last executing test programs: 1m42.698671003s ago: executing program 4 (id=2343): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r3 = epoll_create(0xc) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) unshare(0x2c020400) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x8}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1m42.555440372s ago: executing program 4 (id=2346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000200000000001c0012800b00000000000000006c00000c00028006000fe089f297d20003000000"], 0x3c}}, 0x0) 1m42.535078607s ago: executing program 3 (id=2347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 1m42.437589367s ago: executing program 4 (id=2348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000300000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000002c0)="8d09327c", 0x4}, {&(0x7f0000000280)="b01ef9880b81", 0x6}], 0x3) 1m42.292832464s ago: executing program 3 (id=2350): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111ac0000000000850000008c00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970113, 0x20c0}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x4}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1000, 0xd28, 0xfffffffb, 0x88a8}}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x230, 0x13, 0x1, 0x70bd2c, 0x25dfdbfb, {0x1a, 0x3, 0x4, 0x1, {0x4e23, 0x4e24, [0x3, 0x8, 0x8000, 0x224], [0xa, 0xaea7, 0x3, 0x5], 0x0, [0x1ff, 0x5]}, 0xc, 0x2f}, [@INET_DIAG_REQ_BYTECODE={0x91, 0x1, "a550b29bec23f7c4c7bf8e4ba40fd052e4aa0188a95643215dc291e5491a031664e4ecfad4805d998ae391750cf625f33040226455244391c9f7033301ea1a27d4f3cbbb3920df9ae732381e6c9eae832b65d9746423107da35be5929001355437a86d947ec02fb238aee5f8acce49c10026fa000c55f2d22b53238993fa262edbb2dd4c8f3649bad9359049e1"}, @INET_DIAG_REQ_BYTECODE={0x14e, 0x1, "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"}]}, 0x230}, 0x1, 0x0, 0x0, 0x40800}, 0x4011) recvmmsg$unix(r3, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000000280)=""/26, 0x1a}], 0x3}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000016c0)=""/121, 0x79}], 0x1}}], 0x2, 0x10100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) 1m42.147387394s ago: executing program 3 (id=2351): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4040000) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xe}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bond\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x400, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x50) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) (async) recvmsg$can_raw(r0, &(0x7f00000036c0)={&(0x7f0000000540)=@caif=@dgm, 0x80, &(0x7f0000003680)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/177, 0xb1}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x4}, 0x40000100) (async) sendto$inet6(r0, &(0x7f0000003700)="4cc2e4993ddb843c1d65752dba59f61ce9edd26e5c061199c5bad01ddc5c03ba", 0x20, 0x80, &(0x7f0000003740)={0xa, 0x4e24, 0x9, @remote, 0xd06}, 0x1c) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000003800)=@get={0x1, &(0x7f0000003780)=""/89, 0x8000}) sendmmsg(r0, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000003840)="0fdcb13ec53e91d92a6b04ba27aa64e1e69bf629955d06d33791b2bdf937e05de3d07b73c6ce768133649c59c9225c74e9d1ceb7bd6d3c6b714cf9a5b60ccdcf1bfba5a3857fd1637a28e90e33d78ac3", 0x50}, {&(0x7f00000038c0)="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", 0x1000}, {&(0x7f00000048c0)="5c249731dde0ff329a1d15a3db4a9415d9e418a57e335b525d4a0c6281af5dda5354e65cc2d2ef563878b5d47f2f38097025d4f13ebdb4404e8c52efc6fffeed9b7eb043f0ff61a66a08820c3e0764307dc4e4e7b80bdf67f8c4a88884c52e7d54037efad4e93cb9abdc117d39ff2cc7678e7cb771117251a47dcda7ba0aaf7211b6cb9362ed6bee3567a034d29c2392641b1c0eae8b377d5543ab9d2ad7f412b49d34b18a52e9712b32de9fee1bb617761489a4b241bcf1e586bad56dc479def8b8c0645a5033688fb538", 0xcb}, {&(0x7f00000049c0)="6fd6219760027d17490b5e9a6cf824ed07bf11b47a51638eed15241346f2e294c02999f90a11cf3b04d5b176843b7877e48bfe4acae0339dd5c677b6046683d8f7f7abe61c605730e1372100588c897700b7a46eddfe32fd263570ce2093d65c9a7dfd53610251c308d3847befcf4936812190af3b9e458717a1d9efe82521429d2030b7d9c0a037b55e8b992ae26c16ea71c9cbfbed5df8706d050cbb1dd22b2d46b60d409706933f119142e332a535c3a7b91adb1337e1ab16cb1f73786fde4a0bdc1a388a59dc19578d75b1c63613185447b99b2744e7e67708138ca488ebaa3757ad886a768e280665d1b52e0c3f7fc0ee", 0xf3}, {&(0x7f0000004ac0)="eb76b7240458d6f9f457c3c2227b2f31c641c4336747d1f19170fde75d65666a7f6b52000671e911c9130301dd8cb8cdd651838889c6a72e6369e4cf4915ab8ded74a8c50ef7d32075906e03e3dfe3ca3ace80192a03b64b1998e923479e016173371223a426edb449468675708c9736465a21ffc4348ab90e6844b5ebf43928", 0x80}, {&(0x7f0000004b40)="7e73993d986e07a943a0a1bfc68eec973c7b28c788d7ac0ef945c7e8b6a09f694f7ba03d062d012bc456e2707920b94bceb8126f3ccd2f05819a9c69026af6ea778947176262dd3e34cd8e0c1ad0ec22f9a31d0e39776ecce68a8d5e298aba8283601082efce9a4495192ba15432244fdf3cb09c116ab669ff3ad6a85d53b247d4e2764eee2d3907e64f6bd834915ec75ca1d1009004a4cad478ee0f921e32", 0x9f}, {&(0x7f0000004c00)="077ca38db5036203797414f6b6e8a744b10e14e9bd25b79e113e421fc0c3aeba676696491a815ae3d3b95ecfaa658e4bc9cc41e5ee6f66bba4433e1b6e370fce62728a3f896e0bbaa7a17e79bc4270bd101e12a15006972aebdefac5337045120a276c4ece92deaff5060863a0e951f5f7d4b60f5293a78d6b82f26464b20ff37f8e4b60cea4b9df622840e682d78a50d32dc67d2eb8d03234e1", 0x9a}, {&(0x7f0000004cc0)="efbc9cd8a5469967ad03d5fc9fbac572ca6ff379166099e3ffcfe3082c52a1e88dfbe88b432f7c148ffc9d634efe603f180e1c8bf3ef06b90c0e611518fe4da29155ebf8ce6e3c", 0x47}], 0x8, &(0x7f0000004dc0)=[{0xd8, 0x103, 0x4, "a8f423f1e1c1012b7e0f153c75937b144a706f4eafa7efb178686f378abd6f4bceb2b7a60a4a1b9ea1b8fcdd2ef1bbd156960093f57d65267bb4d148c72880709673d5c9da707ba653a5d487ce6ae621c2c198a8b092e1ebd50a80dfa19e57a05403fb3c70cb71201220eacbbd48e1a722e725a551e323e3b8b54b48bbf90cb9388ad6329edcf35a83f47d0c65f848c81849477d5576877135bdc1e47ddd12a9caa8e34af1eb58e1c39b77f9a57cb13d88760d03a4295dc96a27fe9846b3f02692b4aedd1d"}, {0x30, 0x88, 0x8000, "ef9eca8f93af599120f0327d63f0d28e39b8987049675a349c9e"}, {0x40, 0x1, 0x6d8, "280bd26226ae4f0e454efb373618b18a4dc1de3b353a354dda0322f1bbeacdf23b9d4dfc3b2376bdf3d3dd4bbc6b"}, {0x20, 0x107, 0x3, "83cf66181da99ecf5ec3acdcaf"}, {0x50, 0x110, 0x7, "e6b2c665637d2880f07ef43dafd93ba6d343e2b9fe9f7345e53508d7d37201faf0bb0ba54b5deff56226d8760ff77661724f82a5588d82afadb8529e"}], 0x1b8}}, {{&(0x7f0000004f80)=@caif, 0x80, &(0x7f0000005000), 0x0, &(0x7f0000005040)=[{0x50, 0x10f, 0x753, "58ba69628dcf5029c6139ace153cc3305b6edd59be1793e08341bccc8efd1687dab7b6e634dde721d7faeab40af396331ff2491787b3fc74e88143ed"}, {0xf0, 0x102, 0x1, "200e4fa902af97d1760681a7550d220da1ce034b45ed945a30424a704afec7388ec1efd1320ab67b60e73788331fa4f4b9cad66d38d29e834c3b423a00d775c0e141565a0a9d388fbc40766ea0a76370c51e584a889faac0bd74622af2346f47c382b58d9db1545a62f022792f5f8486572215150a6cd9f958ed2cc76d49877585fb88c348bb12e69e31e506c42dd25187bb9f9ac9c2167016f7213d3777e6f7e5254b80c8082903538dda6d4d81d384d5a2a6e848c5fcf0d53030cc974bec94892e46a31dc6cda51a4a0816034b09afb776cf17f6beb2cef20f7817"}, {0xa8, 0x29, 0xd, "9440b0feaf4d272e9e2d71712640b058189ccf5cc1525ce0beda6d9bcff9883ffa16f1061def522d12f3d3607902f9749fc75b4533b4c14fab21e33dfcb995fea73bad522fd8bdf6041671a3ad86369f205b9157cfb80e9654e441fc59b873eb05d2ceaf3107e1d273d3befa6fc7c874d9e7b80702980c636071e244142698634f6e781362985395e5db3cecbf9aa95e275892e0"}], 0x1e8}}, {{&(0x7f0000005240)=@l2={0x1f, 0xfffc, @none, 0x6, 0x1}, 0x80, &(0x7f00000065c0)=[{&(0x7f00000052c0)="bf7805b97b7ca1716685b511d42532ca1cd09a407d103ee7d64645bb9201fba9a45b04e95729bedd8968864b3b062310c9b67be412df0a073d1e3076422de61662ac02adf11e7a17fe3bc5bb5cc22c07eb20d8a6681e708ec95c627948c2a0a3cd5ce06490772ef27213b94b5fe4823e8c3cd691dc510ce80fe1f45c8e32148600952f36e1fa64797ed56e191840adc2e89c3d3255e27d21195dc794449067ee723b13416fb65e22e23017f994f0eecb7c9744b955916a73180bcc2cf61798d277e920bae4615ab2358b5216307c768355cce5ce4a1c2ef4da14a36610afa65f779e4469e2d399", 0xe7}, {&(0x7f00000053c0)="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", 0x1000}, {&(0x7f00000063c0)="4cbe08d7f85ae5d53f611f3b5e11e9806db1ff5ced06e8847bc78b73411f2ebebfe39d0b3cbe6066bc739eec7bc9d3bfb5979dbdbbb58f64a25cacb93515c9da9e4247ecb1571c18b4ac894821566554e6b53f0d4ed6d65c2e097e861f21385a293ebadf14017e", 0x67}, {&(0x7f0000006440)="c02f9ba5d8d9c243bb582f794147f1fe3f0b442a1e6a301a878434ae964ca49df18023426e385879ab7874f11f82ececf362aeefc98f4745572239bc26aeb8c8b4361ef3bc5897", 0x47}, {&(0x7f00000064c0)="e91b862d498a9034b6b38401bdecd07f645123bbb7f24dc2c073400291eee0bc4583cc0c2557faf4c3e5698e3672f73b6b7861acb2d29bd872651fbc182b22ce0bf1422a400511e6329767cadeda9636700f11246835f2fd2f27af46ea2829afc4c5926e4e4061f147e28d9396706f06c0893095bd7c46a9aaa4c7e812788009c0efcad549c2d4dca6a7ee5cfa15465331d1110fef791408406a345830f5189fb3145bd5f0dc17ce68638600341b8b63f606fb0796e33b5357a4f6ba2831b3bddb2b98c32ad5e33aa455024a65", 0xcd}], 0x5}}, {{&(0x7f0000006640)=@ax25={{0x3, @null, 0x2}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x80, &(0x7f0000006900)=[{&(0x7f00000066c0)="63105b77a6f3a25818143f84b4f84bbc5e12b391581fb04715a8f71f68bd1991c76e536cc32c886bc3e4c796fdea119608ec8c0f4b03dc42eb31e763c1071581ecd0feb1b515e9a15035ab8cc7453052b970164cfcb87da0c29bd00ebe93fea5cfa306aed812a5bc812ce21ac58dcd011fc533ff2b6267eb8d844edc9e41a41dd72e0a6f3c7f89ac08cebb611c", 0x8d}, {&(0x7f0000006780)="74fbd83d00c92806043f5c5a64b27eaf8da40f02634f26e5390c253be5d19a585c19a6cc4723de7e8da8d62c00ff4ca5d2801638cc10f999ea9a360f1876df52e4f3b23478786adf8a77cf21577d728662b69ec53df07b3c915536c9c15f037814b8e202b368f0091e04e443e982c1ec0fe26db05a73687f76e92000e1735366e24ac69b84f5ca79b5471ebe0ad319841788506e716d212e6abdefb84f0363f26b8ab20fc5f2a6c9b2b4e207a241143000380714947fb2738f8fcfd8e3e54983ba4549a92a2906", 0xc7}, {&(0x7f0000006880)="229fef7634fae100b66d6f3675a44f7a648544dd86bbfe66e0aa7bc22d2be9cbb6724f7b415203dcb2047e90b48ba644769b9f5fb5e420691cea2c8203", 0x3d}, {&(0x7f00000068c0)="25b556e0f1f256ab6dcf786c428ab3b711f732d7179d6ba6d031d06e40690f79123722186801223bf43c03b733f0", 0x2e}], 0x4, &(0x7f0000006940)=[{0xf8, 0x118, 0x1, "91d58c0739da97015f596de67a64213a38029a7547f315cb01213a6e742e1fcefddf4611da180aa56707f2d40fcd2856e53a01190e7df94c2aedf6453fd785500e88c35467c637ce4ad6d967166651fe7bfcc6804b2b591162780f3f3fb9042b4d98baf19492d3f2f459653cd1805f4a40ac08524ae52fb4c576595b69a7c924f7dde6e6052821d5e472ac9416bcf09dcd821f1d63c1d7973b33930c94920e8d1f7d8b4c469acc425e6f4e2951d3a3d7032ef010b161b45d6111493e90ecfe085bd39fbd8da838a2b4e0a1b41e1bd1ff1523548b64baedfb8632aa626cf86a88f50c042584c6d08a"}, {0x58, 0x0, 0x5, "762ac296f294d7c4f01988c7563a1f9f6ba3c174f0d27c0ace4cfe2af62ce5bf713dde5ac39bf7a38927ce69bfb765eb623f07dad1a257c749b1aedf7e77916ff5e31852"}, {0xf0, 0x104, 0x8, "144c3463c7aaef3a7df998cfc0765b78a49549a7725d8a76deadae9cbbcd1a4adeca685b873d4f6c82d684e8dac5dd05f6f4a7892a0f275e5432f66c6d1e1fd434c73a4aca0c378dcfb275b2853cc91a013c8c7754d006050a94284a55f75bb141e5674637673b21ccabb0bf4a1b5d02047bae4de8483cffe9cfa650dad8db6199967dcde0a5f2b904f57291118245a4817ebace622f8c668c1deb389be6fec746fb061e4691ae03aa63308113ab19da67a0fe995c7e89090bae11ed7a4d211ccf6b72a1138e4c65e35306421c65795bb9b053f64906ea8c72dcbfb3"}, {0x90, 0x114, 0x101, "f1d7947b7d79d68f2fd12decf3beecc9d52edfe61c54afaf48ffb05ff392656e39174441e39fffb7dfcc7f2405bd88b965ad2094bb7d1f9b60356bd6afab3822783d061b8236323b8416cc03d0cf31643884f8bf574ff4fdd3f4d3ed9a04283103bc39e8407ceb472a19013c63d88a31daf99f6cf7c5144e6a"}, {0xc8, 0x115, 0x3ff, "6b5dadb0bde12ec6829295332f23bffe8ad4622d5113683f7ddb0ff2dd290b8dac583babd942851f2b8a226dca6ccbed7b2a0fc9795ca1b56858ad3b709098cdb1a3ee65137e263ba953859ae597c38da83e2767861e89e6a218554c6a1d5f16cc21c4f4d29962b2c4f001c345655080ac5177631483f3b3d7ae222e27bc61688b8319e16e8b16525ac76d7478093edee971411725de31127785bc5307abc6278fa858f3be2a72f5e6263d332930cc0939"}, {0x18, 0x107, 0x2, "c433fa1fbf"}, {0xd8, 0x117, 0x8001, "0264d58441ed9827e756d4dda271892c8135a69ed5c7856cc9d7ec40d21b260d437c9df4bb5900945e7cc9e65313082a72c95fe2533db8e4b4b737ae563275ec82f026cfccb63c771818686b15ef156cb717fe85dc90cb56d5da3e7867db2f42e94a9629ac808d02e6230d9256b959d4e37cf108b7962b4b56f0b072bc6e624263bbe58f2863e5d3cc59b68d77cb20314aa5e2deebab42a316d406d222a20225f2baf837f22dbb5a729f7a08a47df4f635d677d2c651d2f61ee3e622403d3a3f1a60584866"}, {0x88, 0x10f, 0x7, "d1a4f91ceaf8c3d9e116bf3ab09b80916b65f4261448ac78c466603d00414b0990396b4d32829493cfab41b946838303e184e667870693036c1e996956b0eb3806597ee14e5bd01d6a55d44992c96b47b80b6852fb4d840f851c28ca7ea540543d51845f3df47339cc138382876f0c78b5"}], 0x510}}], 0x4, 0x0) (async) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000006f80)=0x1, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x4) (async) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000007080)={&(0x7f0000006fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007040)={&(0x7f0000007000)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000070c0)={0x0, 0x8001}, &(0x7f0000007100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000007140)={r5, 0x6}, &(0x7f0000007180)=0x8) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000071c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000073c0)=r6) (async) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000007400)=0x4, 0x4) (async) r7 = accept4$inet(r0, &(0x7f0000007440)={0x2, 0x0, @multicast2}, &(0x7f0000007480)=0x10, 0x0) bind$inet(r7, &(0x7f00000074c0)={0x2, 0x4e24, @multicast1}, 0x10) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000007500)=0x1) (async) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000076c0)={&(0x7f0000007540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007680)={&(0x7f0000007580)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x35}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff80}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000007700)) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000007780), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000079c0)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007980)={&(0x7f00000077c0)={0x190, r8, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) recvfrom$rose(r0, &(0x7f0000007a00)=""/157, 0x9d, 0x2002, 0x0, 0x0) 1m42.018792047s ago: executing program 4 (id=2352): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r2 = socket$inet(0x2, 0x3, 0x2) (rerun: 32) r3 = epoll_create1(0x80000) epoll_wait(r3, &(0x7f000000affb)=[{}], 0x1, 0x7fff) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2000001c}) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x2) (async) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) (async) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "06dc356124bbd82c", "d392862409104dc40b284ffcd853cf8435a9071860de563091b4f6b1f9e0d1dc", "8af2e8f7", "39f6b70850c0e892"}, 0x38) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000007, 0x13, r0, 0x607d8000) 1m42.018084778s ago: executing program 3 (id=2353): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82D\x80'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000480)=r1) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x800) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x8, 0x1, 0x6, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x7, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x1, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x1, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x808, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x4, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe0, 0x4636, 0xd6, 0xc8, 0x81, 0x8001, 0x6, 0xbf5c, 0x7, 0x1, 0x1, 0x1, 0x7, 0xff, 0x40, 0x4, 0x5, 0x80000000, 0x1000, 0xfffffffb, 0xcfb, 0x2, 0x7fff, 0x95, 0x15e5, 0x3, 0xff, 0x3, 0x81, 0xfffffffd, 0x3, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x101, 0x30, 0x0, 0x100, 0x1, 0xf4, 0x6, 0x200, 0x1, 0xfffffffd, 0xffffffff, 0x3, 0x1ff, 0x4, 0x8a03, 0x6, 0x1, 0x2, 0x9, 0x2, 0x9c8, 0x9, 0x200, 0x231e, 0xfff, 0xf, 0x0, 0x7, 0x8000, 0xd, 0x8, 0x2, 0xfffffffb, 0x2, 0x4, 0x7fffffff, 0x5, 0x9, 0x6, 0x6, 0x9, 0xae, 0x2, 0x101, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xffeffffe, 0x6, 0xd, 0x64b, 0x1efe, 0x6e1c, 0xfffffff9, 0x2, 0x1, 0x5, 0x94, 0x3, 0x5, 0x1, 0x9, 0x0, 0xfffff6e4, 0xec0, 0x7, 0x8, 0x7e, 0xd081, 0x1, 0x1, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x8, 0x2f, 0x7, 0x9, 0x2, 0x7ff, 0xa35, 0x6, 0x327, 0x101, 0x2, 0x2, 0x1, 0x3, 0xd46, 0x5, 0x338, 0x40, 0x1b8beb60, 0x20000, 0x240, 0x7, 0x0, 0x0, 0x9, 0x8, 0x1, 0x3f0, 0x40, 0x0, 0x0, 0x1, 0xfffffe01, 0x3, 0xfffffffd, 0x40, 0x0, 0x98, 0x8, 0x200, 0x40, 0x4, 0x6, 0x8, 0x4, 0x9, 0x8, 0xf1b, 0x0, 0xfffffffe, 0x10000, 0x0, 0x81, 0x9, 0x3, 0x3, 0x3, 0x5, 0xfffffff7, 0x7, 0x5, 0x5, 0x9, 0x1ff, 0x2, 0x1000, 0x80000000, 0xfffffffc, 0x5, 0xff, 0x40, 0x7f, 0x9, 0xfffffc01, 0x0, 0x7f, 0x200, 0x8, 0x7, 0x5, 0x6, 0x8, 0x40, 0x1, 0x7, 0x7, 0x7fff, 0x301, 0x9, 0x4, 0x7f, 0x80000000, 0xd, 0x3, 0x101, 0x6e, 0x6, 0x3, 0x40000000, 0x3, 0x0, 0x9, 0x0, 0xfffffff8, 0x90b, 0xfe, 0x200, 0x2000000, 0x3, 0x200, 0xffffff01, 0x7, 0xfffffff1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x6e3000, 0x4, 0x6, 0x3, 0xdda, 0x4, 0x6, 0xfffffffd, 0x5, 0x80, 0x1000, 0x1, 0x0, 0x2, 0x7ff, 0x6, 0xfffffff8, 0xc, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x592, 0xc6a3, 0x4, 0x81, 0x4, 0x40, 0x2, 0x6, 0x6, 0xc0000000, 0xe, 0x8, 0xf, 0x1000, 0x48e, 0x6, 0x1, 0x4, 0x1b70, 0xff, 0x1, 0xffffffff, 0x1, 0x0, 0xdd6, 0x80000001, 0xffff, 0x0, 0x4, 0x80000000, 0xfff, 0x7fff, 0x136d, 0x9, 0x5, 0xfffffffa, 0x7, 0x0, 0x8, 0x8, 0xa97b, 0x81, 0x0, 0x8, 0x1, 0x1b93d89b, 0x2400000, 0xfffffffa, 0xff52, 0x6, 0x6, 0x1, 0x670, 0x7ff, 0x8, 0xbb7, 0x5, 0x8, 0x7fff, 0x1, 0x3, 0x6, 0xfffffff7, 0x4, 0x764, 0x1, 0x80000000, 0x7fffffff, 0xb3, 0x2, 0xfc69, 0xffff0000, 0x0, 0x7, 0x402, 0x8, 0x1, 0x8, 0xa8d, 0x1, 0xffff7fff, 0x0, 0x5, 0xfffffff7, 0x94, 0x4, 0x8, 0xffff, 0x8, 0xfffffff5, 0x200, 0x9, 0x6, 0x3, 0x800, 0xf, 0x1, 0xfffffff0, 0x3, 0xffff, 0x80, 0xae0, 0x4, 0x1, 0xfffffffe, 0x800, 0xcc, 0xfffffffe, 0x4, 0x9, 0x10001, 0x7, 0xe, 0x2, 0x6, 0x4, 0x5f3, 0x5, 0x4, 0x8, 0x2, 0x242a, 0x7, 0x7, 0xffffffff, 0x97e9, 0x9, 0x400, 0x7, 0xfffffff7, 0x5, 0x15, 0x1000, 0x100, 0x9, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x4, 0x79, 0x3, 0x5, 0x3, 0x3, 0x401, 0x1, 0xffffff80, 0xda29, 0x9, 0x200, 0x3, 0x2, 0x4, 0x800, 0x87, 0x1, 0x2, 0x8d, 0xa0, 0x80000001, 0x8, 0x5, 0x0, 0x8, 0x1, 0x32a0, 0x2, 0x0, 0x7f, 0x7d, 0x9, 0x2, 0x8, 0x5, 0x9, 0x1, 0x0, 0x7, 0x1, 0x1, 0x200, 0x10, 0x3, 0x3, 0x8000, 0x0, 0xf, 0x8, 0x7, 0x101, 0x8, 0x10637, 0x1, 0xfff, 0x3, 0x4, 0x94c0, 0x10001, 0x7fff, 0x20000009, 0x7, 0xf, 0x10001, 0x0, 0x101, 0x79a1, 0x3ef, 0x5, 0x4, 0x2, 0xffffff01, 0x3, 0xf, 0x8, 0x5, 0xb, 0x0, 0x8001, 0x80, 0x9, 0x80000001, 0x7, 0x6, 0x0, 0xffffffff, 0xfffffff7, 0x4, 0x8, 0x8, 0x7, 0x7, 0x80000000, 0x2, 0x3, 0x200, 0x8, 0x133, 0x3ff, 0x2, 0x6, 0x1, 0x7, 0x3, 0x4d800, 0x4d4, 0x7, 0xe, 0x7, 0x0, 0x9, 0x80000001, 0xbd8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x9, 0x9, 0x4, {0x6, 0x0, 0x6b, 0xffc0, 0x5, 0xb}, {0x7, 0x0, 0x800, 0x5, 0x8001, 0x7}, 0xffffff01, 0x8001, 0x3}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fc}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) 1m41.856328032s ago: executing program 4 (id=2355): socket(0x21, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xb7a38a8bf6419b0e, 0x0) close(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea2010000900e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xd, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xb, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {0x0, 0x7}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x2408c001) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x5, 0x1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0x9, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) 1m41.733952495s ago: executing program 3 (id=2356): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711815000000000095"], &(0x7f0000000100)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 1m41.623782698s ago: executing program 3 (id=2357): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xc) listen(r2, 0x80000001) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf2514000000080001000100000008001d"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x50003}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) unshare(0x6a040000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='W\x00\x00\x00', @ANYRES16, @ANYRES8=r5], 0x48}, 0x1, 0x0, 0x0, 0x8845}, 0x4011) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) 1m41.084642593s ago: executing program 32 (id=2357): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xc) listen(r2, 0x80000001) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf2514000000080001000100000008001d"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x50003}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) unshare(0x6a040000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='W\x00\x00\x00', @ANYRES16, @ANYRES8=r5], 0x48}, 0x1, 0x0, 0x0, 0x8845}, 0x4011) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) 1m41.06621769s ago: executing program 4 (id=2359): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000400028004000300"], 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000100001040000000000000000000000066a821496ac749dcdb8272d71e9e05a07743d9ba0def09875cc76f396d1b5799cbb0e16a24b91e9b787a7f1658a0a579d78781fc0df452de14942e61359cf", @ANYRES32=0x0, @ANYBLOB="98000000060000000a0003000000000000000000280012800b000100697036746e6c00001800028014000200fe8000000000000000000000000000aa"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ffff0000c9c4582da77b47e7b1", @ANYRES16=r8, @ANYBLOB="000029bd7000fcdbdf257a0000000600fb00feff00000a00f9003a55195b2f8700000700f9005f60"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) write(r2, &(0x7f0000000780)="883a156135521268b1a23a3c52b64dec9781755dd0aaaa32efcc41895b3c3eea3f5909f48d8fea32b3acec79c17897f88dabd7726bc975aa9b41227d1ef7b9b424315e53ac0c285579e06671950282151d22ac8e8ff5af2726f496e53a85954fa8ff36a3ec77d258762e8a5062c1d04149", 0x71) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000001300)=ANY=[@ANYBLOB="040a0000", @ANYRES16=r8, @ANYBLOB="20002bbd7000fddbdf253900000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0xa04}, 0x1, 0x0, 0x0, 0x20008040}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m41.004530254s ago: executing program 33 (id=2359): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000400028004000300"], 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000100001040000000000000000000000066a821496ac749dcdb8272d71e9e05a07743d9ba0def09875cc76f396d1b5799cbb0e16a24b91e9b787a7f1658a0a579d78781fc0df452de14942e61359cf", @ANYRES32=0x0, @ANYBLOB="98000000060000000a0003000000000000000000280012800b000100697036746e6c00001800028014000200fe8000000000000000000000000000aa"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ffff0000c9c4582da77b47e7b1", @ANYRES16=r8, @ANYBLOB="000029bd7000fcdbdf257a0000000600fb00feff00000a00f9003a55195b2f8700000700f9005f60"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) write(r2, &(0x7f0000000780)="883a156135521268b1a23a3c52b64dec9781755dd0aaaa32efcc41895b3c3eea3f5909f48d8fea32b3acec79c17897f88dabd7726bc975aa9b41227d1ef7b9b424315e53ac0c285579e06671950282151d22ac8e8ff5af2726f496e53a85954fa8ff36a3ec77d258762e8a5062c1d04149", 0x71) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000001300)=ANY=[@ANYBLOB="040a0000", @ANYRES16=r8, @ANYBLOB="20002bbd7000fddbdf253900000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0xa04}, 0x1, 0x0, 0x0, 0x20008040}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 5.52239646s ago: executing program 5 (id=3107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000200)={0x8, 0x28, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r2 = socket$inet6(0xa, 0x5, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000380)=r1}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)=@o_path={&(0x7f0000000040)='./file0\x00', r3, 0x4000, r1}, 0x18) (async) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000340)=0xfefffff9, 0x4) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}], 0x1c) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'dummy0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000007000000140001800500020001"], 0x28}}, 0x0) 4.562437903s ago: executing program 5 (id=3116): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00010027bd700000000000040000000800180009ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000002c0)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x4004005}, 0x40000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0x1}, 0xe) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'tunl0\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x7, 0x8, 0x7fffffff, 0x7, {{0x16, 0x4, 0x2, 0x1, 0x58, 0x65, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0xa0, 0x1, 0x4, [{@broadcast, 0x99b4}, {@private=0xa010102, 0x9}]}, @timestamp_prespec={0x44, 0x14, 0x62, 0x3, 0x1, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xfff}]}, @timestamp_prespec={0x44, 0x1c, 0x4e, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0xd}, {@multicast1, 0x38a1}, {@empty, 0x7}]}]}}}}}) sendmsg$nl_xfrm(r5, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.207416874s ago: executing program 0 (id=3120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000000000001a01"], 0xe8}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1000c002}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = accept(r5, &(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0xffffffffffffff33) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x810) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r7, 0x0, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.680600493s ago: executing program 5 (id=3124): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000001000000015c6b5b4b3e331f526090067f23c006266ac48490226a12ca10b258500001460dc81009500001bf90c6c45c82570a8"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x78, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x81, @remote}}]}]}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x78}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0xfffffffffffffd49, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000005000100060000000500040000000000090002a20000000000000080050005000200001811000300686173683a69702c706f7274f7bb73e5336b59e9a7a6afb1bcd122021b608d7f53"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) 3.050952327s ago: executing program 1 (id=3131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c001}, 0x4800) unshare(0x24020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "06000000e380ff03", "5615c6170f365581598bfabd2e006a7a2a6ea19e000000000000000800", '\x00', "b6405ad112e098b1"}, 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x448c4) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) 1.950152683s ago: executing program 1 (id=3135): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1e, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9a}, @call, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@ld}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x1, 0x6, 0x1, 0x1, 0x2, 0xfffffffffffffff0}]}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.895207169s ago: executing program 2 (id=3136): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_hsr\x00', 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x236, 0xf, 0x9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x47, 0xf9, &(0x7f0000000100)="574c4c3b5ba520bf260196b7ef94e4bf7f7fed334b8b2c685affe3c5cfb23bce09dd19f6f9e376165caa98e7dc03eea72338b61c89c356bb17abc446b15bc4bcb4bcd60b04025c", &(0x7f0000000180)=""/249, 0x4, 0x0, 0x49, 0x91, &(0x7f0000000280)="6671bc61107a2e464e476f7ae1cfb1bed16c6e6c5ad85f07021dfc7e68f8eed6cd276875174efaa9df6287edd260ded7a7bcab169f7e4fa38dc77cab10654f4dbf54c4fe5acf1964a0", &(0x7f0000000300)="fa15156a42ea1b9988d2f7558ba649796543cd77b028ae0dc7c7770126117b409fcb47d320c8a0cbac953553b4203d9b71ec2cff23d6ce32272d675175201fda850b0f626222bdeb6ba45bcdc97e75303aec46dea45833254f46750f91439fb48fb0f52b58c27eb2429af6b3f90f374f825f773b50cbb4f1f578bfe7612b44df8c6b6b2975058c405779fa079a994df9f9", 0x2, 0x0, 0xa}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'caif0\x00', 0x0}) r4 = openat$cgroup_ro(r2, &(0x7f0000000480)='cgroup.events\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f00000005c0)=0x9) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000020}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x8, 0x202, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x115c}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80800}, 0x8040) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getpeername$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x18) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x8, '\x00', r3, r4, 0x4, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x18, &(0x7f00000008c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0x9, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000980)='GPL\x00', 0x7fff, 0xc0, &(0x7f00000009c0)=""/192, 0x41000, 0xc, '\x00', r6, 0x25, r2, 0x8, &(0x7f0000000a80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x2, 0x0, 0xa6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000b00)=[r4, r2], &(0x7f0000000b40)=[{0x2, 0x5, 0xf, 0xc}, {0x5, 0x2, 0xf, 0x7}, {0x0, 0x2, 0x7, 0xa}, {0x4, 0x1, 0x8, 0x5}, {0x0, 0x4, 0x10, 0x2}, {0x5, 0x5, 0x2, 0xc}, {0x1, 0x3, 0x8, 0x9}], 0x10, 0x141}, 0x94) socket$key(0xf, 0x3, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000c80)={0x1, 0xd}, 0x8) connect$phonet_pipe(r4, &(0x7f0000000cc0)={0x23, 0x6, 0x4, 0x4}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r9) writev(r0, &(0x7f0000000dc0)=[{&(0x7f0000000d40)="02cbe2eed90adc42e9b9f38a766f457b26fc9861124ea491b206c0c8780bd396b90b9f2a60f32c0bcf117a5645eade1474343c8fb8c8bc5bd5b02fa9d556d7dbfa88576b261bd07a8dc95952ef2f2257d136fe573388719c13d8", 0x5a}], 0x1) socket(0xa, 0x6, 0x2) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000e00), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000e80)={'sit0\x00', &(0x7f0000000e40)={@mcast2, @loopback, 0x1e, 0x1d}}) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f00), r9) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x50, r10, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) read(r2, &(0x7f0000001040)=""/3, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r11, &(0x7f00000010c0)=@file={0x1, './file1\x00'}, 0x6e) 1.894161142s ago: executing program 6 (id=3137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r4, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0xb, 0xc, @l2={'eth', 0x3a, 'netdevsim0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x19, 0x0, 0x0) shutdown(r5, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r5, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f00000008c0)='b', &(0x7f0000000940), 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r4, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0xb, 0xc, @l2={'eth', 0x3a, 'netdevsim0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_int(r6, 0x29, 0x19, 0x0, 0x0) (async) shutdown(r5, 0x2) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) (async) sendto$inet6(r5, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f00000008c0)='b', &(0x7f0000000940), 0x2}, 0x20) (async) 1.72650064s ago: executing program 1 (id=3138): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r3, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x40044}}], 0x1, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = accept$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @private}, &(0x7f0000000600)=0x10) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f00000007c0)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r12, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x38, 0x40044}}], 0x1, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000800)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000840)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$unix(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="954161dea0669b8cf157f99139b90e0f1dc9f1d06e2967a18e13004642f545f77e293b1f02008bad22e21f47db958c3ab530b02371e944a79a4c92e093fbcb101975b3111a531dbcbc286afb0ed03fd9a8fe840073b5e9b42316af0c3f4c4110448bdec637481b8e305ef4a86b76efbe536e17d2b9757a30ac042fabbf8b166a91675f0a693b2929", 0x88}, {&(0x7f0000000180)="422b766aa848fbdbc3d75d5b5bb69d7ebf04690a3efecdc9", 0x18}, {&(0x7f00000001c0)="704a86c2fbcb39bd2b544a5cc9c9d830beb8dfef2ba15cdcaf04bf9aa19b", 0x1e}, {&(0x7f0000000200)="3257d9fe687306497b71e4e25427656bbee3c6a2c236e872d4a1cd23099e0a9fb72cce52aa7ea86d4f5b034d833eadf6144c9b368f8be5d7ae279344cb08e473e3cd9f3b23e510ca2381d3a958bf63d73e50caa16482e22b6b930efb1ba3505c29bf84a55b0bc5e85fd6a233267e9ca896a0db45c09770819186db5c1eb0014dcd9dd7e830a1891373fbc667453e9691300cd6483a3fbba884da7f1d380ee886a4f12c6d7c242183759e86d09cc82207464a2325", 0xb4}, {&(0x7f00000002c0)="73ba0402ad2907327a14a39070b8db7241598b6e8cb74a85d93f05094a7da27f08b29de2ecc061826f49cfae8fb91a6eaf5c8a7a44d225fc259b65fc9fcf8417a443ee0b6ce078161c56", 0x4a}, {&(0x7f0000000340)="f01ccc2244a46e10b24c2f733591c297d3de7d864719e257a163e60112ef88a5a7080511482dc0f02ef4183e18f148013f13a532733645fc1a9fb938a12da1e67a43c4bf216bf4cace97bb32fb091463acaf3b4b11c66f2fdacbd497e2986fef473d92deb416b4c8b5d09d53c013ace2ea78c9c94c61dd18c1670fe86459e9c607593ce6d8f256ca6ee9c820cbb7ce2e9646a2", 0x93}, {&(0x7f0000000400)="5da407abd9228387056882f34dcac54ecb4f8b62768a15b8f172b0716a19029fdaa5d29c53cf2a29696b015dbf8429ebb5251e124cda1461357004b3a6825acf3f7fa60a674196677005594ee158b1b022e35f754b3793607fbbce065c7ff4e769417b1a408b55fa59a40b4674d5f7b106dd2556f247c85b3c39537c3236b4ab037879ee7558e6e4a904c3494925ce43f5a62fffbe41b7b06e47aa1012440f15f6d8324d6463c5daec143bfc3ef97cd0ff0fd54a5e", 0xb5}], 0x7, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r2, r5, r7}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r8, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r9, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r15}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}], 0x120, 0x20000001}, 0x4000084) 1.56799604s ago: executing program 1 (id=3139): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRES16, @ANYRES8=r2, @ANYRES32=r0, @ANYRES8=r0], 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010025bd70d97247d6bdfa9db28a28308ec5cda200fddbdf250100000004"], 0x24}}, 0x40040) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010001fff00000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000095028008000a00b9847ccb37b027b28ae970556f8fe52fa84ae337772d73ee0709355d001528fa08b75626dd20cd2387834be9eab6df6f2f6de1c89b874c9382f03e29653e91e11720639d8f2c871fd7cab94ca51994170d1f258fd10089ff5ad4e3", @ANYRES32=r4, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r7}, 0x4) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@dellinkprop={0x2c, 0x6d, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4, 0x10800}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/227, 0xe3}, 0x101}, {{&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000440)}, 0x7}, {{&(0x7f00000008c0)=@xdp, 0x80, &(0x7f00000004c0), 0x8a}, 0x7fffffff}], 0x3, 0x8309, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.498197443s ago: executing program 2 (id=3140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000009000000000000000000000085000000a00000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f00000003c0)="975c49a232", &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000004c0), 0x6b, r5}, 0x38) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f00000006c0)=0x1, 0x4) ioctl$TUNGETVNETBE(r8, 0x800454df, &(0x7f00000004c0)=0x1) tee(r8, r8, 0x100000001, 0x6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x168, 0x0, 0x0, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x8, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x3}, @union={0x4, 0x7, 0x0, 0x5, 0x1, 0x8, [{0x5, 0x0, 0x6}, {0xf, 0x4, 0x6bb7961d}, {0x3, 0x5, 0x1000}, {0x9, 0x4, 0x7}, {0xd, 0x3, 0x4}, {0xc, 0x0, 0x3}, {0x3, 0x4, 0x5}]}]}, {0x0, [0x30, 0xf1, 0x5f, 0x30, 0x2e, 0x0]}}, &(0x7f0000000d40)=""/133, 0x8c, 0x85, 0x1, 0x10000, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x3ff, 0x0}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000f00)={'ip6_vti0\x00', &(0x7f0000000e80)={'ip6_vti0\x00', 0x0, 0x2f, 0x77, 0x4, 0xf, 0x8, @empty, @mcast2, 0x1, 0x8, 0x7, 0xffffff27}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES8=r10], &(0x7f0000000c40)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', r12, @fallback, r10, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x4}, 0x10, r11}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x24048000}, 0x8000) 1.49793953s ago: executing program 6 (id=3141): r0 = socket$rds(0x15, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'pim6reg0\x00', {0x4}, 0x5}) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) 1.32601153s ago: executing program 6 (id=3142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r4, 0x101, 0x3, &(0x7f0000000240)=""/245, &(0x7f00000000c0)=0xf5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x800) 1.308944205s ago: executing program 1 (id=3143): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0xf56, @remote, 0x5}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) r3 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14, 0x800) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) socket$inet6(0xa, 0x800, 0x3ff) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {0x2, 0x7}, {0xf, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xde0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x440c0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRES16=r7, @ANYRESDEC=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12) getsockname$packet(r12, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r13, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) close(0x3) socket(0x2, 0x80805, 0x0) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r14, 0x0) 1.198448137s ago: executing program 6 (id=3144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) read$alg(r1, &(0x7f0000001100)=""/4109, 0x100d) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x0, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 1.140550841s ago: executing program 0 (id=3145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x2080005, r1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000004ac0)=0x1e, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000000)=0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000f40)=[{&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="1528e3e780", 0x5}], 0x1, &(0x7f0000000200)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x4005}], 0x1, 0x8008) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r5}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x2400c040) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x29, 0x21100e6, r1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\v\x00'/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x98, r9, 0x100, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1d, 0xa8, @random="6af83991bd07bb5855c0bb2771b843db81d4c229725786ce31"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffffffffffff}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xf}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40841) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@loopback, @in=@empty}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000440)=0xe8) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.076384062s ago: executing program 2 (id=3146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x2874, 0xa08, 0x9}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x92}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000045}, 0xc804) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) close(0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x80ad}, 0x1c) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x14040040}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006ebc"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=[@dstopts={{0x18, 0x29, 0x32, {0xff}}}], 0x18}, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000100)=0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="18030000210001000000000004000000ffffffff000000000000000000000000ac14142e00000000000000000000000000000000000000020a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fe8000000000000000000000000000aa0a010100000000000000000000000000fc0100000000000000000000000000010a0101000000000000000000000000003c000000000000000a000a002c0013007f000001000000000000000000000000ffffffff000000000000000000000000000000000a0000001c000400feff4e204e2100000a010102000000000000000000000000ac000700e0000002000000000000000000000000640101000000000000000000000000004e22ffa74e2000050a0080a0ff000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="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"], 0x318}}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) 874.693337ms ago: executing program 0 (id=3147): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x1000, 0x4) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d1000/0xb000)=nil, 0xb000, 0x0, 0x11, r4, 0x1000) 874.342759ms ago: executing program 2 (id=3148): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000005800010200000000000000000200000408000340000039d3080001000300001f08000440008000f807000100"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006a00010000000012000000000a0000000000000008000180"], 0x20}}, 0x0) (rerun: 64) 855.36558ms ago: executing program 5 (id=3149): socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async, rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='cachefiles_ondemand_cread\x00', r5, 0x0, 0x6}, 0x18) (async, rerun: 32) r7 = gettid() (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r7, r6, 0x0, 0x4a, 0xfffffffffffffffe}, 0x30) (async) openat$cgroup_ro(r4, &(0x7f0000000280)='blkio.bfq.idle_time\x00', 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {0x0, 0x8}, {0x8, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r11) socket(0x2, 0x5, 0x0) (async, rerun: 32) r12 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_IPV6_DSTOPTS(r12, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) (async, rerun: 32) bind$inet6(r12, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) recvmmsg(r12, &(0x7f000000b240)=[{{0x0, 0x0, 0x0}, 0x429}], 0x1, 0x2b, 0x0) (async) setsockopt$inet6_int(r12, 0x29, 0x4, &(0x7f00000000c0)=0x5, 0xfffffffffffffe02) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r8) (rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) 810.618622ms ago: executing program 0 (id=3150): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x44, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) write(r0, &(0x7f0000000080)="02f6e97412163acfde7ba7015df2890d9aec630b344806c7c006bfa37ba85021ac888925ddea092eed21bd5e282e6dc434dd7008a55ad70712f5b11d3e1912614374de7bdf523cb6c117415e76d8e2056eb68cf8f329f45b9d9f321ec15270eb0bb2271fa58cbb9923b299b59732d069225e4ffc", 0x74) 610.178539ms ago: executing program 0 (id=3151): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 609.066088ms ago: executing program 2 (id=3152): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x700, 0x10, 0x81, 0x7, {{0x6, 0x4, 0x2, 0x14, 0x18, 0x68, 0x0, 0x2, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0x2c, 0x3, 0x5}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 527.131351ms ago: executing program 5 (id=3153): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)) 512.015979ms ago: executing program 2 (id=3154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 403.063205ms ago: executing program 0 (id=3155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004050}, 0x4001814) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000100}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7982b45778bb6858}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @initdev, @initdev}, &(0x7f0000000440)=0xc) sendmsg$nl_route_sched_retired(r5, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@delqdisc={0xf0, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x8, 0xfff2}, {0x10, 0xffff}}, [@q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x44000}, 0x20000880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) socketpair(0x22, 0x80005, 0x100, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x1412, 0x100, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c0a4) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000780), &(0x7f00000007c0)=0x30) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000800), &(0x7f0000000840)=0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000b80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x154, r8, 0xe00, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x46d2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffb}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x94e}]}, @NL802154_ATTR_SEC_DEVKEY={0xa8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x98, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x80000001}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffd}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x154}}, 0x14040091) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r7) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x148, r12, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc1ab}]}]}, 0x148}}, 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x69e}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008030}, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, r14, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x16, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x20008800) sendmsg$DEVLINK_CMD_PORT_SPLIT(r13, &(0x7f0000001140)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x4040820) 352.637984ms ago: executing program 5 (id=3156): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x80000000, {{0x2, 0x4e20, @loopback}}, 0x1, 0x4, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e24, @private=0xa010102}}]}, 0x290) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000300)={'syzkaller1\x00', {0x2, 0x0, @multicast1}}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)={0x2, {{0x2, 0x4e21, @local}}, 0x1, 0x6, [{{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e24, @private=0xa010102}}]}, 0x390) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @remote, @empty}, &(0x7f0000000740)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6gre0\x00', r3, 0x4, 0x9, 0x0, 0x8, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x8, 0x4, 0xfc7a}}) r5 = socket(0x4c, 0xa, 0x10) r6 = accept4$unix(r5, 0x0, &(0x7f0000000840), 0x40800) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000008c0), r5) r10 = accept$unix(r5, &(0x7f0000000900), &(0x7f0000000980)=0x6e) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000a80)={'erspan0\x00', 0x0, 0x8, 0x7, 0x448, 0x600, {{0x1d, 0x4, 0x0, 0x2, 0x74, 0x65, 0x0, 0x86, 0x4, 0x0, @loopback, @empty, {[@rr={0x7, 0x17, 0x92, [@multicast2, @multicast1, @multicast2, @remote, @broadcast]}, @ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x14, 0x1, [{0x2, 0x8, "f03d04b0a242"}, {0x6, 0x2}, {0x2, 0x4, "7ce7"}]}, @lsrr={0x83, 0x7, 0x37, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xa8, 0x1, 0x1, [{@multicast2, 0x7fff}]}, @ssrr={0x89, 0x1b, 0xc1, [@multicast2, @rand_addr=0x64010102, @local, @empty, @remote, @local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000c00)={'gretap0\x00', &(0x7f0000000b80)={'ip_vti0\x00', r4, 0x8, 0x80, 0x2, 0x0, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x67, 0x0, 0x7f, 0x2f, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x2c, 0x8e, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x6}, {@empty, 0x7}, {@remote, 0xc}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}, {@broadcast, 0x2}]}, @timestamp={0x44, 0x14, 0xf9, 0x0, 0xa, [0x33f, 0x40, 0x6, 0x8]}, @timestamp={0x44, 0xc, 0xaf, 0x0, 0xb, [0x6, 0x0]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000013c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001380)={&(0x7f0000000c40)={0x714, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x13}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r4}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x1, 0x4, 0x2, 0x8}, {0x4, 0x2e, 0x1, 0x80}, {0x6f8, 0x54, 0x10, 0x200}, {0xf1b, 0x6, 0x5, 0x401}, {0xfe81, 0x2, 0x4c, 0x10000}, {0x2, 0x6d, 0x0, 0x8}, {0xfff7, 0x3, 0x3, 0xfffffff9}, {0x3, 0x0, 0xff, 0x2}, {0x40a1, 0x4, 0x9, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r12}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x90}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xffff, 0x0, 0x8, 0x9}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x714}, 0x1, 0x0, 0x0, 0x44000}, 0x50000) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001400)={0x3, 0x4, @status={[0x3, 0x6, 0x4, 0x91e1, 0x0, 0x3]}, [0x1, 0x9, 0x3, 0x9c, 0x401, 0x7ff, 0x1a, 0x9, 0xff, 0x7f, 0x4, 0x1, 0x3, 0x0, 0xffffffff, 0x1000, 0x3, 0x81, 0xf8, 0x2, 0x1, 0x5, 0xfaf, 0x2, 0x80000001, 0xbf, 0x8000000000000000, 0x8, 0x6090, 0x26, 0x6, 0x4, 0x1, 0xce5, 0xffffffffffffff01, 0xff, 0xfbf3, 0x9, 0x7, 0xd, 0x1, 0x7, 0x8, 0x0, 0x5, 0x80000001, 0x5, 0x8, 0x9bad, 0x401, 0x1, 0x6, 0x7, 0x4, 0x0, 0x3, 0xfffffffffffffffb, 0x8, 0x3, 0x3, 0xfffffffffffff000, 0x8, 0x100000001, 0x27e]}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000001e40)={0x0, r2, 0x52, 0xfffffffffffffff3, 0x8, 0x6}) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000002040)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)={0xcc, r15, 0x802, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1004}, 0x804) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002080)={0xffffffffffffffff, 0xfff, 0x18}, 0xc) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002340), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003500)={r7, 0x20, &(0x7f00000034c0)={&(0x7f0000002400)=""/4096, 0x1000, 0x0, &(0x7f0000003400)=""/169, 0xa9}}, 0x10) r19 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) r20 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000035c0)={0x0, 0x4e, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000003a00)={0xc, 0x26, &(0x7f00000020c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002200)='syzkaller\x00', 0x1, 0xfc, &(0x7f0000002240)=""/252, 0x20880, 0x18, '\x00', r14, @fallback=0x29, r17, 0x8, &(0x7f0000002380)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000023c0)={0x0, 0xf, 0xffffffff, 0xfffffffa}, 0x10, r18, r6, 0xa, &(0x7f0000003900)=[r19, r1, 0xffffffffffffffff, r20, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003940)=[{0x0, 0x4, 0x6, 0x1}, {0x5, 0x2, 0x7, 0x9}, {0x1, 0x1, 0xd, 0x1}, {0x4, 0x3, 0xa, 0x3}, {0x2, 0x2, 0x10, 0xb}, {0x3, 0x4, 0xd, 0x7}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x4, 0x10, 0x4}, {0x5, 0x1, 0xb, 0x6}, {0x5, 0x5, 0x2, 0x5}], 0x10, 0x3c}, 0x94) 263.369143ms ago: executing program 6 (id=3157): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000000fcdbdff1610458ffffffffffffff00b92dee3200ac1e0001000000000000004000"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff040000000000000000000000000000000000000000000000000000000000000000000000000000000800"/112], 0xb8}}, 0x0) 214.605268ms ago: executing program 1 (id=3158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000140a010300000000000000000700000864000000160a030000000000000001000000000a0900010073797a30000000000900020073797a31000000002c000380080001400000000018000380140001006e723000000000090000000000000000080002400000ffff0900020073797a0000000000000000001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x45}, 0x80) 0s ago: executing program 6 (id=3159): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffff"], 0x6c}}, 0x40000) accept(0xffffffffffffffff, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x80) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xfffffff8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd1338160000000000000000", @ANYRES32=0x0, @ANYBLOB="080005000400000005005300"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000040)) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) kernel console output (not intermixed with test programs): 390 total pagecache pages [ 236.939980][T12562] 0 pages in swap cache [ 236.944238][T12562] Free swap = 124996kB [ 236.948453][T12562] Total swap = 124996kB [ 236.952618][T12562] 2097051 pages RAM [ 236.956423][T12562] 0 pages HighMem/MovableOnly [ 236.961149][T12562] 424280 pages reserved [ 236.965286][T12562] 0 pages cma reserved [ 238.082389][T12582] __nla_validate_parse: 2 callbacks suppressed [ 238.082406][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 238.198190][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 238.366223][T12592] lo speed is unknown, defaulting to 1000 [ 238.664882][T12604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1628'. [ 238.791846][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 238.901262][T12609] 8021q: adding VLAN 0 to HW filter on device bond10 [ 238.980030][T12620] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1632'. [ 239.066200][T12620] netlink: 'syz.3.1632': attribute type 2 has an invalid length. [ 239.097526][T12620] netlink: 'syz.3.1632': attribute type 1 has an invalid length. [ 239.314549][T12632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1635'. [ 239.418821][T12636] netlink: 'syz.0.1637': attribute type 10 has an invalid length. [ 239.441310][T12639] xt_hashlimit: max too large, truncated to 1048576 [ 239.492352][T12636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.545291][T12636] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 239.551241][T12645] netlink: 'syz.3.1640': attribute type 1 has an invalid length. [ 239.702870][T12656] tipc: Enabled bearer , priority 0 [ 239.727145][T12656] syzkaller0: entered promiscuous mode [ 239.732690][T12656] syzkaller0: entered allmulticast mode [ 239.740110][T12660] netlink: 'syz.4.1641': attribute type 5 has an invalid length. [ 239.748973][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1641'. [ 239.792752][T12653] tipc: Resetting bearer [ 239.819124][T12653] tipc: Disabling bearer [ 240.225362][T12689] sctp: [Deprecated]: syz.3.1649 (pid 12689) Use of int in maxseg socket option. [ 240.225362][T12689] Use struct sctp_assoc_value instead [ 240.280074][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'. [ 240.331170][ T30] audit: type=1800 audit(1765782926.892:2): pid=12691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1652" name="memory.events" dev="tmpfs" ino=1810 res=0 errno=0 [ 240.398038][ T30] audit: type=1804 audit(1765782926.962:3): pid=12691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1652" name="/newroot/349/memory.events" dev="tmpfs" ino=1810 res=1 errno=0 [ 240.448211][T12693] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1653'. [ 240.485466][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.502984][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.013700][T12705] lo speed is unknown, defaulting to 1000 [ 241.148143][T12713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1659'. [ 241.211563][T12713] bond0: entered promiscuous mode [ 241.225874][T12713] bond_slave_0: entered promiscuous mode [ 241.241653][T12713] bond_slave_1: entered promiscuous mode [ 241.255653][T12713] bridge0: entered promiscuous mode [ 241.270328][T12713] batadv0: entered promiscuous mode [ 241.285922][T12713] geneve0: entered promiscuous mode [ 241.304402][T12713] debugfs: 'hsr1' already exists in 'hsr' [ 241.318635][T12713] Cannot create hsr debugfs directory [ 241.332341][T12713] hsr1: entered promiscuous mode [ 241.366763][T12721] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 241.416090][T12722] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.590819][T12722] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.729958][T12722] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.812987][T12722] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.892725][T12737] lo speed is unknown, defaulting to 1000 [ 241.952011][T11013] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.002223][T11015] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.014255][T11015] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.069200][T11013] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.281241][T12760] netlink: 'syz.2.1672': attribute type 2 has an invalid length. [ 242.561159][T12765] syzkaller0: entered promiscuous mode [ 242.579720][T12765] syzkaller0: entered allmulticast mode [ 243.619558][T12782] __nla_validate_parse: 5 callbacks suppressed [ 243.619577][T12782] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1677'. [ 243.712727][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 244.861583][T12804] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1682'. [ 244.917714][T12801] bond0: (slave gre0): Error: Device type is different from other slaves [ 245.063857][T12807] lo speed is unknown, defaulting to 1000 [ 245.069866][T12814] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 245.418789][T12823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1688'. [ 245.640249][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1691'. [ 245.677779][T12838] netlink: 'syz.0.1691': attribute type 4 has an invalid length. [ 245.738352][T12840] netlink: 'syz.0.1691': attribute type 4 has an invalid length. [ 245.803670][T12831] netlink: 'syz.4.1687': attribute type 10 has an invalid length. [ 245.814529][T12831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.824067][T12831] team0: Port device bond0 added [ 245.927828][T12846] ieee802154 phy1 wpan1: encryption failed: -22 [ 245.968798][T12846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1693'. [ 245.989350][T12846] netlink: 'syz.3.1693': attribute type 2 has an invalid length. [ 246.010360][T12846] : entered promiscuous mode [ 246.019412][T12846] ieee802154 phy1 wpan1: encryption failed: -22 [ 246.169865][T12855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1695'. [ 246.445501][T12874] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 246.486290][T12868] lo speed is unknown, defaulting to 1000 [ 246.492791][T12871] tipc: Cannot configure node identity twice [ 246.588307][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1703'. [ 247.198248][T12907] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1712'. [ 247.271164][T12905] lo speed is unknown, defaulting to 1000 [ 247.448285][T12910] syzkaller0: entered promiscuous mode [ 247.460396][T12910] syzkaller0: entered allmulticast mode [ 247.773114][T12915] netlink: 'syz.3.1714': attribute type 5 has an invalid length. [ 247.803498][T12913] can: request_module (can-proto-3) failed. [ 248.511752][T12929] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 250.661039][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 251.621249][T12950] netlink: 'syz.3.1722': attribute type 2 has an invalid length. [ 251.706537][T12955] sock: sock_timestamping_bind_phc: sock not bind to device [ 251.723774][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 251.743479][T12955] xt_TCPMSS: Only works on TCP SYN packets [ 251.979154][T12968] netlink: 'syz.0.1729': attribute type 39 has an invalid length. [ 252.083999][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1730'. [ 252.117782][T12968] hsr_slave_1 (unregistering): left promiscuous mode [ 252.165253][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1731'. [ 252.303622][T12983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1732'. [ 252.422923][T12973] vlan2: entered allmulticast mode [ 252.475119][T12973] bridge0: entered allmulticast mode [ 252.509515][T12973] bridge2: port 1(vlan2) entered blocking state [ 252.537909][T12973] bridge2: port 1(vlan2) entered disabled state [ 252.558688][T12973] vlan2: entered promiscuous mode [ 252.582497][T12970] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 252.659306][ T30] audit: type=1804 audit(1765782939.222:4): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1735" name="/newroot/343/cgroup.controllers" dev="tmpfs" ino=1767 res=1 errno=0 [ 252.712535][ T30] audit: type=1800 audit(1765782939.262:5): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1735" name="cgroup.controllers" dev="tmpfs" ino=1767 res=0 errno=0 [ 253.132015][T13008] netlink: 'syz.1.1742': attribute type 1 has an invalid length. [ 253.236970][T13017] netlink: 'syz.2.1745': attribute type 1 has an invalid length. [ 253.285976][T13017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.299203][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'. [ 253.466841][T13017] bond5 (unregistering): Released all slaves [ 253.584709][T13028] tipc: Enabling of bearer rejected, already enabled [ 253.591002][T13038] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1750'. [ 253.620413][T13038] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1750'. [ 253.644709][T13038] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1750'. [ 253.694390][T13038] bridge1: port 1(vlan2) entered disabled state [ 253.799393][T13053] tipc: Enabled bearer , priority 0 [ 253.817708][T13053] syzkaller0: entered promiscuous mode [ 253.823223][T13053] syzkaller0: entered allmulticast mode [ 253.958513][T13053] tipc: Resetting bearer [ 253.981615][T13052] tipc: Resetting bearer [ 254.000587][T13052] tipc: Disabling bearer [ 254.030350][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 254.068642][T13071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1758'. [ 254.098893][T13075] netlink: 'syz.0.1759': attribute type 4 has an invalid length. [ 254.191180][T13083] netlink: 'syz.0.1761': attribute type 1 has an invalid length. [ 254.435046][T13100] openvswitch: netlink: Missing valid actions attribute. [ 254.484409][T13100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.512928][T13109] tipc: Enabled bearer , priority 0 [ 254.522600][T13109] syzkaller0: entered promiscuous mode [ 254.566710][T13109] syzkaller0: entered allmulticast mode [ 254.678654][T13109] tipc: Resetting bearer [ 254.726431][T13120] vlan2 (unregistering): left promiscuous mode [ 254.740292][T13120] bridge2: port 1(vlan2) entered disabled state [ 254.854552][T13108] tipc: Resetting bearer [ 254.947738][T13108] tipc: Disabling bearer [ 255.146971][T13151] veth0_vlan: entered allmulticast mode [ 255.233636][T13151] ªªªªªª: renamed from vlan0 [ 255.295025][T13157] lo speed is unknown, defaulting to 1000 [ 255.325433][T13161] netlink: 'syz.3.1785': attribute type 1 has an invalid length. [ 255.371079][T13161] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.427202][T13171] sctp: [Deprecated]: syz.1.1787 (pid 13171) Use of int in maxseg socket option. [ 255.427202][T13171] Use struct sctp_assoc_value instead [ 255.463278][T13166] syzkaller0: entered promiscuous mode [ 255.496701][T13166] syzkaller0: entered allmulticast mode [ 255.538726][T13161] bond5: (slave veth1): Enslaving as an active interface with a down link [ 255.786617][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.221968][T13200] __nla_validate_parse: 5 callbacks suppressed [ 257.221988][T13200] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1792'. [ 257.600862][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 257.636064][T13224] netlink: 'syz.1.1800': attribute type 21 has an invalid length. [ 257.656939][T13224] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1800'. [ 257.767106][T13224] netlink: 'syz.1.1800': attribute type 4 has an invalid length. [ 257.775200][T13224] netlink: 'syz.1.1800': attribute type 5 has an invalid length. [ 257.788734][T13224] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1800'. [ 258.183462][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'. [ 258.224681][T13252] veth0_to_bond: entered allmulticast mode [ 258.236033][T13256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1807'. [ 258.253206][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1805'. [ 258.419768][T13262] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1809'. [ 258.443363][T13264] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 258.530833][T13267] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 258.766186][T13271] bond5: option all_slaves_active: invalid value (13) [ 258.790912][T13271] bond5 (unregistering): Released all slaves [ 258.798183][T13276] netlink: 'syz.1.1813': attribute type 1 has an invalid length. [ 258.927801][T13273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1813'. [ 258.979050][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 259.103705][T11008] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9c [ 259.619047][T13315] bond0: entered promiscuous mode [ 259.628703][T13315] bond_slave_0: entered promiscuous mode [ 259.640849][T13315] batadv0: entered promiscuous mode [ 259.653898][T13315] bond0: left promiscuous mode [ 259.664710][T13315] bond_slave_0: left promiscuous mode [ 259.670647][T13315] batadv0: left promiscuous mode [ 259.702856][T13318] macsec1: entered promiscuous mode [ 259.708409][T13318] dummy0: entered promiscuous mode [ 259.714001][T13318] macsec1: entered allmulticast mode [ 259.720371][T13318] dummy0: entered allmulticast mode [ 259.729036][T13318] dummy0: left allmulticast mode [ 259.734310][T13318] dummy0: left promiscuous mode [ 259.776150][T13319] bond0: entered promiscuous mode [ 259.784297][T13319] bond_slave_0: entered promiscuous mode [ 259.790399][T13319] batadv0: entered promiscuous mode [ 259.795961][T13319] bond0: left promiscuous mode [ 259.801041][T13319] bond_slave_0: left promiscuous mode [ 259.807099][T13319] batadv0: left promiscuous mode [ 259.850329][T13322] syzkaller0: entered promiscuous mode [ 259.856961][T13322] syzkaller0: entered allmulticast mode [ 259.992241][T13330] openvswitch: netlink: IP tunnel dst address not specified [ 260.568914][T13351] lo speed is unknown, defaulting to 1000 [ 260.684841][T13357] lo speed is unknown, defaulting to 1000 [ 260.910944][T13380] veth0_to_bridge: entered promiscuous mode [ 260.955754][T13380] veth0_to_bridge: entered allmulticast mode [ 260.991122][T13382] netlink: 'syz.4.1848': attribute type 1 has an invalid length. [ 261.032804][T13382] bond0: option all_slaves_active: invalid value (7) [ 261.209785][T11015] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 261.237739][T11015] bond0: (slave batadv0): link status definitely down, disabling slave [ 261.268271][T11015] bond0: now running without any active interface! [ 262.165529][T13432] netlink: 'syz.2.1860': attribute type 6 has an invalid length. [ 262.193082][T13432] netlink: 'syz.2.1860': attribute type 7 has an invalid length. [ 262.237194][T13432] netlink: 'syz.2.1860': attribute type 8 has an invalid length. [ 262.428200][T13449] pimreg: entered allmulticast mode [ 262.618664][T13466] geneve2: entered promiscuous mode [ 262.624081][T13466] geneve2: entered allmulticast mode [ 262.695870][T13459] bond5: option arp_validate: invalid value (18446744073491447809) [ 262.712031][T13473] netlink: 'syz.4.1866': attribute type 13 has an invalid length. [ 262.725382][T13459] bond5 (unregistering): Released all slaves [ 262.801024][T13473] tipc: Resetting bearer [ 262.877316][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.886116][ T36] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 262.895636][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.930064][ T36] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 262.959645][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.978793][ T36] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 263.010196][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.032393][ T36] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 263.057322][T13487] syzkaller0: entered promiscuous mode [ 263.063541][T13487] syzkaller0: entered allmulticast mode [ 263.133906][T13494] bond11: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 263.151654][T13494] bond11 (unregistering): Released all slaves [ 263.187186][T13503] __nla_validate_parse: 13 callbacks suppressed [ 263.187201][T13503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1878'. [ 263.228139][T13507] netlink: 'syz.4.1879': attribute type 1 has an invalid length. [ 263.360706][T13512] syzkaller0: entered promiscuous mode [ 263.373706][T13512] syzkaller0: entered allmulticast mode [ 263.496980][T13522] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1885'. [ 263.548211][T13519] lo speed is unknown, defaulting to 1000 [ 263.556140][T13520] lo speed is unknown, defaulting to 1000 [ 263.723643][T13534] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.738395][T13534] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.794516][T13534] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.809399][T13534] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.892598][T13539] bridge0: entered promiscuous mode [ 263.899675][T13539] team0: Port device bridge0 added [ 263.963366][T13534] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.974079][T13534] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.049672][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 264.075532][T13534] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.087359][T13534] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.096343][T13542] netlink: 'syz.1.1892': attribute type 39 has an invalid length. [ 264.184366][T13549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1894'. [ 264.218000][T13549] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 264.233632][T13551] syzkaller1: entered promiscuous mode [ 264.260541][T13551] syzkaller1: entered allmulticast mode [ 264.501783][T11015] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.536596][T11015] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.701416][ T1339] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.718017][ T1339] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.733024][T13565] netlink: 'syz.1.1897': attribute type 13 has an invalid length. [ 264.755727][T13565] netlink: 'syz.1.1897': attribute type 17 has an invalid length. [ 264.789315][T11008] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.807668][T11008] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.941517][ T1339] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.952385][T13581] xt_cgroup: xt_cgroup: no path or classid specified [ 264.962704][ T1339] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.212321][T13594] lo speed is unknown, defaulting to 1000 [ 265.260472][T13601] tipc: Enabled bearer , priority 0 [ 265.298073][T13600] tipc: Disabling bearer [ 265.308214][T13604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1909'. [ 265.320356][T13599] tipc: Enabling of bearer rejected, failed to enable media [ 266.072413][T13632] bond6 (unregistering): Released all slaves [ 266.163092][T13661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1923'. [ 266.747370][T13673] lo speed is unknown, defaulting to 1000 [ 266.961362][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'. [ 267.304030][T13729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1937'. [ 267.468901][T13723] lo speed is unknown, defaulting to 1000 [ 267.508016][T13726] lo speed is unknown, defaulting to 1000 [ 267.547769][T13731] lo speed is unknown, defaulting to 1000 [ 267.856080][T13738] netlink: 'syz.1.1939': attribute type 5 has an invalid length. [ 270.577295][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 270.647236][T13778] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 270.659752][T13778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.805752][T13776] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1947'. [ 270.931011][T13785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1949'. [ 271.039145][T13785] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 271.077054][T13785] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 271.157003][T13793] macvlan1: entered promiscuous mode [ 271.162609][T13793] macvlan1: entered allmulticast mode [ 271.170310][T13793] bond11: (slave macvlan1): Error -98 calling set_mac_address [ 271.211664][T13799] vxcan3: entered allmulticast mode [ 271.705706][T13801] Cannot find add_set index 2 as target [ 271.838331][T13810] netlink: 'syz.3.1955': attribute type 1 has an invalid length. [ 271.935165][T13810] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.943365][T13816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.024567][T13817] bond6: (slave ip6gretap1): making interface the new active one [ 272.049559][T13817] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 272.115743][T13819] lo speed is unknown, defaulting to 1000 [ 272.121928][T13810] erspan0: entered allmulticast mode [ 272.151944][T13810] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 272.914915][T13845] netlink: 'syz.1.1962': attribute type 8 has an invalid length. [ 273.009927][T13849] netlink: 'syz.0.1963': attribute type 10 has an invalid length. [ 273.457700][T13873] netlink: 'syz.2.1967': attribute type 13 has an invalid length. [ 273.567224][T13885] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 273.911653][T13909] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1978'. [ 274.069127][T13918] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 274.118032][T13918] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 274.294698][T13931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1986'. [ 274.332763][T13931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1986'. [ 274.450882][T13945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1990'. [ 274.564308][T13944] pim6reg: entered allmulticast mode [ 274.598317][T13942] pim6reg: left allmulticast mode [ 274.807304][T13961] netlink: 'syz.0.1993': attribute type 39 has an invalid length. [ 274.889712][T13954] syzkaller0: entered promiscuous mode [ 274.895329][T13954] syzkaller0: entered allmulticast mode [ 276.698115][T13980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1998'. [ 276.715108][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'. [ 277.061251][T13992] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 277.684635][T14023] lo speed is unknown, defaulting to 1000 [ 278.010623][T14040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2015'. [ 278.020239][T14040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2015'. [ 278.225558][T14047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2017'. [ 278.289668][T14058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2020'. [ 278.325186][T14058] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 278.370705][T14047] netlink: 'syz.1.2017': attribute type 83 has an invalid length. [ 278.425030][T14060] lo speed is unknown, defaulting to 1000 [ 278.681071][T14068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2023'. [ 278.813962][T14073] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.826743][T14073] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.872250][T14080] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2026'. [ 278.885829][T14080] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2026'. [ 278.983599][T14073] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.007185][T14073] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.117844][T14073] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.128646][T14073] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.151840][T14078] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2025'. [ 279.212592][T14073] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.223486][T14073] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.378757][T11019] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.388060][T11019] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.435095][T11019] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.445051][T11019] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.491034][T11019] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.500791][T11019] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.525109][T11019] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.553060][T11019] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.572388][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057739800: rx timeout, send abort [ 279.801073][T14102] netlink: 'syz.3.2032': attribute type 1 has an invalid length. [ 279.865869][T14102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.001721][T14106] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 280.080665][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057739800: abort rx timeout. Force session deactivation [ 280.179687][T14112] netlink: 'syz.1.2034': attribute type 1 has an invalid length. [ 280.253951][T14112] bond3: entered promiscuous mode [ 280.259619][T14112] bond3: entered allmulticast mode [ 280.265458][T14112] 8021q: adding VLAN 0 to HW filter on device bond3 [ 280.280761][T14106] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 280.313391][T14112] bridge4: entered promiscuous mode [ 280.321859][T14112] bridge4: entered allmulticast mode [ 280.332484][T14112] bond3: (slave bridge4): Enslaving as a backup interface with an up link [ 280.342962][T14115] tipc: Enabling of bearer rejected, failed to enable media [ 280.356023][T14106] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 280.367875][T11008] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 280.454641][T14106] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 280.507418][T11008] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 280.622834][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 280.664390][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 280.740697][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 280.781574][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 280.889022][T14135] lo speed is unknown, defaulting to 1000 [ 281.018663][ T5153] Bluetooth: hci3: link tx timeout [ 281.024099][ T5153] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 281.888381][T14172] __nla_validate_parse: 6 callbacks suppressed [ 281.888401][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2051'. [ 281.972479][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2051'. [ 282.089640][T14172] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 282.390473][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2057'. [ 282.395077][T14180] team_slave_0: left promiscuous mode [ 282.406036][T14180] team_slave_1: left promiscuous mode [ 282.413775][T14180] geneve0: left promiscuous mode [ 282.420520][T14180] bridge0: left promiscuous mode [ 282.560690][T14180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.574378][T14180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.647668][T14180] batman_adv: batadv0: Interface deactivated: gretap1 [ 282.687274][ T9] lo speed is unknown, defaulting to 1000 [ 282.701367][ T9] syz2: Port: 1 Link DOWN [ 282.760257][T14193] bridge_slave_1 (unregistering): left allmulticast mode [ 282.771181][T14193] bridge_slave_1 (unregistering): left promiscuous mode [ 282.778594][T14193] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.790576][T11013] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.799328][T11013] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.807920][T14200] netlink: 'syz.4.2058': attribute type 1 has an invalid length. [ 282.815902][T11013] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.848192][T11013] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.897475][T14209] pimreg: entered allmulticast mode [ 282.903227][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 283.031622][T14218] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2062'. [ 283.057223][ T5840] Bluetooth: hci3: command 0x0405 tx timeout [ 283.197201][T14223] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2063'. [ 283.345165][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 283.362365][T14236] netlink: 'syz.4.2068': attribute type 1 has an invalid length. [ 283.393149][T14237] netlink: 'syz.3.2069': attribute type 1 has an invalid length. [ 283.409194][T14238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2069'. [ 283.444393][T14242] lo speed is unknown, defaulting to 1000 [ 283.448011][T14246] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2071'. [ 283.526085][T14246] : entered promiscuous mode [ 283.546656][T14250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2071'. [ 283.678346][T14258] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 283.798423][T14266] vxcan1: entered allmulticast mode [ 284.770131][T14295] syzkaller0: entered promiscuous mode [ 284.777199][T14295] syzkaller0: entered allmulticast mode [ 285.162210][T14309] openvswitch: netlink: Missing key (keys=40, expected=80) [ 285.179312][T14311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.227653][T14311] netlink: 'syz.0.2087': attribute type 1 has an invalid length. [ 285.280617][T14313] 8021q: VLANs not supported on ip_vti0 [ 285.344167][T14317] netlink: 'syz.1.2088': attribute type 39 has an invalid length. [ 285.387407][T14317] netlink: 'syz.1.2088': attribute type 5 has an invalid length. [ 286.114158][T14363] syzkaller1: entered promiscuous mode [ 286.121976][T14363] syzkaller1: entered allmulticast mode [ 286.137562][T14361] syzkaller1: left promiscuous mode [ 286.146977][T14361] syzkaller1: left allmulticast mode [ 286.208601][T14365] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 286.400678][T14379] syzkaller1: entered promiscuous mode [ 286.414046][T14379] syzkaller1: entered allmulticast mode [ 286.488336][T14385] delete_channel: no stack [ 286.824982][ T5932] IPVS: starting estimator thread 0... [ 286.879149][T14418] x_tables: duplicate entry at hook 1 [ 286.938076][T14416] IPVS: using max 38 ests per chain, 91200 per kthread [ 287.028514][T14425] vlan0: entered promiscuous mode [ 287.033764][T14425] vlan0: entered allmulticast mode [ 287.039066][T14425] bond0: entered allmulticast mode [ 287.044203][T14425] bond_slave_0: entered allmulticast mode [ 287.054630][T14425] bond_slave_1: entered allmulticast mode [ 287.061360][T14425] bridge0: entered allmulticast mode [ 287.068123][T14425] batadv0: entered allmulticast mode [ 287.094192][T14430] __nla_validate_parse: 15 callbacks suppressed [ 287.094205][T14430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2120'. [ 287.128858][T14430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.334433][T14445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'. [ 287.364036][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2126'. [ 287.369853][T14448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2128'. [ 287.374386][T14444] syzkaller0: entered promiscuous mode [ 287.404317][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 287.407545][T14444] syzkaller0: entered allmulticast mode [ 287.420932][T14450] 0: reclassify loop, rule prio 0, protocol 800 [ 287.451660][T14450] 0: reclassify loop, rule prio 0, protocol 800 [ 287.518661][T14454] Unknown options in mask b7f2 [ 287.524437][T14450] 0: reclassify loop, rule prio 0, protocol 800 [ 287.538172][T14452] nbd3: detected capacity change from 0 to 3 [ 287.549089][T14450] 0: reclassify loop, rule prio 0, protocol 800 [ 287.558892][ T5153] block nbd3: Receive control failed (result -32) [ 287.569961][T13890] block nbd3: Dead connection, failed to find a fallback [ 287.620130][T14450] 0: reclassify loop, rule prio 0, protocol 800 [ 287.649799][T14450] 0: reclassify loop, rule prio 0, protocol 800 [ 287.686980][T14450] 0: reclassify loop, rule prio 0, protocol 800 [ 287.693823][T14463] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2136'. [ 287.750875][T14474] netlink: 'syz.3.2135': attribute type 4 has an invalid length. [ 287.759456][T14476] netlink: 'syz.3.2135': attribute type 4 has an invalid length. [ 287.970260][T14490] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2142'. [ 287.979741][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2142'. [ 287.995049][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2142'. [ 288.017909][T14494] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2143'. [ 288.040901][T14494] netlink: 'syz.1.2143': attribute type 8 has an invalid length. [ 288.059112][T14490] bond12: option tlb_dynamic_lb: invalid value (109) [ 288.088325][T14490] bond12 (unregistering): Released all slaves [ 288.478010][T14531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.485324][T14531] IPv6: NLM_F_CREATE should be set when creating new route [ 288.586283][T14531] pim6reg1: entered promiscuous mode [ 288.609619][T14531] pim6reg1: entered allmulticast mode [ 288.699150][T14553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.922099][T14570] x_tables: duplicate underflow at hook 1 [ 288.954065][T14573] IPVS: Unknown mcast interface: veth1_to_bridge [ 288.980947][T14575] netlink: 'syz.2.2163': attribute type 22 has an invalid length. [ 290.007806][T14597] FAULT_INJECTION: forcing a failure. [ 290.007806][T14597] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 290.035425][T14597] CPU: 1 UID: 0 PID: 14597 Comm: syz.4.2169 Not tainted syzkaller #0 PREEMPT(full) [ 290.035451][T14597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.035462][T14597] Call Trace: [ 290.035470][T14597] [ 290.035477][T14597] dump_stack_lvl+0x189/0x250 [ 290.035502][T14597] ? __pfx____ratelimit+0x10/0x10 [ 290.035523][T14597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.035541][T14597] ? __pfx__printk+0x10/0x10 [ 290.035575][T14597] should_fail_ex+0x414/0x560 [ 290.035598][T14597] _copy_from_user+0x2d/0xb0 [ 290.035621][T14597] __copy_msghdr+0x3c5/0x5b0 [ 290.035649][T14597] ___sys_sendmsg+0x1a5/0x2a0 [ 290.035676][T14597] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.035736][T14597] ? __fget_files+0x2a/0x420 [ 290.035751][T14597] ? __fget_files+0x3a0/0x420 [ 290.035776][T14597] __sys_sendmmsg+0x227/0x430 [ 290.035806][T14597] ? __pfx___sys_sendmmsg+0x10/0x10 [ 290.035845][T14597] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 290.035884][T14597] ? ksys_write+0x22a/0x250 [ 290.035907][T14597] ? __pfx_ksys_write+0x10/0x10 [ 290.035932][T14597] __x64_sys_sendmmsg+0xa0/0xc0 [ 290.035951][T14597] do_syscall_64+0xfa/0xf80 [ 290.035972][T14597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.035989][T14597] ? clear_bhb_loop+0x60/0xb0 [ 290.036009][T14597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.036025][T14597] RIP: 0033:0x7f97ca58f749 [ 290.036041][T14597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.036056][T14597] RSP: 002b:00007f97cb394038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 290.036076][T14597] RAX: ffffffffffffffda RBX: 00007f97ca7e5fa0 RCX: 00007f97ca58f749 [ 290.036088][T14597] RDX: 0000000000000300 RSI: 0000200000000740 RDI: 0000000000000003 [ 290.036099][T14597] RBP: 00007f97cb394090 R08: 0000000000000000 R09: 0000000000000000 [ 290.036109][T14597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.036119][T14597] R13: 00007f97ca7e6038 R14: 00007f97ca7e5fa0 R15: 00007fff20f021b8 [ 290.036150][T14597] [ 290.469449][T14623] net_ratelimit: 14 callbacks suppressed [ 290.469468][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.605323][T14636] x_tables: duplicate underflow at hook 2 [ 290.947884][T14653] netlink: 'syz.0.2184': attribute type 1 has an invalid length. [ 290.956141][T14653] netlink: 'syz.0.2184': attribute type 4 has an invalid length. [ 291.640032][T14688] netlink: 'syz.1.2191': attribute type 11 has an invalid length. [ 291.829325][T14697] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 291.964218][T14699] lo: entered allmulticast mode [ 292.047862][T14699] lo: left allmulticast mode [ 292.423298][T14719] tipc: Enabled bearer , priority 0 [ 292.485576][T14718] syzkaller0: entered promiscuous mode [ 292.500723][T14718] syzkaller0: entered allmulticast mode [ 292.604072][T14692] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 292.704679][T14732] __nla_validate_parse: 14 callbacks suppressed [ 292.704700][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'. [ 294.648892][T14723] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 294.657997][T14729] : renamed from bond_slave_0 [ 294.705472][T14720] tipc: Resetting bearer [ 294.767447][T14720] tipc: Disabling bearer [ 294.781083][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'. [ 294.888787][T14755] Cannot find add_set index 3 as target [ 295.072448][ T30] audit: type=1800 audit(1765782981.632:6): pid=14764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2214" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2170 res=0 errno=0 [ 295.102788][T14764] netlink: 'syz.3.2214': attribute type 4 has an invalid length. [ 295.128526][T14764] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2214'. [ 295.210370][T14770] --map-set only usable from mangle table [ 295.426252][T14788] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 295.689356][T14799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2224'. [ 295.904723][T14822] lo speed is unknown, defaulting to 1000 [ 296.078234][T14829] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20003 [ 296.953792][T14860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2235'. [ 297.268623][T14875] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2242'. [ 297.647079][T14898] netlink: 'syz.0.2246': attribute type 2 has an invalid length. [ 297.707500][T14898] netlink: 'syz.0.2246': attribute type 2 has an invalid length. [ 297.715670][T14898] netlink: 'syz.0.2246': attribute type 2 has an invalid length. [ 297.768048][T14898] netlink: 'syz.0.2246': attribute type 2 has an invalid length. [ 297.776068][T14898] netlink: 'syz.0.2246': attribute type 2 has an invalid length. [ 297.787510][T14898] netlink: 'syz.0.2246': attribute type 2 has an invalid length. [ 297.873496][T14898] netlink: 'syz.0.2246': attribute type 2 has an invalid length. [ 297.882760][T14898] netlink: 'syz.0.2246': attribute type 2 has an invalid length. [ 297.896294][T14898] netlink: 'syz.0.2246': attribute type 2 has an invalid length. [ 298.038857][T14922] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 298.279526][T14936] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2256'. [ 298.699388][T14953] syzkaller0: Caught tx_queue_len zero misconfig [ 298.744183][T14953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2262'. [ 298.927756][T14969] tipc: Enabled bearer , priority 0 [ 298.935457][T14969] syzkaller0: entered promiscuous mode [ 298.941565][T14969] syzkaller0: entered allmulticast mode [ 298.977549][T14969] tipc: Resetting bearer [ 299.001087][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2269'. [ 299.059676][T14968] tipc: Resetting bearer [ 299.150349][T14968] tipc: Disabling bearer [ 299.351604][T14993] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2274'. [ 299.521226][T11013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.545325][T15006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2277'. [ 299.559184][T11013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.682925][T15018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2279'. [ 299.742611][T15016] lo speed is unknown, defaulting to 1000 [ 299.765258][T15020] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2281'. [ 299.775239][T15020] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2281'. [ 299.907159][T15024] tipc: Enabled bearer , priority 0 [ 299.914466][T15026] syzkaller0: entered promiscuous mode [ 299.956568][T15026] syzkaller0: entered allmulticast mode [ 299.957712][T15030] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2283'. [ 300.037419][T15026] tipc: Resetting bearer [ 300.061410][T15026] tipc: Disabling bearer [ 300.164282][T15039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2287'. [ 300.854432][T15068] vlan0: entered promiscuous mode [ 300.873149][T15068] vlan0: entered allmulticast mode [ 300.883160][T15068] bond0: entered allmulticast mode [ 300.888935][T15068] team0: entered allmulticast mode [ 301.185334][T15084] lo speed is unknown, defaulting to 1000 [ 301.249273][T15092] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 301.269343][T15096] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 302.068054][T15129] x_tables: duplicate underflow at hook 3 [ 302.080047][T15129] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 302.129766][T15131] validate_nla: 60 callbacks suppressed [ 302.129779][T15131] netlink: 'syz.2.2313': attribute type 32 has an invalid length. [ 302.881333][T15144] team1: entered promiscuous mode [ 302.887353][T15144] team1: entered allmulticast mode [ 303.026320][T15156] netlink: 'syz.2.2320': attribute type 12 has an invalid length. [ 303.058318][T15156] netlink: 'syz.2.2320': attribute type 12 has an invalid length. [ 303.070317][T15158] netlink: 'syz.1.2321': attribute type 6 has an invalid length. [ 303.135597][T15169] lo speed is unknown, defaulting to 1000 [ 303.288689][T15178] tipc: Enabling of bearer rejected, failed to enable media [ 303.875581][T15197] lo speed is unknown, defaulting to 1000 [ 304.011522][T15209] __nla_validate_parse: 16 callbacks suppressed [ 304.011541][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 304.358975][T15225] netlink: 'syz.2.2339': attribute type 1 has an invalid length. [ 304.604774][T15225] 8021q: adding VLAN 0 to HW filter on device bond6 [ 304.635710][T15219] lo speed is unknown, defaulting to 1000 [ 304.646199][T15231] bond6: entered promiscuous mode [ 304.673419][T15232] tipc: Enabling of bearer rejected, already enabled [ 305.280761][T15267] netlink: 'syz.4.2348': attribute type 10 has an invalid length. [ 305.368988][T15260] lo speed is unknown, defaulting to 1000 [ 305.563150][T15274] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 306.237421][T15263] lo speed is unknown, defaulting to 1000 [ 307.018963][T15297] batadv1: entered promiscuous mode [ 307.371033][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.390255][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.401014][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.429996][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.449432][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.473132][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.482699][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.498846][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.519184][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.531467][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.609169][T15306] lo speed is unknown, defaulting to 1000 [ 307.691158][T15320] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2367'. [ 307.701200][T15320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2367'. [ 307.714589][T15307] lo speed is unknown, defaulting to 1000 [ 308.278247][T15345] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 308.310143][T15345] bond0: (slave 32): Releasing backup interface [ 308.320189][T15345] : left promiscuous mode [ 308.330265][T15345] bond0: (slave bond_slave_1): Releasing backup interface [ 308.353271][T15345] bond_slave_1: left promiscuous mode [ 308.378164][T15345] team0: Port device team_slave_0 removed [ 308.388272][T15345] team0: Port device team_slave_1 removed [ 308.395357][T15345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.404782][T15345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.420436][T15345] team0: Port device geneve0 removed [ 308.427707][T15345] batman_adv: batadv0: Removing interface: gretap1 [ 308.444911][T15351] netlink: 'syz.1.2373': attribute type 10 has an invalid length. [ 308.447020][T15352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'. [ 308.476873][T15345] team0: Port device bridge0 removed [ 308.484485][T15345] bond3: (slave bridge4): Removing an active aggregator [ 308.494792][T15345] bond3: (slave bridge4): Releasing backup interface [ 308.505091][T15345] bridge4: left promiscuous mode [ 308.511937][T15345] bridge4: left allmulticast mode [ 308.531847][T15352] vlan1: entered promiscuous mode [ 308.537559][T15352] dummy0: entered promiscuous mode [ 308.592398][T15351] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 308.981667][T15365] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 309.001700][T15368] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2380'. [ 309.122432][T15306] chnl_net:caif_netlink_parms(): no params data found [ 309.151283][T15374] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2381'. [ 309.233822][T15307] chnl_net:caif_netlink_parms(): no params data found [ 309.306263][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'. [ 309.327105][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'. [ 309.416290][T15306] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.431050][T15306] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.439418][T15306] bridge_slave_0: entered allmulticast mode [ 309.448563][T15306] bridge_slave_0: entered promiscuous mode [ 309.471821][T15306] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.479822][T15306] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.487981][T15306] bridge_slave_1: entered allmulticast mode [ 309.499853][T15306] bridge_slave_1: entered promiscuous mode [ 309.538071][ T5840] Bluetooth: hci0: command tx timeout [ 309.617083][ T5840] Bluetooth: hci1: command tx timeout [ 309.652978][T15306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.693665][T15404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2386'. [ 309.704655][T15307] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.716826][T15307] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.724119][T15307] bridge_slave_0: entered allmulticast mode [ 309.744353][T15307] bridge_slave_0: entered promiscuous mode [ 309.755011][T15306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.768206][T15307] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.775374][T15307] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.783445][T15307] bridge_slave_1: entered allmulticast mode [ 309.807452][T15307] bridge_slave_1: entered promiscuous mode [ 309.941515][T15306] team0: Port device team_slave_0 added [ 309.970219][T15307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.999630][T15306] team0: Port device team_slave_1 added [ 310.051380][T15307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.209125][T15306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.216113][T15306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.276774][T15306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.306892][T15307] team0: Port device team_slave_0 added [ 310.315601][T15307] team0: Port device team_slave_1 added [ 310.323202][T15306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.329630][T15428] netlink: 'syz.1.2393': attribute type 1 has an invalid length. [ 310.330830][T15306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.364366][T15306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.497947][T15307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.505315][T15307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.532721][T15307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.593526][T15307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.602640][T15307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.629969][T15307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.649979][T15306] hsr_slave_0: entered promiscuous mode [ 310.658750][T15306] hsr_slave_1: entered promiscuous mode [ 310.805054][T15307] hsr_slave_0: entered promiscuous mode [ 310.813532][T15307] hsr_slave_1: entered promiscuous mode [ 310.821630][T15307] debugfs: 'hsr0' already exists in 'hsr' [ 310.828531][T15307] Cannot create hsr debugfs directory [ 311.369414][T15437] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2395'. [ 311.397048][T15437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2395'. [ 311.423427][T15306] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 311.435742][T15437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2395'. [ 311.459406][T15306] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 311.493397][T15306] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 311.570787][T15442] ip6_vti0: mtu less than device minimum [ 311.578193][T15446] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2399'. [ 311.578193][T15447] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2399'. [ 311.587905][T15306] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 311.617410][ T5840] Bluetooth: hci0: command tx timeout [ 311.707362][ T5840] Bluetooth: hci1: command tx timeout [ 311.800320][T15447] lo speed is unknown, defaulting to 1000 [ 311.814356][T15307] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 311.862570][T15307] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 311.915203][T15307] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 311.971940][T15307] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 312.172961][T15306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.188176][T15474] netlink: 'syz.0.2402': attribute type 10 has an invalid length. [ 312.216730][T15306] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.249771][T11009] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.256982][T11009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.328254][T15307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.351434][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.358650][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.568923][T15307] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.594666][T15306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.644593][T11009] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.651836][T11009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.681824][T15487] netlink: 'syz.0.2406': attribute type 1 has an invalid length. [ 312.689738][T15487] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2406'. [ 312.701244][T11009] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.708462][T11009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.219667][T15501] lo speed is unknown, defaulting to 1000 [ 313.351766][T15306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.395461][T15307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.699482][ T5840] Bluetooth: hci0: command tx timeout [ 313.779320][ T5840] Bluetooth: hci1: command tx timeout [ 314.160340][T15532] bond7: option lacp_rate: invalid value (255) [ 314.182412][T15532] bond7 (unregistering): Released all slaves [ 314.258895][T15542] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2415'. [ 314.310880][T15547] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2415'. [ 314.365721][T15307] veth0_vlan: entered promiscuous mode [ 314.395793][T15542] syz_tun: entered allmulticast mode [ 314.443142][T15541] syz_tun: left allmulticast mode [ 314.459317][T15553] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2416'. [ 314.474023][T15307] veth1_vlan: entered promiscuous mode [ 314.545984][T15306] veth0_vlan: entered promiscuous mode [ 314.600110][T15306] veth1_vlan: entered promiscuous mode [ 314.629857][T15307] veth0_macvtap: entered promiscuous mode [ 314.650452][T15307] veth1_macvtap: entered promiscuous mode [ 314.719945][T15307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.729526][T15306] veth0_macvtap: entered promiscuous mode [ 314.752015][T15307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.772316][T15306] veth1_macvtap: entered promiscuous mode [ 314.791117][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.820018][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.848318][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.881177][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.944163][T15306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.972766][T15306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.993270][ T6734] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.020493][ T6734] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.078378][ T6734] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.081794][T15573] netlink: 'syz.0.2423': attribute type 33 has an invalid length. [ 315.102689][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.123843][T15573] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2423'. [ 315.184801][ T6734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.203164][ T6734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.334279][ T6734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.353581][ T6734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.427243][ T6734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.435116][ T6734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.548015][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.555889][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.580196][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2368'. [ 315.781424][ T5840] Bluetooth: hci0: command tx timeout [ 315.852940][T15592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.868844][ T5840] Bluetooth: hci1: command tx timeout [ 315.977625][T15597] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 316.145805][T15606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2434'. [ 316.220098][T15611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2432'. [ 316.490072][T12943] udevd[12943]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 316.549102][T15628] lo speed is unknown, defaulting to 1000 [ 316.585879][T12943] udevd[12943]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 316.633076][T15634] netlink: 'syz.1.2441': attribute type 2 has an invalid length. [ 316.663673][T15634] netlink: 'syz.1.2441': attribute type 1 has an invalid length. [ 317.225000][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.515981][T15642] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 317.692742][T15649] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2444'. [ 318.117778][T15670] lo speed is unknown, defaulting to 1000 [ 318.713798][T15699] veth1_macvtap: left promiscuous mode [ 318.738194][T15699] macsec0: entered promiscuous mode [ 318.756165][T15699] veth1_macvtap: entered promiscuous mode [ 318.774143][T15699] macsec0: left promiscuous mode [ 319.500871][T15725] bridge37: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 319.635964][T15727] batadv_slave_0: entered promiscuous mode [ 319.648559][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2462'. [ 319.901146][T15749] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2468'. [ 319.971825][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'. [ 320.023696][T15749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2468'. [ 320.062099][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'. [ 320.071474][T15749] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2468'. [ 320.081053][T15749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2468'. [ 320.159652][T15749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2468'. [ 320.304428][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'. [ 320.411202][T15749] Bluetooth: MGMT ver 1.23 [ 320.605087][T15783] netlink: 'syz.0.2472': attribute type 10 has an invalid length. [ 320.697348][T15786] netlink: 'syz.0.2472': attribute type 10 has an invalid length. [ 320.768612][T15783] dummy0: entered allmulticast mode [ 320.811363][T15783] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 320.839323][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2476'. [ 320.853827][T15783] team0: Failed to send options change via netlink (err -105) [ 320.873468][T15783] team0: Port device dummy0 added [ 320.918201][T15786] dummy0: left allmulticast mode [ 320.924895][T15786] team0: Failed to send options change via netlink (err -105) [ 320.935244][T15786] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 320.945204][T15786] team0: Port device dummy0 removed [ 320.955556][T15786] dummy0: entered allmulticast mode [ 320.964749][T15786] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 321.094418][T15789] syzkaller0: entered promiscuous mode [ 321.110314][T15789] syzkaller0: entered allmulticast mode [ 321.216715][T15789] tipc: Started in network mode [ 321.221995][T15789] tipc: Node identity 6a0ab3568fe3, cluster identity 4711 [ 321.232145][T15789] tipc: Enabled bearer , priority 0 [ 321.265179][T15789] tipc: Resetting bearer [ 321.283563][T15788] tipc: Resetting bearer [ 321.319437][T15811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.350884][T15788] tipc: Disabling bearer [ 321.622509][T15824] lo speed is unknown, defaulting to 1000 [ 321.930057][T15832] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 322.782990][T15886] tipc: Enabled bearer , priority 0 [ 322.817878][T15889] syzkaller0: entered promiscuous mode [ 322.824892][T15889] syzkaller0: entered allmulticast mode [ 322.869394][T15886] tipc: Resetting bearer [ 322.881391][T15885] tipc: Resetting bearer [ 322.901634][T15885] tipc: Disabling bearer [ 322.924507][T15898] tipc: Enabled bearer , priority 0 [ 322.952862][T15897] tipc: Disabling bearer [ 323.367154][T15907] bond1: option arp_all_targets: invalid value (18446744073709551615) [ 323.491289][T15907] bond1 (unregistering): Released all slaves [ 323.581426][T15928] nbd: nbd1 already in use [ 323.922147][T15933] lo speed is unknown, defaulting to 1000 [ 324.564436][T15970] vlan1: entered promiscuous mode [ 324.883884][T15987] netlink: 'syz.0.2523': attribute type 1 has an invalid length. [ 324.973587][T15990] __nla_validate_parse: 9 callbacks suppressed [ 324.973605][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 325.131603][T15987] bond12: entered promiscuous mode [ 325.150533][T15987] 8021q: adding VLAN 0 to HW filter on device bond12 [ 325.412073][T16001] syzkaller0: entered promiscuous mode [ 325.425934][T16001] syzkaller0: entered allmulticast mode [ 325.844159][T16018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2532'. [ 326.008592][T16021] pim6reg1: entered promiscuous mode [ 326.014374][T16021] pim6reg1: entered allmulticast mode [ 326.031273][T16031] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2535'. [ 326.075741][T16029] bond4: option arp_validate: invalid value (18446744073491447809) [ 326.093081][T16029] bond4 (unregistering): Released all slaves [ 326.105079][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 326.152056][T16034] netlink: 'syz.1.2536': attribute type 13 has an invalid length. [ 326.352496][T16040] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2539'. [ 326.437589][T16040] .70·: renamed from hsr0 (while UP) [ 326.480878][T16040] .70·: entered allmulticast mode [ 326.519999][T16040] hsr_slave_0: entered allmulticast mode [ 326.525813][T16040] hsr_slave_1: entered allmulticast mode [ 326.577618][T16040] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 326.977287][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2554'. [ 326.994650][T16081] tipc: Started in network mode [ 327.010677][T16081] tipc: Node identity de7727cb1816, cluster identity 4711 [ 327.026780][T16081] tipc: Enabled bearer , priority 0 [ 327.058049][T16092] syzkaller0: entered promiscuous mode [ 327.065840][T16092] syzkaller0: entered allmulticast mode [ 327.069616][T16091] netlink: 'syz.2.2555': attribute type 3 has an invalid length. [ 327.151343][T16080] tipc: Resetting bearer [ 327.221257][T16080] tipc: Disabling bearer [ 327.382579][T16105] lo speed is unknown, defaulting to 1000 [ 327.430823][T16109] lo speed is unknown, defaulting to 1000 [ 327.458220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.034394][T16119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2561'. [ 329.293767][T16140] syzkaller0: entered promiscuous mode [ 329.316995][T16140] syzkaller0: entered allmulticast mode [ 329.634695][T16145] netlink: 'syz.6.2569': attribute type 58 has an invalid length. [ 329.661762][T16145] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2569'. [ 329.844862][T16162] netlink: 'syz.6.2573': attribute type 13 has an invalid length. [ 330.009070][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 330.035589][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'. [ 330.069806][T16170] netlink: 'syz.1.2575': attribute type 3 has an invalid length. [ 330.205509][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2578'. [ 330.228847][T16180] : entered promiscuous mode [ 330.241625][T16180] netlink: 'syz.1.2578': attribute type 1 has an invalid length. [ 330.249039][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2580'. [ 330.285213][T16180] bond4: entered promiscuous mode [ 330.293710][T16180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 330.301229][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'. [ 330.323461][T16184] netlink: 'syz.0.2580': attribute type 10 has an invalid length. [ 330.326635][T16180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2578'. [ 330.580401][T16196] netlink: 'syz.0.2583': attribute type 1 has an invalid length. [ 330.708256][T16202] bond13: (slave bridge10): making interface the new active one [ 330.718788][T16202] bond13: (slave bridge10): Enslaving as an active interface with an up link [ 330.745384][T16193] tipc: Enabled bearer , priority 0 [ 330.777938][T16193] syzkaller0: entered promiscuous mode [ 330.783459][T16193] syzkaller0: entered allmulticast mode [ 330.896894][T16193] tipc: Resetting bearer [ 330.937324][T16192] tipc: Resetting bearer [ 331.019556][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2587'. [ 331.033239][T16192] tipc: Disabling bearer [ 331.062852][T16212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2587'. [ 331.160914][T16216] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2588'. [ 331.359714][T16229] SET target dimension over the limit! [ 331.586396][T16244] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 331.750594][T16252] netlink: 'syz.2.2601': attribute type 11 has an invalid length. [ 331.774892][ T6481] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.34 Device [syz0] on aa:aa:aa:aa:aa:aa [ 331.827082][T16252] netlink: 'syz.2.2601': attribute type 4 has an invalid length. [ 331.834856][T16252] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.2601'. [ 331.950992][T16261] fido_id[16261]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 332.228106][T16272] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.235894][T16272] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.430169][T16292] netlink: zone id is out of range [ 332.440068][T16272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.442353][T16292] netlink: zone id is out of range [ 332.465764][T16272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.473748][T16292] netlink: zone id is out of range [ 332.473984][T16292] netlink: zone id is out of range [ 332.474096][T16292] netlink: zone id is out of range [ 332.512204][T16292] netlink: zone id is out of range [ 332.518585][T16292] netlink: zone id is out of range [ 332.523792][T16292] netlink: zone id is out of range [ 332.533678][T16272] .70·: left allmulticast mode [ 332.536348][T16292] netlink: zone id is out of range [ 332.539924][T16272] hsr_slave_0: left allmulticast mode [ 332.545424][T16292] netlink: zone id is out of range [ 332.550250][T16272] hsr_slave_1: left allmulticast mode [ 332.774774][T11009] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.793617][T11009] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.817207][T11009] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.842043][T11009] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.320457][T16334] sctp: [Deprecated]: syz.0.2623 (pid 16334) Use of int in maxseg socket option. [ 333.320457][T16334] Use struct sctp_assoc_value instead [ 334.027940][T16364] .71·: renamed from .70· [ 334.052254][T16364] .71·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.072427][T16364] .71·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.088435][T16364] .71·: entered allmulticast mode [ 334.101611][T16364] hsr_slave_0: entered allmulticast mode [ 334.133633][T16364] hsr_slave_1: entered allmulticast mode [ 334.333368][T16373] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 334.505463][T16378] sock: sock_timestamping_bind_phc: sock not bind to device [ 334.591128][T16378] [†’Ì: entered promiscuous mode [ 334.777929][T16382] bond7: option arp_validate: invalid value (18446744073491447809) [ 334.791379][T16382] bond7 (unregistering): Released all slaves [ 334.828635][T16389] sch_fq: defrate 0 ignored. [ 334.880791][T16398] raw_sendmsg: syz.2.2638 forgot to set AF_INET. Fix it! [ 334.911006][T16392] lo speed is unknown, defaulting to 1000 [ 334.948251][T16382] netlink: 'syz.2.2638': attribute type 13 has an invalid length. [ 335.482457][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.491039][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.530843][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.578282][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.813678][T16420] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 335.981395][T16434] lo speed is unknown, defaulting to 1000 [ 336.243976][T16444] netlink: 'syz.0.2653': attribute type 2 has an invalid length. [ 336.276783][T16444] netlink: 'syz.0.2653': attribute type 5 has an invalid length. [ 336.467589][T16449] tipc: Enabling of bearer rejected, failed to enable media [ 336.488606][T16452] lo speed is unknown, defaulting to 1000 [ 336.499309][T16455] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 336.606844][T16459] __nla_validate_parse: 11 callbacks suppressed [ 336.606862][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2657'. [ 337.335502][T16475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.565441][T16491] syzkaller0: entered promiscuous mode [ 337.571955][T16491] syzkaller0: entered allmulticast mode [ 337.691587][T16495] ¾x9ÿ: left promiscuous mode [ 337.708402][T16495] batadv_slave_0: left promiscuous mode [ 337.714259][T16495] veth1_to_batadv: left promiscuous mode [ 337.730029][T16495] bond1: left promiscuous mode [ 337.739935][T16495] geneve2: left promiscuous mode [ 337.745298][T16495] bond3: left promiscuous mode [ 337.752459][T16495] bond4: left promiscuous mode [ 339.953736][T16507] lo speed is unknown, defaulting to 1000 [ 339.987937][T16513] lo speed is unknown, defaulting to 1000 [ 340.067278][T16519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2671'. [ 340.183156][T16527] netem: change failed [ 340.322162][T16534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2674'. [ 340.489369][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2676'. [ 340.576210][T16545] geneve4: entered promiscuous mode [ 340.590958][T16545] geneve4: entered allmulticast mode [ 340.603739][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'. [ 340.826372][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 55792 - 0 [ 340.836004][ T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 55792 - 0 [ 340.945957][T16552] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2678'. [ 340.983931][T16552] ip6gretap0: entered promiscuous mode [ 341.025861][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 55792 - 0 [ 341.052932][ T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 55792 - 0 [ 341.175238][T16551] lo speed is unknown, defaulting to 1000 [ 341.445109][T16566] erspan0: left promiscuous mode [ 341.630241][T16576] netlink: 'syz.2.2684': attribute type 10 has an invalid length. [ 341.710512][T16576] bridge0: entered promiscuous mode [ 341.716049][T16576] bridge0: entered allmulticast mode [ 341.722603][T16576] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 341.940293][T16583] tipc: Enabled bearer , priority 0 [ 341.968944][T16583] syzkaller0: entered promiscuous mode [ 341.974828][T16583] syzkaller0: entered allmulticast mode [ 342.056479][ C0] hrtimer: interrupt took 336798 ns [ 342.168079][T16583] tipc: Resetting bearer [ 342.202770][T16582] tipc: Resetting bearer [ 342.777871][T16582] tipc: Disabling bearer [ 342.926491][T16598] net_ratelimit: 46 callbacks suppressed [ 342.926511][T16598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.048822][T16604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2692'. [ 343.062352][T16598] syzkaller0: entered promiscuous mode [ 343.116590][T16598] syzkaller0: entered allmulticast mode [ 343.154074][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2693'. [ 343.279929][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 343.339990][T16611] lo speed is unknown, defaulting to 1000 [ 343.840020][T16629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2696'. [ 344.482843][T16658] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2704'. [ 344.508884][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 344.519032][T16658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2704'. [ 344.529436][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 344.566727][T16658] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2704'. [ 344.634037][T16658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2704'. [ 344.795293][T16667] netlink: 'syz.5.2709': attribute type 1 has an invalid length. [ 345.223962][T16672] lo speed is unknown, defaulting to 1000 [ 345.439907][T16683] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 345.479459][T16663] lo speed is unknown, defaulting to 1000 [ 345.500701][T16683] Bluetooth: MGMT ver 1.23 [ 345.519515][T16683] netlink: 'syz.1.2710': attribute type 1 has an invalid length. [ 345.678985][T16698] netlink: 'syz.0.2713': attribute type 30 has an invalid length. [ 345.701926][T16700] netlink: 'syz.5.2714': attribute type 2 has an invalid length. [ 345.711038][T16700] netlink: 'syz.5.2714': attribute type 9 has an invalid length. [ 346.587210][ T5840] Bluetooth: hci0: command tx timeout [ 346.800262][T16750] netlink: 'syz.0.2724': attribute type 13 has an invalid length. [ 346.856209][T16748] geneve2: entered promiscuous mode [ 346.867800][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.904045][ T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.002120][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.031127][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.756257][T16780] lo speed is unknown, defaulting to 1000 [ 348.353566][T16797] xt_hashlimit: size too large, truncated to 1048576 [ 348.643521][T16805] lo speed is unknown, defaulting to 1000 [ 348.688960][T16806] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 348.741183][T16801] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 349.362963][T16816] netlink: 'syz.6.2739': attribute type 3 has an invalid length. [ 349.397148][T16816] __nla_validate_parse: 13 callbacks suppressed [ 349.397168][T16816] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2739'. [ 349.598752][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2741'. [ 349.627825][T16824] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2741'. [ 349.946663][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2743'. [ 350.708361][T16853] block nbd4: Unsupported socket: should be TCP or UNIX. [ 350.718400][T16853] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2748'. [ 350.937519][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 351.027173][T16872] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2754'. [ 351.029245][T16859] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.082036][T16865] macsec2: entered promiscuous mode [ 351.127918][T16865] macsec2: entered allmulticast mode [ 351.241554][T16859] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.431388][T16859] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.459057][T16886] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2758'. [ 351.543620][T16859] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.615892][T16898] netlink: 'syz.2.2763': attribute type 10 has an invalid length. [ 351.669171][T16898] dummy0: entered promiscuous mode [ 351.680491][T16898] dummy0: entered allmulticast mode [ 351.691038][T16898] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 351.701205][T16898] team0: Failed to send options change via netlink (err -105) [ 351.731243][T16898] team0: Port device dummy0 added [ 351.732282][T16903] netlink: 'syz.2.2763': attribute type 10 has an invalid length. [ 351.749222][T16900] Cannot find del_set index 4 as target [ 351.768394][T16903] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 351.801666][T16903] dummy0: left promiscuous mode [ 351.818245][T16903] dummy0: left allmulticast mode [ 351.835282][T16903] team0: Failed to send options change via netlink (err -105) [ 351.854338][T16910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2762'. [ 351.854400][T16903] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 351.879146][T16903] team0: Port device dummy0 removed [ 351.901572][T16903] dummy0: entered promiscuous mode [ 351.908338][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2762'. [ 351.918693][T16903] dummy0: entered allmulticast mode [ 351.925814][T16903] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 351.952266][T16905] pimreg: entered allmulticast mode [ 351.998712][T11014] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.103746][T15863] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.115667][T16914] xt_hashlimit: max too large, truncated to 1048576 [ 352.207764][T11014] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.262961][T11014] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.317735][T16929] netlink: 'syz.0.2771': attribute type 3 has an invalid length. [ 352.362260][T16922] netlink: 'syz.2.2769': attribute type 1 has an invalid length. [ 352.392978][T16929] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 352.426199][T16922] 8021q: adding VLAN 0 to HW filter on device bond7 [ 352.524969][T16937] xt_TCPMSS: Only works on TCP SYN packets [ 352.556210][T16935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.575394][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.629339][T11014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.676734][T11014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.804152][T16948] netlink: 'syz.5.2776': attribute type 1 has an invalid length. [ 352.869395][T16949] bond1 (unregistering): Released all slaves [ 353.094729][T16969] siw: device registration error -23 [ 353.297491][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.477660][T16984] syzkaller0: entered promiscuous mode [ 353.497608][T16984] syzkaller0: entered allmulticast mode [ 353.615494][T16984] tipc: Enabled bearer , priority 0 [ 353.829525][T17003] lo speed is unknown, defaulting to 1000 [ 354.168841][T17015] netlink: 'syz.6.2792': attribute type 21 has an invalid length. [ 354.259411][T16982] tipc: Resetting bearer [ 354.339679][T16982] tipc: Disabling bearer [ 354.699539][T17038] __nla_validate_parse: 15 callbacks suppressed [ 354.699558][T17038] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2798'. [ 354.732065][T17037] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2798'. [ 354.984804][T17041] lo speed is unknown, defaulting to 1000 [ 355.320378][T17061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.462011][T17064] dvmrp0: entered allmulticast mode [ 355.974445][T17069] lo speed is unknown, defaulting to 1000 [ 356.028298][T17082] lo speed is unknown, defaulting to 1000 [ 356.694022][T17100] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2812'. [ 356.849893][T17103] netlink: 'syz.5.2813': attribute type 4 has an invalid length. [ 356.932709][T17103] bond2 (unregistering): Released all slaves [ 358.175206][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.198620][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.210782][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.248009][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.265720][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.357290][T17125] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 358.415027][T17126] lo speed is unknown, defaulting to 1000 [ 358.858010][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2822'. [ 359.249165][T17159] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2825'. [ 359.294609][T17159] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2825'. [ 359.815857][T15863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.848940][T15863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.176344][T17126] chnl_net:caif_netlink_parms(): no params data found [ 360.253158][T17175] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 360.427203][ T5840] Bluetooth: hci2: command tx timeout [ 360.515575][T17191] tipc: Invalid UDP bearer configuration [ 360.515645][T17191] tipc: Enabling of bearer rejected, failed to enable media [ 360.607041][T17193] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 360.625748][T17126] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.633799][T17126] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.643210][T17126] bridge_slave_0: entered allmulticast mode [ 360.652583][T17126] bridge_slave_0: entered promiscuous mode [ 360.679671][T17126] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.695866][T17126] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.719023][T17126] bridge_slave_1: entered allmulticast mode [ 360.728309][T17126] bridge_slave_1: entered promiscuous mode [ 360.779515][T17199] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2833'. [ 361.003294][T17126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.028183][T17203] veth0: entered promiscuous mode [ 361.074134][T17126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.095250][T17202] lo speed is unknown, defaulting to 1000 [ 361.252456][T17126] team0: Port device team_slave_0 added [ 361.309094][T17126] team0: Port device team_slave_1 added [ 361.530635][T17126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.559641][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.762232][T17126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.832155][T17126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.857645][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.923433][T17126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.943375][T17203] veth0: left promiscuous mode [ 361.959964][T17219] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 362.209546][T17230] syzkaller0: entered promiscuous mode [ 362.224750][T17230] syzkaller0: entered allmulticast mode [ 362.358549][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2844'. [ 362.359034][T17126] hsr_slave_0: entered promiscuous mode [ 362.375648][T17126] hsr_slave_1: entered promiscuous mode [ 362.387879][T17126] debugfs: 'hsr0' already exists in 'hsr' [ 362.406519][T17126] Cannot create hsr debugfs directory [ 362.496794][ T5840] Bluetooth: hci2: command tx timeout [ 362.855007][T17250] lo speed is unknown, defaulting to 1000 [ 363.493381][T17280] syzkaller1: entered promiscuous mode [ 363.503105][T17280] syzkaller1: entered allmulticast mode [ 363.542870][T17278] lo speed is unknown, defaulting to 1000 [ 363.753645][T17287] netlink: 'syz.5.2854': attribute type 1 has an invalid length. [ 363.793414][T17290] netlink: 'syz.0.2853': attribute type 10 has an invalid length. [ 363.828103][T17287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.449839][T17126] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.521130][T17311] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2860'. [ 364.531157][T17126] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.567595][T17126] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.580099][ T5840] Bluetooth: hci2: command tx timeout [ 364.643891][T17126] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.908706][T17126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.997416][T17126] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.015816][T15867] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.023060][T15867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.055214][T17327] tipc: Enabled bearer , priority 0 [ 365.312466][T17330] syzkaller0: entered promiscuous mode [ 365.318692][T17330] syzkaller0: entered allmulticast mode [ 365.360755][T17340] tipc: Resetting bearer [ 365.372437][T16374] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.379678][T16374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.389988][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2864'. [ 365.447995][T17333] syzkaller0: entered promiscuous mode [ 365.454346][T17333] syzkaller0: entered allmulticast mode [ 365.501875][T17326] tipc: Resetting bearer [ 365.544116][T17326] tipc: Disabling bearer [ 365.765478][T17344] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 365.882626][T17349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2868'. [ 366.016730][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2869'. [ 366.354540][T17126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.382425][T17368] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 366.466202][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2873'. [ 366.513743][T17126] veth0_vlan: entered promiscuous mode [ 366.530816][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2873'. [ 366.562035][T17126] veth1_vlan: entered promiscuous mode [ 366.568312][T17372] netlink: 'syz.5.2873': attribute type 11 has an invalid length. [ 366.666634][ T5840] Bluetooth: hci2: command tx timeout [ 366.696221][T17390] lo speed is unknown, defaulting to 1000 [ 366.706418][T17126] veth0_macvtap: entered promiscuous mode [ 366.728354][T17126] veth1_macvtap: entered promiscuous mode [ 366.796523][T17126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.837612][T17126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.877167][ T1093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.917317][ T1093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.929611][ T1093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.952371][ T1093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.212045][ T6009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.228279][ T6009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.326133][T11013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.343868][T11013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.525615][T17407] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2882'. [ 368.343986][T17431] gre0: entered promiscuous mode [ 368.386337][T17431] gre0: entered allmulticast mode [ 368.664926][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.681927][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.691984][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.704346][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.714718][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.798309][T17440] kthread_run failed with err -4 [ 368.836215][T17441] lo speed is unknown, defaulting to 1000 [ 369.037832][T17448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2891'. [ 369.073240][T17448] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 369.073459][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2892'. [ 369.113471][T17450] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2892'. [ 369.125158][T17450] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2892'. [ 369.159825][T17450] netlink: 540 bytes leftover after parsing attributes in process `syz.5.2892'. [ 369.635408][T17462] lo speed is unknown, defaulting to 1000 [ 369.972716][T17483] netlink: 'syz.6.2897': attribute type 2 has an invalid length. [ 369.982067][T17482] netlink: 'syz.2.2898': attribute type 1 has an invalid length. [ 370.061992][T17441] chnl_net:caif_netlink_parms(): no params data found [ 370.589056][T17441] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.616872][T17441] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.624301][T17441] bridge_slave_0: entered allmulticast mode [ 370.638998][T17441] bridge_slave_0: entered promiscuous mode [ 370.660241][T17441] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.669217][T17441] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.702534][T17441] bridge_slave_1: entered allmulticast mode [ 370.729628][T17441] bridge_slave_1: entered promiscuous mode [ 370.748993][T17502] netlink: 'syz.6.2904': attribute type 12 has an invalid length. [ 370.828304][ T5840] Bluetooth: hci5: command tx timeout [ 370.862633][T17441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.922721][T17441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.018776][T17441] team0: Port device team_slave_0 added [ 371.038745][T17441] team0: Port device team_slave_1 added [ 371.244334][T17441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.266524][T17441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.298464][T17441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.329719][T17441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.347619][T17441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.434782][T17441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.653076][T17441] hsr_slave_0: entered promiscuous mode [ 371.665994][T17441] hsr_slave_1: entered promiscuous mode [ 371.675226][T17441] debugfs: 'hsr0' already exists in 'hsr' [ 371.681651][T17441] Cannot create hsr debugfs directory [ 371.695394][T17527] syzkaller0: entered promiscuous mode [ 371.707744][T17527] syzkaller0: entered allmulticast mode [ 371.853320][T17531] netlink: 'syz.2.2913': attribute type 27 has an invalid length. [ 371.911077][T17527] tipc: Started in network mode [ 371.965350][T17527] tipc: Node identity 7ec8179f1e87, cluster identity 4711 [ 372.015790][T17527] tipc: Enabled bearer , priority 0 [ 372.073427][T17545] gretap1: entered allmulticast mode [ 372.110858][T17526] tipc: Resetting bearer [ 372.147202][T17526] tipc: Disabling bearer [ 372.330206][T17558] netlink: zone id is out of range [ 372.414281][T17563] veth1_to_bond: entered allmulticast mode [ 372.545036][ T60] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.599209][ T60] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.620950][ T60] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 55792 - 0 [ 372.737373][T17574] veth1_to_bond: left allmulticast mode [ 372.743972][T17565] tipc: Enabled bearer , priority 0 [ 372.754879][T17575] syzkaller0: entered promiscuous mode [ 372.773999][T17575] syzkaller0: entered allmulticast mode [ 372.824830][ T60] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.846157][ T60] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.859369][T17584] xt_HMARK: spi-set and port-set can't be combined [ 372.866622][ T60] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 55792 - 0 [ 372.901057][ T5153] Bluetooth: hci5: command tx timeout [ 372.930806][T17556] tipc: Resetting bearer [ 372.955077][T17554] tipc: Resetting bearer [ 372.990405][T17554] tipc: Disabling bearer [ 373.006320][ T60] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.018965][ T60] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.029872][ T60] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 55792 - 0 [ 373.134236][T17592] __nla_validate_parse: 4 callbacks suppressed [ 373.134255][T17592] netlink: 416 bytes leftover after parsing attributes in process `syz.2.2927'. [ 373.166820][ T60] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.201859][ T60] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.246397][ T60] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 55792 - 0 [ 373.275409][T17593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2927'. [ 373.569975][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2934'. [ 373.688730][ T60] team0: left allmulticast mode [ 373.694136][ T60] team_slave_0: left allmulticast mode [ 373.702917][ T60] team_slave_1: left allmulticast mode [ 373.719299][ T60] bridge3: left allmulticast mode [ 373.732672][ T60] team0: left promiscuous mode [ 373.740248][ T60] team_slave_0: left promiscuous mode [ 373.745916][ T60] team_slave_1: left promiscuous mode [ 373.758746][ T60] bridge3: left promiscuous mode [ 373.766524][ T60] bridge0: port 3(team0) entered disabled state [ 373.788194][ T60] bridge_slave_0: left allmulticast mode [ 373.793909][ T60] bridge_slave_0: left promiscuous mode [ 373.800628][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.830656][ T60] ip6gretap1: left allmulticast mode [ 373.837039][ T60] ip6gretap1: left promiscuous mode [ 373.843089][ T60] bridge1: port 1(ip6gretap1) entered disabled state [ 374.129139][T17639] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2937'. [ 374.308273][ T60] bond5 (unregistering): (slave gretap1): Releasing active interface [ 374.419963][ T60] dvmrp0 (unregistering): left allmulticast mode [ 374.502784][ T60] geneve0 (unregistering): left promiscuous mode [ 374.543104][ T60] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 374.554102][ T60] bridge0 (unregistering): left promiscuous mode [ 374.561017][ T60] bridge0 (unregistering): left allmulticast mode [ 374.702628][ T60] team0: Port device bridge3 removed [ 374.802411][ T60] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 374.811610][ T60] bridge5 (unregistering): left promiscuous mode [ 374.976970][ T5153] Bluetooth: hci5: command 0x040f tx timeout [ 375.089683][ T60] bond13 (unregistering): (slave bridge10): Releasing active interface [ 375.224008][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.234013][ T60] bond_slave_0: left promiscuous mode [ 375.241130][ T60] bond_slave_0: left allmulticast mode [ 375.250520][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.261931][ T60] bond_slave_1: left promiscuous mode [ 375.268095][ T60] bond_slave_1: left allmulticast mode [ 375.276239][ T60] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 375.285906][ T60] batadv0: left promiscuous mode [ 375.291226][ T60] batadv0: left allmulticast mode [ 375.304043][ T60] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 375.316264][ T60] dummy0: left allmulticast mode [ 375.329071][ T60] bond0 (unregistering): Released all slaves [ 375.490764][ T60] bond1 (unregistering): Released all slaves [ 375.508698][ T60] bond2 (unregistering): Released all slaves [ 375.666138][ T60] bond3 (unregistering): Released all slaves [ 375.832844][ T60] bond4 (unregistering): (slave veth3): Releasing active interface [ 375.844992][ T60] bond4 (unregistering): Released all slaves [ 375.863852][ T60] bond5 (unregistering): Released all slaves [ 375.881626][ T60] bond6 (unregistering): Released all slaves [ 376.040740][ T60] bond7 (unregistering): Released all slaves [ 376.059061][ T60] bond8 (unregistering): Released all slaves [ 376.226418][ T60] bond9 (unregistering): Released all slaves [ 376.358723][ T60] bond10 (unregistering): Released all slaves [ 376.373991][ T60] bond11 (unregistering): Released all slaves [ 376.507532][ T60] bond12 (unregistering): Released all slaves [ 376.524605][ T60] bond13 (unregistering): Released all slaves [ 376.546136][T17633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.609352][T17636] hsr0: entered promiscuous mode [ 376.614363][T17636] hsr0: entered allmulticast mode [ 376.677451][T17636] hsr_slave_0: entered allmulticast mode [ 376.683464][T17636] hsr_slave_1: entered allmulticast mode [ 376.725543][ T60] : left promiscuous mode [ 376.870362][T17651] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 376.917503][ T60] tipc: Disabling bearer [ 376.936267][ T60] tipc: Left network mode [ 377.056988][ T5840] Bluetooth: hci5: command 0x040f tx timeout [ 377.536245][T17441] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 377.584160][T17441] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 377.678576][T17441] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 377.705493][T17441] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.717110][ T30] audit: type=1800 audit(1765783064.282:7): pid=17659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2943" name="blkio.bfq.time_recursive" dev="tmpfs" ino=593 res=0 errno=0 [ 377.828291][T17665] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2944'. [ 377.988751][T17673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2946'. [ 378.055859][T17673] 8021q: adding VLAN 0 to HW filter on device bond8 [ 378.089645][T17680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 378.100490][T17679] syzkaller0: entered promiscuous mode [ 378.106186][T17679] syzkaller0: entered allmulticast mode [ 378.165157][T17683] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2948'. [ 378.178548][T17441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.185895][T17680] bond8: Unable to set up delay as MII monitoring is disabled [ 378.239953][ T60] hsr_slave_0: left promiscuous mode [ 378.246174][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.265172][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.313581][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.328484][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.387213][ T60] veth1_macvtap: left promiscuous mode [ 378.393656][ T60] veth0_macvtap: left promiscuous mode [ 378.664599][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2950'. [ 378.678263][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.768052][ T60] pim6reg (unregistering): left allmulticast mode [ 379.144837][ T5153] Bluetooth: hci5: command 0x040f tx timeout [ 379.231398][ T60] team0 (unregistering): Port device team_slave_1 removed [ 379.296869][ T60] team0 (unregistering): Port device team_slave_0 removed [ 379.463814][ T60] smc: removing net device veth1_to_bond with user defined pnetid SYZ0 [ 380.062088][T17693] lo speed is unknown, defaulting to 1000 [ 380.074904][T17441] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.135826][T11013] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.143430][T11013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.216465][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.223669][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.274923][T17703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2952'. [ 380.293630][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2952'. [ 380.502689][ T60] IPVS: stop unused estimator thread 0... [ 380.642335][T17715] lo speed is unknown, defaulting to 1000 [ 380.702264][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2956'. [ 380.820105][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2957'. [ 381.131752][T17729] lo speed is unknown, defaulting to 1000 [ 381.222356][ T5153] Bluetooth: hci5: command 0x040f tx timeout [ 381.239219][T17441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.480840][T17441] veth0_vlan: entered promiscuous mode [ 381.508338][T17441] veth1_vlan: entered promiscuous mode [ 381.574259][T17441] veth0_macvtap: entered promiscuous mode [ 381.610863][T17441] veth1_macvtap: entered promiscuous mode [ 381.762995][T17735] ip_vti0: entered allmulticast mode [ 382.095134][T17441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.158770][T17441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.188924][T11007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.205669][T11007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.224991][T11007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.255544][T11007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.278024][T17742] lo speed is unknown, defaulting to 1000 [ 382.624878][T11007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.638065][T11007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.832874][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.859316][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.272482][T17780] tipc: Started in network mode [ 383.287273][T17780] tipc: Node identity 32215939ffe1, cluster identity 4711 [ 383.307665][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2969'. [ 383.332103][T17780] tipc: Enabled bearer , priority 0 [ 383.397103][T17783] syzkaller1: entered promiscuous mode [ 383.402955][T17783] syzkaller1: entered allmulticast mode [ 383.448883][T17780] tipc: Disabling bearer [ 383.485528][T17787] xt_CT: No such helper "snmp_trap" [ 383.658535][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2972'. [ 383.690838][T17787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2971'. [ 383.794903][T17785] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 383.828892][T17785] syzkaller1: linktype set to 260 [ 384.212856][T17816] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2977'. [ 384.307729][T17810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2977'. [ 384.399313][T17807] syzkaller0: entered promiscuous mode [ 384.406414][T17807] syzkaller0: entered allmulticast mode [ 387.130084][ T6019] IPVS: starting estimator thread 0... [ 387.249139][T17860] IPVS: using max 33 ests per chain, 79200 per kthread [ 387.406193][T17867] lo speed is unknown, defaulting to 1000 [ 387.474385][T17872] team0: Port device bridge1 added [ 387.761706][T17879] bridge_slave_0: default FDB implementation only supports local addresses [ 387.822405][T17879] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 387.853104][T17883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2994'. [ 387.853103][T17884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2994'. [ 387.917433][T17885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 387.931347][T17879] netlink: 'syz.2.2993': attribute type 30 has an invalid length. [ 388.035365][T17888] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 388.057631][T17888] netlink: 'syz.2.2993': attribute type 30 has an invalid length. [ 388.259885][T17892] lo speed is unknown, defaulting to 1000 [ 388.495934][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2998'. [ 388.562415][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2999'. [ 388.957817][T17922] syzkaller1: entered promiscuous mode [ 388.967820][T17922] syzkaller1: entered allmulticast mode [ 389.244838][T17935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3007'. [ 389.658931][T17946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3012'. [ 389.664838][T17945] xt_connbytes: Forcing CT accounting to be enabled [ 389.711714][T17945] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.747917][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3015'. [ 389.767093][T17958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3015'. [ 389.857119][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3014'. [ 389.868236][T17963] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3014'. [ 389.902857][T17958] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3015'. [ 390.004342][T17948] lo speed is unknown, defaulting to 1000 [ 390.148908][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3020'. [ 390.167056][T17970] netlink: 'syz.6.3020': attribute type 30 has an invalid length. [ 390.379890][ T36] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.406786][ T36] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.463859][ T36] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.513914][ T36] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.556533][T17972] lo speed is unknown, defaulting to 1000 [ 390.693480][T17985] syzkaller0: entered promiscuous mode [ 390.713747][T17985] syzkaller0: entered allmulticast mode [ 391.073849][T17996] sctp: [Deprecated]: syz.6.3026 (pid 17996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.073849][T17996] Use struct sctp_sack_info instead [ 394.766115][T18046] __nla_validate_parse: 46 callbacks suppressed [ 394.766135][T18046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3041'. [ 394.833799][T18046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3041'. [ 394.968934][T18041] dvmrp0: entered allmulticast mode [ 394.974561][T18044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3041'. [ 395.148823][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.155030][T18047] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.163844][T18047] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.169567][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.181033][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.189944][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.198065][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 395.322354][T18047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.342140][T18047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.553587][ T1093] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.594693][ T1093] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.707258][ T1093] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.897300][ T1093] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.953918][T18067] lo speed is unknown, defaulting to 1000 [ 395.991358][T18059] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3044'. [ 396.101818][T18052] lo speed is unknown, defaulting to 1000 [ 396.221742][T18075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3047'. [ 396.328884][T18080] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 396.357379][T18080] batman_adv: batadv0: Adding interface: gretap1 [ 396.363762][T18080] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.390122][T18080] batman_adv: batadv0: Interface activated: gretap1 [ 396.681182][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3052'. [ 397.298064][ T5840] Bluetooth: hci3: command tx timeout [ 397.603434][T18136] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 397.734931][T18142] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3065'. [ 397.829418][T18149] netlink: 344 bytes leftover after parsing attributes in process `syz.6.3067'. [ 397.843581][T18052] chnl_net:caif_netlink_parms(): no params data found [ 397.844329][T18150] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3067'. [ 397.869806][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3067'. [ 398.220136][T18052] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.415402][T18052] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.431054][T18052] bridge_slave_0: entered allmulticast mode [ 398.480290][T18052] bridge_slave_0: entered promiscuous mode [ 398.491724][T18052] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.499830][T18052] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.518077][T18052] bridge_slave_1: entered allmulticast mode [ 398.525813][T18052] bridge_slave_1: entered promiscuous mode [ 398.678766][T18052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.723137][T18052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.886967][T18195] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 398.965624][T18052] team0: Port device team_slave_0 added [ 398.985839][T18052] team0: Port device team_slave_1 added [ 399.082904][T18202] syzkaller0: entered promiscuous mode [ 399.096726][T18202] syzkaller0: entered allmulticast mode [ 399.221052][T18052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.228855][T18052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.257435][T18052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.274119][T18206] Bluetooth: MGMT ver 1.23 [ 399.294625][T18052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.307275][T18052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.335518][T18052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.353432][T18208] syzkaller0: entered promiscuous mode [ 399.359523][T18208] syzkaller0: entered allmulticast mode [ 399.384055][ T5840] Bluetooth: hci3: command tx timeout [ 399.508466][T18052] hsr_slave_0: entered promiscuous mode [ 399.518589][T18052] hsr_slave_1: entered promiscuous mode [ 399.525959][T18052] debugfs: 'hsr0' already exists in 'hsr' [ 399.532987][T18052] Cannot create hsr debugfs directory [ 400.034759][T18232] x_tables: duplicate underflow at hook 2 [ 400.061199][T18235] __nla_validate_parse: 7 callbacks suppressed [ 400.061216][T18235] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3090'. [ 400.113598][T18238] netlink: 428 bytes leftover after parsing attributes in process `syz.5.3090'. [ 400.135600][T18238] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3090'. [ 400.344397][T18248] tipc: Enabled bearer , priority 0 [ 400.360177][T18248] syzkaller0: entered promiscuous mode [ 400.365957][T18248] syzkaller0: entered allmulticast mode [ 400.431975][T18249] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 400.470022][T18249] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3093'. [ 400.618338][T18052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.641212][T18052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.666870][T18052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 400.688396][T18052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 400.930030][T18052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.992357][T18052] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.026005][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.033652][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.092997][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.100215][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.132324][T18267] xt_hashlimit: max too large, truncated to 1048576 [ 401.154203][T18247] tipc: Resetting bearer [ 401.253453][T18247] tipc: Disabling bearer [ 401.277407][T18274] netlink: 'syz.6.3099': attribute type 1 has an invalid length. [ 401.321397][T18278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3100'. [ 401.457250][ T5840] Bluetooth: hci3: command tx timeout [ 401.529522][T18282] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 401.537702][T18282] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 401.562606][T18284] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 401.575670][T18284] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 401.587888][T18284] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 401.755558][T18292] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3103'. [ 401.992245][T18300] veth5: entered allmulticast mode [ 402.043353][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3107'. [ 402.100020][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3107'. [ 402.183012][T18312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3108'. [ 402.396216][T18312] "syz.6.3108" (18312) uses obsolete ecb(arc4) skcipher [ 402.406206][T18052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.632167][T18052] veth0_vlan: entered promiscuous mode [ 402.693590][T18052] veth1_vlan: entered promiscuous mode [ 402.705792][T18334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.826380][T18052] veth0_macvtap: entered promiscuous mode [ 402.887207][T18052] veth1_macvtap: entered promiscuous mode [ 402.971074][T18052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.003170][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3116'. [ 403.040082][T18052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.119858][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.131653][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.167265][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.177775][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.495482][T18365] netlink: 'syz.0.3120': attribute type 39 has an invalid length. [ 403.537641][ T5840] Bluetooth: hci3: command tx timeout [ 403.773041][T18366] syzkaller0: entered promiscuous mode [ 403.782605][T18366] syzkaller0: entered allmulticast mode [ 403.813579][T18362] lo speed is unknown, defaulting to 1000 [ 404.127799][T15867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.137774][T18379] lo speed is unknown, defaulting to 1000 [ 404.148640][T15867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.283434][T11007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.320304][T11007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.345275][T18389] macvtap1: entered promiscuous mode [ 404.353945][T18389] veth1_to_hsr: entered promiscuous mode [ 404.360756][T18389] macvtap1: entered allmulticast mode [ 404.366719][T18389] veth1_to_hsr: entered allmulticast mode [ 405.158091][T18414] __nla_validate_parse: 2 callbacks suppressed [ 405.158151][T18414] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3133'. [ 405.692778][T18422] tipc: Enabling of bearer rejected, failed to enable media [ 405.903542][T18422] tipc: Enabling of bearer rejected, failed to enable media [ 406.023691][T18437] netlink: 'syz.1.3139': attribute type 1 has an invalid length. [ 406.089659][T18438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3139'. [ 406.107236][T18437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.156342][T18444] Cannot find add_set index 0 as target [ 406.230890][T18449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3142'. [ 406.241636][T18444] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3140'. [ 406.352532][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3140'. [ 406.521054][T18457] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3145'. [ 406.560211][T18459] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3146'. [ 406.674727][T18463] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 406.752059][T18463] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 406.764179][T18463] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 406.764277][T18469] netlink: 'syz.0.3150': attribute type 1 has an invalid length. [ 406.772843][T18463] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 406.786046][T18469] netlink: 'syz.0.3150': attribute type 2 has an invalid length. [ 406.794699][T18463] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 406.811988][T18463] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 406.821918][T18463] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 406.830640][T18463] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 407.083872][T18478] pim6reg: entered allmulticast mode [ 407.872137][T18508] syzkaller0: entered promiscuous mode [ 407.878394][T18508] syzkaller0: entered allmulticast mode [ 408.035160][T18529] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3166'. [ 408.061202][T18530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3166'. [ 410.453779][T18524] vlan0: entered allmulticast mode [ 410.459295][T18524] bridge0: entered allmulticast mode [ 410.499891][T18541] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 411.267915][ T5202] udevd[5202]: worker [13890] /devices/virtual/block/nbd3 is taking a long time [ 431.938185][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 435.617438][ T31] INFO: task udevd:13890 blocked for more than 143 seconds. [ 435.624787][ T31] Not tainted syzkaller #0 [ 435.630356][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.639639][ T31] task:udevd state:D stack:23272 pid:13890 tgid:13890 ppid:5202 task_flags:0x400140 flags:0x00080000 [ 435.652191][ T31] Call Trace: [ 435.655497][ T31] [ 435.660288][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 435.664872][ T31] ? __pfx___schedule+0x10/0x10 [ 435.670248][ T31] ? __blk_flush_plug+0x3fc/0x4b0 [ 435.675310][ T31] ? schedule+0x91/0x360 [ 435.680144][ T31] schedule+0x165/0x360 [ 435.684348][ T31] schedule_timeout+0x12b/0x270 [ 435.689866][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 435.695273][ T31] ? __pfx_process_timeout+0x10/0x10 [ 435.706982][ T31] ? prepare_to_wait_event+0x437/0x480 [ 435.712531][ T31] nbd_queue_rq+0x662/0xf10 [ 435.764970][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 435.770622][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 435.777672][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 435.783251][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 435.788866][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 435.794889][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 435.846603][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 435.853018][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 435.876559][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 435.882901][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 435.889275][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 435.894627][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 435.900294][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 435.905512][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 435.911464][ T31] ? blk_mq_dispatch_list+0x200/0xe00 [ 435.917665][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 435.923412][ T31] ? rcu_is_watching+0x15/0xb0 [ 435.928685][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 435.934064][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 435.940064][ T31] ? blk_mq_submit_bio+0x1a55/0x2590 [ 435.945376][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 435.951796][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 435.957191][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 435.962590][ T31] __submit_bio+0x2d3/0x5a0 [ 435.969347][ T31] ? __pfx___submit_bio+0x10/0x10 [ 435.974421][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 435.980673][ T31] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 435.986340][ T31] ? bio_associate_blkg+0x6d/0x230 [ 435.992012][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 435.998774][ T31] ? submit_bio_noacct+0xdfc/0x1b60 [ 436.004000][ T31] block_read_full_folio+0x599/0x830 [ 436.009812][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 436.015196][ T31] filemap_read_folio+0x117/0x380 [ 436.020766][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 436.026241][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 436.032516][ T31] ? filemap_add_folio+0x35f/0x540 [ 436.038248][ T31] do_read_cache_folio+0x350/0x590 [ 436.043394][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 436.049375][ T31] read_part_sector+0xb6/0x2b0 [ 436.054152][ T31] adfspart_check_ICS+0xa4/0xa50 [ 436.059625][ T31] ? snprintf+0xda/0x120 [ 436.063878][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 436.071449][ T31] bdev_disk_changed+0x75f/0x14b0 [ 436.077999][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 436.083497][ T31] blkdev_get_whole+0x380/0x510 [ 436.088947][ T31] bdev_open+0x31e/0xd30 [ 436.093213][ T31] blkdev_open+0x457/0x600 [ 436.098185][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 436.103154][ T31] do_dentry_open+0x7ce/0x1420 [ 436.108460][ T31] vfs_open+0x3b/0x340 [ 436.112546][ T31] ? path_openat+0x33f3/0x3dd0 [ 436.117846][ T31] path_openat+0x340e/0x3dd0 [ 436.122487][ T31] ? do_sys_openat2+0xbc/0x200 [ 436.127807][ T31] ? __x64_sys_openat+0x138/0x170 [ 436.132865][ T31] ? __pfx_path_openat+0x10/0x10 [ 436.138490][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 436.143459][ T31] do_filp_open+0x1fa/0x410 [ 436.148103][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 436.153163][ T31] ? _raw_spin_unlock+0x28/0x50 [ 436.158062][ T31] ? alloc_fd+0x64c/0x6c0 [ 436.162412][ T31] do_sys_openat2+0x121/0x200 [ 436.167131][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 436.173936][ T31] __x64_sys_openat+0x138/0x170 [ 436.179149][ T31] do_syscall_64+0xfa/0xf80 [ 436.183850][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.190536][ T31] ? clear_bhb_loop+0x60/0xb0 [ 436.195401][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.202053][ T31] RIP: 0033:0x7f01572a7407 [ 436.207026][ T31] RSP: 002b:00007ffc0b904130 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 436.215462][ T31] RAX: ffffffffffffffda RBX: 00007f0157a93880 RCX: 00007f01572a7407 [ 436.223986][ T31] RDX: 00000000000a0800 RSI: 000056471ae79320 RDI: ffffffffffffff9c [ 436.232562][ T31] RBP: 000056471ae4f910 R08: 0000000000000000 R09: 0000000000000000 [ 436.241148][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000056471ae62e20 [ 436.249784][ T31] R13: 000056471ae5d190 R14: 0000000000000000 R15: 000056471ae62e20 [ 436.259054][ T31] [ 436.262174][ T31] [ 436.262174][ T31] Showing all locks held in the system: [ 436.276815][ T31] 1 lock held by khungtaskd/31: [ 436.281706][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 436.347048][ T31] 4 locks held by kworker/0:2/981: [ 436.352228][ T31] 2 locks held by getty/5593: [ 436.374914][ T31] #0: ffff8880342980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 436.406982][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 436.456579][ T31] 3 locks held by kworker/0:4/5892: [ 436.461820][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 436.527076][ T31] #1: ffffc900045afb80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 436.577054][ T31] #2: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 436.616972][ T31] 3 locks held by udevd/13890: [ 436.621785][ T31] #0: ffff888024c2e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 436.666978][ T31] #1: ffff8881426e9198 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 436.716934][ T31] #2: ffff888024ee7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 436.725892][ T31] 1 lock held by syz-executor/15306: [ 436.776538][ T31] 1 lock held by syz-executor/17126: [ 436.781905][ T31] 1 lock held by syz-executor/17441: [ 436.806904][ T31] [ 436.809274][ T31] ============================================= [ 436.809274][ T31] [ 436.870565][ T31] NMI backtrace for cpu 1 [ 436.870590][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 436.870611][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.870621][ T31] Call Trace: [ 436.870628][ T31] [ 436.870636][ T31] dump_stack_lvl+0x189/0x250 [ 436.870662][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.870681][ T31] ? __pfx__printk+0x10/0x10 [ 436.870713][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 436.870734][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 436.870753][ T31] ? __pfx__printk+0x10/0x10 [ 436.870778][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 436.870804][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 436.870824][ T31] watchdog+0xf3c/0xf80 [ 436.870848][ T31] ? watchdog+0x1e2/0xf80 [ 436.870873][ T31] kthread+0x711/0x8a0 [ 436.870895][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.870914][ T31] ? __pfx_kthread+0x10/0x10 [ 436.870934][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.870952][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 436.870969][ T31] ? __pfx_kthread+0x10/0x10 [ 436.870989][ T31] ret_from_fork+0x599/0xb30 [ 436.871015][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 436.871049][ T31] ? __switch_to_asm+0x39/0x70 [ 436.871067][ T31] ? __switch_to_asm+0x33/0x70 [ 436.871083][ T31] ? __pfx_kthread+0x10/0x10 [ 436.871102][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.871137][ T31] [ 436.871144][ T31] Sending NMI from CPU 1 to CPUs 0: [ 437.027103][ C0] NMI backtrace for cpu 0 [ 437.027121][ C0] CPU: 0 UID: 0 PID: 15863 Comm: kworker/u8:34 Not tainted syzkaller #0 PREEMPT(full) [ 437.027143][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 437.027155][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 437.027177][ C0] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 437.027198][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 10 ab cf 10 9b 18 a2 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 437.027213][ C0] RSP: 0018:ffffc900055973b8 EFLAGS: 00000282 [ 437.027234][ C0] RAX: 0000000000000001 RBX: ffffffff8168cd29 RCX: ffff88807e811e80 [ 437.027246][ C0] RDX: 00000000a6503935 RSI: ffffffff8d952009 RDI: ffffffff8bbfc660 [ 437.027258][ C0] RBP: dffffc0000000000 R08: ffffffff8173ef25 R09: ffffffff8df41cc0 [ 437.027270][ C0] R10: ffffc900055974f8 R11: ffffffff81ad4ad0 R12: 1ffff92000ab2e95 [ 437.027282][ C0] R13: ffffc900055974e0 R14: ffffc900055974a8 R15: ffffffff8173ef25 [ 437.027294][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 437.027307][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.027319][ C0] CR2: 00007fad7ad17d60 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 437.027333][ C0] Call Trace: [ 437.027339][ C0] [ 437.027345][ C0] ? ret_from_fork+0x599/0xb30 [ 437.027368][ C0] ? unwind_next_frame+0xa5/0x2390 [ 437.027384][ C0] unwind_next_frame+0xd4/0x2390 [ 437.027404][ C0] ? unwind_next_frame+0xa5/0x2390 [ 437.027420][ C0] ? kthread+0x711/0x8a0 [ 437.027440][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.027463][ C0] arch_stack_walk+0x11c/0x150 [ 437.027481][ C0] ? ret_from_fork+0x599/0xb30 [ 437.027504][ C0] stack_trace_save+0x9c/0xe0 [ 437.027526][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 437.027548][ C0] ? chacha_block_generic+0x53/0xc80 [ 437.027575][ C0] kasan_save_track+0x3e/0x80 [ 437.027594][ C0] ? kasan_save_track+0x3e/0x80 [ 437.027611][ C0] ? __kasan_save_free_info+0x46/0x50 [ 437.027627][ C0] ? __kasan_slab_free+0x5c/0x80 [ 437.027645][ C0] ? kfree+0x1c0/0x660 [ 437.027660][ C0] ? skb_release_data+0x62d/0x7c0 [ 437.027682][ C0] ? consume_skb+0x9e/0xf0 [ 437.027702][ C0] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 437.027716][ C0] ? process_scheduled_works+0xad1/0x1770 [ 437.027738][ C0] ? worker_thread+0x8a0/0xda0 [ 437.027752][ C0] ? kthread+0x711/0x8a0 [ 437.027768][ C0] ? ret_from_fork+0x599/0xb30 [ 437.027813][ C0] __kasan_save_free_info+0x46/0x50 [ 437.027829][ C0] __kasan_slab_free+0x5c/0x80 [ 437.027848][ C0] ? skb_release_data+0x62d/0x7c0 [ 437.027869][ C0] kfree+0x1c0/0x660 [ 437.027888][ C0] skb_release_data+0x62d/0x7c0 [ 437.027916][ C0] consume_skb+0x9e/0xf0 [ 437.027936][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 437.027961][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 437.027985][ C0] process_scheduled_works+0xad1/0x1770 [ 437.028023][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.028055][ C0] worker_thread+0x8a0/0xda0 [ 437.028083][ C0] kthread+0x711/0x8a0 [ 437.028102][ C0] ? __pfx_worker_thread+0x10/0x10 [ 437.028117][ C0] ? __pfx_kthread+0x10/0x10 [ 437.028136][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.028154][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 437.028173][ C0] ? __pfx_kthread+0x10/0x10 [ 437.028191][ C0] ret_from_fork+0x599/0xb30 [ 437.028214][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 437.028247][ C0] ? __switch_to_asm+0x39/0x70 [ 437.028264][ C0] ? __switch_to_asm+0x33/0x70 [ 437.028281][ C0] ? __pfx_kthread+0x10/0x10 [ 437.028300][ C0] ret_from_fork_asm+0x1a/0x30 [ 437.028327][ C0] [ 437.432820][T17441] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 437.444739][T17441] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 437.453151][T17441] CPU: 1 UID: 0 PID: 17441 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 437.462690][T17441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 437.472739][T17441] RIP: 0010:klist_remove+0x14a/0x340 [ 437.478029][T17441] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 67 e7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 67 e7 f6 49 8b 44 24 58 48 89 44 24 08 [ 437.497639][T17441] RSP: 0018:ffffc9000bed7840 EFLAGS: 00010202 [ 437.503719][T17441] RAX: 000000000000000b RBX: ffff888053f69e80 RCX: 0000000000000000 [ 437.511702][T17441] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 437.519684][T17441] RBP: ffffc9000bed7940 R08: ffffffff8f671743 R09: 1ffffffff1ece2e8 [ 437.527668][T17441] R10: dffffc0000000000 R11: fffffbfff1ece2e9 R12: 0000000000000000 [ 437.535647][T17441] R13: 1ffff1100d31b70c R14: ffff8880698db860 R15: dffffc0000000000 [ 437.543625][T17441] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 437.552563][T17441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.559144][T17441] CR2: 000055bc6aa55000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 437.567115][T17441] Call Trace: [ 437.570388][T17441] [ 437.573317][T17441] ? __pfx_klist_remove+0x10/0x10 [ 437.578343][T17441] ? kobject_move+0x5a6/0x6e0 [ 437.583020][T17441] ? __pfx_kobject_move+0x10/0x10 [ 437.588050][T17441] ? get_device_parent+0x366/0x3a0 [ 437.593169][T17441] device_move+0x193/0x700 [ 437.597610][T17441] hci_conn_del_sysfs+0xb8/0x170 [ 437.602560][T17441] hci_conn_del+0xc36/0x11b0 [ 437.607156][T17441] hci_conn_hash_flush+0x191/0x230 [ 437.612267][T17441] hci_dev_close_sync+0x821/0xff0 [ 437.617291][T17441] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 437.622830][T17441] ? up_write+0x1ac/0x410 [ 437.627155][T17441] ? rcu_is_watching+0x15/0xb0 [ 437.631921][T17441] hci_unregister_dev+0x21a/0x510 [ 437.636946][T17441] vhci_release+0x152/0x1a0 [ 437.641458][T17441] ? __pfx_vhci_release+0x10/0x10 [ 437.646494][T17441] __fput+0x44c/0xa70 [ 437.650494][T17441] task_work_run+0x1d4/0x260 [ 437.655104][T17441] ? __pfx_task_work_run+0x10/0x10 [ 437.660225][T17441] ? kmem_cache_free+0x197/0x620 [ 437.665164][T17441] ? do_exit+0x6c0/0x2310 [ 437.669499][T17441] do_exit+0x6c5/0x2310 [ 437.673656][T17441] ? count_memcg_event_mm+0x21/0x260 [ 437.678940][T17441] ? __pfx_do_exit+0x10/0x10 [ 437.683530][T17441] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.688731][T17441] ? lockdep_hardirqs_on+0x98/0x140 [ 437.693935][T17441] do_group_exit+0x21c/0x2d0 [ 437.698530][T17441] __x64_sys_exit_group+0x3f/0x40 [ 437.703554][T17441] x64_sys_call+0x2210/0x2210 [ 437.708235][T17441] do_syscall_64+0xfa/0xf80 [ 437.712747][T17441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.718917][T17441] ? clear_bhb_loop+0x60/0xb0 [ 437.723613][T17441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.729504][T17441] RIP: 0033:0x7f79e8b8f749 [ 437.733924][T17441] Code: Unable to access opcode bytes at 0x7f79e8b8f71f. [ 437.740944][T17441] RSP: 002b:00007ffc6d559328 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 437.749363][T17441] RAX: ffffffffffffffda RBX: 00007f79e8c1585d RCX: 00007f79e8b8f749 [ 437.757331][T17441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 437.765295][T17441] RBP: 00007f79e8c1586f R08: 00007ffc6d5570c7 R09: 00000000000927c0 [ 437.773478][T17441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 437.781459][T17441] R13: 00000000000927c0 R14: 0000000000063a2b R15: 00007ffc6d5594d0 [ 437.789447][T17441] [ 437.792483][T17441] Modules linked in: [ 437.798484][T17441] ---[ end trace 0000000000000000 ]--- [ 437.804564][T17441] RIP: 0010:klist_remove+0x14a/0x340 [ 437.811814][T17441] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 67 e7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 67 e7 f6 49 8b 44 24 58 48 89 44 24 08 [ 437.833738][T17441] RSP: 0018:ffffc9000bed7840 EFLAGS: 00010202 [ 437.840331][T17441] RAX: 000000000000000b RBX: ffff888053f69e80 RCX: 0000000000000000 [ 437.848807][T17441] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 437.857527][T17441] RBP: ffffc9000bed7940 R08: ffffffff8f671743 R09: 1ffffffff1ece2e8 [ 437.865514][T17441] R10: dffffc0000000000 R11: fffffbfff1ece2e9 R12: 0000000000000000 [ 437.874027][T17441] R13: 1ffff1100d31b70c R14: ffff8880698db860 R15: dffffc0000000000 [ 437.882513][T17441] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 437.891938][T17441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.899032][T17441] CR2: 000055bc6aa55000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 437.907598][T17441] Kernel panic - not syncing: Fatal exception [ 437.914044][T17441] Kernel Offset: disabled [ 437.918365][T17441] Rebooting in 86400 seconds..