{^&+:-#:\x00', 0x208000, &(0x7f0000000600)={@align=0x3, {0x2, 0x101, 0x1, 0xff}}, 0x8, &(0x7f0000000640), &(0x7f0000000680)=0xffff}) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000800), 0x4) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a3100000000090001007379008000000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028008000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000084040000000000000004000000685890dcbe54fed3cd"], &(0x7f0000000f40)=""/4089, 0x35, 0xff9, 0x1, 0x5}, 0x28) r11 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c00028006", @ANYRES32=r12, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r10], 0x68}}, 0x0) 1.953894049s ago: executing program 1 (id=6884): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000200), &(0x7f0000000240)=@udp, 0x1}, 0x20) sendmsg$alg(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000500), 0x1192, 0x0, 0x0, 0x4000080}, 0x5c189) accept(r3, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r7, 0x0, 0x18, 0x0, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xdd204690f20f8277}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.719858045s ago: executing program 1 (id=6886): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$int_out(r0, 0x5460, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @loopback, @mcast2, {[@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @dest_unreach={0x1, 0x0, 0x0, 0x8, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x33, 0x0, @local, @loopback, [@routing={0x2b, 0x0, 0x1, 0xf}], "a542e5fa78122afabe978693aab29d1466a08191331ab6a877ada0ba71547993040b10059bd34a8b75294b0923a60f1fb92185b6f684546c90065735ecd57d7d08c3b4f700b561a165be3b70f5708ad409f217ed6af01e38575352a8c2ea616803b11bf27a5a897a351022d0cbfbe26f30b3ab4e3a6f4253d5cf238632ba4115fbcacf020fd669b418bff577c51abf913317f857712c3d4734aa2f0dfdfd67c1de45cc09f7d560c395460a2a172b3c55cd9bcf7ebfd6763f961b5930f9280e156efdc6141ea07715d5af19c9ed06a53651a47aa5c52d8ff986c66d719c19088d4627ff684f19b24b6e6e9605c8a93df75154a96ee4db03442d71d423ae8c16b4106941048aaab26760c88cf9b2cddcd078641bfe5c645197c5ba125531be11df5a44801774c5539d136ba2032fbfcc52731f9713060fa4ad8f6b45b245da43d30117c2b132ed23eac46b5193978f893158020056a63a460d8204f02c26ea9dac9a739f166884691f551084b8ae09965499ddbf57f35eacf411d84b6d13be8d953eedda4d32ad55543fd14d70809120f1ca942fb67d116642297cf78b6ca6f47089fb3ad10af09982551b6ab3c0f37a3e73e875220480c34b1746a98e551f4346706920c1f40dba48a6a3df76333178cd860232e4d52cbc9775fcb9785d5bd3df133756e4745e7e343bca8697fcf302178020df677a83b4473ecc42bfa8e6a50c8b79b315c1eb849fd713374d2b2dae2a60e1592baaf6ee9814c4b42e059094418d206392e9fb225922052995f932f454fd75cc7af9e13f28db47956289701273a411355f34f4677daa0d4fb8d87e2a49d3fc2d5670284c7cf2c622049eaafa2f743dfc7868d03505a409979adfc4ff044d1c04d2311f2ce1cdf5cbf50d289d9b5faae35b2b3de9211d5de16e1422dd47b6c4a4d0d28619e55a96063a46fe0f29b47e8c306cdfb3cb0064ecedfcf67bfe63a0e8a4c12929f0d6a7c32d9e225c7df08fdaf07d8dfbf85b3a167589378f74fa1bb75b3136619017c92a113075467498560442ba3fe1d5566b737e921dec06f60c8ec711b1a6b3df6ad7849564b4e05c4d29d73cda474a8e48f65aebe43c73a85af773eb382a1aba314430753a421d2827f677cc210cc4472e8ea235abc6e6e508c628bf78f5a9208f77c6ae02c03b7bfdde1b94ab2dad96714c5d0cc66763c74e7f1a3a373994ee7e30fd45ef323bb31400b701238fac457ec0d4d17b7b7393903b59dcba68fabfb65ec959f1a35948cd34799784bc3f4c6ff9fbb5da7a11bbf7bee96acfeb788d620f274858f6de5f7975d6bdf570de50ac2a9ecacf30672cb4d5326ab2ec36d0f09113d799a3167202b751292a497e015a6071373576f55bb0e6ce4f29820cd1a6a7293317ccce61d468e908868ba061653aaba351661008c70d825421810a524ef6df25878e750130dd99b8aa34fbce491e98770fa328c9d26f2d5800255e9037d74c7a2e2bacdcc81cec81a681d0be9aa77761ed07c91f5b0bcca388b881c001a6ecfd098ada1d3bed3b873ead3073a62774b9b019415b5b64589f48f36b79d930f544b2d3f3dd7b634105bfd710a825cb5c2bf41a931c0c3fabaef0bba470faadc56466bc0894f7222454ff138bffe94b58fb4d45a1cf14482d5bd7ac9887e2d2826bc74d1f22f056f2ded24c9586dd1be8a573a1c9da8dd0e5ff0a7263a473b1c948c4fea4a5282d3e039fb89140688b70d7d69ef13276d5e871550c1674cd506e9ad4d0d5a03e0b120c384b9f6ab315bc4c105f839206a53a6f226ce637689f81aab37a1b8f94f7796107ed826f3f3bf3d6a086f216ead59fc3e19a0aa39177bcbad38d94b7a4c3edbb53f88099a6ac618409a225c893244d22e236989ae9acd7eda7619f1f249dc60b855e0fec347f3909e90f80e6ac03feec2df18c9b4b2abcd96e90768e8433a133e69381b370341bd980257b4ed4ee4f7a2fda9142ed5540966d1142bb13840cccbab402d2ff9ce3702b4ca2115b20e29d4aa8341a77affa5abc88c09ead30ddd988844309d33fde48d32b156da20b912a17663b14b6db60d7d7af55dedb45d1088eb6b7e264478344c4389234e18209f86c9a77479f31e5617a30e6bf67f06c6c2d9558866dc9054814e58bcd5e2876e1f7b1d80279da5e1442eebffc07dc6330e000bd9361066950da1ba6cf64c7622c4e3ebd730152138d79b6f8f4cd3cfeca0c5f9c650303aef130c9e9449e7212163d60ca2741cfdf7951d804fa317d2cd4ae8397fed494502853b869672ca6f1e78d8fb05de313a4c0985f11b1c345bba92028bfd6b9e3a2cc7c975a48feb28ba1584523b88bbdaf4a052d01446ac06ff5fb00982ce965b72e9e37319ec7df2895843c750379eb99ecfa0569defe96a8204a7a1cda42eb69aa74fde31c0305d026ccf3fe1d3ac984901cc70890d0e3115001280f60e0130655f26bcb611e86f4c1c43327b18f2aace900cccc8a5606d7090cf7996093f72d32a71bfffb07954b4419c61c3a59ef35cd9533087c245106482d8d37b61d627fd1b60cc94ccceddb6da244a530442b4f2e4f7ec0cffca2cb02e4df7e25fe7229ea2b6be96ecab5ad54d623d369b5719d82c206692850b07e4a61dcca7d3cfd1bf0d8d46a0a9f6ced4f4094ba009e553f03a36e47fe5fa608f9d40fffef99d6e945468a75fc8663099c432bcb514d769e7559114ffe0beb6ddf9ad9dec965ec41b9ec2af69468b7e3512c949a82d8c1525f8f3d56553b8deaadf39328a983b2f483fb7bec16e1fc82d512d6156805ffc4d83bea8c674fa439b6b94ea76f5155a305b59715dd7f205d402b936afdb620a973663527dfe62a52af76c605264d729ad735a3dd27ab39a321b1401211108d52e9bb68baad2ce46ed3c85ccff07a383809f9aaa1aa88b57c1eaf69a1ee917e3a57800beba4919ef66a235a260978c76f1367e2b3a151069b379c5c261d56e3d4a31a122a515f3722dbe92eaa4032bab9b2684ed3c850c79276fc3adf44579a125ede97d172e7029dcd4ffe281c0608a6191e4a3eacc5c1d2563792820142ac6363fc3f7f4238852d15fce090cf54fb67ce3e4355ee701d02ab3f64011f9945659291f0252712948c91d5c4926f1728e9a517f9a583fc2d75773da4f10cbd28738de20d2cb05b9ca5a3fed2accf4ba7cb416f95338a1ada4691fcdc06322c009fa832b7dc7f9dee155941c3bf54626d4e47aa98d3eebe0ebfd7ebebca7f11e75e95dd9f81dbbd5359ed9bce1a55fc7938c7e79e84bdb2fc0b3bc7c77909b9fec954d0013b718e99067d47bfca810297d32cc34c6d092b855fba9d4b0bb53325b06fdf346d09a8290fa72f36bcba1584167bbf1a0e32e6aa7b3ba10569033067884fe671caf7195710bf0334f1fca6d76cc86ba8e49e5fc36f4011f42f6c475636f698df193b4f91c4b735b6b781736b978fcfe6ad49f8e5d90339cf494541f27e2ad4a86ba69eef6864880ae23d1db5353e67fbfbc494ffe3cd268fc430c5562c8c145ff7042904274a863d948ae2a76dba175809b3136539e9cfca23fa45ea1c2552bf943f7687b9e06bdaa66c1f6eba8cd3294c4437804041eddc469815b4cdde8501ee0f7ba8bcb36b14944d31066a5a11c9b562d840296cc4b1362054c15174b27306d362ebb3c4896e37cb5f5c037fece5dfba91ecda3111b1bc80a2ab0b3a61ea2b53347d34d581a3715928cefde613bd5b18424b4ac1e74247cd48676ed1e379c73a17547d439871f6e43b697181fa871b53ad9675c029a423827ae02eedd4564c753d552e939a38fea733b6699ed94b816b42eac960135cd30e65480fb1a1f9370d801ac1c232e3107c00fba5e778a870bc6d3066659e674e39d82f1414d6396ee2c731cd33cb4eaccb386b704bd7530bbdc6fc5a5edc093ed637460b6af9969b4239407b35c95f9a78f5adb85b68a8ad045c7833f9456cfa3fb185004b7df8515ed9c3121506804b5dc1fe5ae4d72b84ea3cf120f9575d205276a5934d683e7911ff7de4283f718082c71f02c109e5fe20aea97dafa090a163ccff053636c8657ca9a7451bf5d1051feef1f3b6d234d8e962f45520c14b2283408764da859499196c9c39e58f02974446812e557068367a37228f450b127ab0e304be418336f9aaecb313bd7ff326251a4e0cf13a426078fb9c0fcbdea5ed32cce42649d2465529945291f996d016e9927bc3ceccaf2b1eb7fb5562c89ce741e4884a8b5843a08a147ef0699a9063f41044f87fbcbad7cda63671df28fabbf3216f62082af08e5b4e8ab38f15948ab241ced5da50a7e093271244b40513a5db6b74d78d03d44e4cf4c5dcbb0327aa17f5e7c3684778bde55dbd9139a5cab010b3ee8b6f43ce2faeee633ca737ebe802f9e460aba571f28c763967b3f2636bc66ce44454809e2474a86789e98a46fcc1d1868cd860820d9dfdeae933f73b6a1bd3bbcf79b8c14354921fa7c13456995489abe275a43bf7725a9509fd97c522ec0598f5e1c8773b9966eae619b342ddda0de784aa2762f18b96c6e5256e3c74c8d125886edc659594f53072906f50fe1600c9ca39062d5f9875df13783bde9e5f50004da74793ea4272353fedd3bf8023aa550a451374964d208a3e190ebd12ded53f32cdd509301423d4ca0c1726a2eeaa8a0d3b53ac5cd14518eac7ece9a3effa518076d388b461ade8d577981590a6d6105c4f367390bc7c5a2a7b225160824709fb9aa1b55b84172af05c885295e97c233963c24f8cf5aa49c219b075c21f49044e594240b32bcdf26e31128cdb6173243fadfc2ea281ecdb61ce558486ae46d2d209d1b1e0e6600f00efb343992b1a2ea0a7a43cab8046b219fe1e54a80ffa1df84ab41d4df7ef3ebe486e1747ea0b075affc6c798e942e39a86a955a6aada121eba738cde9a33dce2daf6745b62b9c4db5ba2b44ff8884b5033dc92d33f9d65a450cea047cb35aec5a37ad322e4e07f56be0f7e0d2164027a4bff4e70642868978d7b0d1e82013447be0d34e32c2ce2316c0f35812cb132a0a9b104586fd3d1d3df82a9d6f123d711819803d2366bbe1f4c26fea66c5c034b9e147f57742f219cb493d6fea43a6dc4c50b864671c73f88b855798201bb890919574345b759de2c645351aadb7f5ed9d8ae3a2804ee1ede9f0122d4db3e12a67444b86746d54bb243814b7a9746c89764f5009c7b950a3a19828e973ea3f248a6ba64544c1aa69de375d3eb9ae4825950ea0657a1f35ac89ebca6aac43057f1b0abd9deb4ce505cdb9deb3b4151cccd24cda516783166eb7e3c8029db851c0fda16608f2f1e893d931ce609e217300c848975e75dea7fdb488bc512a1613eac5c699dc0277dd5601f354b18730b4a1b2e8ddd287d4bac13beef6c98b449e659b5fa81fdb452b5500dd1a5ca775c24c30ff9b01a59399d0bda0de1414bd037504d5f36622337b86566e0104119a19cf01f5e95a201ca3966af2829241e2e7887d2821d651bb1f90d5ec1858da6d58595213ffa32f04266197f11b022f0f36a26c5c1512a"}}}}}}, 0xfce) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4246}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004010) 1.536230541s ago: executing program 5 (id=6888): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="ee52e88dfabbbb9411ddd72f8e7f059234ea9384b8b0c517079c2d74a584fce91dc3e0d1ee589b702fcb8078c6753524862040e0e495311d149c8a5a596a3e63d24dd3510a499ddae005456506ae1b9c7be59b8d42f7c555bf9aeb09e8e8be46dc2f032e9646ea733a9b709afb63700e88b8ffc79a4c88a9660be03fa69252371d74ebc3ef22b6f2afb81746673efbeee5c354eec4db0f810a78"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x3ff) epoll_create1(0x80000) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x1e, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0xf) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xfdd3}, 0x4008015) 1.501881007s ago: executing program 6 (id=6889): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc817}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000340)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xaf, 0xe754}, @mptcp=@remove_addr={0x1e, 0x33, 0x3, 0x0, "932a7c7294a678a201e327e466d17c0eb58504fc2eb23a8242c03477ed652d1e7a1a7bd182a0b6c3ad73cab02c23a1f6"}]}}}}}}}, 0x0) socket(0x2, 0x80805, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e00)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xe, 0x9}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8849}, 0x408c4) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) ioctl$SIOCSIFHWADDR(r0, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) 1.365875213s ago: executing program 2 (id=6890): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) close(0x4) unshare(0x400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x330, 0x40000, 0x198, 0x330, 0x198, 0x428, 0x358, 0x358, 0x428, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0xe0000000, 0x9, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x3, 0x10, [0x40, 0x37, 0x32, 0x2a, 0x2, 0x2d, 0x29, 0x17, 0x23, 0x1c, 0xe, 0x38, 0xb, 0x22, 0x27, 0xd], 0x2, 0x4b, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x520) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt(r2, 0xff, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x61, 0x61, 0x5f, 0x0, 0x0, 0x2e, 0x30, 0x61]}}, &(0x7f00000013c0)=""/178, 0x3e, 0xb2, 0x1}, 0x20) 1.153612765s ago: executing program 1 (id=6891): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)="00213ae50deba8cd1caf190e1ae69f52cf98f3a1309b", 0x16}], 0x1, 0x807, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000003"], 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) sendfile(r5, r3, &(0x7f0000000340)=0x4de5, 0x1000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYRES64=r3], 0x70}}, 0x604c841) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x0, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4040000) 1.151669499s ago: executing program 2 (id=6892): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000180)=@ethtool_regs={0x4, 0x7, 0x2, "fe8b"}}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x300) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000280)=""/195, 0x83d00, 0x2b, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) (async) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) (async) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@private0, 0x3a}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/pid_for_children\x00') (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r10, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r11 = socket(0x11, 0x3, 0x1) setsockopt(r11, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg(r11, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, 0x0, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}], 0x1}, 0x40011) 1.142584507s ago: executing program 0 (id=6893): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000f40)="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", 0x6a8}], 0x1, 0x0, 0x0, 0x2c}, 0x880) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000100000001", @ANYRES8=r4, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRESOCT], 0x18, 0x20088084}, 0x40880) 1.096778359s ago: executing program 5 (id=6894): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x100010, r0, 0xe659d000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRESOCT=r0], 0x0, 0x2, 0x40, 0x0, 0x40e00, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f, 0xfffffffffffffde0, 0x0, &(0x7f0000000440)="e09bef0574100000000000000000001ba1c84a64e3455b82f71ba67a651f5255c140a551e2e9d820369bcb0aac233f2c46542eda1fcccc1f19f924c96b0ac97de076b8ce0f0f8381322cf361683f3ed9207f2fd5520ea0269a4bc6686bd84a0062b5205355080e9dcd0ba250", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r7, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000076000d0b00400000000000000300001a0000000008000a00010000000800010001"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d6163736563000018000280050003000c0000000c000100060000000000000108000500", @ANYRES32=r3, @ANYRESDEC=r9], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 1.013840182s ago: executing program 6 (id=6895): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300100000fe8000000000000000000000000000aafe8000000000000010000000000000aa89010000000000003100c204b0"], 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_opts(r3, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20008050}, 0x40480d4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b4040000000002", "bb6710bc8150e4a1a117d7b27caf00", "b292287d", "18919f33fdffffff"}, 0x28) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x70bd29, 0x25dfdbfd, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x200000f7, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0xc, 0x7, 0x103, 0xe, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x0, 0xc, 0x72, 0x8, 0x0, [0x7, 0x7]}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "15ef1fda0e231568", "4340cb6d7ae00a59e2e38d2d503ffd6f2b4996088fb25b4eb7175c2fdf1a15de", "51949a38", "4cde59a879e6ad81"}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) ioctl(r7, 0xfffffffa, &(0x7f0000000440)="0360ab44de2ed2d2932817568ad4df49a6d90d393c6b976b884970d60a04c260af335f82bb6059e3e59aebd9284a46c54acf085f7f8e0501baf7bb9f82db4f09fd4dcd856c4f047281c981c704a8b79258de1d323673cbc26cfdaf2cf4c71f97574ca625cfdb609852f7e736d90a93fcd8544505abc957e2a00de27745e51079d879929c5fb7ef43690e5fd6ef697feae5b1f4a535c160b04400e1436a07") setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 954.467467ms ago: executing program 2 (id=6896): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000180000000000000084"], 0x30}, 0x24000052) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000400"], 0x78}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x58, 0x2, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000094}, 0x80004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010000304fcffffff3f00000000000000", @ANYRES32=r4, @ANYBLOB="a5fdad88900a00002c0012800b00010062726964676500e91c000280060009080180000005002d000100000006000600460e0000"], 0x4c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 664.720517ms ago: executing program 0 (id=6897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x40850) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) (async) r2 = socket(0xa, 0x3, 0xff) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, 0x0, 0x8000) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="8361"], 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_SCRUBV_METADATA(r5, 0xc0285840, &(0x7f0000000140)={0x0, 0x10, 0x4, 0x0, 0x4, 0x3, 0x0, &(0x7f0000000100)=[{0x6, 0xfe, 0x1}, {0x19, 0xfe, 0x6}, {0x1, 0x1ff}]}) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) (async) setsockopt$packet_int(r7, 0x107, 0xc, &(0x7f0000000040)=0xf65, 0x4) (async) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, r6, 0x25, 0x0, @val=@netfilter={0xa, 0x0, 0x7, 0x1}}, 0x20) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="0003472b0b802697a8b77f00057e0100"], 0x20}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) (async) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @remote}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f338ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232caded5e950a16ae6", 0x2a}], 0x1}, 0x30008b08) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000200)={0x1, 'vlan0\x00', {}, 0x81}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 585.305273ms ago: executing program 2 (id=6898): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000040), 0x80000) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 445.46959ms ago: executing program 0 (id=6899): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f0000000200)=@phonet={0x23, 0x9, 0x0, 0x5}, 0x80, 0x0}}], 0x1, 0x200088d0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 443.784294ms ago: executing program 5 (id=6900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) (async) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000940)={&(0x7f0000000000)=0x2, 0xd, &(0x7f0000000600)=[{}, {}, {}, {}], &(0x7f0000000900)}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x5}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x0, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x8, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff, 0xfffffffc}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0xc, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x4000009, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x400, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0xffffffff, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc5, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x0, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x0, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 271.803291ms ago: executing program 0 (id=6901): syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fc"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x4, &(0x7f0000000040)=0x7, 0x4) (async) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) (async) writev(r4, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) 210.629577ms ago: executing program 2 (id=6902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) (async) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) r4 = socket(0x26, 0xa, 0xc) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000200), 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x98, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4e2c3da0a12793d499fb07c443b0a6dca03de44d8407da3cb6b314f90dfec9ab"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "09f6c8fc38bea317fd7e38c61c28c3e4cf08a2677ec6e1d1f3993f4fd0e817f8"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3a6ce9c51952cf440efffc97a1badb83412f1cc1a49d5d6bd28b946f75f79072"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x4084) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x98, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4e2c3da0a12793d499fb07c443b0a6dca03de44d8407da3cb6b314f90dfec9ab"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "09f6c8fc38bea317fd7e38c61c28c3e4cf08a2677ec6e1d1f3993f4fd0e817f8"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3a6ce9c51952cf440efffc97a1badb83412f1cc1a49d5d6bd28b946f75f79072"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x4084) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x64, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0xe}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x70e}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffc0}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x0, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "1e02143b0b547d198a37017aac50f8b3087cca4c4f9818258633fee38c60a0d3d023c44316a729edce2009fe0554668c93f70fc8c4f9bee31e46e6ac9fe893f570865609c0e31514d2d4c97f3781214fba7817bec376cb820e535bda0c22495b2212121a86d9aa4c628485079ae68261551122b642d3c63d5c029d1ddc98070716b27b6458fc05c178e00fc1c18f6e80c1137ac1055c409fdc8431dcba4e553cfeb5b196"}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "7c6515"}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_HOOK={0x0, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM, @NFTA_HOOK_DEV={0x0, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_DEV={0x0, 0x3, 'wg0\x00'}]}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "17cedbc90526461c9574cb29b397a9cc3f5e88820a041da9c70e13244d3b8a16d5ea81a01c3b99b49dd2041d90925a49ad9d6794281d18eaad21f2ae791f3a48443fc03df0344c41f45bcabbac883ac934f5ed202236763c59cd96dbf07c5fa9749945"}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "223526b82bc3845020bb3f8d3c22915c4ae2abb644c6dbe0ed8057af67dd6f1995bee8936b64316f42205bdb2d20f707eb76f9716d4c481d367ef8f591636a8f6ab7098c0a9e522a363b597c47d51a00e353af60d76a95571d909b399234b19e214c56d16f3878af5b4b2b1cd9950ce314425aaba8986204ee1a21feb9bc442166aa"}]}, @NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x0, 0x6, "59311850c6fdadda015d38bf1d5f91fe02c3b3c8a522888cba8c307b131a04276b4ad3ab64e32ef3c6263606efb99ff1fca8c13ee13bea301cd066ed2452eadcb9fac5b82c3849014aac77860fdbb79d74ee8f3d17f066c9c5"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 69.533266ms ago: executing program 1 (id=6903): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) (async) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) write$nci(r7, &(0x7f00000004c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0xb8, @v={0xf, 0x2, 0x6, 0x6, 0xf, 0x4, 0x4, {0x0, 0x0, "8437cbb5b2bdc7f8"}, 0xd9, 0x81, 0x0, 0x2a, 0xae, "dadc4d5cf5df7c0ddff30c26bc0b652792697b847e9d390bfde834fa26bfe15c3fc02f19b374bfead3b3912202125f5285761ba25e542405abbc48f1ae9669e0707c9b5d19841705059230b9c5c841b591d34ac549c94880cd44641608fd26fed1698d2f81ebdf5fbdc4ab2926e1c55997ccf7b737d4c3d75fce2ff7192f3cc1be294d9b83c2a9e83d76c5938cba11b657a077816996f3e1cdc1509acb88c3bbdac599216780526af39cd1d21dc5"}}, 0xc7) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r11 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getpeername$llc(r11, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x20000, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0xb, 0xfffffffd}}, @NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4004840) 63.657797ms ago: executing program 5 (id=6904): recvmmsg(0xffffffffffffffff, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/208, 0xd0}, {0x0}], 0x2}, 0x4}], 0x1, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000440)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4000000004c94215d121cd0c53e27eec317", 0xd8}], 0x1}, 0x800) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0xc}, {r3, 0x4000}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) listen(r0, 0x7866) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x29, 0x4, 0x61, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000200)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180), 0x0, &(0x7f0000000240)=[@init={0x18, 0x84, 0x0, {0x5, 0x2, 0x7, 0xa092}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @init={0x18, 0x84, 0x0, {0xeac, 0x1ff, 0x6, 0x2}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}}, @sndrcv={0x30, 0x84, 0x1, {0x401, 0x8, 0x8, 0x200, 0x6, 0xa, 0x7e, 0x2, r6}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @init={0x18, 0x84, 0x0, {0x6, 0x6, 0x9, 0x2}}], 0x118, 0x20000000}, 0x4004004) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', r8, 0x2f, 0xf6, 0xd, 0x9, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x78c0, 0x7, 0x7}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='\x00', &(0x7f0000000140)=[0x1], 0x0, 0x5, 0x1}}, 0x40) bind$xdp(r5, &(0x7f0000000400)={0x2c, 0x1, r9, 0x1e}, 0x10) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) unshare(0x400) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) 0s ago: executing program 2 (id=6905): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private0}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d16080600000000000000f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x60, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x80a}, [@CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x61}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x84f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x60}}, 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r6}, 0x94) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) sendmsg$netlink(r4, &(0x7f00000008c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc, &(0x7f0000000340)=[{&(0x7f00000005c0)={0x200, 0x21, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0xbc, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x6b, 0x0, 0x0, @fd=r5}, @generic="36a37eec9ec07f327737811499465e3ab93bcc9d86eb5b9d3178b39f8ee9e27b86c4be2b1cf938fc0d43ace198f0e960629ef7f8304cf1e5f652f1fce83e3a3de23ee7576633f1a01cb2de90215d348e14b265d08d73763390e6638db7b7937908ea9ee705dadb8462009627a757b015132e14d07048abccebcdaf33ed9f58252199f15593b2771b0e39e9191c9f88dfddf06641fbc3f292bbd53b21877e1cf247b50e003551cd63b49f725eecdfee4182d6b275f50efacbeb7f1d4949879c148dedd3202c5074e98811a79e5782c17c63459ff29b05b757e8a9d15a536847cc2eaaec7ca6f0dbdc", @nested={0xf6, 0x166, 0x0, 0x1, [@typed={0x8, 0x13d, 0x0, 0x0, @fd=r3}, @generic="1e8d420522046f0af0a8030ef3f187abb089b1", @typed={0x14, 0x14c, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0x1f}, @nested={0x4, 0xd7}, @typed={0x8, 0xd5, 0x0, 0x0, @u32=0x10001}, @typed={0xc, 0x43, 0x0, 0x0, @u64=0x5e}, @generic="4b97cb4e4b62c191ac56e871e28fb6836f6324acaab57d7d020fe3f50d6ed913a6a6d8b8a8dd434bea865ec7716a7e3b05dea76e7a00d59dd7443ac213057d08c820365ae05837dd3d4705a89d68424c231d003fc22e33d5f72ba18b5fef26fd1c49817815f07190deee6018377f12abb20cddea8cb18588028f355fdc5fb3ee39fbd11ba80f98602e384206b7abe6a506eb83994c3047a01eedd9", @nested={0x4, 0xc9}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x8}]}]}, 0x200}], 0x1, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x20, 0x1, 0x1, [r6, r8, r3, r3]}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x68, 0x4000}, 0x655c7e7adc89cba7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000928700e9000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000b8000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3e, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) kernel console output (not intermixed with test programs): m vlan0 (while UP) [ 1014.556219][T29966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1014.612249][T29966] team0: Port device netdevsim1 added [ 1014.653618][ T76] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1014.785018][ T6536] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1014.934777][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1015.093732][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1015.326956][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1015.513860][ T5636] Bluetooth: hci0: command tx timeout [ 1015.637757][T30000] x_tables: duplicate underflow at hook 1 [ 1015.995470][ T6536] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1016.790471][ T76] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1017.181801][T30026] netlink: 'syz.3.5623': attribute type 1 has an invalid length. [ 1017.194815][T30026] netlink: 'syz.3.5623': attribute type 2 has an invalid length. [ 1017.593316][ T5636] Bluetooth: hci0: command tx timeout [ 1017.799929][T30033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5626'. [ 1017.823811][T30033] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5626'. [ 1019.038001][T30047] block nbd8: server does not support multiple connections per device. [ 1019.052162][T30047] block nbd8: shutting down sockets [ 1019.675523][ T5636] Bluetooth: hci0: command tx timeout [ 1024.237320][ T6540] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1024.342290][T30062] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1024.377671][T30062] syzkaller1: linktype set to 769 [ 1024.415427][T26222] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1024.617019][ T6540] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1024.813437][ T76] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1024.959584][ T6538] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1025.047277][T30071] netlink: 'syz.0.5634': attribute type 1 has an invalid length. [ 1025.105705][ T6538] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1025.248979][ T3329] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1025.407078][ T3329] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1025.565878][ T3329] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1025.715633][ T6538] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1027.576224][T30119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5644'. [ 1034.090670][T30132] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1034.121109][T30132] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1034.174456][T30132] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1035.534497][ T6540] net_ratelimit: 11 callbacks suppressed [ 1035.534559][ T6540] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1035.743530][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1035.884672][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1036.043828][T30167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5654'. [ 1036.304346][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1036.559119][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1036.610595][T29980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.658550][T29980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.676167][T29980] bridge_slave_0: entered allmulticast mode [ 1036.716502][T29980] bridge_slave_0: entered promiscuous mode [ 1036.792199][T29980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.826155][T29980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.861417][T29980] bridge_slave_1: entered allmulticast mode [ 1036.925511][T29980] bridge_slave_1: entered promiscuous mode [ 1037.769050][T29980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.184494][ T76] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1038.206880][T30189] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5659'. [ 1038.275002][T29980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.851922][T30202] netlink: 'syz.1.5660': attribute type 29 has an invalid length. [ 1041.110824][ T4938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1041.157415][ T4938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1041.185019][ T4938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1041.196787][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1041.294490][ T4938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1043.518666][ T5636] Bluetooth: hci3: command tx timeout [ 1044.693469][ T76] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1044.722760][T29980] team0: Port device team_slave_0 added [ 1044.821687][T29980] team0: Port device team_slave_1 added [ 1045.057000][T26222] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1045.375067][T29980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.403531][T29980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.541197][T29980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.593662][ T5636] Bluetooth: hci3: command tx timeout [ 1045.684819][T29980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.739874][T29980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.875599][T29980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.756732][T29980] hsr_slave_0: entered promiscuous mode [ 1046.791200][T29980] hsr_slave_1: entered promiscuous mode [ 1046.816797][T29980] debugfs: 'hsr0' already exists in 'hsr' [ 1046.841886][T29980] Cannot create hsr debugfs directory [ 1046.865886][T30239] can: request_module (can-proto-0) failed. [ 1047.396343][T30245] pim6reg1: entered promiscuous mode [ 1047.440005][T30245] pim6reg1: entered allmulticast mode [ 1047.673503][ T5636] Bluetooth: hci3: command tx timeout [ 1049.002413][T30272] netlink: 'syz.1.5672': attribute type 4 has an invalid length. [ 1049.103380][T30274] netlink: 'syz.1.5672': attribute type 4 has an invalid length. [ 1049.471276][T30277] netlink: 'syz.1.5672': attribute type 4 has an invalid length. [ 1049.763615][ T5636] Bluetooth: hci3: command tx timeout [ 1054.728669][ T76] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1054.909360][ T76] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1055.153684][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1055.889975][T30297] syz_tun: left promiscuous mode [ 1056.059683][T30297] bridge_slave_1: left allmulticast mode [ 1056.182628][T30297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.218910][T30297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.368163][T30297] ipip0: left promiscuous mode [ 1056.375803][T30297] ipip1: left promiscuous mode [ 1056.384117][T30297] bridge1: left allmulticast mode [ 1056.398244][T30297] bond4: left promiscuous mode [ 1056.404095][T30297] bond4: left allmulticast mode [ 1056.409078][T30297] : left allmulticast mode [ 1056.416966][T30297] veth3: left allmulticast mode [ 1056.438153][T30297] bond7: left promiscuous mode [ 1056.445902][T30297] bond8: left promiscuous mode [ 1056.450777][T30297] erspan1: left promiscuous mode [ 1056.456810][T30297] bond8: left allmulticast mode [ 1056.466420][T30297] erspan1: left allmulticast mode [ 1056.485983][T30297] bond10: left promiscuous mode [ 1056.502457][T30297] bond11: left allmulticast mode [ 1056.545200][T30299] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1056.613543][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1056.625224][T30312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5680'. [ 1056.735212][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.748127][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.773810][ T6536] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1056.835099][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.192515][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.329340][T30342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.339671][T30342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.350502][T30342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.362194][T30342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.376893][T30342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1062.663879][ T6536] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1062.691114][T29980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1062.737242][T29980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1062.760640][T29980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1062.839941][T29980] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1062.906450][T29980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1062.947774][T29980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1062.975108][T29980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1063.007049][T29980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1063.429978][T30204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.457939][T30204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.479434][T30204] bridge_slave_0: entered allmulticast mode [ 1063.516901][T30204] bridge_slave_0: entered promiscuous mode [ 1063.647267][T30204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.666986][T30204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.694165][T30204] bridge_slave_1: entered allmulticast mode [ 1063.736285][T30204] bridge_slave_1: entered promiscuous mode [ 1063.981740][T30204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.066337][T30204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.121646][T30401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5694'. [ 1064.215065][T30204] team0: Port device team_slave_0 added [ 1064.239891][T30204] team0: Port device team_slave_1 added [ 1064.385002][ T6540] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1064.478833][T30204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.507034][T30204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.552337][T30204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.579663][T30204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.594319][T30419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5699'. [ 1064.605183][T30204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.641190][T30204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.694397][T26081] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1064.917939][T30204] hsr_slave_0: entered promiscuous mode [ 1064.926218][T30204] hsr_slave_1: entered promiscuous mode [ 1064.937163][T30204] debugfs: 'hsr0' already exists in 'hsr' [ 1064.945459][T30204] Cannot create hsr debugfs directory [ 1064.975622][T30427] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1064.989438][T30427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1065.011140][T30427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1065.045111][T30427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1065.123715][T26081] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1065.159925][T30428] syzkaller1: entered promiscuous mode [ 1065.182263][T30428] syzkaller1: entered allmulticast mode [ 1065.645295][T30444] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1065.702549][T29980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.804088][T26081] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1065.825805][T30446] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5706'. [ 1066.018856][T30449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5706'. [ 1066.069034][T30448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5707'. [ 1066.081080][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1066.114034][T30448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5707'. [ 1066.181501][T29980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.253010][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1066.333249][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.340496][ T6540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.423081][ T6540] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1066.460665][T30458] gre1: entered allmulticast mode [ 1066.492216][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.499469][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.147279][T30479] Bluetooth: MGMT ver 1.23 [ 1067.341811][T30204] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1067.407738][T30204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1067.438452][T30204] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1067.488174][T30204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1067.540605][T30204] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1067.609404][T30204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1067.646800][T30204] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1067.696051][T30204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1067.793535][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1067.975694][T26222] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1068.291924][T30204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.528359][T30204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.638055][ T6540] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1068.691754][T29980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.732863][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.741185][ T6540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.902189][T30504] syzkaller0: entered promiscuous mode [ 1068.919423][T30504] syzkaller0: entered allmulticast mode [ 1068.954863][ T6538] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1069.007919][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.018341][ T6538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.143122][ T6540] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1069.662728][T30537] Cannot find add_set index 0 as target [ 1069.675641][T30537] __nla_validate_parse: 4 callbacks suppressed [ 1069.675662][T30537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5722'. [ 1069.825449][T30535] netlink: 'syz.0.5722': attribute type 10 has an invalid length. [ 1069.841577][T30535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5722'. [ 1071.148857][ T4938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1071.185434][ T4938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1071.197105][ T4938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1071.221887][ T4938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1071.250784][ T4938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1073.456437][ T4938] Bluetooth: hci5: command tx timeout [ 1074.783558][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1074.826553][T30548] tipc: Enabling of bearer rejected, already enabled [ 1074.855605][T30550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5723'. [ 1075.032427][T30548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5723'. [ 1075.179590][T30548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5723'. [ 1075.525377][ T4938] Bluetooth: hci5: command tx timeout [ 1075.603007][ T76] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1075.973423][ T6536] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1076.116051][ T76] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1076.326352][ T6536] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1076.595557][ T6540] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1076.743592][T30579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5728'. [ 1076.966022][ T6540] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1077.093687][ T6540] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1077.494360][ T76] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.551586][ T76] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.603980][ T4938] Bluetooth: hci5: command tx timeout [ 1077.704154][T30204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.724135][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1077.882012][T26081] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.070306][ T76] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.196175][ T6538] bridge_slave_1: left allmulticast mode [ 1078.219221][ T6538] bridge_slave_1: left promiscuous mode [ 1078.238068][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.278182][ T6538] bridge_slave_0: left allmulticast mode [ 1078.286002][ T6538] bridge_slave_0: left promiscuous mode [ 1078.295133][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.929354][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.951296][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.966011][ T6538] bond0 (unregistering): Released all slaves [ 1079.014849][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1079.053808][T30642] : renamed from bridge_slave_0 [ 1079.113588][T30631] syzkaller0: entered promiscuous mode [ 1079.140745][T30631] syzkaller0: entered allmulticast mode [ 1079.328184][T30659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5742'. [ 1079.328184][T30658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5742'. [ 1079.691357][ T4938] Bluetooth: hci5: command tx timeout [ 1079.706961][T30667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5743'. [ 1080.377351][ T6538] hsr_slave_0: left promiscuous mode [ 1080.409078][ T6538] hsr_slave_1: left promiscuous mode [ 1080.458657][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.520259][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.682381][ T6538] team0 (unregistering): Port device team_slave_1 removed [ 1082.711887][ T6538] team0 (unregistering): Port device team_slave_0 removed [ 1082.938427][T30696] syzkaller1: entered promiscuous mode [ 1082.945989][T30696] syzkaller1: entered allmulticast mode [ 1083.010186][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1083.700550][T30542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.709039][T30542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.717561][T30542] bridge_slave_0: entered allmulticast mode [ 1083.726488][T30542] bridge_slave_0: entered promiscuous mode [ 1083.738241][T30777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5761'. [ 1083.792239][T30542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.801132][T30542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.812473][T30542] bridge_slave_1: entered allmulticast mode [ 1083.821612][T30542] bridge_slave_1: entered promiscuous mode [ 1083.872106][T30777] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1084.005463][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1084.156511][T30542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.209898][T30204] veth0_vlan: entered promiscuous mode [ 1084.276420][T30542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.442194][T30542] team0: Port device team_slave_0 added [ 1084.488734][T30542] team0: Port device team_slave_1 added [ 1084.589096][T30542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.619810][T30542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.664117][T30542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.679575][T30204] veth1_vlan: entered promiscuous mode [ 1084.712487][T30542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.736315][T30542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.784375][T30815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5766'. [ 1084.795662][T30542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.899001][T30815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5766'. [ 1085.062425][T30542] hsr_slave_0: entered promiscuous mode [ 1085.080629][T30542] hsr_slave_1: entered promiscuous mode [ 1085.101954][T30542] debugfs: 'hsr0' already exists in 'hsr' [ 1085.119945][T30542] Cannot create hsr debugfs directory [ 1085.148647][T30822] netlink: 'syz.2.5768': attribute type 1 has an invalid length. [ 1085.171865][T30822] netlink: 'syz.2.5768': attribute type 2 has an invalid length. [ 1085.403486][T26222] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1085.433755][T30204] veth0_macvtap: entered promiscuous mode [ 1085.456585][T30826] netlink: 'syz.2.5769': attribute type 11 has an invalid length. [ 1085.504192][T30828] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5770'. [ 1085.553247][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1085.601820][T30204] veth1_macvtap: entered promiscuous mode [ 1085.862349][T30832] netlink: 'syz.2.5771': attribute type 1 has an invalid length. [ 1085.910355][T30204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.981145][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1086.014627][T30204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.065650][T30831] : renamed from dummy0 [ 1086.158712][T30835] gre1: left allmulticast mode [ 1086.212656][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.247065][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.453927][T30542] netdevsim netdevsim5 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.617100][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.705831][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.801647][T30542] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.870976][T30855] openvswitch: netlink: IP tunnel dst address not specified [ 1087.043834][ T6538] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1087.551894][T30542] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.643870][T26081] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1087.811714][T30841] infiniband syz0: set down [ 1087.827299][T30542] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.845633][T30841] infiniband syz0: added team0 [ 1087.887973][T30841] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1087.895304][T30841] infiniband syz0: Couldn't open port 1 [ 1087.911322][T26081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.917287][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1087.941605][T26081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.965961][T30841] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1088.055547][T26081] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1088.068886][T30841] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1088.122653][ T6538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.141107][T30841] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1088.161389][ T6538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.206032][T30880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5781'. [ 1088.233452][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1088.354566][T30841] RDS/IB: syz0: added [ 1088.377727][T30841] smc: adding ib device syz0 with port count 1 [ 1088.406047][T30841] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 1088.543754][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1088.600468][T30888] xt_hashlimit: size too large, truncated to 1048576 [ 1088.633164][ T5636] Bluetooth: hci5: command 0x0405 tx timeout [ 1088.793278][T30542] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1088.852917][T30542] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1088.888958][T30542] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1088.900034][T30890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5783'. [ 1088.957421][T30542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1088.975084][T30542] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1089.055388][T30542] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1089.093718][T26081] net_ratelimit: 1 callbacks suppressed [ 1089.093737][T26081] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1089.138685][T30542] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1089.251837][T30542] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1089.305411][ T6538] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1089.465352][ T3329] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1089.613609][ T6538] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1089.905318][ T6538] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1090.133399][ T3329] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1090.576145][T21028] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1090.608742][T30542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.803880][ T3329] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1090.817249][T30542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.871639][T26218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.878896][T26218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.927398][T30958] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5789'. [ 1090.965382][T26220] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1091.027450][T26081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.034744][T26081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.136031][T26081] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1092.729881][T30542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.482000][T30944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1093.619693][T30542] veth0_vlan: entered promiscuous mode [ 1093.702338][T30542] veth1_vlan: entered promiscuous mode [ 1093.916439][T30542] veth0_macvtap: entered promiscuous mode [ 1093.953740][T30542] veth1_macvtap: entered promiscuous mode [ 1094.054960][T30542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.137043][T30542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.204712][T26218] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.222763][T26218] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.256419][T26218] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.303214][T26218] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.334772][T26218] net_ratelimit: 24 callbacks suppressed [ 1094.334835][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1094.497646][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1094.665810][T26081] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1094.680379][T26220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.696211][T26220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.850678][T26220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.861507][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1094.863522][T26220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.997140][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1095.125105][T26222] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1095.253074][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1095.374340][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1095.504480][T26222] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1095.623718][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1095.991870][T31042] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5797'. [ 1096.378066][T30939] lo speed is unknown, defaulting to 1000 [ 1096.409244][T30939] lo speed is unknown, defaulting to 1000 [ 1096.479592][T30939] lo speed is unknown, defaulting to 1000 [ 1096.532619][T30939] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1096.572550][T30939] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1096.602102][T30939] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1096.630173][T30939] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1096.671387][T30939] lo speed is unknown, defaulting to 1000 [ 1096.684899][T31054] pimreg: left allmulticast mode [ 1096.730931][T31049] SET target dimension over the limit! [ 1096.837210][T30939] lo speed is unknown, defaulting to 1000 [ 1096.887165][T30939] lo speed is unknown, defaulting to 1000 [ 1096.942347][T30939] lo speed is unknown, defaulting to 1000 [ 1096.991816][T30939] lo speed is unknown, defaulting to 1000 [ 1097.044731][T30939] lo speed is unknown, defaulting to 1000 [ 1097.079888][T30939] lo speed is unknown, defaulting to 1000 [ 1097.111090][T30939] lo speed is unknown, defaulting to 1000 [ 1098.080098][T31097] xt_connbytes: Forcing CT accounting to be enabled [ 1098.218023][ T4938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1098.250341][ T4938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1098.268957][ T4938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1098.286912][ T4938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1098.311128][ T4938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1098.649778][T31111] netlink: 'syz.0.5811': attribute type 58 has an invalid length. [ 1098.897137][T18352] bond0: (slave syz_tun): Releasing backup interface [ 1099.543435][T31116] bridge7: entered promiscuous mode [ 1099.572573][T31116] bridge7: entered allmulticast mode [ 1100.199700][T26218] net_ratelimit: 28 callbacks suppressed [ 1100.199724][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1100.292075][T31159] netlink: 'syz.6.5817': attribute type 1 has an invalid length. [ 1100.395754][ T4938] Bluetooth: hci0: command tx timeout [ 1100.410136][T31159] netlink: 244 bytes leftover after parsing attributes in process `syz.6.5817'. [ 1101.236057][T26219] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1101.433916][ T6538] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1101.627274][T26218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1101.725000][T31195] netlink: 'syz.5.5825': attribute type 1 has an invalid length. [ 1101.766164][ T6536] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1102.085431][ T6538] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1102.214717][ T6538] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1102.356300][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1102.474228][ T4938] Bluetooth: hci0: command tx timeout [ 1102.503498][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1102.623429][T26219] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1102.975968][T31099] lo speed is unknown, defaulting to 1000 [ 1103.211068][T31202] netlink: 'syz.5.5828': attribute type 2 has an invalid length. [ 1103.390685][T31219] syzkaller0: entered promiscuous mode [ 1103.454624][T31219] syzkaller0: entered allmulticast mode [ 1103.605941][T31242] sit0: entered promiscuous mode [ 1103.629965][T31242] netlink: 'syz.6.5835': attribute type 1 has an invalid length. [ 1103.641098][T31242] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5835'. [ 1104.270426][T31258] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1104.331283][T31257] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1104.553389][ T4938] Bluetooth: hci0: command tx timeout [ 1104.772587][T31275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5841'. [ 1105.223389][T26222] net_ratelimit: 7 callbacks suppressed [ 1105.223413][T26222] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1105.360391][T31287] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5844'. [ 1105.384069][T31283] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5844'. [ 1105.398041][T31289] openvswitch: netlink: ct_state flags ffffffff unsupported [ 1105.604714][T26222] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1105.647800][T31297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1105.747336][T31301] netlink: 'syz.6.5848': attribute type 10 has an invalid length. [ 1105.778367][T31303] netlink: 'syz.6.5848': attribute type 10 has an invalid length. [ 1105.904761][T31314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1105.989747][T31317] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1106.023997][T31317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1106.130689][T31304] bond0: left promiscuous mode [ 1106.136704][T31304] bond_slave_0: left promiscuous mode [ 1106.142649][T31304] bond_slave_1: left promiscuous mode [ 1106.401641][T31337] sctp: [Deprecated]: syz.2.5852 (pid 31337) Use of int in max_burst socket option. [ 1106.401641][T31337] Use struct sctp_assoc_value instead [ 1106.644739][ T4938] Bluetooth: hci0: command tx timeout [ 1106.856071][T31304] ipvlan1: left promiscuous mode [ 1106.861100][T31304] ipvlan1: left allmulticast mode [ 1106.870462][T31304] veth0_vlan: left allmulticast mode [ 1106.916638][T31304] bridge1: left promiscuous mode [ 1106.921685][T31304] bridge1: left allmulticast mode [ 1106.936385][T31304] ip6gre1: left promiscuous mode [ 1106.941425][T31304] ip6gre1: left allmulticast mode [ 1107.223370][T31304] ip6tnl1: left allmulticast mode [ 1107.232735][T31304] bridge4: left promiscuous mode [ 1107.238421][T31304] bridge4: left allmulticast mode [ 1107.290553][T31304] veth11: left allmulticast mode [ 1107.327485][T31304] veth13: left promiscuous mode [ 1107.336198][T31304] vlan2: left allmulticast mode [ 1107.353049][T31304] gretap0: left allmulticast mode [ 1107.361654][T31304] gre1: left promiscuous mode [ 1107.422254][T22140] lo speed is unknown, defaulting to 1000 [ 1107.425484][T31301] geneve1: entered promiscuous mode [ 1107.432175][T22140] syz2: Port: 1 Link DOWN [ 1107.458194][T31301] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1107.476257][T26219] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1107.514763][T26219] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.557850][T26219] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1107.581936][T26219] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.625730][T31099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.664924][T31099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.699083][T31099] bridge_slave_0: entered allmulticast mode [ 1107.737300][T31099] bridge_slave_0: entered promiscuous mode [ 1107.765833][T26219] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1107.780798][T26219] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.800425][T26219] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1107.825200][T26219] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.860863][T31099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.877228][T31353] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5857'. [ 1107.886681][T31099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.895118][T31099] bridge_slave_1: entered allmulticast mode [ 1107.903488][T31099] bridge_slave_1: entered promiscuous mode [ 1108.004704][T31099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.057914][T31099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.176199][T31359] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5858'. [ 1108.198004][T31099] team0: Port device team_slave_0 added [ 1108.214403][T31099] team0: Port device team_slave_1 added [ 1108.351413][T31099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.381085][T31099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.452936][T31099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.527841][T31099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.552082][T31099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.612968][T31099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.667544][T31360] syzkaller1: entered promiscuous mode [ 1108.682844][T31360] syzkaller1: entered allmulticast mode [ 1108.806045][T31384] __nla_validate_parse: 2 callbacks suppressed [ 1108.806065][T31384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5865'. [ 1108.909167][T31099] hsr_slave_0: entered promiscuous mode [ 1108.917214][T31099] hsr_slave_1: entered promiscuous mode [ 1108.924888][T31099] debugfs: 'hsr0' already exists in 'hsr' [ 1108.930802][T31099] Cannot create hsr debugfs directory [ 1108.990157][T31389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1109.017107][T31389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1109.182466][T31397] netlink: 'syz.5.5867': attribute type 2 has an invalid length. [ 1109.210953][T31397] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5867'. [ 1109.420494][T31401] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 1109.938374][T31412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5871'. [ 1109.987594][T31407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.995432][T31407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.137907][T31407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.159240][T31407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.271804][T31383] lo speed is unknown, defaulting to 1000 [ 1110.272725][T26222] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.278317][T26222] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.278360][T26222] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.278398][T26222] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.771663][T31437] netlink: 198796 bytes leftover after parsing attributes in process `syz.5.5876'. [ 1110.791336][T31437] netlink: 'syz.5.5876': attribute type 2 has an invalid length. [ 1110.895942][T31439] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5877'. [ 1111.825342][T31476] tipc: Enabled bearer , priority 0 [ 1111.939949][T31480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5886'. [ 1111.961173][T31476] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 1111.981939][T31476] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 1111.992210][T31479] sch_tbf: burst 255 is lower than device vlan1 mtu (1514) ! [ 1112.012043][T31099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1112.028628][T31099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1112.036891][T31099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1112.067110][T31099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1112.078450][T31099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1112.095734][T31099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1112.107838][T31476] tipc: Resetting bearer [ 1112.123160][T31099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1112.140675][T31099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1112.294072][T31488] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1112.469888][T31099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.560572][T31099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.579286][T26081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.586521][T26081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.667322][T26081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.674583][T26081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.653873][T31501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1113.774706][T31548] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5898'. [ 1113.841961][T31548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5898'. [ 1113.943203][T31548] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1113.971503][T31559] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5902'. [ 1113.982598][T31548] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1114.040093][T31560] vlan2: entered promiscuous mode [ 1114.052256][T31560] veth0_to_hsr: entered promiscuous mode [ 1114.073673][T31563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5903'. [ 1114.110299][T31099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.189345][T31568] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5903'. [ 1114.242734][T31572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5905'. [ 1114.416856][T31563] bond7 (unregistering): Released all slaves [ 1114.465730][T31578] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5906'. [ 1114.604817][T31580] erspan0: left promiscuous mode [ 1114.716509][T31580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.741915][T31580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.879816][T31580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1114.911155][T31580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1114.976624][T31580] veth1_vlan: left promiscuous mode [ 1114.998579][T31580] veth0_vlan: left promiscuous mode [ 1115.015297][T31580] veth0_vlan: entered promiscuous mode [ 1115.024912][T31580] veth1_vlan: entered promiscuous mode [ 1115.084572][T31580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1115.112479][T31580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1115.137495][T31580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1115.168380][T31580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1115.224748][T31580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1115.235784][T31580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1115.249944][T31580] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1115.268088][T31580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1115.305678][T31580] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1115.320615][T31580] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1115.333005][T31580] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1115.398263][T31580] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1115.417645][T31580] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1115.427314][T31580] vti0: left promiscuous mode [ 1115.434631][T31580] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 1115.451161][T31580] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1115.459677][T31580] bond11: left promiscuous mode [ 1115.468352][T31580] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1115.482911][T31580] bridge7: left promiscuous mode [ 1115.570662][ T76] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.581384][ T76] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1115.596378][ T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.624719][ T76] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1115.645748][T31609] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5910'. [ 1115.658346][T31599] syzkaller0: entered promiscuous mode [ 1115.665309][T31599] syzkaller0: entered allmulticast mode [ 1115.723804][ T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.765045][ T76] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1115.793811][ T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.816735][ T76] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1115.942665][T31099] veth0_vlan: entered promiscuous mode [ 1116.038056][T31099] veth1_vlan: entered promiscuous mode [ 1116.108525][T31619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5916'. [ 1116.142390][T31619] netlink: 'syz.0.5916': attribute type 2 has an invalid length. [ 1116.198017][T31099] veth0_macvtap: entered promiscuous mode [ 1116.219668][T31099] veth1_macvtap: entered promiscuous mode [ 1116.268000][T31099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.301231][T31623] dummy0: entered allmulticast mode [ 1116.332080][T31099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.373989][T31623] dummy0: left allmulticast mode [ 1116.501820][T31313] IPVS: starting estimator thread 0... [ 1116.510932][ T79] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.531558][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.550395][T31633] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1116.568051][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.613492][T31634] IPVS: using max 29 ests per chain, 69600 per kthread [ 1116.631711][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.906281][T31642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5924'. [ 1116.924285][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.938931][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.970613][T31642] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 1117.021586][T31647] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 1117.077202][T26218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.098641][T26218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.246944][T31654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5927'. [ 1118.241692][T31694] sctp: [Deprecated]: syz.0.5935 (pid 31694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1118.241692][T31694] Use struct sctp_sack_info instead [ 1118.558194][T31671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1118.573649][T31671] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1118.588993][T31705] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 1118.619962][T31671] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1118.642621][T31671] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1118.685833][T31709] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 1118.748628][T31709] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 1118.827371][T31671] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1118.834785][T31671] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1118.949287][T31717] __nla_validate_parse: 3 callbacks suppressed [ 1118.949306][T31717] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5942'. [ 1119.188705][T31726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5943'. [ 1119.237414][T31726] ip6tnl1: entered allmulticast mode [ 1119.256033][T31728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5943'. [ 1119.278734][ T3302] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1119.301084][T31729] syzkaller0: entered promiscuous mode [ 1119.317540][T31729] syzkaller0: entered allmulticast mode [ 1119.439053][T31729] tipc: Started in network mode [ 1119.464951][T31729] tipc: Node identity c20a610eb6ca, cluster identity 4711 [ 1119.492965][T31729] tipc: Enabled bearer , priority 0 [ 1119.501235][T31736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5946'. [ 1119.528766][T31738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5947'. [ 1119.652286][T31729] tipc: Resetting bearer [ 1119.675882][T31736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5946'. [ 1119.688596][T31724] tipc: Resetting bearer [ 1119.766095][T31724] tipc: Disabling bearer [ 1120.459097][T31796] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5954'. [ 1120.677530][T31809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5956'. [ 1121.147483][T31822] netlink: 'syz.5.5959': attribute type 1 has an invalid length. [ 1121.725853][T31854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5965'. [ 1121.898244][ T5283] veth0_vlan: left promiscuous mode [ 1121.970252][T31867] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5967'. [ 1122.010199][T31331] veth0_vlan: entered promiscuous mode [ 1122.664132][ T30] audit: type=1804 audit(1783928725.930:17): pid=31892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5973" name="/newroot/546/cgroup.controllers" dev="tmpfs" ino=2824 res=1 errno=0 [ 1122.718326][ T30] audit: type=1800 audit(1783928725.930:18): pid=31892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5973" name="cgroup.controllers" dev="tmpfs" ino=2824 res=0 errno=0 [ 1122.768347][T31897] netlink: 'syz.1.5975': attribute type 29 has an invalid length. [ 1122.806432][T31898] netlink: 'syz.1.5975': attribute type 29 has an invalid length. [ 1122.847691][T31902] tipc: Enabled bearer , priority 0 [ 1122.884171][T31903] tipc: Enabling of bearer rejected, already enabled [ 1122.970229][T31894] tipc: Disabling bearer [ 1123.096186][T31909] netlink: 'syz.6.5976': attribute type 1 has an invalid length. [ 1123.114329][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1123.130966][T31909] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1123.272618][T31914] netlink: 'syz.5.5977': attribute type 1 has an invalid length. [ 1123.390501][T31916] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1123.407312][T31916] bond2 (unregistering): Released all slaves [ 1123.599465][T31914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1123.696595][T31839] lo speed is unknown, defaulting to 1000 [ 1124.509168][T31962] __nla_validate_parse: 4 callbacks suppressed [ 1124.509188][T31962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5989'. [ 1124.750545][T31965] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5989'. [ 1124.952715][T31972] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5992'. [ 1125.477176][T31994] netlink: 'syz.1.5997': attribute type 11 has an invalid length. [ 1125.500621][T31994] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.5997'. [ 1125.672871][T32001] bridge1: entered promiscuous mode [ 1126.210807][T32028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6007'. [ 1126.431258][T32038] syzkaller0: entered promiscuous mode [ 1126.454175][T32038] syzkaller0: entered allmulticast mode [ 1126.748110][T32054] xt_CT: No such helper "syz1" [ 1127.263839][T32076] macvlan0: entered promiscuous mode [ 1127.274041][T32081] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1127.283792][T32076] netlink: 'syz.1.6017': attribute type 1 has an invalid length. [ 1127.315168][T32076] netlink: 'syz.1.6017': attribute type 2 has an invalid length. [ 1127.882532][T32102] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1128.254725][T32111] netlink: 'syz.1.6025': attribute type 1 has an invalid length. [ 1128.341927][T32111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1128.432461][T32113] bond1: (slave geneve2): making interface the new active one [ 1128.475764][T32101] Cannot find set identified by id 0 to match [ 1128.493942][T32113] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1128.795995][T32091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6022'. [ 1129.137624][T32131] netlink: 'syz.5.6029': attribute type 13 has an invalid length. [ 1129.278785][T32137] bond0: Caught tx_queue_len zero misconfig [ 1129.748262][T32161] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6034'. [ 1129.860595][T32165] syzkaller1: entered promiscuous mode [ 1129.906753][T32165] syzkaller1: entered allmulticast mode [ 1130.733416][T32188] siw: device registration error -23 [ 1130.778518][T32188] siw: device registration error -23 [ 1130.825185][T32188] siw: device registration error -23 [ 1131.275252][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1131.337659][T32210] x_tables: duplicate underflow at hook 1 [ 1131.481201][T32220] siw: device registration error -23 [ 1131.884767][T32240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6051'. [ 1132.183346][T32250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6053'. [ 1132.530616][T32268] netlink: 'syz.6.6058': attribute type 3 has an invalid length. [ 1132.556579][T32268] openvswitch: netlink: IP tunnel dst address not specified [ 1132.571486][T32268] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6058'. [ 1132.589709][T32268] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6058'. [ 1132.770401][T32274] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6060'. [ 1132.805689][T32274] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6060'. [ 1132.854640][T32274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6060'. [ 1133.307619][T32299] siw: device registration error -23 [ 1133.334826][T32301] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6069'. [ 1133.481934][T32310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6070'. [ 1133.609140][T32317] netlink: 'syz.5.6072': attribute type 21 has an invalid length. [ 1133.620890][T32317] netlink: 'syz.5.6072': attribute type 1 has an invalid length. [ 1134.072572][T32342] netlink: 'syz.5.6081': attribute type 1 has an invalid length. [ 1135.117805][T32383] __nla_validate_parse: 5 callbacks suppressed [ 1135.117833][T32383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6092'. [ 1135.156349][T32383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6092'. [ 1135.520567][T32394] hsr0: entered promiscuous mode [ 1135.561264][T32394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6094'. [ 1135.612611][T32394] hsr_slave_0: left promiscuous mode [ 1135.647012][T32394] hsr_slave_1: left promiscuous mode [ 1135.697201][T32403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6096'. [ 1135.706590][T32394] hsr0 (unregistering): left promiscuous mode [ 1135.920287][T32408] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6097'. [ 1135.952403][T32408] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6097'. [ 1136.272437][T32352] lo speed is unknown, defaulting to 1000 [ 1136.598056][T32443] IPVS: set_ctl: invalid protocol: 136 172.30.1.3:20000 [ 1136.704065][T32435] bond2 (unregistering): Released all slaves [ 1137.103867][T32463] netlink: 4716 bytes leftover after parsing attributes in process `syz.6.6108'. [ 1137.680807][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6113'. [ 1137.729201][T32488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6113'. [ 1137.892209][T32488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6113'. [ 1137.962062][T32488] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1139.160455][T32521] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1139.257211][T32521] bond2 (unregistering): Released all slaves [ 1140.334682][T32535] __nla_validate_parse: 4 callbacks suppressed [ 1140.334704][T32535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6118'. [ 1140.614934][T32574] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6125'. [ 1140.931805][T32584] netlink: 'syz.5.6127': attribute type 2 has an invalid length. [ 1141.297932][T32591] xt_hashlimit: size too large, truncated to 1048576 [ 1141.726340][T32610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6134'. [ 1141.789257][T32614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6134'. [ 1141.999421][T32617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6134'. [ 1142.111726][T32626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6137'. [ 1142.141057][T32625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6137'. [ 1142.579874][T32644] 8021q: VLANs not supported on ip6tnl0 [ 1145.231976][T32646] erspan0: entered promiscuous mode [ 1145.290222][T32649] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6146'. [ 1145.365229][T32651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6145'. [ 1145.375886][T32651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6145'. [ 1145.695382][T32672] netlink: 'syz.1.6151': attribute type 1 has an invalid length. [ 1145.726265][T32672] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6151'. [ 1145.742151][T32672] netlink: 25 bytes leftover after parsing attributes in process `syz.1.6151'. [ 1145.761455][T32672] netlink: 'syz.1.6151': attribute type 4 has an invalid length. [ 1145.843610][T32678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6153'. [ 1145.870609][T32678] macvlan0: entered promiscuous mode [ 1145.891626][T32678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6153'. [ 1146.136858][T32695] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6158'. [ 1146.483439][T32707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6162'. [ 1146.499387][T32712] netlink: 'syz.5.6164': attribute type 1 has an invalid length. [ 1146.514984][T32712] xt_hashlimit: size too large, truncated to 1048576 [ 1146.583162][T32714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6162'. [ 1146.597618][T32713] xt_hashlimit: size too large, truncated to 1048576 [ 1146.634219][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1146.841385][T32720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6165'. [ 1147.277442][ T30] audit: type=1804 audit(1783928750.540:19): pid=32729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6166" name="/newroot/591/cgroup.controllers" dev="tmpfs" ino=3070 res=1 errno=0 [ 1147.361718][ T30] audit: type=1800 audit(1783928750.580:20): pid=32729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6166" name="cgroup.controllers" dev="tmpfs" ino=3070 res=0 errno=0 [ 1147.432551][ T30] audit: type=1804 audit(1783928750.590:21): pid=32729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6166" name="/newroot/591/cgroup.controllers" dev="tmpfs" ino=3070 res=1 errno=0 [ 1148.379310][T32709] lo speed is unknown, defaulting to 1000 [ 1148.797317][ T308] netlink: 'syz.6.6180': attribute type 1 has an invalid length. [ 1149.080031][ T325] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20001 [ 1149.152511][ T308] bond2: entered promiscuous mode [ 1149.161635][ T308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1149.297153][ T318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1149.344419][ T318] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 1149.397612][ T318] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 1149.467027][ T318] bond2: (slave ipip0): making interface the new active one [ 1149.513803][ T318] ipip0: entered promiscuous mode [ 1149.551802][ T318] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 1149.632530][ T321] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1149.713692][ T340] erspan0: left allmulticast mode [ 1149.962550][ T340] bridge_slave_1: left allmulticast mode [ 1150.172014][ T340] vlan0: left allmulticast mode [ 1150.180132][ T340] veth0_vlan: left allmulticast mode [ 1150.199069][ T340] veth0_vlan: left promiscuous mode [ 1150.220192][ T340] macvlan0: left promiscuous mode [ 1150.266191][ T340] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1150.294853][ T340] ip6gre1: left allmulticast mode [ 1150.380041][ T340] vlan3: left allmulticast mode [ 1150.385289][ T340] bond0: left allmulticast mode [ 1150.420805][ T340] vti0: left allmulticast mode [ 1150.447591][ T340] bond12: left allmulticast mode [ 1150.457937][ T340] bridge7: left allmulticast mode [ 1150.548196][ T3302] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.583769][ T3302] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1150.614274][ T3302] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.651520][ T3302] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1150.768588][ T362] vlan4: entered promiscuous mode [ 1150.783586][ T362] bridge0: entered promiscuous mode [ 1150.801264][ T372] Bluetooth: MGMT ver 1.23 [ 1150.808810][ T370] __nla_validate_parse: 6 callbacks suppressed [ 1150.808829][ T370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6192'. [ 1150.875186][ T3302] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.886658][ T3302] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1150.940841][ T3302] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.987124][ T3302] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1151.720604][ T414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6202'. [ 1152.083834][ T427] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1152.090989][ T427] syzkaller1: linktype set to 0 [ 1152.232003][ T416] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 1152.267699][ T416] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 1152.644406][ T445] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6210'. [ 1152.895324][ T448] netlink: 'syz.5.6211': attribute type 1 has an invalid length. [ 1152.915793][ T448] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6211'. [ 1153.042232][ T4938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1153.054974][ T4938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1153.066097][ T4938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1153.089612][ T4938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1153.102033][ T4938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1153.147055][ T465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6212'. [ 1153.227073][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1153.255904][ T465] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6212'. [ 1153.270025][ T448] lo: Caught tx_queue_len zero misconfig [ 1153.286291][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1153.297467][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1153.307250][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1153.335957][ T448] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1153.350029][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1153.668688][ T478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6213'. [ 1153.730522][ T478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6213'. [ 1153.977759][ T487] netlink: 'syz.5.6215': attribute type 1 has an invalid length. [ 1154.180084][ T494] netlink: 'syz.6.6217': attribute type 1 has an invalid length. [ 1154.212039][ T496] netlink: 'syz.5.6218': attribute type 4 has an invalid length. [ 1154.246079][ T496] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6218'. [ 1154.281451][ T501] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6217'. [ 1154.366529][ T494] bond3: entered promiscuous mode [ 1154.387068][ T494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1154.418185][ T496] .`: renamed from bond0 [ 1154.459937][ T501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1154.479224][ T501] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 1154.516508][ T501] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1154.576011][ T501] bond3: (slave gre1): making interface the new active one [ 1154.602400][ T501] gre1: entered promiscuous mode [ 1154.615431][ T501] bond3: (slave gre1): Enslaving as an active interface with an up link [ 1155.432301][ T540] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 1155.439074][ T5636] Bluetooth: hci1: command tx timeout [ 1155.454978][ T540] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 1156.035659][ T552] netlink: 'syz.6.6230': attribute type 12 has an invalid length. [ 1156.066199][ T552] netlink: 'syz.6.6230': attribute type 29 has an invalid length. [ 1156.083717][ T552] netlink: 'syz.6.6230': attribute type 2 has an invalid length. [ 1156.091826][ T552] __nla_validate_parse: 4 callbacks suppressed [ 1156.091847][ T552] netlink: 260 bytes leftover after parsing attributes in process `syz.6.6230'. [ 1156.471707][ T569] syzkaller1: entered allmulticast mode [ 1156.506976][ T576] netlink: 'syz.5.6235': attribute type 15 has an invalid length. [ 1156.591491][ T578] netlink: 'syz.0.6236': attribute type 4 has an invalid length. [ 1156.612670][ T461] lo speed is unknown, defaulting to 1000 [ 1156.729708][ T583] netlink: 'syz.5.6237': attribute type 2 has an invalid length. [ 1156.784792][ T581] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6237'. [ 1156.839984][ T583] : entered promiscuous mode [ 1157.177721][ T594] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6239'. [ 1157.349618][ T598] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6240'. [ 1157.513906][ T5636] Bluetooth: hci1: command tx timeout [ 1157.538518][ T602] openvswitch: netlink: Message has -2 unknown bytes. [ 1157.565614][ T602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1157.642438][ T609] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6241'. [ 1158.332671][ T461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.340115][ T461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.348037][ T461] bridge_slave_0: entered allmulticast mode [ 1158.357258][ T461] bridge_slave_0: entered promiscuous mode [ 1158.367469][ T461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.382411][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.391560][ T461] bridge_slave_1: entered allmulticast mode [ 1158.413470][ T461] bridge_slave_1: entered promiscuous mode [ 1158.566884][ T461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.609474][ T461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.743616][ T461] team0: Port device team_slave_0 added [ 1158.781021][ T461] team0: Port device team_slave_1 added [ 1158.853732][ T653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6246'. [ 1158.893814][ T657] openvswitch: netlink: Actions may not be safe on all matching packets [ 1158.947847][ T461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.971425][ T461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.000825][ T661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6246'. [ 1159.071305][ T461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.133635][ T461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.166532][ T461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.266793][ T461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.339965][ T671] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6252'. [ 1159.593995][ T5636] Bluetooth: hci1: command tx timeout [ 1159.690074][ T461] hsr_slave_0: entered promiscuous mode [ 1159.708071][ T461] hsr_slave_1: entered promiscuous mode [ 1159.727521][ T461] debugfs: 'hsr0' already exists in 'hsr' [ 1159.746277][ T461] Cannot create hsr debugfs directory [ 1159.861799][ T687] x_tables: duplicate entry at hook 1 [ 1160.022546][ T687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6255'. [ 1160.171661][ T701] netlink: 'syz.1.6255': attribute type 1 has an invalid length. [ 1160.437793][ T707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6261'. [ 1160.750178][T31331] dummy0: entered promiscuous mode [ 1161.167170][ T726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6262'. [ 1161.674189][ T5636] Bluetooth: hci1: command tx timeout [ 1161.696705][ T752] bond5: Removing last ns target with arp_interval on [ 1161.745411][ T764] openvswitch: netlink: Flow actions attr not present in new flow. [ 1162.137546][ T771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6271'. [ 1162.231719][ T779] xt_hashlimit: max too large, truncated to 1048576 [ 1162.281348][ T779] xt_hashlimit: overflow, try lower: 137438953472/8 [ 1162.818394][ T461] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1162.833552][ T806] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6276'. [ 1162.867458][ T461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1162.890681][ T806] netlink: 'syz.6.6276': attribute type 1 has an invalid length. [ 1162.899603][ T461] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1162.915806][ T806] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6276'. [ 1162.936679][ T461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1162.988927][ T461] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1163.036953][ T461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1163.058882][ T461] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1163.088325][ T461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1163.150294][ T814] syzkaller0: left promiscuous mode [ 1163.172939][ T814] syzkaller0: left allmulticast mode [ 1163.515150][ T833] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20001 [ 1163.572192][ T804] netlink: 'syz.5.6275': attribute type 10 has an invalid length. [ 1163.587790][ T461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.666458][ T461] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.735933][T31772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.743199][T31772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.807148][T31772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.814475][T31772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.915885][ T842] netlink: 'syz.1.6284': attribute type 6 has an invalid length. [ 1164.655840][ T872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6288'. [ 1169.040166][ T880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.047999][ T880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.168323][ T880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.182647][ T880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.237035][ T880] macvlan0: left promiscuous mode [ 1169.288627][ T880] ip6tnl1: left allmulticast mode [ 1169.388054][ T3302] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.409364][ T3302] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.451193][ T3302] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.470148][ T3302] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.627297][ T30] audit: type=1800 audit(1783928772.900:22): pid=900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6294" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=412 res=0 errno=0 [ 1169.736260][ T913] netlink: 'syz.5.6296': attribute type 10 has an invalid length. [ 1169.785895][ T913] netlink: 16154 bytes leftover after parsing attributes in process `syz.5.6296'. [ 1169.920989][ T918] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6298'. [ 1170.002025][ T918] syzkaller1: entered promiscuous mode [ 1170.017864][ T918] syzkaller1: entered allmulticast mode [ 1170.659576][ T970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6305'. [ 1170.768924][ T461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.920212][ T976] syzkaller1: entered promiscuous mode [ 1170.939644][ T972] netlink: 'syz.1.6306': attribute type 1 has an invalid length. [ 1170.947839][ T976] syzkaller1: entered allmulticast mode [ 1170.954270][ T972] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1171.003083][ T982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6310'. [ 1171.077323][ T461] veth0_vlan: entered promiscuous mode [ 1171.117016][ T983] ip6erspan1: entered allmulticast mode [ 1171.135603][ T986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6311'. [ 1171.168673][ T986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6311'. [ 1171.342351][ T994] tipc: Enabling of bearer rejected, failed to enable media [ 1171.381919][ T461] veth1_vlan: entered promiscuous mode [ 1171.501143][ T461] veth0_macvtap: entered promiscuous mode [ 1171.549489][ T1001] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 1171.571239][ T1001] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 1171.589663][ T461] veth1_macvtap: entered promiscuous mode [ 1171.717383][ T461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1171.791839][ T461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1171.831207][ T3302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.861112][ T3302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.897129][ T3302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.917329][ T3302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.195776][ T1022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6320'. [ 1172.202114][ T1020] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6319'. [ 1172.217952][T31772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.240760][T31772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.272597][ T1020] netlink: 'syz.5.6319': attribute type 4 has an invalid length. [ 1172.332648][T31770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.341544][T31770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.078744][ T4938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1173.097543][ T4938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1173.109434][ T4938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1173.127057][ T4938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1173.137582][ T4938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1173.276082][ T1058] bond6: option all_slaves_active: invalid value (127) [ 1173.285613][ T1075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6329'. [ 1173.300845][ T1058] bond6 (unregistering): Released all slaves [ 1173.753769][ T1091] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1173.860404][ T1086] syzkaller0: entered promiscuous mode [ 1173.874305][ T1086] syzkaller0: entered allmulticast mode [ 1174.050424][ T1104] xt_hashlimit: size too large, truncated to 1048576 [ 1174.150760][ T1107] xt_hashlimit: size too large, truncated to 1048576 [ 1174.841812][ T1138] __nla_validate_parse: 3 callbacks suppressed [ 1174.841832][ T1138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6339'. [ 1174.939980][ T1141] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6340'. [ 1175.020649][ T1142] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6340'. [ 1175.024339][ T1141] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6340'. [ 1175.043488][ T1141] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6340'. [ 1175.094637][ T1141] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6340'. [ 1175.128569][ T1141] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6340'. [ 1175.160433][ T1149] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6342'. [ 1175.170269][ T1141] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6340'. [ 1175.194825][ T5636] Bluetooth: hci4: command tx timeout [ 1175.214618][ T1141] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6340'. [ 1175.639458][ T1165] netlink: 'syz.6.6347': attribute type 29 has an invalid length. [ 1175.704045][ T1165] nbd: socks must be embedded in a SOCK_ITEM attr [ 1176.129372][ T992] udevd[992]: inotify_add_watch(7, /dev/nbd8, 10) failed: No such file or directory [ 1176.231505][ T1055] lo speed is unknown, defaulting to 1000 [ 1176.417891][ T1192] syzkaller0: entered promiscuous mode [ 1176.430764][ T1192] syzkaller0: entered allmulticast mode [ 1176.625166][ T1203] netlink: 'syz.6.6356': attribute type 18 has an invalid length. [ 1177.273252][ T5636] Bluetooth: hci4: command tx timeout [ 1177.286136][ T1238] netlink: 'syz.2.6364': attribute type 4 has an invalid length. [ 1177.334681][ T1237] netlink: 'syz.2.6364': attribute type 4 has an invalid length. [ 1177.674436][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.710329][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.753257][ T1055] bridge_slave_0: entered allmulticast mode [ 1177.796456][ T1055] bridge_slave_0: entered promiscuous mode [ 1177.834199][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.857497][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.915022][ T1055] bridge_slave_1: entered allmulticast mode [ 1177.932058][ T1055] bridge_slave_1: entered promiscuous mode [ 1178.019934][ T1271] bridge_slave_0: left allmulticast mode [ 1178.026047][ T1271] bridge_slave_0: left promiscuous mode [ 1178.031982][ T1271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.277136][ T1271] bridge_slave_1: left allmulticast mode [ 1178.288015][ T1271] bridge_slave_1: left promiscuous mode [ 1178.294206][ T1271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.334002][ T1271] bond0: (slave bond_slave_0): Releasing backup interface [ 1178.366328][ T1271] bond0: (slave bond_slave_1): Releasing backup interface [ 1178.403100][ T1271] team0: Port device team_slave_0 removed [ 1178.416715][ T1271] team0: Port device team_slave_1 removed [ 1178.424214][ T1271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.431774][ T1271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.444399][ T1271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.452113][ T1271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.467119][ T1271] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1178.648235][ T1055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.680193][ T1055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.788028][ T1055] team0: Port device team_slave_0 added [ 1178.883536][ T1055] team0: Port device team_slave_1 added [ 1178.988947][ T1055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.996870][ T1055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.026085][ T1055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.064247][ T1055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.084824][ T1055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.124615][ T1055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.265956][ T1055] hsr_slave_0: entered promiscuous mode [ 1179.308990][ T1055] hsr_slave_1: entered promiscuous mode [ 1179.324350][ T1055] debugfs: 'hsr0' already exists in 'hsr' [ 1179.337089][ T1055] Cannot create hsr debugfs directory [ 1179.363328][ T5636] Bluetooth: hci4: command tx timeout [ 1179.369620][ T1313] netlink: 'syz.6.6383': attribute type 1 has an invalid length. [ 1180.155536][ T1267] lo speed is unknown, defaulting to 1000 [ 1180.155569][ T1334] __nla_validate_parse: 67 callbacks suppressed [ 1180.155610][ T1334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6388'. [ 1180.179878][ T1334] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1180.198365][ T1334] netlink: 'syz.2.6388': attribute type 1 has an invalid length. [ 1180.215821][ T1334] netlink: 'syz.2.6388': attribute type 2 has an invalid length. [ 1180.459270][ T1055] team0: Port device netdevsim1 removed [ 1180.535585][ T1343] xt_hashlimit: size too large, truncated to 1048576 [ 1180.689642][ T1349] netlink: 666 bytes leftover after parsing attributes in process `syz.5.6390'. [ 1180.749578][ T1350] nbd: nbd2 already in use [ 1180.764266][ T1350] block nbd2: NBD_DISCONNECT [ 1180.769040][ T1350] block nbd2: Send disconnect failed -107 [ 1180.884172][ T1349] @0Ù: renamed from bond_slave_1 [ 1181.428741][ T1055] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1181.435901][ T5636] Bluetooth: hci4: command tx timeout [ 1181.450374][ T1055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1181.459371][ T1055] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1181.477732][ T1055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1181.486094][ T1055] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1181.501160][ T1055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1181.509534][ T1055] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1181.525744][ T1055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1181.598346][ T1363] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6393'. [ 1181.659581][ T1363] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6393'. [ 1181.709764][ T1367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6394'. [ 1181.710550][ T1055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.769118][ T1367] batadv0: entered promiscuous mode [ 1181.787845][ T1367] macsec1: entered promiscuous mode [ 1181.820074][ T1367] macsec1: entered allmulticast mode [ 1181.839364][ T1367] batadv0: entered allmulticast mode [ 1181.855192][ T1367] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1181.897348][ T1367] batadv0: left allmulticast mode [ 1181.911495][ T1367] batadv0: left promiscuous mode [ 1182.000535][ T1055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.047490][T31760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.054816][T31760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.128119][T31772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.135437][T31772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.205499][ T1384] syzkaller0: entered promiscuous mode [ 1182.211119][ T1384] syzkaller0: entered allmulticast mode [ 1182.431384][ T1394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6401'. [ 1182.508550][ T1396] openvswitch: netlink: Flow key attr not present in new flow. [ 1182.641145][ T1403] netlink: 'syz.5.6403': attribute type 83 has an invalid length. [ 1182.657157][ T1403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6403'. [ 1182.857682][ T1055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.919890][ T1055] veth0_vlan: entered promiscuous mode [ 1182.934889][ T1055] veth1_vlan: entered promiscuous mode [ 1182.975038][ T1055] veth0_macvtap: entered promiscuous mode [ 1182.986316][ T1055] veth1_macvtap: entered promiscuous mode [ 1183.008823][ T1055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.023992][ T1055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.040551][T31772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.051318][T31772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.063630][T31772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.072591][T31772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.232911][T31771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.248283][T31771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.301955][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.320751][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.424396][ T1411] Cannot find add_set index 0 as target [ 1183.439485][ T189] IPVS: starting estimator thread 0... [ 1183.544546][ T1415] IPVS: using max 29 ests per chain, 69600 per kthread [ 1183.708795][ T1431] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6405'. [ 1183.928524][ T1435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6408'. [ 1184.332586][ T1449] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6411'. [ 1185.367701][ T1485] __nla_validate_parse: 5 callbacks suppressed [ 1185.367724][ T1485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6425'. [ 1185.559626][ T1490] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6427'. [ 1186.258360][ T1498] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6430'. [ 1186.691652][ T1511] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1186.855401][ T1511] bond8 (unregistering): Released all slaves [ 1186.896326][ T1469] lo speed is unknown, defaulting to 1000 [ 1187.292408][ T1527] 8021q: VLANs not supported on lo [ 1187.328897][ T1522] netlink: 'syz.1.6437': attribute type 2 has an invalid length. [ 1187.357577][ T1522] nbd: must specify at least one socket [ 1187.490101][ T1534] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6440'. [ 1187.495570][ T1492] lo speed is unknown, defaulting to 1000 [ 1187.517263][ T1534] nbd: must specify a size in bytes for the device [ 1187.946175][ T1546] netlink: 'syz.2.6443': attribute type 10 has an invalid length. [ 1188.198983][ T1557] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1188.219369][ T1557] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1188.257300][ T1557] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1188.507793][ T1563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6449'. [ 1188.539179][ T1563] ip6tnl0: Caught tx_queue_len zero misconfig [ 1188.716142][ T1569] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 1188.738387][ T1570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6450'. [ 1189.149715][ T1588] netlink: 'syz.2.6454': attribute type 1 has an invalid length. [ 1189.177310][ T1558] dvmrp0: entered allmulticast mode [ 1189.301174][ T1588] bond1: entered promiscuous mode [ 1189.307665][ T1588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1190.081977][ T1614] syzkaller0: entered promiscuous mode [ 1190.113596][ T1614] syzkaller0: entered allmulticast mode [ 1190.158907][ T1614] pim6reg: entered allmulticast mode [ 1190.174023][ T1614] pim6reg: left allmulticast mode [ 1190.325108][ T1556] lo speed is unknown, defaulting to 1000 [ 1190.870779][ T1624] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1190.889222][ T1636] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6469'. [ 1190.899710][ T1636] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6469'. [ 1190.926016][ T1636] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6469'. [ 1190.949265][ T1624] bond0 (unregistering): Released all slaves [ 1191.024760][ T1636] block nbd0: reconnected socket [ 1191.035839][ T5636] block nbd0: Receive control failed (result -32) [ 1191.179980][ T1645] netlink: 'syz.6.6471': attribute type 21 has an invalid length. [ 1191.193419][ T1645] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6471'. [ 1191.213602][ T1645] netlink: 'syz.6.6471': attribute type 4 has an invalid length. [ 1191.239890][ T1645] netlink: 'syz.6.6471': attribute type 5 has an invalid length. [ 1191.265412][ T1645] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6471'. [ 1191.375525][ T1651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6472'. [ 1191.424581][ T1651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6472'. [ 1191.910389][ T1668] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6477'. [ 1191.989734][ T1672] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6477'. [ 1192.114661][ T1674] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6479'. [ 1192.139077][ T1670] netlink: 'syz.5.6478': attribute type 1 has an invalid length. [ 1192.186264][ T1674] gretap0: entered promiscuous mode [ 1192.353933][ T1670] bond0: entered promiscuous mode [ 1192.368941][ T1670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.836687][ T1696] NCSI netlink: No device for ifindex 0 [ 1192.986570][ T1699] ip6gre1: entered allmulticast mode [ 1193.246505][ T1713] vlan2: entered promiscuous mode [ 1193.279242][ T1713] bridge0: entered promiscuous mode [ 1193.905269][ T1741] syzkaller0: entered promiscuous mode [ 1193.935136][ T1741] syzkaller0: entered allmulticast mode [ 1193.960170][ T1748] netlink: 'syz.0.6500': attribute type 1 has an invalid length. [ 1194.082292][ T1748] netlink: 'syz.0.6500': attribute type 10 has an invalid length. [ 1194.435184][ T1774] netlink: 'syz.2.6505': attribute type 21 has an invalid length. [ 1194.485579][ T1748] dummy0: entered promiscuous mode [ 1197.311541][ T1765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1197.687849][ T1807] __nla_validate_parse: 15 callbacks suppressed [ 1197.687869][ T1807] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6514'. [ 1197.742145][ T1811] netlink: 'syz.5.6517': attribute type 8 has an invalid length. [ 1198.155643][ T1830] netlink: 'syz.2.6524': attribute type 1 has an invalid length. [ 1198.235881][ T1832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6524'. [ 1198.638700][ T1841] netlink: 'syz.2.6526': attribute type 1 has an invalid length. [ 1198.660394][ T1841] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6526'. [ 1198.687870][ T1841] netlink: 'syz.2.6526': attribute type 1 has an invalid length. [ 1199.079967][ T1851] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1199.163159][ T1854] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1199.376290][ T1856] syzkaller0: entered promiscuous mode [ 1199.409872][ T1856] syzkaller0: entered allmulticast mode [ 1199.578914][ T1869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6533'. [ 1199.727031][ T1869] veth7: entered allmulticast mode [ 1200.217532][ T1876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6535'. [ 1204.853174][ T1902] tipc: Started in network mode [ 1204.858155][ T1902] tipc: Node identity a2a6f058f1ad, cluster identity 4711 [ 1204.866467][ T1902] tipc: Enabled bearer , priority 0 [ 1204.883388][ T1906] syzkaller0: entered promiscuous mode [ 1204.912653][ T1906] syzkaller0: entered allmulticast mode [ 1204.998483][ T1920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6539'. [ 1205.157951][ T1920] tipc: Resetting bearer [ 1205.228381][ T1920] tipc: Disabling bearer [ 1205.542308][ T1958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6551'. [ 1205.597132][ T1962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6553'. [ 1205.598021][ T1958] netlink: 'syz.1.6551': attribute type 11 has an invalid length. [ 1205.659559][ T1965] netlink: 280 bytes leftover after parsing attributes in process `syz.5.6549'. [ 1205.814381][ T1972] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6555'. [ 1205.887758][ T1969] netlink: 'syz.0.6554': attribute type 1 has an invalid length. [ 1206.428912][ T1969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1206.494115][ T1969] bond1: (slave bond2): making interface the new active one [ 1206.536469][ T1969] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1207.339582][ T2021] netlink: 'syz.1.6560': attribute type 83 has an invalid length. [ 1208.753814][ T2030] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6563'. [ 1208.869177][ T2030] sock: sock_timestamping_bind_phc: sock not bind to device [ 1209.067113][ T2060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6568'. [ 1209.222902][ T2060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1209.237261][ T2069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6570'. [ 1209.272024][ T2063] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1209.326194][ T2060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6568'. [ 1209.352420][ T2074] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6571'. [ 1209.457749][ T2029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1209.686332][ T2079] tun0: tun_chr_ioctl cmd 1074025680 [ 1209.854047][ T2091] netlink: 'syz.1.6575': attribute type 1 has an invalid length. [ 1210.081764][ T2105] __nla_validate_parse: 2 callbacks suppressed [ 1210.081785][ T2105] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6579'. [ 1210.110510][ T2105] netlink: 'syz.0.6579': attribute type 6 has an invalid length. [ 1210.254228][ T5283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1211.824341][ T2154] netlink: 'syz.0.6590': attribute type 1 has an invalid length. [ 1212.390183][ T2183] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6595'. [ 1212.463091][ T2183] netlink: 'syz.2.6595': attribute type 9 has an invalid length. [ 1212.839973][ T2204] netlink: 'syz.2.6600': attribute type 5 has an invalid length. [ 1213.065330][ T2217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6606'. [ 1213.107309][T31770] bond0: (slave geneve1): link status definitely down, disabling slave [ 1213.214550][ T2213] syzkaller0: entered promiscuous mode [ 1213.235032][ T2213] syzkaller0: entered allmulticast mode [ 1213.336117][ T2228] bridge_slave_0: left allmulticast mode [ 1213.367405][ T2228] bridge_slave_0: left promiscuous mode [ 1213.401001][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.482384][ T2228] bridge_slave_1: left allmulticast mode [ 1213.511349][ T2228] bridge_slave_1: left promiscuous mode [ 1213.540482][ T2228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.616426][ T2228] bond0: (slave bond_slave_0): Releasing backup interface [ 1213.672313][ T2228] bond0: (slave bond_slave_1): Releasing backup interface [ 1213.732352][ T2228] team0: Port device team_slave_0 removed [ 1213.758714][ T2228] team0: Port device team_slave_1 removed [ 1213.776731][ T2228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.786551][ T2228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.797730][ T2228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.808817][ T2228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.819649][ T2228] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1213.844185][ T2238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6609'. [ 1213.857364][ T2241] batadv_slave_1: entered promiscuous mode [ 1214.002653][ T2235] batadv_slave_1: left promiscuous mode [ 1214.467191][ T2274] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6615'. [ 1214.529616][ T2274] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6615'. [ 1214.779551][ T2291] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6620'. [ 1215.268856][ T2305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6623'. [ 1215.280720][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.459422][ T2308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6624'. [ 1215.801598][ T2329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6629'. [ 1215.983617][ T2337] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6631'. [ 1215.990382][ T2338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6632'. [ 1216.040147][ T2339] bridge_slave_0: left allmulticast mode [ 1216.046523][ T2339] bridge_slave_0: left promiscuous mode [ 1216.061332][ T2339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.145283][ T2339] bridge_slave_1: left allmulticast mode [ 1216.170237][ T2339] bridge_slave_1: left promiscuous mode [ 1216.187610][ T2339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.233466][T31312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.255082][ T2339] .`: (slave bond_slave_0): Releasing backup interface [ 1216.280591][ T2354] xt_hashlimit: max too large, truncated to 1048576 [ 1216.297577][T31769] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x69 [ 1216.319029][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.356951][ T2339] .`: (slave c@0Ù): Releasing backup interface [ 1216.442609][ T2339] team0: Port device team_slave_0 removed [ 1216.489701][ T2339] team0: Port device team_slave_1 removed [ 1216.519267][ T2339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.530256][ T2339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.545686][ T2339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1216.593780][ T2343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1216.880229][ T2373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6639'. [ 1216.956161][T31770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.968056][T22140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.983094][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.683633][T22140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.746676][ T2403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6645'. [ 1218.760527][ T2403] syzkaller0: entered promiscuous mode [ 1218.766524][ T2403] syzkaller0: entered allmulticast mode [ 1218.874348][T31760] net_ratelimit: 1 callbacks suppressed [ 1218.874370][T31760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.891761][T31331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.901874][T31331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.113788][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.189407][ T2347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1219.204798][ T2386] netlink: 'syz.1.6642': attribute type 11 has an invalid length. [ 1219.214871][ T2386] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6642'. [ 1219.499277][ T2424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6651'. [ 1219.608877][ T2424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6651'. [ 1219.707916][ T2433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.961727][ T2439] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1220.159214][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.732447][ T2490] __nla_validate_parse: 1 callbacks suppressed [ 1220.732467][ T2490] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6667'. [ 1220.805024][ T2505] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6667'. [ 1221.070495][ T2519] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 1221.131362][ T2518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6672'. [ 1221.158668][ T2513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6670'. [ 1221.194256][T31331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.214279][ T2513] tc action pedit 'at' offset 6 out of bounds [ 1221.238189][ T2513] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1221.246544][ T10] IPVS: starting estimator thread 0... [ 1221.354342][ T2521] IPVS: using max 29 ests per chain, 69600 per kthread [ 1221.483027][ T2534] netlink: 'syz.1.6676': attribute type 2 has an invalid length. [ 1221.726315][ T2550] netlink: 'syz.5.6678': attribute type 1 has an invalid length. [ 1221.982507][ T2538] gretap1: entered allmulticast mode [ 1221.996115][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.040600][ T2538] bond2: (slave gretap1): making interface the new active one [ 1222.096082][ T2538] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1222.234187][T31331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.295619][ T2574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6686'. [ 1222.307723][ T2573] netlink: 'syz.1.6685': attribute type 12 has an invalid length. [ 1222.566540][ T2587] syzkaller1: entered promiscuous mode [ 1222.594049][ T2587] syzkaller1: entered allmulticast mode [ 1223.296435][ T2630] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1223.319169][ T2630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6700'. [ 1223.540385][ T2633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6702'. [ 1223.714492][ T2650] netlink: 'syz.2.6701': attribute type 9 has an invalid length. [ 1224.884584][T31327] net_ratelimit: 7 callbacks suppressed [ 1224.884607][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.053164][T31312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.926830][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.966086][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.993925][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.061152][ T2619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1228.084972][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.093866][ T2619] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1228.264404][ T2619] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1228.290611][ T2619] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1228.827723][ T2705] xt_hashlimit: size too large, truncated to 1048576 [ 1228.889546][ T2710] syzkaller0: entered promiscuous mode [ 1228.902083][ T2710] syzkaller0: entered allmulticast mode [ 1228.909466][ T2715] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6716'. [ 1228.982669][ T2714] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1228.983761][ T2717] netlink: 235 bytes leftover after parsing attributes in process `syz.2.6718'. [ 1228.999597][ T2713] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1229.033738][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.300781][ T2731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6721'. [ 1229.319606][ T2731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6721'. [ 1229.587779][ T2747] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 1229.868807][ T2764] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6727'. [ 1229.951853][ T2764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6727'. [ 1229.982945][ T2764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6727'. [ 1230.073966][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.211574][ T2780] C: renamed from veth1_to_team [ 1230.250971][ T2780] netlink: 'syz.5.6729': attribute type 1 has an invalid length. [ 1230.292869][ T2780] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6729'. [ 1230.328487][ T2780] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1230.683016][ T2801] netlink: 193 bytes leftover after parsing attributes in process `syz.1.6733'. [ 1230.861612][ T2812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6735'. [ 1231.113658][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.121842][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.571391][ T2741] lo speed is unknown, defaulting to 1000 [ 1232.156500][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.221283][ T2896] netlink: 'syz.2.6745': attribute type 1 has an invalid length. [ 1232.414386][ T2896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1232.497369][ T2899] vlan3: entered allmulticast mode [ 1232.508748][ T2899] bond4: entered allmulticast mode [ 1232.617867][ T2902] bond4: (slave geneve2): making interface the new active one [ 1232.635427][ T2902] geneve2: entered allmulticast mode [ 1232.667597][ T2902] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1232.781458][ T2916] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.946248][T31771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.035897][T22140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.143587][ T2934] netlink: 'syz.2.6752': attribute type 1 has an invalid length. [ 1233.202052][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.213891][ T2934] netlink: 'syz.2.6752': attribute type 2 has an invalid length. [ 1233.244299][ T2941] netlink: 'syz.2.6752': attribute type 1 has an invalid length. [ 1233.285013][ T2938] syzkaller1: entered promiscuous mode [ 1233.314469][ T2938] syzkaller1: entered allmulticast mode [ 1233.364638][ T2941] netlink: 'syz.2.6752': attribute type 2 has an invalid length. [ 1234.046012][ T2936] tipc: Failed to remove unknown binding: 66,0,0/0:3808626818/3808626820 [ 1234.059188][ T2936] tipc: Failed to remove unknown binding: 66,0,0/0:3808626818/3808626819 [ 1234.099190][ T2932] tipc: Failed to remove unknown binding: 66,0,0/0:3808626818/3808626820 [ 1234.129370][ T2932] tipc: Failed to remove unknown binding: 66,0,0/0:3808626818/3808626819 [ 1234.155937][T31312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.236465][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.735745][ T2990] netlink: 'syz.6.6765': attribute type 1 has an invalid length. [ 1234.861933][ T2990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1234.876376][ T2997] __nla_validate_parse: 7 callbacks suppressed [ 1234.876400][ T2997] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6765'. [ 1235.004619][ T2990] bond4 (unregistering): Released all slaves [ 1235.140165][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1235.205841][ T3007] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1235.273886][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.351007][ T3009] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6769'. [ 1235.394711][ T3009] netlink: 192 bytes leftover after parsing attributes in process `syz.5.6769'. [ 1235.442466][ T3015] netlink: 'syz.0.6770': attribute type 1 has an invalid length. [ 1235.490924][ T3015] bond3: entered promiscuous mode [ 1235.498826][ T3015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1235.534086][ T3019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6770'. [ 1235.601340][ T3018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6770'. [ 1235.612003][ T3018] bond3: entered allmulticast mode [ 1235.636805][ T3026] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6773'. [ 1235.670492][ T3023] nbd: must specify an index to disconnect [ 1235.705876][ T3024] nbd: must specify an index to disconnect [ 1235.758837][ T3018] bond3: (slave bridge1): making interface the new active one [ 1235.786386][ T3018] bridge1: entered promiscuous mode [ 1235.803017][ T3018] bridge1: entered allmulticast mode [ 1235.817244][ T3018] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1235.896420][ T3019] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 1236.050572][ T3038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6777'. [ 1236.092986][ T3038] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6777'. [ 1236.241469][ T3038] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6777'. [ 1236.288969][ T3038] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6777'. [ 1236.315325][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.667618][ T3064] netlink: 'syz.0.6784': attribute type 21 has an invalid length. [ 1236.685630][ T3064] netlink: 'syz.0.6784': attribute type 1 has an invalid length. [ 1237.204320][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.355065][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.955341][ T3122] syzkaller0: entered promiscuous mode [ 1237.967539][ T3122] syzkaller0: entered allmulticast mode [ 1238.098703][T31312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.144354][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.189887][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.395197][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.523716][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.800483][ T3128] veth7: entered allmulticast mode [ 1238.827292][ T3134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1238.993865][ T3134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.076827][ T3141] netdevsim netdevsim2 €Â: renamed from netdevsim0 (while UP) [ 1239.089672][ T3143] erspan0: entered promiscuous mode [ 1239.263464][ T3152] IPVS: Unknown mcast interface: vcan0 [ 1239.359943][ T3152] bond0: entered promiscuous mode [ 1239.377594][ T3152] debugfs: 'hsr1' already exists in 'hsr' [ 1239.398145][ T3152] Cannot create hsr debugfs directory [ 1239.428884][ T3152] hsr1: entered promiscuous mode [ 1239.522013][ T3162] netlink: 'syz.1.6808': attribute type 1 has an invalid length. [ 1239.666967][ T3162] macsec3: entered promiscuous mode [ 1239.684257][ T3162] batadv0: entered promiscuous mode [ 1239.690447][ T3162] macsec3: entered allmulticast mode [ 1239.700007][ T3162] batadv0: entered allmulticast mode [ 1239.707452][ T3162] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 1239.735845][ T3107] lo speed is unknown, defaulting to 1000 [ 1240.071553][ T3184] __nla_validate_parse: 14 callbacks suppressed [ 1240.071576][ T3184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6815'. [ 1240.245003][T31312] net_ratelimit: 3 callbacks suppressed [ 1240.245034][T31312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.480952][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.513165][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.567411][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.659253][T22140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.289021][T22140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.599941][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.634952][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.976191][ T3203] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6819'. [ 1245.172037][ T3219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6819'. [ 1245.257115][ T3222] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6822'. [ 1245.556952][ T3237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.568041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.579688][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.591917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.675032][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.726652][ T3245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6826'. [ 1246.130141][ T3255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6829'. [ 1246.170076][ T3255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6829'. [ 1246.198979][ T3255] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6829'. [ 1246.314182][T31312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.587001][ T3266] ip6gre1: entered promiscuous mode [ 1246.602595][ T3266] ip6gre1: entered allmulticast mode [ 1246.714063][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.009651][ T3273] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6837'. [ 1247.058044][ T3273] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6837'. [ 1247.090337][ T3239] lo speed is unknown, defaulting to 1000 [ 1247.200546][ T3279] netlink: 'syz.1.6838': attribute type 1 has an invalid length. [ 1247.266074][ T3279] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1247.379451][ T3266] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1247.389093][ T3278] bond8: (slave veth9): Enslaving as an active interface with a down link [ 1247.466201][ T3279] erspan0: left promiscuous mode [ 1247.518363][ T3279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.550925][ T3279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.577360][ T3279] dummy0: left promiscuous mode [ 1247.601446][ T3279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.697177][ T3279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.716105][ T3279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.732350][ T3279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1247.744480][ T3279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1247.757775][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.771147][ T3279] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1247.792915][T31771] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1247.801686][T31771] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1247.827173][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1247.856526][T31770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.863797][T31770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.901202][T31770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.908518][T31770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.136736][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1248.175913][ T3298] bond8: (slave batadv1): making interface the new active one [ 1248.197033][ T3298] batadv1: entered promiscuous mode [ 1248.227270][ T3298] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 1248.314236][ T3310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6842'. [ 1248.334335][T31312] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1248.555226][T31312] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1248.625906][ T3322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6844'. [ 1248.680287][ T3322] netlink: 'syz.0.6844': attribute type 24 has an invalid length. [ 1248.748735][ T3323] batadv0: entered promiscuous mode [ 1248.766703][ T3323] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1249.189269][ T3340] ip6t_srh: unknown srh invflags 4000 [ 1249.775590][ T3367] bond9: entered allmulticast mode [ 1249.845216][ T3370] macvlan2: entered promiscuous mode [ 1249.860205][ T3370] macvlan2: entered allmulticast mode [ 1249.873687][ T3370] bond9: (slave macvlan2): Opening slave failed [ 1250.452050][ T3401] syzkaller0: left promiscuous mode [ 1250.475020][ T3401] syzkaller0: left allmulticast mode [ 1250.490586][ T3403] __nla_validate_parse: 4 callbacks suppressed [ 1250.490606][ T3403] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6871'. [ 1250.875308][T31330] net_ratelimit: 7 callbacks suppressed [ 1250.875330][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.011675][ T3420] bond10: option downdelay: invalid value (18446744073709551487) [ 1251.019951][ T3420] bond10: option downdelay: allowed values 0 - 2147483647 [ 1251.030875][ T3420] bond10 (unregistering): Released all slaves [ 1251.392179][ T3438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.400739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.410354][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.419417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.437076][ T3435] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1251.654019][ T3451] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6882'. [ 1251.897326][ T3455] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6883'. [ 1251.917371][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.072887][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1252.158235][ T3465] tipc: Started in network mode [ 1252.178469][ T3465] tipc: Node identity 4246, cluster identity 4711 [ 1252.195179][ T3465] tipc: Node number set to 16966 [ 1252.219184][ T3465] tipc: Cannot configure node identity twice [ 1252.242629][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.405462][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.439651][ T3472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6888'. [ 1252.469375][ T3472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1252.742224][ T3488] netlink: 'syz.5.6894': attribute type 32 has an invalid length. [ 1252.767037][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6894'. [ 1252.867109][ T3496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.924530][ T3488] bond3: Setting coupled_control to off (0) [ 1252.941865][ T3497] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6896'. [ 1252.964803][ T3496] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6895'. [ 1252.986755][ T3497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6896'. [ 1253.018139][ T3496] netlink: 296 bytes leftover after parsing attributes in process `syz.6.6895'. [ 1253.099066][ T3483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6891'. [ 1253.240688][ T3511] tipc: Started in network mode [ 1253.293224][ T3511] tipc: Node identity ac14140f, cluster identity 4711 [ 1253.327639][ T3511] tipc: New replicast peer: 255.255.255.255 [ 1253.358298][ T3511] tipc: Enabled bearer , priority 10 [ 1253.373593][ T3510] tipc: Enabling of bearer rejected, already enabled [ 1253.626562][ T3527] netlink: 'syz.2.6902': attribute type 4 has an invalid length. [ 1253.756810][ T3535] netlink: 'syz.5.6904': attribute type 4 has an invalid length. [ 1253.793461][ T3534] [ 1253.795857][ T3534] ====================================================== [ 1253.802932][ T3534] WARNING: possible circular locking dependency detected [ 1253.810015][ T3534] syzkaller #0 Not tainted [ 1253.814458][ T3534] ------------------------------------------------------ [ 1253.821619][ T3534] syz.1.6903/3534 is trying to acquire lock: [ 1253.827643][ T3534] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x660 [ 1253.837133][ T3534] [ 1253.837133][ T3534] but task is already holding lock: [ 1253.844528][ T3534] ffff88803c645060 (k-sk_lock-AF_INET/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x144/0x810 [ 1253.855311][ T3534] [ 1253.855311][ T3534] which lock already depends on the new lock. [ 1253.855311][ T3534] [ 1253.865747][ T3534] [ 1253.865747][ T3534] the existing dependency chain (in reverse order) is: [ 1253.874799][ T3534] [ 1253.874799][ T3534] -> #7 (k-sk_lock-AF_INET/1){+.+.}-{0:0}: [ 1253.882959][ T3534] lock_sock_nested+0x41/0x100 [ 1253.888302][ T3534] mptcp_subflow_create_socket+0x144/0x810 [ 1253.894676][ T3534] __mptcp_nmpc_sk+0x155/0x770 [ 1253.900085][ T3534] mptcp_connect+0x6f/0x7a0 [ 1253.905161][ T3534] __inet_stream_connect+0x258/0xe00 [ 1253.911111][ T3534] inet_stream_connect+0x66/0xa0 [ 1253.916618][ T3534] __sys_connect+0x323/0x460 [ 1253.921786][ T3534] __x64_sys_connect+0x7a/0x90 [ 1253.927124][ T3534] do_syscall_64+0x174/0x580 [ 1253.932287][ T3534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.938743][ T3534] [ 1253.938743][ T3534] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1253.946444][ T3534] lock_sock_nested+0x41/0x100 [ 1253.951788][ T3534] inet_shutdown+0x6a/0x390 [ 1253.956876][ T3534] nbd_mark_nsock_dead+0x2cb/0x550 [ 1253.962710][ T3534] recv_work+0x1cee/0x1e10 [ 1253.967687][ T3534] process_scheduled_works+0xa8e/0x14e0 [ 1253.973831][ T3534] worker_thread+0xa47/0xfb0 [ 1253.978991][ T3534] kthread+0x388/0x470 [ 1253.983661][ T3534] ret_from_fork+0x514/0xb70 [ 1253.988870][ T3534] ret_from_fork_asm+0x1a/0x30 [ 1253.994198][ T3534] [ 1253.994198][ T3534] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1254.001892][ T3534] __mutex_lock+0x19d/0x1550 [ 1254.007057][ T3534] nbd_queue_rq+0x373/0x1150 [ 1254.012220][ T3534] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1254.018444][ T3534] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1254.025433][ T3534] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1254.032000][ T3534] blk_mq_run_work_fn+0x16c/0x300 [ 1254.037594][ T3534] process_scheduled_works+0xa8e/0x14e0 [ 1254.043707][ T3534] worker_thread+0xa47/0xfb0 [ 1254.048868][ T3534] kthread+0x388/0x470 [ 1254.053516][ T3534] ret_from_fork+0x514/0xb70 [ 1254.058683][ T3534] ret_from_fork_asm+0x1a/0x30 [ 1254.064005][ T3534] [ 1254.064005][ T3534] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1254.071269][ T3534] __mutex_lock+0x19d/0x1550 [ 1254.076433][ T3534] nbd_queue_rq+0xc1/0x1150 [ 1254.081524][ T3534] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1254.087656][ T3534] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1254.094564][ T3534] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1254.101117][ T3534] blk_mq_run_work_fn+0x16c/0x300 [ 1254.106712][ T3534] process_scheduled_works+0xa8e/0x14e0 [ 1254.112828][ T3534] worker_thread+0xa47/0xfb0 [ 1254.117986][ T3534] kthread+0x388/0x470 [ 1254.122633][ T3534] ret_from_fork+0x514/0xb70 [ 1254.127794][ T3534] ret_from_fork_asm+0x1a/0x30 [ 1254.133209][ T3534] [ 1254.133209][ T3534] -> #3 (set->srcu){.+.+}-{0:0}: [ 1254.140380][ T3534] __synchronize_srcu+0xc9/0x2f0 [ 1254.145951][ T3534] elevator_switch+0x1e8/0x7b0 [ 1254.151359][ T3534] elevator_change+0x2fa/0x480 [ 1254.156697][ T3534] elevator_set_default+0x375/0x440 [ 1254.162486][ T3534] blk_register_queue+0x3f3/0x4e0 [ 1254.168189][ T3534] __add_disk+0x6cb/0xe30 [ 1254.173135][ T3534] add_disk_fwnode+0xfb/0x4b0 [ 1254.178377][ T3534] nbd_dev_add+0x733/0xb60 [ 1254.183370][ T3534] nbd_init+0x15f/0x1e0 [ 1254.188197][ T3534] do_one_initcall+0x250/0x870 [ 1254.193538][ T3534] do_initcall_level+0x10a/0x1a0 [ 1254.199091][ T3534] do_initcalls+0x59/0xa0 [ 1254.203993][ T3534] kernel_init_freeable+0x29d/0x3e0 [ 1254.209762][ T3534] kernel_init+0x1d/0x1d0 [ 1254.214662][ T3534] ret_from_fork+0x514/0xb70 [ 1254.219820][ T3534] ret_from_fork_asm+0x1a/0x30 [ 1254.225150][ T3534] [ 1254.225150][ T3534] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1254.233021][ T3534] __mutex_lock+0x19d/0x1550 [ 1254.238186][ T3534] elevator_change+0x1af/0x480 [ 1254.243516][ T3534] elevator_set_none+0xb5/0x140 [ 1254.248934][ T3534] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1254.255319][ T3534] nbd_start_device+0x189/0xb30 [ 1254.260739][ T3534] nbd_genl_connect+0x1597/0x1c10 [ 1254.266337][ T3534] genl_family_rcv_msg_doit+0x233/0x340 [ 1254.272533][ T3534] genl_rcv_msg+0x614/0x7a0 [ 1254.277606][ T3534] netlink_rcv_skb+0x226/0x4a0 [ 1254.282950][ T3534] genl_rcv+0x28/0x40 [ 1254.287512][ T3534] netlink_unicast+0x7bb/0x940 [ 1254.292867][ T3534] netlink_sendmsg+0x813/0xb40 [ 1254.298197][ T3534] sock_sendmsg_nosec+0x13a/0x180 [ 1254.303786][ T3534] ____sys_sendmsg+0x54e/0x850 [ 1254.309127][ T3534] ___sys_sendmsg+0x2a5/0x360 [ 1254.314382][ T3534] __x64_sys_sendmsg+0x1b1/0x290 [ 1254.319896][ T3534] do_syscall_64+0x174/0x580 [ 1254.325062][ T3534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.331519][ T3534] [ 1254.331519][ T3534] -> #1 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 1254.340178][ T3534] blk_alloc_queue+0x544/0x690 [ 1254.345525][ T3534] __blk_mq_alloc_disk+0x194/0x390 [ 1254.351225][ T3534] nbd_dev_add+0x494/0xb60 [ 1254.356221][ T3534] nbd_init+0x15f/0x1e0 [ 1254.360940][ T3534] do_one_initcall+0x250/0x870 [ 1254.366277][ T3534] do_initcall_level+0x10a/0x1a0 [ 1254.371790][ T3534] do_initcalls+0x59/0xa0 [ 1254.376695][ T3534] kernel_init_freeable+0x29d/0x3e0 [ 1254.382470][ T3534] kernel_init+0x1d/0x1d0 [ 1254.387374][ T3534] ret_from_fork+0x514/0xb70 [ 1254.392539][ T3534] ret_from_fork_asm+0x1a/0x30 [ 1254.397869][ T3534] [ 1254.397869][ T3534] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1254.405138][ T3534] __lock_acquire+0x1520/0x2cf0 [ 1254.410563][ T3534] lock_acquire+0x106/0x350 [ 1254.415644][ T3534] fs_reclaim_acquire+0x71/0x100 [ 1254.421183][ T3534] __kmalloc_cache_noprof+0x61/0x660 [ 1254.427052][ T3534] ref_tracker_alloc+0x15b/0x4b0 [ 1254.432651][ T3534] get_net_track+0x16e/0x230 [ 1254.437813][ T3534] sk_net_refcnt_upgrade+0xb2/0x130 [ 1254.443589][ T3534] mptcp_subflow_create_socket+0x32f/0x810 [ 1254.449965][ T3534] __mptcp_nmpc_sk+0x155/0x770 [ 1254.455296][ T3534] mptcp_pm_nl_add_addr_doit+0xe0c/0x1400 [ 1254.461693][ T3534] genl_family_rcv_msg_doit+0x233/0x340 [ 1254.467806][ T3534] genl_rcv_msg+0x614/0x7a0 [ 1254.472876][ T3534] netlink_rcv_skb+0x226/0x4a0 [ 1254.478220][ T3534] genl_rcv+0x28/0x40 [ 1254.482767][ T3534] netlink_unicast+0x7bb/0x940 [ 1254.488100][ T3534] netlink_sendmsg+0x813/0xb40 [ 1254.491539][ T3539] Bluetooth: MGMT ver 1.23 [ 1254.493419][ T3534] sock_sendmsg_nosec+0x13a/0x180 [ 1254.493450][ T3534] ____sys_sendmsg+0x54e/0x850 [ 1254.493486][ T3534] ___sys_sendmsg+0x2a5/0x360 [ 1254.493517][ T3534] __x64_sys_sendmsg+0x1b1/0x290 [ 1254.493547][ T3534] do_syscall_64+0x174/0x580 [ 1254.493577][ T3534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.493599][ T3534] [ 1254.493599][ T3534] other info that might help us debug this: [ 1254.493599][ T3534] [ 1254.493609][ T3534] Chain exists of: [ 1254.493609][ T3534] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET/1 [ 1254.493609][ T3534] [ 1254.493658][ T3534] Possible unsafe locking scenario: [ 1254.493658][ T3534] [ 1254.493738][ T3534] CPU0 CPU1 [ 1254.493773][ T3534] ---- ---- [ 1254.493782][ T3534] lock(k-sk_lock-AF_INET/1); [ 1254.493806][ T3534] lock(sk_lock-AF_INET); [ 1254.493825][ T3534] lock(k-sk_lock-AF_INET/1); [ 1254.493850][ T3534] lock(fs_reclaim); [ 1254.493866][ T3534] [ 1254.493866][ T3534] *** DEADLOCK *** [ 1254.493866][ T3534] [ 1254.493902][ T3534] 4 locks held by syz.1.6903/3534: [ 1254.493916][ T3534] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1254.493999][ T3534] #1: ffffffff9009c920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1254.494058][ T3534] #2: ffff8880555b70a0 (msk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_pm_nl_add_addr_doit+0xdb4/0x1400 [ 1254.494125][ T3534] #3: ffff88803c645060 (k-sk_lock-AF_INET/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x144/0x810 [ 1254.494185][ T3534] [ 1254.494185][ T3534] stack backtrace: [ 1254.494199][ T3534] CPU: 0 UID: 0 PID: 3534 Comm: syz.1.6903 Not tainted syzkaller #0 PREEMPT(full) [ 1254.494223][ T3534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1254.494236][ T3534] Call Trace: [ 1254.494244][ T3534] [ 1254.494254][ T3534] dump_stack_lvl+0xe8/0x150 [ 1254.494287][ T3534] print_circular_bug+0x2e1/0x300 [ 1254.494376][ T3534] check_noncircular+0x12e/0x150 [ 1254.494501][ T3534] __lock_acquire+0x1520/0x2cf0 [ 1254.494577][ T3534] ? __schedule+0x17ef/0x56c0 [ 1254.494652][ T3534] ? check_path+0x21/0x40 [ 1254.494716][ T3534] ? lockdep_unlock+0x5d/0xd0 [ 1254.494781][ T3534] ? __lock_acquire+0x13e8/0x2cf0 [ 1254.494862][ T3534] ? __kmalloc_cache_noprof+0x61/0x660 [ 1254.494928][ T3534] lock_acquire+0x106/0x350 [ 1254.494989][ T3534] ? __kmalloc_cache_noprof+0x61/0x660 [ 1254.495062][ T3534] ? __pfx___schedule+0x10/0x10 [ 1254.495135][ T3534] ? lockdep_hardirqs_on+0x7a/0x110 [ 1254.495220][ T3534] fs_reclaim_acquire+0x71/0x100 [ 1254.495293][ T3534] ? __kmalloc_cache_noprof+0x61/0x660 [ 1254.495365][ T3534] __kmalloc_cache_noprof+0x61/0x660 [ 1254.495432][ T3534] ? preempt_schedule_thunk+0x16/0x40 [ 1254.495505][ T3534] ? ref_tracker_alloc+0x15b/0x4b0 [ 1254.495575][ T3534] ? ref_tracker_alloc+0x15b/0x4b0 [ 1254.495640][ T3534] ? rcu_is_watching+0x15/0xb0 [ 1254.495725][ T3534] ref_tracker_alloc+0x15b/0x4b0 [ 1254.495822][ T3534] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1254.495901][ T3534] ? ref_tracker_free+0x518/0x830 [ 1254.495977][ T3534] ? __pfx_ref_tracker_free+0x10/0x10 [ 1254.496042][ T3534] ? sk_net_refcnt_upgrade+0x8c/0x130 [ 1254.496126][ T3534] ? mptcp_subflow_create_socket+0x32f/0x810 [ 1254.496188][ T3534] ? __mptcp_nmpc_sk+0x155/0x770 [ 1254.496243][ T3534] ? mptcp_pm_nl_add_addr_doit+0xe0c/0x1400 [ 1254.496366][ T3534] ? genl_family_rcv_msg_doit+0x233/0x340 [ 1254.496448][ T3534] ? net_passive_dec+0x177/0x250 [ 1254.496570][ T3534] ? __pfx_net_passive_dec+0x10/0x10 [ 1254.496636][ T3534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.496707][ T3534] get_net_track+0x16e/0x230 [ 1254.496792][ T3534] sk_net_refcnt_upgrade+0xb2/0x130 [ 1254.496885][ T3534] mptcp_subflow_create_socket+0x32f/0x810 [ 1254.496951][ T3534] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1254.497009][ T3534] ? do_raw_spin_lock+0x12b/0x2f0 [ 1254.497065][ T3534] ? lock_sock_nested+0x6a/0x100 [ 1254.497136][ T3534] __mptcp_nmpc_sk+0x155/0x770 [ 1254.497200][ T3534] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1254.497282][ T3534] ? mptcp_pm_nl_add_addr_doit+0xdb4/0x1400 [ 1254.497365][ T3534] ? __local_bh_enable_ip+0xd0/0x130 [ 1254.497454][ T3534] mptcp_pm_nl_add_addr_doit+0xe0c/0x1400 [ 1254.497558][ T3534] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 1254.497683][ T3534] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1254.497757][ T3534] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1254.497839][ T3534] genl_family_rcv_msg_doit+0x233/0x340 [ 1254.497916][ T3534] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1254.498001][ T3534] ? bpf_lsm_capable+0x9/0x20 [ 1254.498086][ T3534] ? security_capable+0x7e/0x2c0 [ 1254.498234][ T3534] genl_rcv_msg+0x614/0x7a0 [ 1254.498310][ T3534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1254.498373][ T3534] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 1254.498456][ T3534] ? __pfx_ref_tracker_free+0x10/0x10 [ 1254.498548][ T3534] netlink_rcv_skb+0x226/0x4a0 [ 1254.498638][ T3534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1254.498705][ T3534] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1254.498752][ T3534] ? down_read+0x2be/0x330 [ 1254.498812][ T3534] genl_rcv+0x28/0x40 [ 1254.498888][ T3534] netlink_unicast+0x7bb/0x940 [ 1254.498974][ T3534] netlink_sendmsg+0x813/0xb40 [ 1254.499034][ T3534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1254.499089][ T3534] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1254.499159][ T3534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1254.499211][ T3534] sock_sendmsg_nosec+0x13a/0x180 [ 1254.499275][ T3534] ____sys_sendmsg+0x54e/0x850 [ 1254.499370][ T3534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1254.499464][ T3534] ? import_iovec+0x73/0xa0 [ 1254.499564][ T3534] ___sys_sendmsg+0x2a5/0x360 [ 1254.499648][ T3534] ? __lock_acquire+0x683/0x2cf0 [ 1254.499728][ T3534] ? __pfx____sys_sendmsg+0x10/0x10 [ 1254.499821][ T3534] ? futex_wait+0x2a2/0x390 [ 1254.499937][ T3534] ? __fget_files+0x2a/0x420 [ 1254.499998][ T3534] ? __fget_files+0x3a2/0x420 [ 1254.500081][ T3534] __x64_sys_sendmsg+0x1b1/0x290 [ 1254.500173][ T3534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1254.500300][ T3534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.500374][ T3534] do_syscall_64+0x174/0x580 [ 1254.500482][ T3534] ? trace_irq_disable+0x3b/0x140 [ 1254.500555][ T3534] ? clear_bhb_loop+0x40/0x90 [ 1254.500620][ T3534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.500677][ T3534] RIP: 0033:0x7fb34239de59 [ 1254.500738][ T3534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.500782][ T3534] RSP: 002b:00007fb343212028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1254.500844][ T3534] RAX: ffffffffffffffda RBX: 00007fb342626090 RCX: 00007fb34239de59 [ 1254.500887][ T3534] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 1254.500927][ T3534] RBP: 00007fb342433e6f R08: 0000000000000000 R09: 0000000000000000 [ 1254.500961][ T3534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1254.500988][ T3534] R13: 00007fb342626128 R14: 00007fb342626090 R15: 00007ffcc9acf6b8 [ 1254.501051][ T3534] [ 1254.533389][T22140] tipc: Node number set to 2886997007 [ 1256.234416][T31330] net_ratelimit: 6 callbacks suppressed [ 1256.234432][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.273565][ T9237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.313520][ T9237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.484724][T31312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.353722][ T9237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.132901][T31769] batadv1: left promiscuous mode [ 1260.393529][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.193040][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1261.433651][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.523475][T31312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.844281][T22140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.474367][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.513620][T31327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog