last executing test programs: 5.497962099s ago: executing program 0 (id=4178): close(0xffffffffffffffff) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r4, 0x25, 0x2, @val=@tracing={0x0, 0x8}}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@newqdisc={0x168, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x13c, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x8}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x3}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x4}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x5}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x7}]}}]}, 0x168}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x1c, 0x7, 0x0, 0xdeccd0af, 0x10, @private1, @local, 0x7800, 0x20, 0x1, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x8701, 0x700, 0x7, 0x7ff, {{0x3f, 0x4, 0x3, 0x8, 0xfc, 0x67, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0xc, 0xbc, 0x0, 0x9, [0x1, 0x7]}, @lsrr={0x83, 0xb, 0x9a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xd8, 0x3, 0x6, [{@multicast1, 0x8}]}, @cipso={0x86, 0x28, 0x2, [{0x0, 0xe, "4efed5a93d42fde022a01d3c"}, {0x6, 0x3, "02"}, {0x7, 0x11, "12d89e685dfec49a01f97a50a24d53"}]}, @noop, @timestamp_addr={0x44, 0x2c, 0x8f, 0x1, 0x0, [{@private=0xa010101, 0x5}, {@private=0xa010102, 0x8001}, {@rand_addr=0x64010102, 0x4a}, {@broadcast, 0x9}, {@remote, 0x100}]}, @cipso={0x86, 0x21, 0x0, [{0x6, 0x10, "33a47509cf910aad01c232154089"}, {0x0, 0xb, "56acdcfe60a15a674e"}]}, @timestamp_addr={0x44, 0x3c, 0xe2, 0x1, 0xf, [{@private=0xa010102, 0x3}, {@loopback, 0x23}, {@rand_addr=0x64010100, 0xb9}, {@private=0xa010102, 0xc6}, {@private=0xa010101, 0x10001}, {@rand_addr=0x64010102, 0x3}, {@empty, 0xfffff801}]}, @lsrr={0x83, 0x13, 0x25, [@rand_addr=0x64010102, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'erspan0\x00', &(0x7f0000000f40)={'gretap0\x00', 0x0, 0x1, 0x7, 0x2, 0xd, {{0x2a, 0x4, 0x0, 0x4, 0xa8, 0x64, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@lsrr={0x83, 0xb, 0xe9, [@multicast2, @empty]}, @end, @rr={0x7, 0x1f, 0x17, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @loopback, @remote, @rand_addr=0x64010101]}, @ssrr={0x89, 0x13, 0x98, [@broadcast, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x20, 0xe7, 0x0, 0xc, [0x0, 0x1967, 0x3, 0x23, 0x3, 0x7, 0x4]}, @end, @lsrr={0x83, 0x27, 0x4a, [@remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @remote, @remote, @remote, @loopback]}, @generic={0x89, 0xe, "43d5b8e5d4311951a3504e7b"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000880)={'wg0\x00', 0x0}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r11, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r11, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, r12}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r11, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f0000000a40), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000f00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="90020000", @ANYRES16=0x0, @ANYBLOB="040428bd7000ffdbdf25110000003400018008000100", @ANYRES32=0x0, @ANYRES16=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020076657468305f746f", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="32000000000000140002003305766c616e310000000000000000001400020069703665727370616e300000000000000c00018008000300030000001c00018008000100"/80, @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000300010000000c00018008000100", @ANYBLOB="60000180140002007369743000000000000000000000000008000300030000001400020076657468315f6d61637674617000000008000100", @ANYRES32=r9, @ANYRES32=r12, @ANYBLOB="60000180140002006261746164765f736c6176655f300000140002006d6163736563300000000000000000001400020067656e65766530000000000000000000080003000100000008000100", @ANYRES32=r14, @ANYBLOB="08000300030000000800030001000000280001800800030001000000140002006261746164765f736c6176655f3100000800030002000000"], 0x290}, 0x1, 0x0, 0x0, 0x10}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r15) sendmsg$DEVLINK_CMD_RATE_SET(r15, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="34008337eb71d844d836cfb7f4ca0e0200", @ANYRES16=r16, @ANYBLOB="010000000000000000002a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) r17 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r17, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a4000194324020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ef9000000d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xda}, {&(0x7f0000000340)="178f752d52fe55554b7b463ac8f2170ef02acfbcb11022b11da24a1e23f38d9af140828772bb61fb614d02035a85360c831eafc6ea0d25e226250390170cce7c5c4805323cc4f1d85ae760d3f469f7c3a44fae79ec8ef304414925f14848636df07aefb31d0cc14e215db8b43cbd5c7eaf2b8e2e4fd118e02fca2df239ba85c2996c049966b3d6df1e551ed31f1a914aff384f5d0e12bcf4c50a96c0adaca6364a695a3a7579d0df8a23a213dba98a802742a221e34174f3002fad287b3951ef56a391d9b63a9582b501e20703daeabd447cc26bf445daed75623f082da5546baf943bda01098e62b0ae47338a778888e2023dd180a2be901ae12e66eb0ff0c19431d2808048df88b92a0701297dc6817798f777011c", 0x116}], 0x2}, 0x15) socket$nl_route(0x10, 0x3, 0x0) 5.389181035s ago: executing program 3 (id=4180): syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x70, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x8, 0x0, {0x15, 0x4, 0x2, 0x7, 0x9, 0x67, 0xff01, 0x6, 0x33, 0x7, @multicast2, @broadcast, {[@lsrr={0x83, 0x13, 0x99, [@dev={0xac, 0x14, 0x14, 0xff}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty]}, @timestamp={0x44, 0x20, 0x20, 0x0, 0x7, [0x3, 0x10, 0x800, 0x5, 0x80000000, 0x1, 0xde]}, @timestamp={0x44, 0x8, 0xf1, 0x0, 0x5, [0x80]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x81}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e24, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe0}}}, 0x84) 5.306381395s ago: executing program 0 (id=4183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000080000000000000000000000000000009500000000000008"], &(0x7f0000000240)='GPL\x00', 0x3b, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xa, 0x20000}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x5, 0xd, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001280)={@map, r0, 0x1c}, 0x20) unshare(0x600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000a00ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001"], 0x80}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) unshare(0x68040200) 5.237411785s ago: executing program 3 (id=4184): socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xde, &(0x7f00000006c0)={@local, @dev, @val={@void, {0x8100, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x7, 0x5, "4eb8a6"}, {0x1, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @rr={0x7, 0x1f, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @loopback, @private=0xa010102]}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x6, "1c12ddfd"}]}]}}, "a815a23d"}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000240)={0x10, 0x0, 0x20, 0x10000}, 0xc) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, r2, 0x10, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5eda}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff157b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xabf1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff3d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x63ef3f8d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x40005) r3 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r3, 0x0, 0x0) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x10, 0x0, 0x3, 0x11, @private0, @empty, 0x7, 0x8000, 0xe8, 0x7fffffff}}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x39, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) (async) syz_emit_ethernet(0xde, &(0x7f00000006c0)={@local, @dev, @val={@void, {0x8100, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x7, 0x5, "4eb8a6"}, {0x1, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @rr={0x7, 0x1f, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @loopback, @private=0xa010102]}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x6, "1c12ddfd"}]}]}}, "a815a23d"}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$netlink(r1, &(0x7f0000000240)={0x10, 0x0, 0x20, 0x10000}, 0xc) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) (async) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, r2, 0x10, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5eda}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff157b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xabf1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff3d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x63ef3f8d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x40005) (async) socket$inet6(0xa, 0x5, 0x0) (async) connect$inet6(r3, 0x0, 0x0) (async) close(0x3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x10, 0x0, 0x3, 0x11, @private0, @empty, 0x7, 0x8000, 0xe8, 0x7fffffff}}) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x39, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 5.156250659s ago: executing program 3 (id=4187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r5, &(0x7f0000000040), 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x2, 0x0) write(r8, &(0x7f00000000c0)="94", 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1a, 0x3, 0x1, 0x3ff, 0x10000, 0xffffffffffffffff, 0x7, '\x00', r3, r4, 0x1, 0x4, 0x0, 0x0, @void, @value, @value=r8}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001b00850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.044767034s ago: executing program 2 (id=4193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x6f) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180500000000040000000000000000001859000000000000000000000000000863336f19927f9c00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x6f) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180500000000040000000000000000001859000000000000000000000000000863336f19927f9c00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) 1.557742157s ago: executing program 4 (id=4195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0x0, 0xffeffffe}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r1, &(0x7f0000000280)="520d1f", 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x0, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x0, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x32}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_TIMEOUT={0x0, 0x6, 0x1, 0x0, 0x335}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,mac\x00'}]}, 0xfffffffffffffe70}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1.557407929s ago: executing program 3 (id=4196): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000c40)="63eced8e4601000000c35b09f2c5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.555707758s ago: executing program 2 (id=4197): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8d}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0xfffffe25) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8d}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0xfffffe25) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) (async) 1.554523513s ago: executing program 3 (id=4198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet_sctp(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)='5', 0x1}], 0x1, 0x0, 0x0, 0x40883}], 0x1, 0x8881) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffb0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x2040800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x81, @loopback, 0x47}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000003600)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000040)=0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x10053}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), 0xffffffffffffffff) r7 = socket$kcm(0x29, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="03062bbd7000fddbdf250200000008000b00", @ANYRES32=0x0, @ANYBLOB="e0000000ee00b291fc05326f2e4c95abd31debc81d6a235bfb9466064aedc516f146493ba656bb710b8498753bf171061ef844e9"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) 1.552385667s ago: executing program 2 (id=4200): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) bind$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100, 0x4}, 0x10) r2 = socket$inet6(0xa, 0x80000, 0x6) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x60000000}, 0x20008004) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x3ffff, 0x0, 0x90, [0x200000000100, 0x200000000130, 0x200000000160, 0x200000000100, 0x200000000100, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000bdc4680c000000000072f0aca8f7ff86d335e30d1f605cd40000000000feffffff000000000000000000000000000000000000000000000000170000000000000000000000000000fc450b0900fcffffff00"/144]}, 0x108) 1.536661334s ago: executing program 4 (id=4201): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 32) close(0xffffffffffffffff) (async) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83", 0x6a}, {&(0x7f0000000880)="3aa854", 0x3}, {0x0}], 0x3}, 0xc854) (async) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async, rerun: 32) sendfile(r2, r3, 0x0, 0xffffffff000) (rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000) (async, rerun: 64) r6 = socket(0x1, 0x1, 0x1) unshare(0x8000400) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) (rerun: 32) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) (async) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) (async) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 1.284771798s ago: executing program 4 (id=4202): r0 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x37, 0x1, 0xf, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0]}, 0x40) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x6c}, {0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x7}, 0xfffffffe, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 1.28446416s ago: executing program 2 (id=4203): r0 = socket(0x15, 0x80005, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) unshare(0x60600) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000340)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000025a61da600000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x68, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x3, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40c1}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 1.244347708s ago: executing program 1 (id=4204): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) splice(r3, 0x0, r5, 0x0, 0x2, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001440)=ANY=[@ANYBLOB="5000000010000d042abd7000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r7, @ANYBLOB="c3040500000000002800128008000100677265001c00028005f30a000000000008000700ac14141305001300010000007057043d799d374b1c49082a8eda4281954685bb46a9b849836d67f694e304089cf8b348f0eb56cb751d2c3a12ffdb9ef618aa35e882ea2db0c81db6daccbf25c9b549fa6d0839b887ce45f6fe40525c645f9823312b4e2298e9d7718486d9da1b7a6db5d3fd11950ee6"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmmsg$inet(r1, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b7000000001f0000bfa30000000000000703000018feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000630a00fe0000000079331f0000000000b504fdff000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fd21e3587b9d9e878c86ba9b66c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0xffffffffffffffff}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000f00)={0x0, ""/256, 0x0, 0x0}) socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003880)={{r8, 0x10001, 0x3, 0x4, 0xfffffffffffffff5, 0x100000000, 0x9, 0x3, 0x9a, 0x2, 0x5, 0x48000000000000, 0x9, 0x8, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001240)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000004880)={0x2, [{r9, r14}, {r11, r10}, {r11, r10}, {r12, r14}, {r13}, {r12, r10}, {r13, r14}, {r9, r14}, {r11, r10}, {r8, r14}, {r8, r14}, {r9, r10}, {r12, r14}, {r11, r14}, {r8, r14}, {r8, r14}, {r12, r14}, {r8, r10}, {r12, r10}, {r11, r14}, {r12}, {r8, r14}, {r8, r14}, {r12, r14}, {r12, r14}, {r11, r14}, {r9, r14}, {r9, r14}, {r12}, {r11, r14}, {r9}, {r12, r10}, {r8, r14}, {r8, r10}, {r11, r10}, {r13, r14}, {r12, r14}, {r9, r14}, {r9, r10}, {r9, r14}, {0x0, r10}, {r13, r14}, {0x0, r10}, {r8, r14}, {r8, r14}, {r9, r14}, {r13}, {r8, r10}, {r9, r14}, {r11, r14}, {r11, r14}, {r8, r14}, {r13, r10}, {r9, r14}, {r13, r10}, {r8}, {r11, r10}, {r12, r14}, {r11, r14}, {r11}, {r12, r14}, {r13, r10}, {r12, r10}, {r11, r14}, {r9, r10}, {r11, r14}, {r12, r10}, {r11, r14}, {r13, r14}, {r13, r14}, {r9, r14}, {r11, r14}, {r8, r14}, {r8, r14}, {r12, r14}, {r9, r14}, {r13, r10}, {r9, r10}, {r12}, {r12, r14}, {r13, r10}, {r8, r14}, {r11, r10}, {r11, r10}, {r11, r14}, {0x0, r10}, {r8, r10}, {r11, r10}, {r12, r14}, {r13, r10}, {0x0, r14}, {r9, r10}, {r13, r14}, {r11, r14}, {r9, r10}, {r8, r10}, {r13, r10}, {r13, r14}, {r8, r14}, {r8, r14}, {r8, r14}, {r12, r10}, {0x0, r10}, {r9, r14}, {0x0, r14}, {r13, r10}, {r11, r10}, {0x0, r14}, {r9, r10}, {r11, r14}, {r13}, {r11}, {r13, r10}, {r12, r10}, {r9, r14}, {r12, r14}, {r8, r14}, {0x0, r14}, {r9, r10}, {r12, r14}, {r12, r14}, {r12, r14}, {r9, r14}, {0x0, r14}, {r11, r14}, {r9, r10}, {r13, r10}, {r9, r10}, {r8, r14}, {r11, r10}, {r9, r14}, {r9, r10}, {r12, r10}, {r11, r10}, {0x0, r10}, {r13}, {r9}, {r8, r10}, {0x0, r10}, {r11, r14}, {r9, r14}, {r9, r10}, {r13, r14}, {r9, r14}, {r12, r14}, {0x0, r10}, {r12, r14}, {r13, r14}, {r8, r10}, {r13, r10}, {r8, r14}, {r11, r14}, {r13, r14}, {r9, r10}, {r9, r14}, {r13, r10}, {r12, r10}, {r8, r14}, {0x0, r14}, {r13, r14}, {r11, r14}, {r11, r14}, {r12, r10}, {r13, r14}, {r12, r14}, {r12, r14}, {r13, r10}, {r8, r14}, {r11, r10}, {r13, r10}, {r11, r14}, {r11, r14}, {r11, r10}, {r9, r14}, {r11, r14}, {r12, r10}, {r11, r14}, {r12, r14}, {r8, r14}, {0x0, r10}, {r8, r10}, {r13, r14}, {r8, r10}, {r9}, {r9, r14}, {r13, r14}, {r11, r10}, {r11, r10}, {r9, r10}, {r11}, {r11, r14}, {0x0, r14}, {r12, r10}, {r13, r14}, {r8, r14}, {r12, r10}, {r9, r14}, {r13, r14}, {r11, r10}, {r13, r14}, {r13, r10}, {r13, r10}, {r9, r14}, {r11, r14}, {0x0, r10}, {r11, r10}, {r9, r10}, {r8, r10}, {r12, r10}, {r8, r14}, {r8, r10}, {r8, r10}, {r9, r14}, {r11, r10}, {r11, r14}, {r11, r14}, {r12, r10}, {r13, r14}, {r13, r10}, {r12, r10}, {r8, r14}, {r12, r10}, {r11, r14}, {r9, r14}, {r11, r14}, {r8, r14}, {r12, r10}, {r12}, {r12, r14}, {r9, r10}, {r9, r14}, {0x0, r14}, {r9}, {r13, r10}, {r13, r10}, {r13, r10}, {r9, r14}, {r13, r10}, {r11, r14}, {r12, r10}, {r11, r10}, {r12, r10}, {r8, r10}, {r8, r10}, {r9, r14}, {r11, r10}, {r12, r14}, {r8, r10}, {r12, r14}, {r11, r14}, {r11, r10}, {r11, r10}, {r8}, {r8, r10}, {r9, r10}], 0xe, "074ee666b111fe"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001880)={0x3, [{}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "3584b1c34acd65"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002880)={r10, r20, "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", "4ac2870e7c88a54a470ae989d5624f4c34a17f758505635177f28f533693ff55a1807f0a7ff5381d6c91d653aa370e9ce7c8ab37a66ad8cf61a845bf7f5bc6d7198d1ad5d663f070a4fd25d730a610bcc9c17ba2a11fcb4333bd52693ede2982fd0c3d55957e3d5ca98736b397acbb514ac31c5a77166497dce8cc9b862e03c48a33c4ec4077c1dd7916e3f6de396b27d53db2c90f8ca279d7af5457733798ebeaccd5646b75a0f2584c8ff39a3b74ae2a544c671c9a57577c35a1411bcc45980f49e9319a0fce16807292494b9a2c9336b039d3981b9aab82f2b48db33e9938f6ef57d8484e696604b148d82b457ad65609993f4b29ada160c4cb87b2862722e16df8ccea338f5784885ee1c1d39088ddd95fd212b1d9d39475318d486ad036ba830837d82a9626a7893f115d17fa3a0a0a91c7b8338950a19632202516ef467a9aefa977abc572d56437b1e6ebfddc854e11cb99213056ec086ddd88ca102a7d3acd4938ab6f578af9863926a3cc9df4945f65f7074e72e0308a2375ef0bac92bbf11841915f365fdf54991483042dd1f94401f6d9e34bbd27863843304ea02b0d0b6f9d762264a74d13a3cdc560b07593c71a347885dffb27b28a8c92cce584280432fc1e1e7f89b881c8d0169f781a4101929cc3413706247299d08267388a642a289c2b96250d079f38f565007489a59f5f95b1441c22d50645f39e01df051304a28c7107f55f4ef2179d49a16d39ad4feb8b87bb8c9e66fc30e92ff301f06b1bca0d98331a02ab6b6e2f307ed63f53e4ab990c6efe3e105062a11b60742b398a1169c0cde30f1a4393dde1a60f03d4f885cd94aeb449a00615c3165a479f0c5c8d543f6c7760d5914340d81744cbfdb0534e9bfce649194cbccd26f86e1e749edf5b3024bb04b684345a848bf2743ef298821960c0dea49fd3f5db5b1dbaeccf1b65e74a8749e3ffb6df53ed1862a6b0ac8e68ba5621f9b65281f7485ebdb3e95c9972d42e6632da493647e317a9a0837b4960b6fb68565308f7d4db29acde2d41095da1ba4eea1a50d23caa3c753c2e39b53fa46dd5615f12708d50eb405f0a0bd536a39d68b2c8a080674c2c33527b213de4c8842a01900ee4e3e2b1b622dee9fb599d3bff30b048ca15c32ab22a3eb3e6a744b60db7381facc96975c6962c2df9027372b086e97ca71cf2b67dc478d53a16612da7dba2f51a0504877dfba1e2b95deb323da782c7e9539f3821ffdf6e3f2e1200ed9263d9ae100ed2c8d335887ee4c2a470882baad4c8600378af3c5612e480c55137d6a94b49cb058d64e86944478c3524165585bff2b8e06cccb8683c953d3690b6c08781ef7d6a5330efe857fdbf444fa833ddf54d943df21c18e064e7e5b45ff055503941f376d29bb8c40ca89615dbbcf0688bfb01ac23f1e0241beca95ee2d4235e8121dcd54981abcbb0d7a34cbae8042dd8d13ec67e087a3e835a159fc41a3c55324d4dd1553785773f5b64523cabca6125835bfcf3b8b47aad3c91a46071ca80ca314e4d8edc53dbdf7ccd51bdacf02e84ac3df31a65f6c1de3e1f9548b6ccdc1aa9fbf7ca82670546420cc17b9af23f3fbc723d35cce72c6a74ea8a993ad86bf7dc558fa33cc9ec07734915ac5900930a2ce74d26ad7ece95ece300b4c0eaccc6343d8c3c03c1a517dfc78fe094cbb48bf159ceda85e9b6fef2fcd5d62a2b189b1a3a58edc85a0ca7a90d9e0c21fa015f9934486803833e8454e4095e9c640003eebcb2b291fb731088a3e96be425afd4c43468b5c4333bde6d6875b97a8fe544e719bc98f20c450c6573f242e18b02b16e393f7cf92d3a336a2ec546713b8524212ffb79686513b158897cd29f64739c1664f671d8b2ced8f657cca88fb3c13500ac07da20fabdd84ef7e08e7bc29dbd756ec48abc16081a84eaa2b31cbf60bcd5987e522570ccf882dc884810564d4467d62e4945a4a4e90ec636c30ca8d623216d296014b6e38607b0e9ba4a82a381ba0608bae2efaf944b2956cde578ac5c73a1ade452da78d1085f93879e3d92e9b8eabb50b5d8fcbc790c6f6a828ae5b98f79d6ca7b68a214e9253a7d59f2156c3a525c57cd37993bbaaafb306ffba8126d6bfc1c9d8c022246f85491894638c964f13462efe70e58914ef421428e70f9a0cac2cc9d2e77836ba38d8c0fff4ed8fcc88589505b49db499c04a903680df12fd98d6f6ce28538f3af7e6d794e30d3b85e21179249c9fb960de96d27f09db5908c36912a9dbf766f0b328898f83fbc37acd0f9bb4515a981add9b5b1d944be9a4ab8453687c6e0bed0a58bb7499831fa9b1686cc63f4270d21a1a28565899a91382b65cebde4004d6003e28d6dce5a7e1d60e1158e632017ab105b85cb4dd4cf0794e50dbecf2c629de703bd13fd599a66bc13da14b8b7f09ea74a537b573ce4afb43db8ba1f3ec83b88095dc2caa12ccdaea2b1a8d217ff73bf7455c5e9f1c2caf69821ba3f0c84d05654310306d4f9ba91a99a6b22ef0547ad157c560d6c06f02e382394ffed20202e89ecf61962526ea447b6542c6a804179b8b8289b681355b64de35d03f3e8e8a826a304c8a625784291f2aa66d91cfc0d1ad17a521e8f6a11b213065a519e8079cd93d7c562eaf941fbc4667c2cdee5c5ad187e3c27d5f344c20601517a1d74efbb40b38bb2f8d9c6b27370bb310e831616c63d6eb960f6147febe0144db08af34007f8029ffe87a903189c95da581a0993954fa3ce0786f881dbd367b117f73a8c1e2288c243939250fb15d85316055004c31dd0d2f118b9e184a60c3b9378e7b8a1a0bfbe1213f9fae15da42e05fffe95b234e5eb0f562ec258952edac7e82e09f7f846a4f8ca84d888d04e8b36db9d3bcdde607a76a79ee384133d2a4e99ce4b520e3fc557c141e310205178fa8f8bb013d1b0a9db293920b05968168fbabed3aacd94d5bb6fac83857d98be9de41918214b1635112294df1df4ccacd2718e97610a43b610c4cc009a225eeba092a1bb5b04d1652cacc6df2a3ce9e7cf6b71d5ac665739ef5a7d951e4fdc9b17221df2244da4bb8c85483394f8a8aee18cf08f64f7102618820ea6c8b4dbab5b9af81b31a4ae922c3519d4a1d71304e68aa2a28bd50cda7ad77fb4c7f17ce95ef1aceb6562e0220dfbd8c8d8c2f59723bc91084e5b4eca6d089e864578ce1a5d341b6c1d2a3b50f63d79c7b7c55ef28e08e18c03808e640970384351bcb54686d844b3d544cd16ab8caf919657fdb1291ddf5b4fca38fae133ba79f73dcb2dc9f6e322c6aa4b23750cfffa9e2f5e19b48399e973dd73dd7689cbebc9837067894f2f139894bf57a0b107cd3dc58a1d8ef3384a1c282010f0a3cc2f4b3fe4d2f47f870aed6f7649a63ffcf0959a0f7e0bce1c8db1756624d4d1f37c3457a66928492329fd48cf6a8ea5a860f22142c584c048c1f7edf4ca33ce173bddfbd2c5abeea7c209b6169f912a3522ac22067a2bd4678bf3f607988c6d31de3a1d04f1eaab37bb20c8fce1cebf9a86b5196c9a5d4eaded9ff115d9fbd4ad4c3893f4031a3ad25745bc15afc181878a665ac67ea45075226520ca3ad8a04191644ca0b60c989c76dba64f95ea01f11416b86dcc3dc16462d55d0710a93dddaaa66faa14b67922a2781f9d2a129b153e2004785ea6b0ae85c285685d366f06e057425d6418b2184c1d58c98233a54c2480f85e3850b759260bdf38b721248a909e8c50c0f82c2f06297ca397b78f875043886a326bc2cbda192c34ce0ae8220c10e6130a0d977f305f621e414d0df2a4d69d6d3624e61ccef7921e8bda3a282ede8adfe0a99dd86a0d0d2205edc8ae3430aaa8a437398509cc4d6d27635e2acf440b0ea60ccc8fc38fc45b3444524d5c1a2304d35d5b81e4227801eb3c4b54b8d592b583bc7b41d13b44aca15e44074244e042d5900bca374f55e22d31cf28503f420521189c6ca6c713b3f66ff174e26977518640af3a274ce780c96c6ab5b90593a2ccbeeaaccac4b680140c8206b56d9c06ced0478170fec7ea0a32b1215bb7ee1ed593c11dccb0fed65e9bb036bda6b534ec6dfa3f1bcdacbcd2f26be89ee0353ee410956b2e6ad9f5e444d0b621e79b3d79ded8877ed1617684ca72097f8e0eb634294fe491846450aada09e2c13c6f00c78da780f20dd23f95cb19f9bc274604f78553fab562b6e9be3de20866f369a86ed4e2e8f4922d1d13a9baf7fa74147c9c23be447378439614665f4ec06953891a7529594138f6e82f0538ce81b3c18d2d1c81857f2cf1e39091e5ac47da18583943053d38be2f0ee070757fe43d16a6edc338ced4ed65f4745766f1d57346bc30f580285f9cceab3f64a1cfaeff6d693b32786a5bf048c94e8907f06bd2712eff1b6bd84cbbda8f7ce9bace3e4961a02109a29fc72d1377ab8cba3b88b57d6dc32608e382ec7a38aefedc419b0a466c408509701ac11c41a7d4e47fff564e027ba574f7418c72e99e22227b5d9092b0f4f3007aff9d6e8c8820e0b12983066c5ce5d7d4a717ecc18719e1ea3a039ad41979a6f39d4ad754733a183d79b4867f55afde7906949b6d0ae3c772a6f24429a09a03e9117136c5d5a2300b3b83df46e85eef985d9fad12a1fc896c5fa77c5e97b1f459b8a35637363df8dca41e21f7b114394f7c114a7dbdcaba148ad2baf902d61c6f4a45e135fca81faaaf8fe5badd2749419a215b8c58d2823635e081ecc9fd8544b723f802f091b1fdead20441c697b35d8cd3f1340699debfc6fd88f4eb7b5c3d1390677beec0f0fc121f8b36312cd3daef1c1041a97ab50b7acbbb9f865f92afab96a071a7a073bfab135bcdadf0bf31bc0242e6ae12899d8592f81ac066523ebcf70d87f62128d7e8f99761803c757179c78878be3a413b6818a1dc001e02a484a5ee4b5c37509f91f038874113b8c1c04a07aa46de23b61daff26a8fea1a0de4df8a80b2db99e85a4230be08792182ba73e7ba8f47abb0994939136f3743801dc1f057ecaadf4aa9cfa743eb3e32e7678ae3ec034f36b404eb23187d040eeeb232fb09ba9fd32008f37a28cde4be11027763f5dfb6a0191fc30b81de9c6bbdb9deb76ff2b72142a0896a9c62f256c67cad0c2808286033b1ac5f325e481c32897eb681c5ec45259adf55c138f0b894fb439f48ec643fd53929c579fa69fba7c8541184990f6c8a7ec087ec940688f24b7a42dfd5497021bf197c97ff255a1b2105cb906fb603f570f6c1f8352b3e9ff996878970b0ef67214a99b86a23dc3c9e8d3e33057975caf1e685650208018491ffdd9d4a3979eca9d85c790c4a84d383dd8cae7e2a5e220d6bb16e1004e25b9956c928a2d456f679ecf225b209f3212028ff70da6ff8d5339fb695f8470ceb980a837771ce9519"}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x9, 0x113f, 0x2, 0x7ff}, 0x10) r21 = socket(0x10, 0x803, 0x0) r22 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r22, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r22, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a", @ANYRES64=r19], 0x80}}, 0x24000000) sendmsg$nl_route(r21, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="d5ebc58b39a5e1f5222a79d433fd6a5e59c02cb97e74ee19083b9cda538c99cb0dd6b6caebd157b78a6ef7aa42f42347b0d8f6b27af8e366c0bed3e766bcc6420d84b1f1929e455ac1dbb8662f4d9942f60bcf7e3b07412b863b2f4fab435a890bbcf953e3929d43006493dc7efc0aa84d78ac107263f45d3d1b1f79ca1769227dfececc", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100697069700000000004000580c8125cf39cb0d1dc002ce72d5f03041d7fbb88968bc6dd79645067a04e19a31b306839570a6684a04777d12499badd3efd7725f5900fc62a0d18cf5c"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_SIOCGIFINDEX(r21, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00'}) 956.100347ms ago: executing program 1 (id=4205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x70f, 0x6, 0xe6761ffb5c9b73b0, 0xb29f, 0xfe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 824.747628ms ago: executing program 0 (id=4206): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000050c0)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0xc040) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x80800) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000100)={@dev, @loopback}, &(0x7f0000000180)=0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r4, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x14}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) (async) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000002140)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002100)={&(0x7f0000000bc0)={0x14c8, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x14ac, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0xfffe, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0xff, 0x7, 0x8]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x59, 0xf, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @erp={0x2a, 0x1}, @mic={0x8c, 0x10, {0x24e, "7d25513de742", @short="2cf8639cf545794a"}}, @peer_mgmt={0x75, 0x8, {0x0, 0x3, @val=0x5, @val=0x29, @void}}, @chsw_timing={0x68, 0x4, {0x40, 0x3}}, @channel_switch={0x25, 0x3, {0x0, 0xab, 0xe}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @device_b}}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x0, 0xfa, 0x48}}, @challenge={0x10, 0x1, 0xd0}]}, @NL80211_ATTR_BEACON_TAIL={0x57, 0xf, [@mic={0x8c, 0x10, {0xb2d, "47d086a1cf7c", @short="010fab846fc34cb2"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x40, @broadcast, 0x1, @value, 0x3, 0x0, @broadcast}}, @mic={0x8c, 0x18, {0x85b, "bd48f25bd24f", @long="f90c59794101ff9afc59b12046c05f8f"}}]}, @NL80211_ATTR_PROBE_RESP={0x618, 0x91, "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"}, @NL80211_ATTR_IE={0x2e4, 0x2a, [@perr={0x84, 0xe9, {0x6, 0xf, [{{}, @device_a, 0x2, @void, 0x34}, {{}, @device_a, 0x3, @void, 0x35}, {{}, @device_a, 0x1, @void, 0x40}, {{}, @device_a, 0x81, @void, 0x1}, {{0x0, 0x1}, @device_a, 0x80000000, @value=@broadcast, 0x6}, {{0x0, 0x1}, @device_b, 0xb, @value=@broadcast, 0x41}, {{}, @device_a, 0x5, @void, 0x39}, {{0x0, 0x1}, @device_b, 0x1, @value, 0x39}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0xf}, {{}, @device_b, 0xb6, @void, 0x1a}, {{0x0, 0x1}, @device_b, 0x0, @value, 0xa}, {{0x0, 0x1}, @device_a, 0xffffff00, @value=@device_b, 0x14}, {{}, @device_b, 0xff, @void, 0x3a}, {{}, @broadcast, 0x8, @void, 0x17}, {{}, @device_b, 0x0, @void, 0x10}]}}, @preq={0x82, 0x25, {{0x1, 0x1, 0x1}, 0x1, 0x4, 0x101, @device_b, 0x100, @void, 0x4, 0x1, 0x1, [{{0x1, 0x0, 0x1}, @device_a, 0x400}]}}, @tim={0x5, 0x94, {0xe8, 0x40, 0xff, "48b01e3088ed6ad30013d1e41a8f5bc9e7c0caf039b02e8a1c0ec743ef68d7b84f4234d2632f720b992f7bd7e63d826fc07d2410aa0b5d509862cccf5a13c5fc7700b293559ed937985cbb89f40d6295175784088436a5ac25dbc66a5e6ea4498b29ed09bab46512c1180ac142385b3c88e2f0c31dad58e32335860156000bf0c2241acb94255d34403b316a526077d0e6"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x20}}, @mic={0x8c, 0x18, {0xe68, "151fbd6f0215", @long="74ecea1520068255a82bb4dd93673976"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ssid={0x0, 0x1d, @random="51a8c8bfc1dfc863be78e16f9a243778d2455d428b7337bfe21ab66f69"}, @ht={0x2d, 0x1a, {0x8, 0x1, 0x7, 0x0, {0x100000001, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x3, 0x1}}, @fast_bss_trans={0x37, 0xb9, {0x5, 0x3, "deba70e8ee26774f4132f48de65296f5", "d09436560c9a12143d6d54cdd53214b2356a30e872bd0599a6a39f65a7a20693", "583880a07f4ddbe7466e869fe712802f475f3bee33be97aaf843af06195f641c", [{0x1, 0x25, "01a2befe08894fdfbd8307745be8f04957e6427b5bb4c4e50a67157084e6fd845b208565a1"}, {0x1, 0x1b, "690fb1240802ea585381d59c24aabb96b984d2dc3b99af1097cb83"}, {0x3, 0x21, "f7dd944dbe59533cf32ab0f49ea12864c333a9511159e0d22f130bda5c8fb11cac"}]}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x6, 0xb, @device_b, 0x8, 0x10000, 0x40}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xf3, 0x80, [@mesh_chsw={0x76, 0x6, {0xbc, 0x7, 0x37}}, @tim={0x5, 0xdf, {0x10, 0xdc, 0x4, "86247449849899a3f30bec81708ce121d5681f2aa4480eada8d0e36d4ea8efad42e686527b671f097ff797a9bcb3a40c8d5b078a22e49ac2df3b92bae5d02eb455e235890b5c72631b4b67ea7ec540d09771d3391a03efd43ed8f96c0bbd157c74a9219f27b5aac2d54c4f1e6fcf08fcb6e0d29ba5525ad6a4ea5e7f0c913a341b66a0775b41c7a3abd9870ef36f58d02f5d2027bb4e6cf66a3d41e3a658f0730b5dd91fc8ada49d8f3758c5be70cfc8e3e74327140ad17b9c32cd379886d04dd8277286c5cf21690471cb43dc369681044802581483c599f7ceb3a5"}}, @chsw_timing={0x68, 0x4, {0x5, 0x3}}]}, @NL80211_ATTR_BEACON_TAIL={0x238, 0xf, [@ht={0x2d, 0x1a, {0x2, 0x2, 0x3, 0x0, {0x1, 0x1fff, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x0, 0x5}}, @dsss={0x3, 0x1, 0xae}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0x95, {0xf7, 0x9, [{{}, @broadcast, 0x5, @void, 0x11}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x1b}, {{}, @device_b, 0x1}, {{0x0, 0x1}, @device_a, 0x8d57, @value, 0x26}, {{}, @device_b, 0x3, @void, 0x13}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x1e}, {{}, @device_a, 0x9, @void, 0x19}, {{0x0, 0x1}, @device_b, 0x7f, @value=@broadcast, 0x17}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x1b}]}}, @dsss={0x3, 0x1, 0x40}, @random={0xd, 0xe2, "799d6991d462016310fe3803254ad8f29ebf123f287232cdb033e495567de63e266119e3accf5eca0a65243a98715ca2e6b0249e2f096a3fa0be3ca81c3d6eb96268d68a4b5b731846a6d85ada9df25d9d10cf3e172d0981f0cd4eab1bd7f8df1d312bbf9fb6c5cd05bcaa778e38eae162bd1cd006cca7fdfe6525285ab319048ddf39f00da1549a6f3f015092c8a8ba4c1704f8384ca5ee37a0466a89660b9b3f5f7c01966c3cc25b2555a8b3461c159a8464ab1f534aa26ed0f3737640739fa8bd659c5a7515cf563762b295b2cf0a590be9f9b3bc53660f925180922fe0af4ff0"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x2, 0x0, 0x40}}, @dsss={0x3, 0x1, 0x66}, @preq={0x82, 0x78, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x6, 0x5, @broadcast, 0x81, @value=@broadcast, 0x6, 0x6, 0x8, [{{0x0, 0x0, 0x1}, @device_b, 0x7}, {{}, @device_b, 0xb3a1}, {{0x1, 0x0, 0x1}, @broadcast, 0x20000000}, {{0x0, 0x0, 0x1}, @device_a, 0x6}, {{0x1}, @device_b, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0xf}, {{}, @device_b, 0x9}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x5, 0x8}}]}, @NL80211_ATTR_BEACON_TAIL={0x85, 0xf, [@channel_switch={0x25, 0x3, {0x0, 0xb6, 0x8}}, @ht={0x2d, 0x1a, {0x8000, 0x1, 0x0, 0x0, {0x7, 0x2, 0x0, 0x6, 0x0, 0x1, 0x1}, 0xb0e, 0x51, 0x2}}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x8001, 0x1fff, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x6f}}, @channel_switch={0x25, 0x3, {0x0, 0x1, 0x6}}, @peer_mgmt={0x75, 0x8, {0x0, 0x563, @val=0x4, @val=0x2, @void}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0x0, @device_a, 0x2, @value=@broadcast, 0x1, 0x7, @device_a, 0xffff}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x2, 0x6}}, @channel_switch={0x25, 0x3, {0x1, 0x5, 0x7}}, @dsss={0x3, 0x1, 0xad}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x7, 0x9ab1]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x6fa, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0xe, 0x7f, [@supported_rates={0x1, 0x8, [{0x18}, {0x16, 0x1}, {0x36}, {0x6}, {0x3, 0x1}, {0x16, 0x1}, {0x13}, {0x1b}]}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x5, 0x8000, 0x7, 0x3, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x3, 0x5, 0x7, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x14c8}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) sendto(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000b40)=@llc={0x1a, 0x201, 0xc, 0x0, 0x6, 0xe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x80) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x1}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x44}, 0x1, 0xba01}, 0x4000000) 814.453773ms ago: executing program 4 (id=4207): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0xb4, 0x30, 0x300, 0x70bd28, 0x0, {}, [{0xa0, 0x1, [@m_xt={0x9c, 0xb, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8}]}, {0x23, 0x6, "2f6f3111239189ce9c8223868cf8bbfd975fd39db458c1568534781b826151"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getuid() getgid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r3, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r1, r0, r0, r0, r1]}}], 0xa0, 0x20008010}, 0x20010000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0xfffffff4, 0xb5a3664e6e5b4adc) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000140)=""/81, 0x51, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0xc}, {0xb, 0xb}, {0x2, 0x6}}, ["", "", ""]}, 0x24}}, 0x20004000) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000000080)=@delchain={0x30, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0x4, 0xffff}, {0x7, 0xd}}, [@filter_kind_options=@f_u32={{}, {0x0, 0x2, [@TCA_U32_DIVISOR={0x0, 0x4, 0x5}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008051}, 0x0) shutdown(r5, 0x0) socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x4, 0x7fbaae65e25bac2f}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfffd, 0x8, 0x3c}, {0x3, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048850}, 0x40000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 786.359466ms ago: executing program 1 (id=4208): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in=@loopback, 0x4e20, 0x13, 0x4e22, 0x1, 0xa, 0x80, 0x0, 0x2e}, {0x9, 0x7, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x6, 0x1000}, {0x4, 0x0, 0x0, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in6=@mcast2, 0x3506, 0x2, 0x3, 0x1, 0x2, 0x6507, 0x5}}, 0xe8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff0000"], 0x48) r3 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r3, 0x2}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000820000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r10, &(0x7f0000000500), 0x0}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x1fb, 0x818c, 0x0, 0x3, 0x8001, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x2, 0x2, 0x0, 0x9, 0x6d7}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x800, 0x6, 0xfffffffb}}]}]}}}]}, 0x90}}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x830, &(0x7f0000000440)={0x11, 0x8100, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 730.829216ms ago: executing program 2 (id=4209): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x6, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r6, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$unix(r8, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYRES64=r0, @ANYBLOB="0a01a3c228da6328ca7c608a165a244c02463b95fbf926fbba74641ba9cf4790657f01eec3ec7839ed917e0cd22d171c9d2dba2c51b1eae39a725f093b893c6597b27dbb72f1078ed700125a07a39f3713f2c587603a7978afae562a2127498f134ab813a91211c6b9942ca5c8a20952713478968520e9b91ab07ab7eb7c2b61e35b23685483fcb4ae55c3f414fe3d09e695eec6330e8d5b788455727a0bf084d4e1756979a2788a0460041481c8e950ab09ba6b8b694c4aee5be0a5c117e4c6de909b08904a25a5f3ad87059a7ca5638c76cd81543918769b83f019deeaab2d063ab1f37758b851121fed3fc8bef92306668ccdbe60fa0bc6f58dfede6a185f65132100d2ea11f0bdbde1509112fb79529f6ab3c9d1593a74b7af5ea208034aed9858b72ff332981e7c565d8b2a22b63fac245a4c55b570de9ae1524ff1afb86617a04de32910f019816cbc35af2e76242846b3c89fc788ecf6f63d94276061255a44d424ab77ed7b07890e68992a3bc5d77004d1278b245f2b508490d007e39e46d3181893ccefdfa09e72a5d4b754f84b64471643811494ba6218566563162e37288864b027cc71e5ac8cbc370f6af6be80abf6779e0e1a9654aa6bbc54e0d68cc16892a3f54be82b31bbaf68cc25e0e8327ce50ebdf22bd378221b67ede4b86bad7e39add7bfab41862a7b00633ef50ff7f1bdbd25551c0ac325ba9d299c6c1fbe8d4c1befdca5092426ee25c9e3875d13e2f32550f8dedad775e9c296ddaca7f2e87b571ee022131b7eb4b24e614760189c65f6da980ef81cd73de699643c28be83816152c3461a3f057d2ec87692d17e1d9a7098ac97e5a4c375bb423877c8eb6e8d2bc892054d800c98b97363a760ef40cd4ba63262e02232ddaf2990bac6c634f04a6179b5dd3723b1a7eca411587325c9037767623eaad9fce23a4f067606d6381dd25914a71469bcf59d7709f4bf88c3dd28d67ac710cdb405c622b5aed22abd083e57a3473b1d4d750fc6144f2247887b5c0ffb62e31c37dbc9af81045086ffe1c36b47efc88c205871d37aa732e08dc709504401b400366b8538206a78719336472ab5211f45eea3edd4a5278a4af69966de3886aee63dd2eba8742366a32d19ca43a665e072f18e2523547929472194ceba64132df9685fe0549bf95490f41d47ecb7fb37e595370aa0cbc8f57de47c6c18b8d4181e70968d2e89b3d25107ac615669793535d5703595d8e27cb540e6663c49b5ab23159b0360fc00181f33ffe3c5aeb83eae5cff65693cdf211289a6ba4014962f8614606052bcb2a5564edaf390e8cffadf892a585e774d29cf7600a6be500ae4a9911d56c2d14dc8e3333acba4de03d57867df408cfa26b3a452482c9d82f4cbcced5559ad0de8673bda556b3bb09ad588f1ef2fc2fbe54b67ca81f55726aa081ef2846f9f0ba22f9691b4947a36f08e703845d67cf6a0156fe9324462c00acb8a014384c460678f1dedece44e0969425e4e09f8cc91a69f4bb2eb0cf6161f88fbdade72dd8f01f863f4f95379fbea3ea8facb9ed56493ea124d197363f77a21f282bed477bf89564199d3591221dcfa07433979158c9d95c57757a53f3141ee1ef76c4ee13ccacaf80d5fc78950653360d664fc4bc1149c7d150d97f1bdcb907b94f664a291fb63a274dc69005a539badb5ddd7f2243ad040c7e7868b758d926f9bcb63d02762bcb7fb3e92ac0bd0177c620480fe22c18d962fda6d2d840136b3289170fb53c05aa3eeb3c2e17ab9177d74d9fa6a06800d313e51bcce795a73d16b2b3f353802bb83859cdb0afe3b13c4138ffb7894ca2bf274b98a0e4146be4276ff688c2ac9cad3772789e7a9fc2719001009981383ae189949fce0b1ed867a3917b97ad0e22d9f2c755754e5deaca8544bb2ec84c1e2852bfd49987bb0eb74147f03be40dd047e489544298416bf0f966f93799e49d44ddaffb29199d0c238d92fe2ee38f241c3de419b4ba511b4e0ad1d8fa25b6612eb8cdb192c9c7d5e9bbfb6b9984415a5909a5cfa4eedf5b025b39f962f6a8678471fe0f421d573720c43420b61a6f68bd7ec283df004abc267e0d0603bb3a417fc9e627adc62b7f42d1766657cff3ae0c19612a01ce6c2af93b28efaaddb74d3e349a8f3d678a9402cded42cb61dacd75c0b32e2a59d7439fcfcc48ab68362d131842b5a2b14e3e4a5e16a52ccc65dae5f2d3f5d691216bf2522b78b62b2dd6d1d1ca3c50cdc75c8146f59be16817bbe886d0584ac7a8676786a69dab55f1c49f72021cd7dfeedfd9e2cc3ebbe8fb4587339bf777f88092123b9eafbfa5f564dedb08cf7043350a1c1521a34f3e12e67c139bf4dbcfadb2e1042d2fc7394d83df3aeea38b26b2d0c8ebf20fa1fa453c906e5e0541517da2559675e8c1e2b2f28f3aa0dc0f1c90fe733e4871655b9c1c8121b78f216fecf7ab645bd5897fe3bbb022f92686f31f3cabad42eb29d067d9c245b66ebcb419617ca9214b226919cb7f5cf2e045de7763e448917308ca83e1747bfb3a94e2a1457f509b5c650f1eded9e4391bd58322fe3d4c85f94b2193f1acd6f16d866fc2c5f47a96168748d54f3dd399b6de16a49c9e7b792b2df220c815bd0de853fc6f3f23cee69c4c5978facfdda2ad3fe07ed58e1a4a99f13b71aa0ce94fc2bccb912b1102e283c8089baa7cc2dc4ceb8c6474c9722217626c32a29c4153a74a1015a6aa1d25cb347778f47000a369ffea981556828fb4ccd55c2776a69053e1e9117d661da710d7fe087d8f4042e78cfc5024f3ad86b1cccfb30ae7088ef364508891f7da37701b59f8d0ea311cd0a8ce6c10754e528ab908a3fff9a44cade0d80e5d478d764d10d03186929ff75928748a031d6814badf63c362c5251c97df253989cf1e41f469b1321863727b4d57ec19c209a3814176c467cc5dac68181c203f597c4a5299a4856313cb82feaf23b1df05a77ad0fdd68af6d168af0d9b754a41adc7c75b13f8e54f6f0cb03c4b4fde90620d0101a1fe1716eebb72fbccf707240ea54a52e5f2276894c24faef2740af9db7927a80f403dd3819d40c8a2de0cf856d6e4eae84290430474568da465016c96fd9fa907234c23618b4058fe3198520f9c0d102b0abe99eb9988b37823d0b8eb60324c5309c3439fb11b37bae01d9e6260824d4657c22481e5efd7ff36a95a94a7297d76be2e3074e48625f8a056715d24926e29b4069c733ad857d7c493b8d749398d2837660cd1f4e09548aa9626ef999340d6ad925642ad76012bb46023acb8079fa75005cdb33a1af1acad34d3c52665790ac15a8027ff46c2ef0b3b6ceaf6bf257c7a0c5f355971f1ab534d134bbed8c60356e046763e5b8f5379ecae25e6593a53de8cc6b3db07ead12de1140fc2986d76b10cf5f0c2e49ed1402a05615b3b33ae179619056bb3ad355236d0fe561f4e3f58258d016536f7a6c972a996c2401008da635858c1723ed1a0c4409065e42bf5609c36e33f2dfd98eea07dd019d69701568c6896d4e94b7033b4fbd9ee42b6145b957db0628d581347449257e492a9bfa29a64c0d34987121f5c5004a1cce4a1ee2712a07597f015e3386bd7dfa4573aff102e0319cb2c49b0e6012ee4e04a55264fd38c1237c812450abb1a8d20451da6509d3d4b2c69757c3d021b86ff87ab0158d6a7e446fbaa6b1955590388e03213655a79cc4be4a3c71998a4687d0c364cab92e1c550db1a2fed4020b3c38395672a531b9b5ae35e88a3667d44385da41500953a26565542bd47b32db343d9d44b18d9439d2b0cbb018f7381abbdd4d8238aa9d4985a62d0e7313c8869370d14ba5f06e5b062c27cf10b20616e2d6418fe29d265090dbd8eb031364d9177962a1c777ae2663afae49012bf231a7ccc9928bf113ad673dbcf8b2d907501865206523f171af13b3036204f9b694ccf7afc4fe5aed91750edfc237bf35d945ad417fe11889df0de9621be3547f7d4efdf61f9890bc79bdd33501a69c161513143542869df94a759e2b83fd37d2bacda66acdfdae2832d232ba01ed6c1b935046635c931cdcb3e1a4f9bf0ec6679fb71a2a438afd885521413b9377ff0e1edf5a533ac598d87c25aa975a046ccd9c404aa2137cd7cf081ac7697ceac402e74d3dfbdb9d2c3df4527f2f277910cd9833c5eab3edb30d88a501a07e67e7a7a40d12a4ee482b003568a05b61dfa8ceb513f3a6404f0c535313fc63c59af3116ca987142a5b4ddad6cf3deeb7fc44108d60efe473702684dd6f50c3b1ea5740a5e4e2ad42f41c47cee83b93df65c2bf6844fc5ba2bdf407c41f8e209b8c9d66db95cd8556fa84e605b56328ec0740c5931c05034a42504c7cbfe6774d22c0551de7bf135ee621fd0a0e75d77151643afb40755aee9a61a42120f7d39fcc22b51be569a1947449bb5ccb4453b0c7edb738619a6546cebe243532e2022d46cc4361e52ac91b456a2f2507e6dc49f489ee5c2285acb737fd59fbf9a7cee706b614a0a09224081c50ac82cfb11f2c4c0b7d71dfc7ed116808aa82640d26e1bdcea1062736e620099550d147ef3d1217f12d2e74d1776fa7764755421a425935e2b30bee4d4918e680c6090248e4eefc01c754f284c86533aff03f3b2368c2322f1f45cbfe339500055f578e3a00dca82272fb833264e6ed9266cd75154906f32d4852d9164700932b4f0ef0465d314d93b348b1d75c67f320d577e18e4e2c006c1add0c7fa6cbc2f176af2b6d30797814f1fde9b0529f50f9ce6548ca6d8a4b59b4536161da7de00b11b7d5235ad79983b68113942d9fee62db316aab068a6ffcc7fde5a21a465f589e311f94fde581c649925fdb4a62ac01e4edf93de883e50a9f017157c832553148cf9a242bcc1fd970e2460b6022b644827eb58ab30c99679fcdb84324812d45bb8b265ecd35a7246e5820517a701e91ea72128382b511260f0d88c70b3c0780f26d00da7547c6037ef4559060c6efb689e1d06bc5ceb2fee81491ed5f669171a343bf6b4be2d200c7520ab6b120490e8d05582eb867c34fc67f0e2721ac11edc7ce6dd07628aec2e35c457f57960de77e620b540cf7245eff5dd0c501b8b5cdf7a5b4cf454b7110fa7accf1f216f247cfe5ffef1f1ad0b9bad6df97f346bb98c8b6a0dbaad34c0ac2f94fbc039771e7cf3146f5bee675ff5e4c4e99ea2824d567909493970ecb358fe402e9ed5c96abd45d1897e220a5d7e33052723a3083a90cf262d0ae39e72006e077cc466293fa5268c66dc3f7efd4f4554be79fd46c72a14ec2083a7afa509f00671d89f240527bed6e288b1301eb855383ea6dbfdb4eb7f158efcc763fff823292357f433a617bec15cec27cfddba31f867a997d169b395992ef9811da2f70c8dc7ffec86e3cf30850e54d08b07307ef89f1d6bab699dfd5f49641d059f07e3a508597c92359430ae9b02aac0a62ced1a98f973e17d4f081abef4308f8ecb2f2e2992a3567a60c33c81d92787a9155c5780086f31b529e5d2000cbc73d43b53d09447de0d821653dcceae29d01955c9b0f97bd97c2c0f6c077a3260b7a28471023ab01dd49f94d491fe2c0977ae5129c63a8b5b04e0d5b00cb48105a3497d5cce1a4118b29520f54bdd05bf9939c746741514a266da5b2288b20455c7aa55508e979878e3647a30bf9c993aa76c14d85a38164e84adf839a826c0e0dd94b7ee52ecd4c19c1c03bb12f4072b281de01f48a5a67d57482301610409be1556dbdea2ae79d50c1991aeee346fc317979fd280b00012c0d"], 0x3c}}, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7, @ANYBLOB="ed5d5e67"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x166}, 0x48) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001100)=@newlink={0x1ac, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x41000, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_VFINFO_LIST={0x170, 0x16, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10000, 0x5ae}}, @IFLA_VF_VLAN={0x10, 0x2, {0x60, 0xf8f, 0x8001}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xc}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1c, 0x6}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0xf}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x7fffffffffffffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x4, 0xd22}}]}, {0xe4, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x73c, 0x7, 0x1ff}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0xf}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @broadcast}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfff, 0xb33, 0x4}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x243, 0x3, 0x88a8}}, {0x14, 0x1, {0x5, 0x15f, 0xbcce, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0xfffffffc, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x7}}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40845}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000010c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x2c, r13, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x2e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x81) 641.227242ms ago: executing program 3 (id=4210): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000280)={r6, 0x5}, 0x8) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0xb, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031612d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r9, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffffff1d, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x400, @loopback, 0x8b03}, @in6={0xa, 0x4e22, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd386}]}, &(0x7f0000000340)=0x10) 610.893953ms ago: executing program 0 (id=4211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000000)=""/34, &(0x7f00000000c0)=0x22) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) syz_emit_ethernet(0x9e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60f81fcb00603a00fc00000000ddffffff00000000000000ff0200000000000000000000000000010400907800000000604aa1d300000000fc01000000000000000000000000000000000000000000000000ffff7f0000012b00000000000000000204010000000000000000000000000000ffffac1414bb11000000000000008700000000000000"], 0x0) 495.503705ms ago: executing program 1 (id=4212): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x18, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) socket$l2tp(0x2, 0x2, 0x73) 264.254741ms ago: executing program 4 (id=4213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x170, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4}}}}, [@NL80211_ATTR_IE={0x3f, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x75}, 0x5, 0x5, @device_b, 0x7fffffff, 0xa94, 0x100}}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0x2}}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x30, 0xb3, 0x9}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x8}}, @peer_mgmt={0x75, 0x6, {0x1, 0x54b7, @void, @val=0x26, @void}}]}, @NL80211_ATTR_IE={0x75, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x6}}, @dsss={0x3, 0x1, 0xb4}, @ht={0x2d, 0x1a, {0x4000, 0x2, 0x1, 0x0, {0x4, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x95}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x75, 0xa5, 0x69}}, @peer_mgmt={0x75, 0x14, {0x0, 0x8, @void, @void, @val="2bbac5253e1710a28e16cde68f1c2dcd"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x2, 0x0, {0x80, 0x1383, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0xb, 0x3f}}, @channel_switch={0x25, 0x3, {0x0, 0x9}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x1, 0x8, 0xe9}}]}, @NL80211_ATTR_IE={0x1c, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast}}, @ibss={0x6, 0x2, 0x97}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_IE={0x63, 0x2a, [@ibss={0x6, 0x2, 0x1000}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0xc0, 0x9}}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x8, {0x0, 0xe, @val=0x1c, @val=0x11, @void}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x9, 0x9, @device_a, 0x6, 0x5000, 0x5}}, @measure_req={0x26, 0x27, {0x81, 0x9a, 0x5, "6eb9caf12a514081710760d9b1b9c695c65c3cceef22634465dacafe5ad66f55089ff175"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '^-\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x440bc5b2a67753d9) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc0) (async) connect(r0, &(0x7f0000000580)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x80) (async) pwrite64(r0, &(0x7f0000000600)="3372fb2ff4e744b76078e3699e1385fdc631a68efbc176220def1918634907a7de4140d28d7afd214db57022c41f40be99e3a5cae7d754528f65790915f4959b5e8cbe40e7db9920018a52a2308f4ab70638831592ac4665f75d42cffa9e55ba1f682faa17b9a9968b7c56f1ba258c9d1b6f78b43b9217504cba877dfba0792332543ee1", 0x84, 0x7) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r4, 0x404, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '\x03\x03\x03\x03\x03\x03'}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'NLBL_MGMT\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'ethtool\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '^-\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '\x03\x03\x03\x03\x03\x03'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x24048044) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x11, &(0x7f0000000800)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfe9c}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000008c0)='GPL\x00', 0x10, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xa, 0x7f, 0x7ff}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000980)=[{0x1, 0x4, 0xa, 0xc}, {0x3, 0x5, 0x2, 0xa}, {0x1, 0x1, 0x3, 0x5de63c0666e782f2}, {0x3, 0x4, 0x7, 0x8}, {0x2, 0x5, 0x0, 0xb}, {0x5, 0x4, 0x8}], 0x10, 0x2}, 0x94) ioctl$int_out(r6, 0x5462, &(0x7f0000000ac0)) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000010c0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001080)={&(0x7f0000000b40)={0x518, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x53}}}}, [@NL80211_ATTR_FRAME={0x3da, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x608c}, @broadcast, @device_b, @initial, {0x5, 0x1}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x2020, 0x8, @device_b, {0x0, 0x18, @random="1ba713cd94ee3829792e610cb6e80d824f164f2a510b9721"}, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x6, 0x0, {0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3}, 0x400, 0x0, 0x7f}}, [{0xdd, 0x8a, "9e05ac2120cf785f817651fd43c93dfdeecfd9c36dc18ad6387205d44edb7e8799405e27efdf29551854b265aa7e20ec28522ec1686fdfdcfcffbb4fcb8187845220d147baf80acf30d40532e17d51e62d344f59558e0874ad83a132dd9944550e13f4295c8cc956e8fb621346e7e9d05b4e6a14e1e8caf5e43d3f138b05da20f383e215a54c3c9e0d8f"}, {0xdd, 0x75, "ac69d9b41ff5bc861b0f124acc38768dbdcd0c861eb01fdf002d6a63304e2d0bae2b70d682c7afe81c02bed2d37aeb826e131ed2e39492d0ed2272a6d136bd1314a50efa45d2a837a24a92182122f85295fe649f360629e6c3122559c330d93c68d412b424d0bf7b14200df0afe3608cef26f5c8a9"}, {0xdd, 0xcb, "3299f152525047e5a2359aedba79c47017e1fc5d9278a602496c3009eee557cd0fd51b60ad7d8db9ecca3ee77511b65d3b5764bed66140bb9f560db0edc41288fadbee374094415b13603a30df41e9e4a94c767cadd1d044290cbd9c6be945bd003f27f342a52b21d0a1ebd4fdacad1e9b523a1ed6eb005d63798e5e11c6a3b4c9b3b3cf0a995ed58893da35a3505eb5cb8fe4fadbc599b86e6d2bb8dd3ccdd5701bb5e1ee30ae7e01f1cd44826d1c076abbaf513a4abc89b29c09492abd24629154e1ff711861e953d10b"}, {0xdd, 0x75, "44f1f903cfcdd5239b6c24943dc7fc6dac5160254d7589c4fd6957b01760dfc4cfe9fcfd6f6a218633f6ce8a7136cfcce38d100358376ade446c42d7347717bf4cccc53d3012ac106cd2363bccb61e1cd8ee251e9138236b3e5ee38da0dcca5f06820336d536736e346edfd527066cb61c1fb41d45"}, {0xdd, 0x81, "879b4211a7806e3fd5ecc2f1149456d3755a6c98fe3fdd0162b95c09cdecceab15998226fa8d762f570748d67899f916f4069f573a2c33249b8c47f06b8fd03b967f7e4fa2e18cd22f1294a5b0b28b5965df5d0ce6fb06ea0a57bf9abfb9000da7170a559a600736925bdde5c83983200d48c35700e038acc9a8d0c1a3aab34d91"}, {0xdd, 0xae, "f757b33e9e0d2c87381e3f84a466c374c58f24f7ea912e98115f1e01d147d6fd485cbcb8f3c76072701aad0052bb3763373511fea4cf166760a0b84e92e2213e61f3fe7eb4008fced52cb15560b38061aa170caa8f3aef37e402486923807744361288c6537b39b737b35b1cbed35c472dd7e2f346c994288f98674daa9d42f1894cd62c31313fc10df5f7925776c237d9517d0fb20785b44366e49db917900785b8b9a2717a9a5866606575ad5f"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x115, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @random="b47940973dc5", {0x7, 0x10}}, 0xa288, 0x870, @device_b, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x6, 0x1}, {0x9, 0x1}, {0x2}, {0x30}, {0x3}, {0x2, 0x1}, {0xc, 0x1}]}, @void, [{0xdd, 0xdc, "44123eb4858ba48c5d509b893ebf04b925e4d64714b40c33803418b4a0872dc0785985168474a80c9bb1dd43c70393b01f9b437827b4285918bab9413498f877d33cff9a4ef6aef110cadc7844b6c7ef76506ff0535dbda4d5919196982c918acca3d391eca68ffa497850009db29bab934bf5aeb6f8e4ab665a0936f429bfe10c78ad39477c0b6ece7b8b1e1a021734c4bc2821113fd61ac69fa92bbc7122e518a069d5f71d546835a1553c6a139ed321d2b6e13523db5e2229721155669ab0b52c332944bfe36ddb4d69880d7192e39d1d7db738e09ab053e9da6c"}]}}]}, 0x518}}, 0x4000) recvmmsg(r0, &(0x7f0000001100), 0x0, 0x100, &(0x7f0000001140)={0x77359400}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001180)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x1, &(0x7f0000001580)=0x4, 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x7c, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa6c87ba4859544a5, 0x0, 0x1}, [@CTA_LABELS_MASK={0x20, 0x17, [0x7, 0x4800, 0x2, 0x6, 0x1, 0x10, 0x6]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xc}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x502}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000844}, 0x40804) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001840)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x3c, 0x0, 0x410, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000001980), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x14, r10, 0x800, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4004014) (async) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001a80), &(0x7f0000001ac0)=0x4) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b40), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b80)={0x18c, r11, 0x428, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbf59}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 261.878186ms ago: executing program 1 (id=4214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a500300000c0a010100000000000000000a0000050900020073797a31000000000900010073797a3100000000240303801c0000800c00018006000100000000000c0004400000000300000007040300800c00044080000000000000001c00064025b85d0e6b21bc430c53bff3dee236115c0dab3d48e8a060500002801c0002800900020073797a30000000000900020073797a31000000003000028008000340000000010800034000000004080003400000000308000340000000030900020073797a310000000008000340000000000c0004400000000000000006fc0001802c00"], 0x378}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 127.329977ms ago: executing program 0 (id=4215): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x2, &(0x7f0000000040)="ee7d", 0x9, 0x1, 0x4b58, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 113.68661ms ago: executing program 1 (id=4216): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000100)=@rc, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, &(0x7f0000001a80)=""/87, 0x57}, 0x8006}], 0x1, 0x40000106, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0xfffffffe, @mcast1}, 0x1c) 62.460695ms ago: executing program 4 (id=4217): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x440180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) (async) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) epoll_create1(0x0) (async) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000140)={0x15}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000140)={0x15}) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0xfffffffffffffe5f) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x100042, 0x2, 0x2}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x100042, 0x2, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x8c800) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="800200002c00070100000000ffdbdf25097c00000c00148008000600", @ANYRES32=r2, @ANYBLOB="5e022680df003300a48580e551148d05204cd71db2bc8ecf13318d5e7ac80f9e4a6a838082633f6fd804544e9fd9c503f0c26d8eb65acb7d91eb3f27d0a3b6fa667d79557e30a5c28637c247a1045282d7f5382ad3c8a668126413a29f90e8fa37ed24760189158d68d58083acab5ed1c5f37e64d11fedb154d8e938211d0164ca02e9eff604b8b5f4ce903ca19aa8e842f63cb250d1f67004031ccb279cb540d7a768871f0a0c43ffb07f574b89946fbacf42787ff73a179b6e2f9ba1b31dcf99402692a61d99be2e4613da4c68c35c330275339535b87f1bd04194f34b46ed9dfeba000687c3fdab5e7255fbb126daec7b5ae35e13f0f7e39ccd619ebf808528a23e4de46d2702eb5abe9959ce864fb86080f54e46545cdf762df754ce68e0ba77b4269c1636d6412c0bc87df7d848b7d0de27e19fd447ade844b9562e75b0dd2319dc617c1f45eb76d7efe92897698dd06ebd9c9f800e66b18441c1fe71235528dbfacebd5008b7488f167abc2daf9ebd91e158c9298bbf1c23324e0dd6985218349ce9e9090f598997d29118c0e02a20cb123cc3f415af5fdd11b03b631453a9f6b32668bf725c398de7bf3b9c814845547059266bb483fe17e0e79c93ee27a6a793a9a3d5ec9d900def4015bfa1facc28d071676a5eb4824a95613361a51440a96b43cde9ebadfec778cb2ae20b7bfe976ba91be157f151294bc5b6befdb63986ae2521f542fd7038a77dc38c0465c25e81cc4ff7f3b611cda81834396f6c2b1c3e9f107feeba1cafdba462e7a873447a47d061e4646bd127c5b5785b623b98355716c03f3907ff95a79f55a566d9c59a135f0fe78e2f256d333b010000"], 0x280}, 0x1, 0x0, 0x0, 0x4c010}, 0xc010) preadv(r4, &(0x7f00000002c0), 0x111e, 0x4, 0xfffffffa) (async) preadv(r4, &(0x7f00000002c0), 0x111e, 0x4, 0xfffffffa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000240)='blkio.bfq.time\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 61.220103ms ago: executing program 2 (id=4218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r1, @ANYBLOB='\b\x00'], 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getnexthop={0x20, 0x76, 0xb0d, 0x20, 0x25dfdbfc, {0x3}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$netlink(0x10, 0x3, 0xb) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r9, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002b40)={0x18, 0x140a, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r12, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r12, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r13) sendmsg$IEEE802154_LLSEC_GETPARAMS(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r14, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x44000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002d80), r13) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a00010029bd703a2e0000001a1000000000000000100000"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r9, 0x4058587a, &(0x7f0000000480)={{r8, &(0x7f0000000340)='\x00', 0x20000, &(0x7f0000000380)={@align=0x6, {0x8000, 0xfffb, 0x2, 0x5}}, 0x1, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x6}, {[0x81, 0x2, 0x37d5, 0x3]}, 0x81, 0x6, &(0x7f0000000440)=""/6}) sendmsg$kcm(r15, &(0x7f0000002c40)={&(0x7f0000000640)=@in={0x2, 0x4e22, @local}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000006c0)="a3495654eb53100b4599f1fc3f", 0xd}, {&(0x7f0000000740)="e0deaca78b1f79b11ba032932765e77b48683a4e32a5becbd0e493b28ef85140224803b0e8a06c0b5a6e01ea43", 0x2d}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="2c320d9b1c8a8b0e86f1b245b59ff720c7013bcdb097515fcb44606aba41bba1cfed", 0x22}, {&(0x7f00000017c0)="4bbc59b9994b2345c457291346099c069f4389a77ca3f1c4bc8d8ddd8930deb6662fd2c3c343", 0x26}, {&(0x7f0000001800)="4d435261d0a55527db35e957f63caaf3", 0x10}, {&(0x7f0000001840)="80a696840063db3ee9bb79f81070c78257457c92c310e5d260c7d72bb6b53d0d58c659fd5d08df2b834c26e58962786129f2a2e56f6c53c8433d750e79c6d988ae72dcd8b26b0351a4e39b707ea1c8923884b5ee70871e197358a62fe72c57fe283c11f01de0989f", 0x68}, {&(0x7f00000018c0)="28f9f538247b0f3298d3bc5cc0ec555bed5a1f00071e89796240e9e73aa7efe0f866c63eb02972a3bec8aa7f68697d992c5bf0f3c4c4fef98172e2c8a4c3edd73dc0ddb6e158a0591baeee58e672ca1497561effd489d9d2ebbaa49ec1c50d6a4fdb36cb7c9ef6a4f1e398dd25b2939d5425a1dae55fdf0b8c1ab88b987679f3a88e4d8922e27fc378a1df2acea99fee97a7864ddee736e486b131d3ed25b7305444c3104a86cdaf349568988e24342d59fd4cd6375fe19776b24d8eef88057130f7178b6a1b12813b2b90f44e585f27765f0e6d79f7b353c55bd206f30fa252d7b8a51136071064e0ba6d6440f13ddb", 0xf0}, {&(0x7f00000019c0)="ef9f7c01639ea4e2e8961f953eb4dfa5bc18dd2e4c6294779de59004464af1f78c656341b5f2e89eeee8e46412e79e6781a251dc5ee9913f645622bc98e2c3f9af504ad82ecd9dce9582f2921a288a3b8100c3f926ddecc128f61a6d999401c0db066af8cb687def8246f37d0536a4933281d795e4ff19e71aceb962a637b861e78e84c4e31ed7422a29afc77eef2f6318324add5ab83a08a86b95eecabac1b0", 0xa0}, {&(0x7f0000001a80)="7e9c4e04af651b80ee548e8fc74d4e1ab4e77cd711fd174d8f71720fe692fd61f0f4fbf1ee2132da4779f2b026601d41fce836b93bf40a9279c92dbe84f5149afac8e76afe53b891ad4137c3a360cf499c097ba090bc5de94c4d4515cb0d92dc9e95644396ac4efb6b35ec0dd92246e5f99327af89b5495df7c1f5691cb315de362ca96a73a32032b7eacfac6959b5570627255f3c6731255a728bae78f030142db510559491083abd2d16838b8be7d500c79f54bbe708db98c10155e23aa93cd4ea43bd856119e90a96938a39e556159c909f25d9af6e9c4e6b6056a59b500b50f824e80021c2bd995b0dfdf71111002883acc956aa94a649f4d9e02227dd31445fcd9b03ad6c586c2b8a977892d25c89994a3c5c96d8e69486aaac8e9cd627eda0a12075d2c225b7df4da8db6331f406e1d794cf13d4c6779c9f948b0cbffd4c8802ee45d36b848622577b47a7d7945e736ac794ccfc577f45e8bd118248052e22baad747ee1151aa09109261594608cd32acddc24d18329c43238e41182287d6f46743d793d4ece28b80cf586ce276071573a5fc1fb7f592d4add19e25068abcc82f7662f76d478322a31c0aef741790e6f7ebad58346165b3fb6722a08e9399f6b813d51079e194ca1a712fa17d788367ebb5a6af21e3054878b169f4897ca8e793e13c294d2ae360ac8d847ec2d693a89634d57447e557c1e06ac475ce92ff5207a5ed89c26c1717e156122ead757214c8ec3f9c7d9f1012d4b727efccb27f21739bea38955eccb2a3ede10736c0cecba893a448b24ccee98ae8f69e7f5d725b819bef9c39c4567cb02adbe579d5704c30b97b0695a4e41e408f503d75530ad77192cb04debac0ed5b00a609cfdedaafacbaa8ccb71878cb0789c2477845488c419ee0ffe19fd1b75599802527e10b3298269470cb718fce73d020921c9f048dc558d1752a9c190f1ed3ee82ced71266d12b3c318c321be48f63f528b96d6de51052a08d0ee7b026919d9b910027c604ff53687afff600fb6bd5a27d94d0332a1f15e7b9ca908ff01f1e4ccf64fbef0eeb5a545e8ef453ae582b8085c1ae27a8f1ef4569101ac6cffa991941c5db1ce4adc6267b435e8c3c7614f0a5fbec19adfd1f0dce3d26f858b6730c993985bc718f1e92d3fd8c04d21cfd92f1bc46530d5baabfc01257fd9ec8fc0a06a107883ee0fc4539f0d901f48ed298aef9bfd24a0c6b80309d686d9d85c9ac85f61ef7aead4b00496e17157ba634ce1878a9e8fcb6f9e6db28351d4358bdbce187e662c1c942dc3d576b59cb0016558ff9e0613a26f55d5cc92d96f782fe5d99d803c5a0f70228a6ed2efa94e027086ee5b0f2cd4e19195d93263b2c86e0bd3b3186901ab2e2afb8bfab3ae3a4d2a5be18d71c3d58c6e74d67e27191cab44294f39bf5b6c00b35afaf6d752dd1ad43434a21b41e754e41b196121706ba531af4ad52952f849f3779ca75deb2372d49a7d55fd1c50882e6a06ce82896ad95b66e2e7f44055393ce2fa1327f710a20679615e27d5052bb37d00ee0ecb15f916c65d85ffee942212ef7b57a19edf98d71d8a990699fe4de86179617e0f34a910136147bd49b363c080ddfad7b3254bda9693875406b3a978395a83ad9b959973c04e9376581806b42a917e72e983c5f4c3c3efa31e46db8df15f1bdd809e5dc0bcf657a3c91e3a1fbf2f1ad3bd786e32bc2fcd2eb4743c216f751be0c45a58620d84db050af87e6e5c0760bf132b6492825707a02d1a9a3d281488162808d34f7cd9f2419b453ed47b2bee7a0e571eb565f23f829bb0fa170603bc86c8401b030021a6c988549b18fddf3a1f6966aaf8bc4520b37b572352c46618aac605fc2be49cfab64c12870fdd6966dd3847c40034b4e51a9632b4b4d98c031328e8f56efdc8204e158aaa709c6c4529f44dcd0272e03fff8f0c8979a4f027c3a147712df47a3b68517660b49c976224467084b46fd123e19c1ba340a3524d80631b56146d2fef4f6cf89dd6b7111bd0ce6a6ec98f85b3c44b13c303b54f11575e7944665fd33c73922e0a2e2cfeef3a256ec8e7af58f37c4390d73d2995b6f4ac191236921e1e4818882441b851e7729b27a63aea97226ad17a96eb20e05835f49f0632aa00bd33bcc2475d139ec925c62a6d2c4e1ae005e40a9b14a00d045df33e3cf852e62f9a920cd38486d9f265d5cbb0a2f15b31d29d69e531f13042ede7d8727eabd5ae215ea9821eddbe19c7e5132f580d710ebd8bd881fbe55c9080f9e48bee4f6e73408696e50eafcf6355f043bc29a39fe36135696fc68afd8eb695997e7c4c470991f8d8ff01154c4d13e6141b0cab4a7858b9d9a4cbba6a19ec8e1fccea9657c66337d557853bb77944900521cf75cc56c45497ac1ad7a620e6e5c88134261484a2596e26b27f0cf1af36f75161f0f9dad672df166ca78e7dff6ecf7edb49f6153c2fa751571b246c6919f7f4a9ca197225fcc2005e9c3bfe8308349b66887e0d7b83d82ec07d9e5242b8b993c9f69aa4dc7a974f38bc2e7c4ac323ea2a22a6bdaa241e2a5a43bbe1c2d66170f9272014e30fce2d42faa2b9b7bf2e2ebd26cd613bca1cd8423851ef56184c6af4d5b375dc3cf8e7aa3366d542cfb863ab32ffb3a903caadfc27d4d79fd71799f1e08ff00ef181aeeb126c562c950c46bd4b4a696cb5d1816ca5c51df71d40923bc26dfb84e91c2bc4672ef61318e34000a8a600c46b41e9823421475233531f009f7c715c95ec8a30123ecba12d85741f98951a6c4fff0848871dcf1434b2caf315651413aee2e7caa3a7d093f7a82545dc2c622b4cd394b2030ab2c36ff383eead6cd8b157d3e7f5a968a4d0856f0c62d9b968de1d9998b86fb70ccdee77fd2bec3c43598f46dce3108ff5b0bcfc1ff39d320e360a84c67c36ab68a2b88b0b9a831522013bfc5c53eff9af8ddce998021746692d6c3310e693e21555de66681854493733b56108f8229186e3f51f7f15f592e7329e8455fa49fc8b9b6c3de4b1c6120497b49ede4d0a2b32cadd130fecd70f2a821ac40534c405d22bf745ae38197d1d06d69b02739de8b205cf8fbe3e10718e592e6b3a098280f5dc27473b4d72b7648c9dec3dcfdec4a14037be416f6e12bcf8f37afa3aff7594bbe4eaaf18bf7cf750d5bec6924616d365aeb22f173b1ff70decaee4fd17f1bab6a712b4d08f54851b05f09e4f1d1cf641e23bde1a4574cf1087ae5923ac23ac35d6a73f822e2f7dbd75c9b4705f8f9ef1966fac243f70de9cc7b5f95bf0013f2ca80d5e10ec7709801620f16e0ab3aad77237675491985251a88c5377775b63c885d093621c896c65ef6d91ac2192651d8a7acdf19762c5bb0ce321859775d43f9d89e975af996f61caeebc1129c6474fbf5768075884bd29b6def82208ebee082c4e0c370decf339514707ffd67ebc92592503d5057bb8e823aedd3bc48c3fcb513a8393f2864ecb5215166d6f57c3c4948af36d4c256167564ae964a3b5647858d0af22ff5e20ae79a1660da655a129c72ba8fb6228e8ad21572b6c58630df0a540edf18436a4e02917724b2b0d05d399e7135c769018f05dee72d270646f2994023c7d96b6d164fc12df6b6178c5daba4ac6d718489ccdbd7e123c8d2fa4d2a46163c28954848d7faf7f9d03c09536d4cd533a3c4ea25553aad3f478bd771acaf52515c0694aaa259081fddf1b2be93892326c1b85678aff882601632e60549588a5b92edabc5401e8c731158d26903bbc7c86a8bdd079e6906af3bd9268ffdbcaf1eb1c7a85f9251232e71cb779caf1c450247e77195f6d612d9ae1ecd39bf8c23e581e3daf6e492ba700cc4b7034ebd14f7926d9b9ed4fa8105f6afbf32f02793cb98051bc15053597f490d57f428c68bd87322ae13a737ed62b127981996f7663c178802fbe4823cac8550b68dd7f637ffe631390d24c6420f5cc20e92d1bd5348514da1cb6dd9abe519712a5a6e8d672aa8f53afc5def74ddee0f533a9c46a6385540f98718b8411585260945284d3789ee18061703c63ac968ebd773d48889de28ec26aa745f1faf1116efe5956a80f6b898f7ad1597eb32e208c5001907714619c9942dd53b3f88591011ff6c442ace5290d768309fb44b73354b9ce9e99cc69feb13ee69ad8ff74a76869db37431e82846ecc2e857989a9438080ff9a84266dadeadc08ccff0d4f2d47095e15c5b4d5bae4f8bb526bb13e75a08a0dbed446ff13953b83db0cba3a25b24bb2876a81943e3e7a73f4fd58a0e07edeab9099a0cb73266332827a7eada9ce0bdbbe734b683d3168526d265e8f5594d6ba1803f77184b1dee2e862d1904d90e57eb70e4381aa75417300c7fe6206fb8bfe7798f97109af0128674504f334821ffbd56c65c6ae3dbcbac9b7f069bb60513a9372c5fcd586618a87afafd7a4949110245ce51473a7b3c796b8c36b558098935b9226a6225bf376e338e915a6e5660b4c564f2ca93866005b66ef86b535d4c35727043539ad9af53389984778c98a8e9bf1d409b7a00691916ecc77311e8334d15d58dfecce18f1be077669c56f69b891cdf142f21574dc91f200717d8d9c9fe6bb7fe2af7738faa4199dc6cb9b31c6ca3b5beebde30f2214450077cc8eb2267d78559d0fc437a08526e575585948cf70e0bd1e428c85d193b01560997d6a039dfdcb6aa6eca0b17d14262bdac5c9c28b677c1e4b3d9f2e8af9c13c8c40bfe7f8f4c8c3d2678b47a998bb8e38863d1867341f2c9bebea74a73d70176db51c8f72382ede46ddfb05de94804574243dd19e127129106559adeea8a57cf88ec1ace659e1f9ef8f5d9061550a5a7dfb278169cd3db5f9d120d26e3016ca0bda8f2b76b0dca33c42aaf2846cbe42e64a875897cfc6e6b69b1ed759df202705ef06d31639d462cb21484c838b5fdee63078d9dde0c8e26e669f716f713697f61671fa30a62e8ddb35f2c88f897892739d8460e192a1a9f025fa42f5e9d1d11a8569cf6097a459a0fbc9aafa13baa7e03669e96a9cfada0cdbf2bd190fd028f5d859e254964d6b091f9552d0a10042a8a3db7fc952d2864e9ea8f21c2f539ccc65d38896d2678fb487c17a3a4433e7eed7f34751798807024cda7f4401399b0c1732cdb107009352ff1d6def26eb1ae67890db02bda16c0fae30692b3d23d6da4bdf56d49584f6dbee47420fc039f20cdd0d79bb29da8c6f31035e5760b8105608fa9e19633f4765fbfa871772244b4d2bd66597dc778ae0f9fc73aa75d57aa238841acb5dcc9b6c1825a68708b7c4bb97002a2ffc4e470a7fe8df0546f7b55f7fc3d46c0387ea3e62dd83aa5987dc7c5c22be507fd3d8c541354e2e7f0f2dc74761db88e6c8da568b1b2ecb8e314a9aa51305c134a05bfaa78d5b18c78becc6636a3a46c27be6a825cdb0c48f7896975f91eab046d840807dfb2645d1127ed04442c23b483581fd86994d0cbaf51e37fe2c9dc3f1c12573c4aad6c03abcff76a1fe70bfa71798cb39ed60a6297691f555e7a2ae6f25431fd7d1b11e04878597507c2ed8ce274858af60ae7d5268fe9ba40d6bbd51b3cf337a1cd23bd1fdc533ccc5056d83ecadf4fa78acf713eef197942061d3398fdb32506fa2c58789910069ba489ec6babd68dcfeda082aba499ee009222d3d86dd01c6c5144e2c84b0537d43e68410f63dd7670f4a350fa174b186002ca2a9b980bc5e344bb4c02392b70c87986e2d230f1a7034babaecc1f6774fa0f9ab4ecc7f767562750decb5363aa0782a3f95976c7d43f3", 0x1000}], 0xa, &(0x7f0000002dc0)=ANY=[@ANYBLOB="10000000000000000ee5da5e9aac3011b7738162fe988d6e01000010000100b8000000000000003a000000060000002454dcf125a7f8c98e36de8b10a409000000000000003d6ea4ea7be29d35e004000000812474bdf6066f76526cb7a5145e39fcdb2f63b52aa2522973cf4580aa5476e701a27d5dd1ae35646f2ca43d25506857f5f557176fb9ec9c2713177ff68befface7abdad30aefb0850be5fc9b0a16f099144bd064032ca6cd8462a182c0095947d0000000000000000f1a933df97b3911a5ca2eb0b090c1dbe75a212d9541a7670d1fe1cb59d5c4a1864c0adcc82c52307c50aa62ef7893fa86ead6564d44803e14cea7174baf814442d7aa20bc9ad8f7357faf2647c3b0a5c86d4a831f0ed3381ba815269bc89d2dd2abb16f41c2753cd83299c60b001000000247a1716fe658bb55d7118ad547437f322cedf40a2474c534d67a39ff6ba861f902fa8ccb9204143a9905eaa5b42200e90a3458a11cf741cbac4801338af02cb322a6f8629d2b0c4c12841c47faa4daedf9bb550d5008fb62461a4d63e681414a6c7c22055b10a10c7f9f53fc6dcbdc8dcf03678627f4de3f466d61981dce30aef1076736ea56a3cff5f9013b028421c45161ffd3655ec3fd5b6d52e7a4499108065c0771da30e68535043f311ddaeeecd02ebcbbec6acd3f640303759bea09a83c6aa5bc227986af86374651d3c80d9f37af580ac545fcab956dc9d5dabf1cdcb16d861ec2afbd44907fb61ffa62c8a023491ef5e3cfed4fd05bb446e894020fdd7f4a43f8eadacda25806fbd2c2484156e1b37f26b161b13f64a1e6f6fd23dd0e4385571c918da42706aa90d7112e68baefbf4ffdaae60"], 0xc8}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 0s ago: executing program 0 (id=4219): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/23, 0x17}], 0x1, 0x0, 0xffffffffffffff4d}, 0x2}], 0x1, 0x2003, 0x0) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="1b35", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1}}], 0x2, 0x40480dc) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100010026bd7000fbdbdf25e0000001000000001b00000000000000000004d50a00ff000c0015"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): S: starting estimator thread 0... [ 493.161931][T17935] IPVS: using max 48 ests per chain, 115200 per kthread [ 493.266158][T17933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.585333][T17948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2926'. [ 493.897744][T17788] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.905591][T17788] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.912950][T17788] bridge_slave_0: entered allmulticast mode [ 493.956642][T17788] bridge_slave_0: entered promiscuous mode [ 493.991697][T17951] syzkaller0: entered promiscuous mode [ 494.011810][T17951] syzkaller0: entered allmulticast mode [ 494.077408][T17788] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.087729][T17788] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.108560][T17788] bridge_slave_1: entered allmulticast mode [ 494.120983][T17788] bridge_slave_1: entered promiscuous mode [ 494.243875][T17964] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 494.256385][T17788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.270223][T17788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.316195][T17964] bond15: entered promiscuous mode [ 494.321963][T17964] 8021q: adding VLAN 0 to HW filter on device bond15 [ 494.376913][T17967] 8021q: adding VLAN 0 to HW filter on device bond15 [ 494.385986][T17967] bond15: (slave wireguard0): The slave device specified does not support setting the MAC address [ 494.397295][T17967] bond15: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 494.412171][T17967] bond15: (slave wireguard0): making interface the new active one [ 494.420695][T17967] wireguard0: entered promiscuous mode [ 494.427744][T17967] bond15: (slave wireguard0): Enslaving as an active interface with an up link [ 494.488470][T17788] team0: Port device team_slave_0 added [ 494.499865][T17971] syzkaller0: entered promiscuous mode [ 494.507830][T17971] syzkaller0: entered allmulticast mode [ 494.522198][T17788] team0: Port device team_slave_1 added [ 494.761300][T17788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.789504][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.880408][T17788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.881206][T17982] netlink: 'syz.1.2934': attribute type 2 has an invalid length. [ 494.921896][T17788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.948416][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.034172][T17788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.095612][ T5641] Bluetooth: hci3: command tx timeout [ 495.108958][T17988] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 495.130147][T17993] xt_TCPMSS: Only works on TCP SYN packets [ 495.255584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.264224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.301176][T17788] hsr_slave_0: entered promiscuous mode [ 495.308438][T17788] hsr_slave_1: entered promiscuous mode [ 495.319131][T17788] debugfs: 'hsr0' already exists in 'hsr' [ 495.326537][T17788] Cannot create hsr debugfs directory [ 495.404177][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'. [ 495.421598][T18006] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2941'. [ 495.574658][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'. [ 495.606147][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2943'. [ 495.792754][T17788] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.805745][T17788] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.151377][T18025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.190934][T17788] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.227284][T17788] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.258179][T18025] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2945'. [ 496.283917][T18025] openvswitch: netlink: Missing key (keys=40, expected=80) [ 496.358899][T17788] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.378921][T18030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.394126][T17788] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.641118][T18032] bond10: (slave bridge10): Enslaving as a backup interface with an up link [ 496.736413][T18037] macvlan0: entered promiscuous mode [ 496.742161][T18037] macvlan0: entered allmulticast mode [ 496.751189][T18037] bond10: entered promiscuous mode [ 496.757678][T18037] bridge10: entered promiscuous mode [ 496.770098][T18037] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 496.816402][T18037] bond10: left promiscuous mode [ 496.825318][T18037] bridge10: left promiscuous mode [ 496.901980][ T7478] lo: left allmulticast mode [ 497.173629][ T5641] Bluetooth: hci3: command tx timeout [ 497.419038][ T7478] bond1 (unregistering): (slave bridge2): Removing an active aggregator [ 497.430869][ T7478] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 497.612117][ T7478] bond0 (unregistering): Released all slaves [ 497.625618][ T7478] bond1 (unregistering): Released all slaves [ 497.642730][ T7478] bond2 (unregistering): Released all slaves [ 497.669885][ T7478] bond3 (unregistering): Released all slaves [ 497.690481][ T7478] bond4 (unregistering): Released all slaves [ 497.707350][ T7478] bond5 (unregistering): Released all slaves [ 497.728115][ T7478] bond6 (unregistering): Released all slaves [ 497.749666][ T7478] bond7 (unregistering): (slave veth15): Releasing backup interface [ 497.770453][ T7478] bond7 (unregistering): (slave batadv3): Releasing backup interface [ 497.780207][ T7478] bond7 (unregistering): Released all slaves [ 497.796050][ T7478] bond8 (unregistering): Released all slaves [ 497.816213][ T7478] bond9 (unregistering): Released all slaves [ 497.832754][ T7478] bond10 (unregistering): Released all slaves [ 497.961254][T17788] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.992215][T17788] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.025882][T18069] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2954'. [ 498.090853][T18070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2954'. [ 498.181458][ T7478] : left promiscuous mode [ 498.319101][T18070] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 498.488565][ T7478] tipc: Left network mode [ 498.560349][T18087] macsec2: left promiscuous mode [ 498.600025][T18087] bond4: left promiscuous mode [ 498.618797][T18087] bond4: left allmulticast mode [ 498.644055][T18087] macsec3: left promiscuous mode [ 498.672297][ T7478] IPVS: stopping backup sync thread 9188 ... [ 498.687437][T18087] vxlan0: left promiscuous mode [ 498.706970][T18087] vxlan0: left allmulticast mode [ 498.760388][T18087] bond9: left promiscuous mode [ 498.778059][T18087] wireguard0: left promiscuous mode [ 498.846680][T15334] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.991753][T15334] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.252815][T15334] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.280478][T15335] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.475111][T18103] syzkaller0: entered promiscuous mode [ 499.491074][T18103] syzkaller0: entered allmulticast mode [ 499.707966][T17788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 499.757419][T17788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 499.766778][T17788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 499.781464][T17788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.888018][T18124] validate_nla: 2 callbacks suppressed [ 499.888040][T18124] netlink: 'syz.1.2968': attribute type 5 has an invalid length. [ 500.157447][T17788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 500.171057][T17788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.196655][T15335] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.211973][T15335] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.221646][T15335] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.237677][T15335] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.248542][T17788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 500.269737][T17788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.831833][T17788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.021653][T17788] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.054411][T18161] netlink: 'syz.2.2977': attribute type 2 has an invalid length. [ 501.064488][T18161] netlink: 'syz.2.2977': attribute type 2 has an invalid length. [ 501.074084][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.081254][ T7457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.100572][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.107915][ T7457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.194834][T18163] syzkaller0: entered promiscuous mode [ 501.200536][T18163] syzkaller0: entered allmulticast mode [ 501.279359][T18161] bond15: (slave wireguard0): Releasing backup interface [ 501.295678][T18161] wireguard0: left promiscuous mode [ 501.638161][T18176] pimreg9: entered allmulticast mode [ 501.740739][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.752033][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.798770][T18182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2983'. [ 502.212408][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2985'. [ 502.571406][T18208] netlink: 'syz.0.2990': attribute type 2 has an invalid length. [ 502.594690][T18208] netlink: 'syz.0.2990': attribute type 2 has an invalid length. [ 502.712497][T18215] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2992'. [ 502.795465][T18208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 502.882632][T18222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2994'. [ 503.231712][T18218] syzkaller0: entered promiscuous mode [ 503.245310][T18218] syzkaller0: entered allmulticast mode [ 503.561856][T18242] openvswitch: netlink: Actions may not be safe on all matching packets [ 503.643762][T17788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.667159][T18244] netlink: 'syz.4.3000': attribute type 4 has an invalid length. [ 503.720227][T18247] netlink: 'syz.4.3000': attribute type 4 has an invalid length. [ 503.868076][T18254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3003'. [ 503.987285][T17788] veth0_vlan: entered promiscuous mode [ 504.001698][T18257] netlink: 'syz.1.3004': attribute type 2 has an invalid length. [ 504.026216][T18257] netlink: 'syz.1.3004': attribute type 2 has an invalid length. [ 504.058719][T17788] veth1_vlan: entered promiscuous mode [ 504.196858][T18260] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 504.383816][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3008'. [ 504.437516][T17788] veth0_macvtap: entered promiscuous mode [ 504.636283][T18292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3012'. [ 504.651651][T17788] veth1_macvtap: entered promiscuous mode [ 504.775782][T17788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.829791][T17788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.871697][ T7457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.898491][ T7457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.936019][ T7457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.974267][ T7457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.467888][T18309] bond16: entered allmulticast mode [ 505.579615][T18311] vxcan1: entered promiscuous mode [ 505.595364][T18311] vxcan1: entered allmulticast mode [ 505.692790][T18315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3017'. [ 505.880644][T18324] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3019'. [ 505.903101][ T7478] hsr_slave_0: left promiscuous mode [ 505.909859][T18324] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3019'. [ 505.921537][ T7478] hsr_slave_1: left promiscuous mode [ 505.940233][ T7478] veth1_macvtap: left promiscuous mode [ 505.958195][ T7478] veth0_macvtap: left allmulticast mode [ 505.960857][T18332] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3022'. [ 505.971629][ T7478] veth0_macvtap: left promiscuous mode [ 505.990155][ T7478] veth1_vlan: left promiscuous mode [ 505.994078][T18329] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3022'. [ 506.008799][ T7478] veth0_vlan: left promiscuous mode [ 506.908970][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3021'. [ 507.025300][T15332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.072899][T15332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.196003][T18357] FAULT_INJECTION: forcing a failure. [ 507.196003][T18357] name failslab, interval 1, probability 0, space 0, times 0 [ 507.209807][T18357] CPU: 1 UID: 0 PID: 18357 Comm: syz.1.3027 Not tainted syzkaller #0 PREEMPT(full) [ 507.209837][T18357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 507.209849][T18357] Call Trace: [ 507.209858][T18357] [ 507.209867][T18357] dump_stack_lvl+0xe8/0x150 [ 507.209899][T18357] should_fail_ex+0x412/0x560 [ 507.209931][T18357] should_failslab+0xa8/0x100 [ 507.209963][T18357] __kmalloc_noprof+0xe8/0x760 [ 507.209993][T18357] ? tomoyo_encode+0x28b/0x550 [ 507.210025][T18357] tomoyo_encode+0x28b/0x550 [ 507.210059][T18357] tomoyo_realpath_from_path+0x58d/0x5d0 [ 507.210090][T18357] ? tomoyo_domain+0xd7/0x130 [ 507.210124][T18357] ? tomoyo_path_number_perm+0x219/0x630 [ 507.210148][T18357] tomoyo_path_number_perm+0x246/0x630 [ 507.210175][T18357] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 507.210197][T18357] ? __lock_acquire+0x6b5/0x2cf0 [ 507.210255][T18357] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 507.210305][T18357] ? __fget_files+0x2a/0x420 [ 507.210333][T18357] ? __fget_files+0x2a/0x420 [ 507.210356][T18357] ? __fget_files+0x3a0/0x420 [ 507.210378][T18357] ? __fget_files+0x2a/0x420 [ 507.210408][T18357] security_file_ioctl+0xc3/0x2a0 [ 507.210432][T18357] __se_sys_ioctl+0x47/0x170 [ 507.210463][T18357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.210485][T18357] do_syscall_64+0x15f/0xf80 [ 507.210508][T18357] ? trace_irq_disable+0x3b/0x140 [ 507.210538][T18357] ? clear_bhb_loop+0x40/0x90 [ 507.210564][T18357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.210585][T18357] RIP: 0033:0x7f75f119cdd9 [ 507.210605][T18357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.210623][T18357] RSP: 002b:00007f75f20b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.210646][T18357] RAX: ffffffffffffffda RBX: 00007f75f1415fa0 RCX: 00007f75f119cdd9 [ 507.210661][T18357] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000008 [ 507.210674][T18357] RBP: 00007f75f20b0090 R08: 0000000000000000 R09: 0000000000000000 [ 507.210686][T18357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.210698][T18357] R13: 00007f75f1416038 R14: 00007f75f1415fa0 R15: 00007ffe5947e6c8 [ 507.210732][T18357] [ 507.210766][T18357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 507.284849][T15330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.308854][T18371] x_tables: duplicate underflow at hook 1 [ 507.416014][T15330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.431622][T18374] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3032'. [ 507.499007][T18376] netlink: 'syz.4.3033': attribute type 1 has an invalid length. [ 507.520655][T18376] syzkaller0: entered promiscuous mode [ 507.527650][T18376] syzkaller0: entered allmulticast mode [ 507.609533][T18376] netlink: 'syz.4.3033': attribute type 29 has an invalid length. [ 507.652838][T18376] netlink: 'syz.4.3033': attribute type 29 has an invalid length. [ 508.239578][T18396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.289611][T18402] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 508.346191][T18408] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 508.652736][ T7478] IPVS: stop unused estimator thread 0... [ 508.656586][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 508.686778][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 508.721727][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 508.734297][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 508.803872][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 508.968756][T18431] FAULT_INJECTION: forcing a failure. [ 508.968756][T18431] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 509.087771][T18431] CPU: 0 UID: 0 PID: 18431 Comm: syz.4.3045 Not tainted syzkaller #0 PREEMPT(full) [ 509.087802][T18431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 509.087814][T18431] Call Trace: [ 509.087823][T18431] [ 509.087832][T18431] dump_stack_lvl+0xe8/0x150 [ 509.087864][T18431] should_fail_ex+0x412/0x560 [ 509.087896][T18431] _copy_from_user+0x2d/0xb0 [ 509.087925][T18431] wext_handle_ioctl+0xc7/0x1d0 [ 509.087952][T18431] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 509.087971][T18431] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 509.088014][T18431] sock_ioctl+0x159/0x7f0 [ 509.088046][T18431] ? __pfx_sock_ioctl+0x10/0x10 [ 509.088076][T18431] ? __fget_files+0x2a/0x420 [ 509.088099][T18431] ? __fget_files+0x3a0/0x420 [ 509.088122][T18431] ? __fget_files+0x2a/0x420 [ 509.088149][T18431] ? bpf_lsm_file_ioctl+0x9/0x20 [ 509.088180][T18431] ? __pfx_sock_ioctl+0x10/0x10 [ 509.088208][T18431] __se_sys_ioctl+0xfc/0x170 [ 509.088238][T18431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.088261][T18431] do_syscall_64+0x15f/0xf80 [ 509.088286][T18431] ? clear_bhb_loop+0x40/0x90 [ 509.088311][T18431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.088331][T18431] RIP: 0033:0x7f06dd59cdd9 [ 509.088351][T18431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.088369][T18431] RSP: 002b:00007f06de47c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.088392][T18431] RAX: ffffffffffffffda RBX: 00007f06dd815fa0 RCX: 00007f06dd59cdd9 [ 509.088407][T18431] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000008 [ 509.088421][T18431] RBP: 00007f06de47c090 R08: 0000000000000000 R09: 0000000000000000 [ 509.088432][T18431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.088445][T18431] R13: 00007f06dd816038 R14: 00007f06dd815fa0 R15: 00007fff9077bd38 [ 509.088494][T18431] [ 509.790994][T18424] lo speed is unknown, defaulting to 1000 [ 509.894976][T18462] dvmrp0: entered allmulticast mode [ 510.004247][T18466] __nla_validate_parse: 7 callbacks suppressed [ 510.004266][T18466] netlink: 376 bytes leftover after parsing attributes in process `syz.3.3054'. [ 510.060141][T18466] netlink: 376 bytes leftover after parsing attributes in process `syz.3.3054'. [ 510.130561][T18469] syzkaller0: entered promiscuous mode [ 510.146922][T18469] syzkaller0: entered allmulticast mode [ 510.555900][T18479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3057'. [ 510.782382][T18488] FAULT_INJECTION: forcing a failure. [ 510.782382][T18488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.797478][T18488] CPU: 0 UID: 0 PID: 18488 Comm: syz.4.3060 Not tainted syzkaller #0 PREEMPT(full) [ 510.797507][T18488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.797519][T18488] Call Trace: [ 510.797528][T18488] [ 510.797536][T18488] dump_stack_lvl+0xe8/0x150 [ 510.797567][T18488] should_fail_ex+0x412/0x560 [ 510.797598][T18488] _copy_to_user+0x31/0xb0 [ 510.797629][T18488] simple_read_from_buffer+0xe1/0x170 [ 510.797658][T18488] proc_fail_nth_read+0x1bb/0x230 [ 510.797689][T18488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.797718][T18488] ? rw_verify_area+0x2a6/0x4d0 [ 510.797745][T18488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.797773][T18488] vfs_read+0x20c/0xa70 [ 510.797807][T18488] ? __pfx___mutex_lock+0x10/0x10 [ 510.797832][T18488] ? __pfx_vfs_read+0x10/0x10 [ 510.797861][T18488] ? __fget_files+0x2a/0x420 [ 510.797888][T18488] ? __fget_files+0x3a0/0x420 [ 510.797909][T18488] ? __fget_files+0x2a/0x420 [ 510.797941][T18488] ksys_read+0x150/0x270 [ 510.797970][T18488] ? __pfx_ksys_read+0x10/0x10 [ 510.797996][T18488] ? __pfx_sock_ioctl+0x10/0x10 [ 510.798032][T18488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.798054][T18488] do_syscall_64+0x15f/0xf80 [ 510.798100][T18488] ? trace_irq_disable+0x3b/0x140 [ 510.798135][T18488] ? clear_bhb_loop+0x40/0x90 [ 510.798160][T18488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.798178][T18488] RIP: 0033:0x7f06dd55d60e [ 510.798198][T18488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 510.798216][T18488] RSP: 002b:00007f06de47bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.798238][T18488] RAX: ffffffffffffffda RBX: 00007f06de47c6c0 RCX: 00007f06dd55d60e [ 510.798252][T18488] RDX: 000000000000000f RSI: 00007f06de47c0a0 RDI: 0000000000000009 [ 510.798264][T18488] RBP: 00007f06de47c090 R08: 0000000000000000 R09: 0000000000000000 [ 510.798276][T18488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.798288][T18488] R13: 00007f06dd816038 R14: 00007f06dd815fa0 R15: 00007fff9077bd38 [ 510.798323][T18488] [ 511.028159][ T5641] Bluetooth: hci2: command tx timeout [ 511.623124][T18504] lo speed is unknown, defaulting to 1000 [ 511.657818][T18516] syzkaller0: entered promiscuous mode [ 511.689045][T18516] syzkaller0: entered allmulticast mode [ 511.871694][T18524] sctp: [Deprecated]: syz.0.3068 (pid 18524) Use of int in max_burst socket option. [ 511.871694][T18524] Use struct sctp_assoc_value instead [ 511.987921][T18529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3069'. [ 512.040326][T18524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3068'. [ 512.282227][T18541] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.3071'. [ 512.324967][T18424] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.326972][T18537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3070'. [ 512.343621][T18424] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.358621][T18537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3070'. [ 512.363244][T18424] bridge_slave_0: entered allmulticast mode [ 512.393315][T18424] bridge_slave_0: entered promiscuous mode [ 512.407522][T18424] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.418728][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 512.434311][T18424] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.444406][T18424] bridge_slave_1: entered allmulticast mode [ 512.469931][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3072'. [ 512.475833][T18424] bridge_slave_1: entered promiscuous mode [ 512.584930][T18424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.599698][T18424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.724706][T18424] team0: Port device team_slave_0 added [ 512.755666][T18424] team0: Port device team_slave_1 added [ 512.897418][T18424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.921313][T18424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.962827][T18424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.014787][T18424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.046309][T18424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.080809][T18424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.100194][ T5641] Bluetooth: hci2: command tx timeout [ 513.241707][T18424] hsr_slave_0: entered promiscuous mode [ 513.249746][T18424] hsr_slave_1: entered promiscuous mode [ 513.257520][T18424] debugfs: 'hsr0' already exists in 'hsr' [ 513.264220][T18424] Cannot create hsr debugfs directory [ 514.153673][T18598] openvswitch: netlink: Missing key (keys=40, expected=80) [ 514.291758][T18589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.455660][T18592] vlan2: entered allmulticast mode [ 514.473532][T18592] veth0_to_bridge: entered allmulticast mode [ 514.605785][T18603] ip6tnl0: entered promiscuous mode [ 515.049113][T18615] syzkaller0: entered promiscuous mode [ 515.062213][T18615] syzkaller0: entered allmulticast mode [ 515.073355][T18618] __nla_validate_parse: 11 callbacks suppressed [ 515.073385][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'. [ 515.174085][ T5641] Bluetooth: hci2: command tx timeout [ 517.058533][T18625] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3094'. [ 517.092894][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3094'. [ 517.255670][ T5641] Bluetooth: hci2: command tx timeout [ 517.385918][T18642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3102'. [ 517.432243][T18636] 8021q: adding VLAN 0 to HW filter on device .` [ 517.455935][T18636] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.472315][T18636] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 517.552532][T18636] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 517.575942][T18648] netlink: 'syz.3.3103': attribute type 2 has an invalid length. [ 517.606378][T18648] netlink: 'syz.3.3103': attribute type 2 has an invalid length. [ 517.666874][T18652] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3102'. [ 517.692852][T18652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3102'. [ 517.703881][T18652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3102'. [ 518.200543][T18424] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 518.223946][T18424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 518.238793][T18665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3107'. [ 518.251364][T18424] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 518.267461][T18424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 518.276943][T18424] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 518.289897][T18424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 518.308529][T18669] syzkaller0: entered promiscuous mode [ 518.315395][T18669] syzkaller0: entered allmulticast mode [ 518.326629][T18424] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 518.342769][T18424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.355669][T18668] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3108'. [ 518.930711][T18424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.069032][T18424] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.121728][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.128996][ T7478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.189984][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.197366][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.246744][T18696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3115'. [ 519.345683][T18698] : entered promiscuous mode [ 519.616701][T18712] syzkaller0: entered promiscuous mode [ 519.643364][T18712] syzkaller0: entered allmulticast mode [ 520.405885][T18746] __nla_validate_parse: 1 callbacks suppressed [ 520.405905][T18746] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3129'. [ 520.487158][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3130'. [ 520.533518][T18424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.559276][T18752] xt_TCPMSS: Only works on TCP SYN packets [ 520.632000][T18424] veth0_vlan: entered promiscuous mode [ 520.641379][ T7959] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 520.692433][T18424] veth1_vlan: entered promiscuous mode [ 520.957661][T18424] veth0_macvtap: entered promiscuous mode [ 520.980154][T18424] veth1_macvtap: entered promiscuous mode [ 520.997933][T18768] syzkaller0: entered promiscuous mode [ 521.021756][T18768] syzkaller0: entered allmulticast mode [ 521.181052][T18424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.217821][T18424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.301235][T18780] netlink: 376 bytes leftover after parsing attributes in process `syz.4.3138'. [ 521.387585][T18773] lo speed is unknown, defaulting to 1000 [ 521.390455][ T7478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.429152][ T7478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.439525][ T7478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.535424][T18782] veth7: entered promiscuous mode [ 521.542793][T18788] netlink: 'syz.3.3141': attribute type 4 has an invalid length. [ 521.567379][ T7478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.595709][T18788] ieee802154 phy0 wpan0: encryption failed: -126 [ 521.777845][T18791] pim6reg99999991: entered allmulticast mode [ 521.792116][T15334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.811497][T15334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.870001][T18793] netlink: 'syz.0.3143': attribute type 1 has an invalid length. [ 521.920577][T15334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.954008][T15334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.112128][T18798] lo speed is unknown, defaulting to 1000 [ 522.243858][T18805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3042'. [ 522.660495][T18813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.684013][T18813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.701722][T18813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.719638][T18813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.729072][T18813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 523.441782][T18823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3148'. [ 523.481282][T18803] lo speed is unknown, defaulting to 1000 [ 523.910125][T18832] netlink: 376 bytes leftover after parsing attributes in process `syz.1.3149'. [ 524.139031][T18840] tun0: tun_chr_ioctl cmd 1074025675 [ 524.145841][T18840] tun0: persist enabled [ 524.150630][T18840] tun0: tun_chr_ioctl cmd 1074025675 [ 524.159156][T18840] tun0: persist disabled [ 524.165193][T18840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3152'. [ 524.271378][T18811] lo speed is unknown, defaulting to 1000 [ 524.505907][T18842] batman_adv: batadv0: Interface activated: vlan0 [ 524.618907][T18842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.632845][T18842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.698010][T18842] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 524.774516][T18813] Bluetooth: hci4: command tx timeout [ 524.887356][T18834] lo speed is unknown, defaulting to 1000 [ 526.853537][T18813] Bluetooth: hci4: command tx timeout [ 527.032805][T18867] netlink: 776 bytes leftover after parsing attributes in process `syz.1.3157'. [ 527.149949][T18871] sctp: [Deprecated]: syz.1.3158 (pid 18871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.149949][T18871] Use struct sctp_sack_info instead [ 527.236325][T18811] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.247917][T18811] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.256721][T18811] bridge_slave_0: entered allmulticast mode [ 527.267275][T18811] bridge_slave_0: entered promiscuous mode [ 527.278426][T18811] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.286464][T18811] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.294424][T18811] bridge_slave_1: entered allmulticast mode [ 527.302693][T18811] bridge_slave_1: entered promiscuous mode [ 527.326228][T18873] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3159'. [ 527.388889][T18811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.454550][T18811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.643550][T18811] team0: Port device team_slave_0 added [ 527.689306][T18811] team0: Port device team_slave_1 added [ 527.811325][T18811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.842851][T18811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.922447][T18811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.928424][T18881] netlink: 376 bytes leftover after parsing attributes in process `syz.4.3161'. [ 527.960133][T18811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.988541][T18811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.078555][T18811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.271588][T18811] hsr_slave_0: entered promiscuous mode [ 528.292787][T18811] hsr_slave_1: entered promiscuous mode [ 528.309513][T18811] debugfs: 'hsr0' already exists in 'hsr' [ 528.327741][T18811] Cannot create hsr debugfs directory [ 528.612740][T18907] pimreg: entered allmulticast mode [ 528.619297][T18909] netlink: 'syz.2.3168': attribute type 2 has an invalid length. [ 528.646897][T18907] pimreg: left allmulticast mode [ 528.660930][T18909] netlink: 'syz.2.3168': attribute type 2 has an invalid length. [ 528.758916][T18914] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3169'. [ 528.935542][T18813] Bluetooth: hci4: command tx timeout [ 528.985576][T18884] syzkaller0: entered promiscuous mode [ 528.991261][T18884] syzkaller0: entered allmulticast mode [ 529.024188][T18925] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3171'. [ 529.163686][T18929] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3172'. [ 529.875384][T18945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3177'. [ 531.026141][T18813] Bluetooth: hci4: command tx timeout [ 533.003949][T18953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3180'. [ 533.047338][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3180'. [ 533.061261][T18953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3180'. [ 533.141692][T18951] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535) [ 533.155468][T18954] netlink: 'syz.1.3179': attribute type 3 has an invalid length. [ 533.180572][T18954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'. [ 533.416543][T18970] sctp: [Deprecated]: syz.1.3183 (pid 18970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 533.416543][T18970] Use struct sctp_sack_info instead [ 533.578353][T18973] netlink: 376 bytes leftover after parsing attributes in process `syz.3.3184'. [ 533.611533][T18974] veth1_to_bridge: entered allmulticast mode [ 533.624494][T18974] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 533.983826][T18992] FAULT_INJECTION: forcing a failure. [ 533.983826][T18992] name failslab, interval 1, probability 0, space 0, times 0 [ 534.007550][T18992] CPU: 1 UID: 0 PID: 18992 Comm: syz.4.3189 Not tainted syzkaller #0 PREEMPT(full) [ 534.007580][T18992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.007593][T18992] Call Trace: [ 534.007601][T18992] [ 534.007609][T18992] dump_stack_lvl+0xe8/0x150 [ 534.007640][T18992] should_fail_ex+0x412/0x560 [ 534.007670][T18992] should_failslab+0xa8/0x100 [ 534.007702][T18992] __kmalloc_noprof+0xe8/0x760 [ 534.007728][T18992] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 534.007762][T18992] tomoyo_realpath_from_path+0xe3/0x5d0 [ 534.007790][T18992] ? tomoyo_domain+0xd7/0x130 [ 534.007824][T18992] ? tomoyo_path_number_perm+0x219/0x630 [ 534.007847][T18992] tomoyo_path_number_perm+0x246/0x630 [ 534.007873][T18992] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 534.007895][T18992] ? __lock_acquire+0x6b5/0x2cf0 [ 534.007933][T18992] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 534.007981][T18992] ? __fget_files+0x2a/0x420 [ 534.008008][T18992] ? __fget_files+0x2a/0x420 [ 534.008029][T18992] ? __fget_files+0x3a0/0x420 [ 534.008051][T18992] ? __fget_files+0x2a/0x420 [ 534.008078][T18992] security_file_ioctl+0xc3/0x2a0 [ 534.008102][T18992] __se_sys_ioctl+0x47/0x170 [ 534.008130][T18992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.008151][T18992] do_syscall_64+0x15f/0xf80 [ 534.008172][T18992] ? trace_irq_disable+0x3b/0x140 [ 534.008208][T18992] ? clear_bhb_loop+0x40/0x90 [ 534.008230][T18992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.008246][T18992] RIP: 0033:0x7f06dd59cdd9 [ 534.008263][T18992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.008278][T18992] RSP: 002b:00007f06de45b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.008298][T18992] RAX: ffffffffffffffda RBX: 00007f06dd816090 RCX: 00007f06dd59cdd9 [ 534.008320][T18992] RDX: 0000200000000780 RSI: 00000000000089f2 RDI: 0000000000000004 [ 534.008332][T18992] RBP: 00007f06de45b090 R08: 0000000000000000 R09: 0000000000000000 [ 534.008342][T18992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.008352][T18992] R13: 00007f06dd816128 R14: 00007f06dd816090 R15: 00007fff9077bd38 [ 534.008390][T18992] [ 534.008398][T18992] ERROR: Out of memory at tomoyo_realpath_from_path. [ 534.482557][T18811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 534.523410][T18811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.544889][T18811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 534.598516][T18811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 534.617633][T18811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 534.625732][T19015] netlink: 376 bytes leftover after parsing attributes in process `syz.4.3196'. [ 534.660599][T18811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.682804][T18811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 534.731955][T18811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.866846][T19033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3200'. [ 534.941427][T19038] FAULT_INJECTION: forcing a failure. [ 534.941427][T19038] name failslab, interval 1, probability 0, space 0, times 0 [ 534.983431][T19038] CPU: 1 UID: 0 PID: 19038 Comm: syz.2.3201 Not tainted syzkaller #0 PREEMPT(full) [ 534.983461][T19038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.983472][T19038] Call Trace: [ 534.983480][T19038] [ 534.983489][T19038] dump_stack_lvl+0xe8/0x150 [ 534.983520][T19038] should_fail_ex+0x412/0x560 [ 534.983550][T19038] should_failslab+0xa8/0x100 [ 534.983582][T19038] __kmalloc_noprof+0xe8/0x760 [ 534.983610][T19038] ? tomoyo_encode+0x28b/0x550 [ 534.983643][T19038] tomoyo_encode+0x28b/0x550 [ 534.983674][T19038] tomoyo_realpath_from_path+0x58d/0x5d0 [ 534.983703][T19038] ? tomoyo_domain+0xd7/0x130 [ 534.983736][T19038] ? tomoyo_path_number_perm+0x219/0x630 [ 534.983760][T19038] tomoyo_path_number_perm+0x246/0x630 [ 534.983784][T19038] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 534.983806][T19038] ? __lock_acquire+0x6b5/0x2cf0 [ 534.983843][T19038] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 534.983889][T19038] ? __fget_files+0x2a/0x420 [ 534.983918][T19038] ? __fget_files+0x2a/0x420 [ 534.983938][T19038] ? __fget_files+0x3a0/0x420 [ 534.983960][T19038] ? __fget_files+0x2a/0x420 [ 534.983988][T19038] security_file_ioctl+0xc3/0x2a0 [ 534.984013][T19038] __se_sys_ioctl+0x47/0x170 [ 534.984042][T19038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.984064][T19038] do_syscall_64+0x15f/0xf80 [ 534.984085][T19038] ? trace_irq_disable+0x3b/0x140 [ 534.984115][T19038] ? clear_bhb_loop+0x40/0x90 [ 534.984147][T19038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.984167][T19038] RIP: 0033:0x7f50bfb9cdd9 [ 534.984194][T19038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.984211][T19038] RSP: 002b:00007f50c09dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.984235][T19038] RAX: ffffffffffffffda RBX: 00007f50bfe15fa0 RCX: 00007f50bfb9cdd9 [ 534.984249][T19038] RDX: 0000200000000780 RSI: 00000000000089f2 RDI: 0000000000000004 [ 534.984262][T19038] RBP: 00007f50c09dd090 R08: 0000000000000000 R09: 0000000000000000 [ 534.984274][T19038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.984285][T19038] R13: 00007f50bfe16038 R14: 00007f50bfe15fa0 R15: 00007ffcc6f08658 [ 534.984319][T19038] [ 534.984353][T19038] ERROR: Out of memory at tomoyo_realpath_from_path. [ 535.120277][T18811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.355011][T18811] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.379972][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.387253][ T7457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.447884][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.455562][ T7478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.879177][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3208'. [ 535.912389][T19073] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 536.038009][T19082] netlink: 376 bytes leftover after parsing attributes in process `syz.1.3210'. [ 536.079779][T19082] netlink: 376 bytes leftover after parsing attributes in process `syz.1.3210'. [ 536.198308][T19089] FAULT_INJECTION: forcing a failure. [ 536.198308][T19089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.244363][T19089] CPU: 1 UID: 0 PID: 19089 Comm: syz.3.3212 Not tainted syzkaller #0 PREEMPT(full) [ 536.244395][T19089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.244407][T19089] Call Trace: [ 536.244415][T19089] [ 536.244423][T19089] dump_stack_lvl+0xe8/0x150 [ 536.244461][T19089] should_fail_ex+0x412/0x560 [ 536.244492][T19089] _copy_from_user+0x2d/0xb0 [ 536.244520][T19089] get_user_ifreq+0x6b/0x180 [ 536.244550][T19089] sock_ioctl+0x704/0x7f0 [ 536.244575][T19089] ? __pfx_sock_ioctl+0x10/0x10 [ 536.244600][T19089] ? __fget_files+0x3a0/0x420 [ 536.244619][T19089] ? __fget_files+0x2a/0x420 [ 536.244641][T19089] ? bpf_lsm_file_ioctl+0x9/0x20 [ 536.244668][T19089] ? __pfx_sock_ioctl+0x10/0x10 [ 536.244691][T19089] __se_sys_ioctl+0xfc/0x170 [ 536.244715][T19089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.244732][T19089] do_syscall_64+0x15f/0xf80 [ 536.244750][T19089] ? trace_irq_disable+0x3b/0x140 [ 536.244773][T19089] ? clear_bhb_loop+0x40/0x90 [ 536.244793][T19089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.244809][T19089] RIP: 0033:0x7fbf6cb9cdd9 [ 536.244826][T19089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.244840][T19089] RSP: 002b:00007fbf6d9df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.244858][T19089] RAX: ffffffffffffffda RBX: 00007fbf6ce15fa0 RCX: 00007fbf6cb9cdd9 [ 536.244870][T19089] RDX: 0000200000000780 RSI: 00000000000089f2 RDI: 0000000000000004 [ 536.244881][T19089] RBP: 00007fbf6d9df090 R08: 0000000000000000 R09: 0000000000000000 [ 536.244890][T19089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.244900][T19089] R13: 00007fbf6ce16038 R14: 00007fbf6ce15fa0 R15: 00007fffb3ee0508 [ 536.244925][T19089] [ 536.675468][T19105] lo speed is unknown, defaulting to 1000 [ 536.861797][T19115] netlink: 'syz.2.3219': attribute type 4 has an invalid length. [ 537.101921][T18811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.126676][T19121] pim6reg1: entered promiscuous mode [ 537.132117][T19121] pim6reg1: entered allmulticast mode [ 539.870464][T19127] __nla_validate_parse: 2 callbacks suppressed [ 539.870503][T19127] netlink: 376 bytes leftover after parsing attributes in process `syz.3.3223'. [ 539.929537][T19127] netlink: 376 bytes leftover after parsing attributes in process `syz.3.3223'. [ 539.970974][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3224'. [ 540.049024][T19129] macvlan2: entered allmulticast mode [ 540.069506][T19129] hsr0: entered allmulticast mode [ 540.077718][T19129] hsr_slave_0: entered allmulticast mode [ 540.093295][T19129] hsr_slave_1: entered allmulticast mode [ 540.111216][T19129] hsr0: entered promiscuous mode [ 540.291908][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3226'. [ 540.350329][T18811] veth0_vlan: entered promiscuous mode [ 540.372329][T18811] veth1_vlan: entered promiscuous mode [ 540.393768][T19134] dummy0 speed is unknown, defaulting to 1000 [ 540.501540][T19138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.535369][T19134] dummy0 speed is unknown, defaulting to 1000 [ 540.560019][T19134] dummy0 speed is unknown, defaulting to 1000 [ 540.801939][T19138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.102524][T19138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.384939][T19134] infiniband syz0: set active [ 541.386747][T19138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.400248][T19134] infiniband syz0: added dummy0 [ 541.418206][T19134] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 541.433908][T19134] infiniband syz0: Couldn't open port 1 [ 541.451347][T19134] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 541.471319][T19134] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 541.509811][T18811] veth0_macvtap: entered promiscuous mode [ 541.517764][T19134] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 541.535444][ T1566] dummy0 speed is unknown, defaulting to 1000 [ 541.547014][T18811] veth1_macvtap: entered promiscuous mode [ 541.705954][T19134] RDS/IB: syz0: added [ 541.711929][T19134] smc: adding ib device syz0 with port count 1 [ 541.722303][T19134] smc: ib device syz0 port 1 has no pnetid [ 541.740227][T18811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.765268][ T1566] dummy0 speed is unknown, defaulting to 1000 [ 541.781748][T19134] dummy0 speed is unknown, defaulting to 1000 [ 541.791463][T18811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.834541][T15336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.856500][T15336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.914251][T15336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.929228][T15336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.963528][T15336] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.976461][T19168] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3233'. [ 542.010034][T19168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.106671][ T7457] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.240560][ T7457] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.276752][T19176] netlink: 376 bytes leftover after parsing attributes in process `syz.4.3235'. [ 542.287576][T19176] netlink: 376 bytes leftover after parsing attributes in process `syz.4.3235'. [ 542.326324][T15336] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.350390][T15330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.371715][T15330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.380159][T19134] dummy0 speed is unknown, defaulting to 1000 [ 542.458518][T19178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.511237][T19178] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3236'. [ 542.530252][T15334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.550743][T15334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.689198][T19182] bridge_slave_0: left allmulticast mode [ 542.730876][T19182] bridge_slave_0: left promiscuous mode [ 542.760908][T19182] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.850230][T19182] bridge_slave_1: left allmulticast mode [ 542.857539][T19187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3146'. [ 542.882191][T19182] bridge_slave_1: left promiscuous mode [ 542.906582][T19182] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.096832][T19194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.134505][T19197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 543.274929][T19182] bond0: (slave bond_slave_0): Releasing backup interface [ 543.301663][T19182] bond0: (slave bond_slave_1): Releasing backup interface [ 543.350398][T19182] team0: Port device team_slave_0 removed [ 543.365258][T19182] team0: Port device team_slave_1 removed [ 543.372500][T19182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.381178][T19182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.396058][T19182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.404456][T19182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.415969][T19182] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 543.453159][T19134] dummy0 speed is unknown, defaulting to 1000 [ 543.511040][T19196] vlan1: entered allmulticast mode [ 543.533848][T19196] bridge11: entered allmulticast mode [ 543.707778][T19206] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 543.721347][T19207] netlink: 'syz.2.3241': attribute type 3 has an invalid length. [ 543.761614][T19202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.772779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.811432][T19204] lo speed is unknown, defaulting to 1000 [ 544.179802][ T5641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 544.198490][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.220531][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.229350][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.239988][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 544.434865][T19134] dummy0 speed is unknown, defaulting to 1000 [ 545.192668][T19134] dummy0 speed is unknown, defaulting to 1000 [ 545.272917][T19217] lo speed is unknown, defaulting to 1000 [ 545.375897][T19239] __nla_validate_parse: 4 callbacks suppressed [ 545.375919][T19239] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3245'. [ 545.391998][T19239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3245'. [ 545.401605][T19239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3245'. [ 545.666161][T19237] lo speed is unknown, defaulting to 1000 [ 545.667380][T19134] dummy0 speed is unknown, defaulting to 1000 [ 546.269420][T19204] dummy0 speed is unknown, defaulting to 1000 [ 546.293909][ T5641] Bluetooth: hci0: command tx timeout [ 546.396225][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 546.532395][T19253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3251'. [ 546.679145][T19256] ipvlan2: entered promiscuous mode [ 546.756523][T19217] dummy0 speed is unknown, defaulting to 1000 [ 547.006661][T19263] netlink: 'syz.0.3254': attribute type 2 has an invalid length. [ 547.022328][T19263] netlink: 'syz.0.3254': attribute type 2 has an invalid length. [ 547.283989][T19134] dummy0 speed is unknown, defaulting to 1000 [ 547.377107][T19269] smc: net device wlan0 erased user defined pnetid SYZ0 [ 547.490269][T19271] batman_adv: batadv0: Adding interface: ip6gretap1 [ 547.498892][T19271] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.526594][T19271] batman_adv: batadv0: Interface activated: ip6gretap1 [ 547.690468][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3259'. [ 547.752808][T19275] 8021q: adding VLAN 0 to HW filter on device eth0 [ 547.811413][T19275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 547.857880][T19281] FAULT_INJECTION: forcing a failure. [ 547.857880][T19281] name failslab, interval 1, probability 0, space 0, times 0 [ 547.860119][T19275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 547.885498][T19275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 547.891863][T19281] CPU: 1 UID: 0 PID: 19281 Comm: syz.0.3261 Not tainted syzkaller #0 PREEMPT(full) [ 547.891891][T19281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.891903][T19281] Call Trace: [ 547.891910][T19281] [ 547.891918][T19281] dump_stack_lvl+0xe8/0x150 [ 547.891944][T19281] should_fail_ex+0x412/0x560 [ 547.891973][T19281] should_failslab+0xa8/0x100 [ 547.892007][T19281] __kmalloc_cache_noprof+0x88/0x660 [ 547.892033][T19281] ? call_usermodehelper_setup+0x8e/0x270 [ 547.892068][T19281] call_usermodehelper_setup+0x8e/0x270 [ 547.892094][T19281] ? __pfx_free_modprobe_argv+0x10/0x10 [ 547.892121][T19281] __request_module+0x3ba/0x630 [ 547.892143][T19281] ? __pfx___request_module+0x10/0x10 [ 547.892167][T19281] ? __pfx___request_module+0x10/0x10 [ 547.892192][T19281] ? apparmor_capable+0x126/0x170 [ 547.892227][T19281] ? dev_load+0x21/0x1f0 [ 547.892250][T19281] dev_ioctl+0x837/0x1150 [ 547.892273][T19281] sock_ioctl+0x75f/0x7f0 [ 547.892302][T19281] ? __pfx_sock_ioctl+0x10/0x10 [ 547.892328][T19281] ? __fget_files+0x3a0/0x420 [ 547.892350][T19281] ? __fget_files+0x2a/0x420 [ 547.892374][T19281] ? bpf_lsm_file_ioctl+0x9/0x20 [ 547.892401][T19281] ? __pfx_sock_ioctl+0x10/0x10 [ 547.892425][T19281] __se_sys_ioctl+0xfc/0x170 [ 547.892452][T19281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.892472][T19281] do_syscall_64+0x15f/0xf80 [ 547.892492][T19281] ? trace_irq_disable+0x3b/0x140 [ 547.892518][T19281] ? clear_bhb_loop+0x40/0x90 [ 547.892541][T19281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.892559][T19281] RIP: 0033:0x7f8254d9cdd9 [ 547.892576][T19281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.892592][T19281] RSP: 002b:00007f8255c3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.892613][T19281] RAX: ffffffffffffffda RBX: 00007f8255016090 RCX: 00007f8254d9cdd9 [ 547.892626][T19281] RDX: 0000200000000780 RSI: 00000000000089f2 RDI: 0000000000000004 [ 547.892638][T19281] RBP: 00007f8255c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 547.892649][T19281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.892660][T19281] R13: 00007f8255016128 R14: 00007f8255016090 R15: 00007ffd22615f08 [ 547.892689][T19281] [ 548.175244][T19237] dummy0 speed is unknown, defaulting to 1000 [ 548.329337][T19286] netlink: 'syz.0.3262': attribute type 1 has an invalid length. [ 548.373420][ T5641] Bluetooth: hci0: command tx timeout [ 548.778623][T19134] dummy0 speed is unknown, defaulting to 1000 [ 549.123951][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3264'. [ 549.144995][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3264'. [ 549.336195][T19301] netlink: 'syz.2.3266': attribute type 10 has an invalid length. [ 549.353693][T19301] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3266'. [ 549.376718][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'. [ 549.501650][T19217] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.522473][T19217] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.530877][T19217] bridge_slave_0: entered allmulticast mode [ 549.539708][T19217] bridge_slave_0: entered promiscuous mode [ 549.570870][T19307] bond1: entered promiscuous mode [ 549.586487][T19310] netlink: 'syz.0.3268': attribute type 13 has an invalid length. [ 549.599685][T19307] bond1: entered allmulticast mode [ 549.618330][T19310] netlink: 'syz.0.3268': attribute type 17 has an invalid length. [ 549.668499][T19301] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 549.758325][T19313] netlink: 'syz.3.3269': attribute type 2 has an invalid length. [ 549.792824][T19313] netlink: 'syz.3.3269': attribute type 2 has an invalid length. [ 550.453452][ T5641] Bluetooth: hci0: command tx timeout [ 550.842531][T19309] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.850404][T19309] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.285642][T19309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.301513][T19309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.696620][T19309] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 551.708644][T19217] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.716848][T19217] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.735963][T19217] bridge_slave_1: entered allmulticast mode [ 551.745613][T19217] bridge_slave_1: entered promiscuous mode [ 551.834201][T15335] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.846640][T15335] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.952434][T15335] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.976080][T15335] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.025913][T19217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.077868][T19217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.202311][T19217] team0: Port device team_slave_0 added [ 552.342254][T19217] team0: Port device team_slave_1 added [ 552.407853][T19217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.416431][T19217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.468909][T19217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.504164][T19217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.516544][T19217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.554081][ T5641] Bluetooth: hci0: command tx timeout [ 552.613352][T19217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.686236][T19217] hsr_slave_0: entered promiscuous mode [ 552.694156][T19217] hsr_slave_1: entered promiscuous mode [ 552.701888][T19217] debugfs: 'hsr0' already exists in 'hsr' [ 552.712475][T19217] Cannot create hsr debugfs directory [ 553.751694][T19352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3274'. [ 554.361533][T19311] Set syz1 is full, maxelem 65536 reached [ 554.496717][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'. [ 555.742282][T19335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.805759][T19217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 555.857841][T19217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 555.898620][T19217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 555.919825][T19217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 555.931514][T19217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 555.942463][T19217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 555.967430][T19217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 556.004264][T19217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.282313][T19217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.318530][T19383] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3282'. [ 556.352786][T19217] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.378385][T19385] netlink: 'syz.4.3283': attribute type 1 has an invalid length. [ 556.397736][T15332] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.405012][T15332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.617486][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.624945][ T7478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.955793][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3288'. [ 557.000469][T19409] tipc: Enabling of bearer rejected, failed to enable media [ 557.040991][T19409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3288'. [ 557.161773][T19416] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 558.127407][T19217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.396660][T19460] syzkaller0: entered promiscuous mode [ 558.414307][T19460] syzkaller0: entered allmulticast mode [ 558.429612][T19217] veth0_vlan: entered promiscuous mode [ 558.441352][T19458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.480019][T19460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.494127][T19217] veth1_vlan: entered promiscuous mode [ 558.703787][T19217] veth0_macvtap: entered promiscuous mode [ 558.756961][T19217] veth1_macvtap: entered promiscuous mode [ 558.832723][T19217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.902505][T19217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.966349][T15336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.986521][T15336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.045866][T15336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.169624][T19470] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3302'. [ 560.067374][T15336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.406099][T19478] netlink: 'syz.0.3304': attribute type 83 has an invalid length. [ 561.278616][T19495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3309'. [ 561.318127][T15332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.366234][T15332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.377245][T19495] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 561.476079][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 561.658019][ T3330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.676837][T19491] netlink: 'syz.0.3307': attribute type 8 has an invalid length. [ 561.704309][ T3330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.339693][T19520] lo speed is unknown, defaulting to 1000 [ 562.398968][T19534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3316'. [ 563.002213][T19550] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3321'. [ 563.020121][T19545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.046824][T19550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.068194][T19550] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3321'. [ 563.080354][T19552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.170383][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3322'. [ 563.189539][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.202191][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3322'. [ 563.203187][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.296587][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3322'. [ 563.360494][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3322'. [ 563.659424][T19520] dummy0 speed is unknown, defaulting to 1000 [ 564.441736][T19579] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 564.488572][T19579] syzkaller1: linktype set to 825 [ 564.954554][T19601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.049099][T19602] netlink: 'syz.3.3334': attribute type 1 has an invalid length. [ 565.244057][T19597] netlink: 'syz.3.3334': attribute type 2 has an invalid length. [ 565.279491][T19597] netlink: 'syz.3.3334': attribute type 2 has an invalid length. [ 565.528499][T19610] macsec1: entered promiscuous mode [ 566.882642][T19625] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 566.890723][T19625] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 566.899208][T19625] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 566.905804][T19625] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 566.912610][T19625] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 566.919206][T19625] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 566.945973][T19625] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 566.952744][T19625] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 566.963005][T19626] x_tables: ip_tables: ah match: only valid for protocol 51 [ 566.971447][T19625] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 566.978069][T19625] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 570.392700][T19630] __nla_validate_parse: 61 callbacks suppressed [ 570.392724][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3341'. [ 570.592798][T19640] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3344'. [ 570.606107][T19640] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3344'. [ 570.666381][T19641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3343'. [ 570.818836][T19650] netlink: 'syz.1.3347': attribute type 2 has an invalid length. [ 570.847617][T19650] netlink: 'syz.1.3347': attribute type 2 has an invalid length. [ 571.187899][T19664] netlink: 'syz.3.3352': attribute type 1 has an invalid length. [ 571.228659][T19664] bond1: entered promiscuous mode [ 571.231890][T19663] netlink: 'syz.0.3353': attribute type 39 has an invalid length. [ 571.234601][T19664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.282211][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 571.299508][T19670] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3354'. [ 571.310963][T19672] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3356'. [ 571.320441][T19664] bond1: (slave bridge1): making interface the new active one [ 571.320471][T19664] bridge1: entered promiscuous mode [ 571.335213][T19672] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3356'. [ 571.353635][T19664] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 571.607252][T19683] netlink: 376 bytes leftover after parsing attributes in process `syz.1.3358'. [ 571.627158][T19683] netlink: 376 bytes leftover after parsing attributes in process `syz.1.3358'. [ 571.679991][T19685] netlink: 'syz.0.3359': attribute type 4 has an invalid length. [ 571.705306][T19685] .`: renamed from bond0 [ 572.109971][T19702] syzkaller1: entered promiscuous mode [ 572.129657][T19702] syzkaller1: entered allmulticast mode [ 572.290094][T19712] syzkaller0: entered promiscuous mode [ 572.304621][T19712] syzkaller0: entered allmulticast mode [ 572.634206][T19729] net_ratelimit: 1990 callbacks suppressed [ 572.634227][T19729] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 572.680995][T19729] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 572.696896][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.707145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.749444][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.757963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.815010][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.823421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.857268][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.866084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.054952][T19744] netlink: 'syz.3.3377': attribute type 6 has an invalid length. [ 573.099344][T19744] netlink: 'syz.3.3377': attribute type 7 has an invalid length. [ 573.124030][T19744] netlink: 'syz.3.3377': attribute type 8 has an invalid length. [ 573.186935][T19751] syzkaller0: entered promiscuous mode [ 573.207085][T19751] syzkaller0: entered allmulticast mode [ 573.226766][ T29] audit: type=1800 audit(1777456073.142:10): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3382" name="blkio.bfq.time_recursive" dev="tmpfs" ino=65 res=0 errno=0 [ 573.801585][T19778] xt_nfacct: accounting object `syz1' does not exist [ 573.840862][T19774] xt_nfacct: accounting object `syz1' does not exist [ 574.162774][T19791] lo speed is unknown, defaulting to 1000 [ 574.581586][T19816] syzkaller0: entered promiscuous mode [ 574.620387][T19816] syzkaller0: entered allmulticast mode [ 575.385839][T19837] bridge2: entered allmulticast mode [ 575.458332][T19791] dummy0 speed is unknown, defaulting to 1000 [ 575.605140][T19842] __nla_validate_parse: 14 callbacks suppressed [ 575.605164][T19842] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3407'. [ 575.634479][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3408'. [ 575.655039][T19848] netlink: 'syz.2.3407': attribute type 2 has an invalid length. [ 575.686691][T19848] netlink: 'syz.2.3407': attribute type 1 has an invalid length. [ 575.720374][T19848] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3407'. [ 575.903474][T19853] netlink: 452 bytes leftover after parsing attributes in process `syz.3.3411'. [ 575.957891][T19853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3411'. [ 576.169449][T19864] syzkaller0: entered promiscuous mode [ 576.175949][T19864] syzkaller0: entered allmulticast mode [ 576.629098][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3421'. [ 576.819602][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3423'. [ 576.909045][T19904] netlink: 'syz.3.3425': attribute type 21 has an invalid length. [ 576.961060][T19904] netlink: 'syz.3.3425': attribute type 6 has an invalid length. [ 576.994634][T19904] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3425'. [ 577.304735][T19911] lo speed is unknown, defaulting to 1000 [ 577.407242][T19909] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3426'. [ 577.769738][T19913] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3427'. [ 578.023837][T19923] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 578.334200][T19932] netlink: 'syz.3.3434': attribute type 2 has an invalid length. [ 578.377646][T19935] macsec0: entered promiscuous mode [ 578.391665][T19935] macsec0: entered allmulticast mode [ 578.737640][T19947] net_ratelimit: 6 callbacks suppressed [ 578.737661][T19947] netlink: zone id is out of range [ 578.760929][T19948] netlink: zone id is out of range [ 578.790457][T19948] netlink: zone id is out of range [ 578.806586][T19947] netlink: zone id is out of range [ 578.840795][T19947] netlink: zone id is out of range [ 578.861830][T19948] netlink: zone id is out of range [ 578.907389][T19947] netlink: zone id is out of range [ 578.917135][T19948] netlink: zone id is out of range [ 578.931133][T19947] netlink: zone id is out of range [ 578.943240][T19948] netlink: zone id is out of range [ 578.949586][T19911] dummy0 speed is unknown, defaulting to 1000 [ 579.411926][T19966] lo speed is unknown, defaulting to 1000 [ 579.767436][T19978] netlink: 'syz.3.3447': attribute type 1 has an invalid length. [ 581.097792][T20000] netlink: 'syz.0.3452': attribute type 8 has an invalid length. [ 581.227476][T20003] tipc: Started in network mode [ 581.244658][T20003] tipc: Node identity ac14140f, cluster identity 4711 [ 581.265275][T20003] tipc: New replicast peer: 255.255.255.255 [ 581.294757][T20003] tipc: Enabled bearer , priority 10 [ 581.330114][T20003] netlink: 'syz.1.3455': attribute type 32 has an invalid length. [ 581.351988][T20003] __nla_validate_parse: 8 callbacks suppressed [ 581.352011][T20003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3455'. [ 581.378998][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3454'. [ 581.389177][T20003] netlink: 'syz.1.3455': attribute type 1 has an invalid length. [ 581.395672][T20005] tipc: Enabling of bearer rejected, already enabled [ 581.498152][T19966] dummy0 speed is unknown, defaulting to 1000 [ 581.871787][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3458'. [ 582.141044][T20026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3461'. [ 582.290165][T20023] syzkaller1: entered promiscuous mode [ 582.303649][T20023] syzkaller1: entered allmulticast mode [ 582.343924][ T7980] tipc: Node number set to 2886997007 [ 582.475668][T20033] xt_limit: Overflow, try lower: 324382443/0 [ 582.783940][T20043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3465'. [ 583.076852][T20051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3467'. [ 583.119574][T20053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3468'. [ 583.422465][T20063] netlink: 'syz.0.3470': attribute type 2 has an invalid length. [ 583.548737][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 583.760727][T20071] batadv_slave_0: entered promiscuous mode [ 583.783719][T20071] batadv_slave_0: entered allmulticast mode [ 584.237576][T20077] syzkaller0: entered promiscuous mode [ 584.381897][T20088] netlink: 376 bytes leftover after parsing attributes in process `syz.0.3478'. [ 584.403380][T20077] syzkaller0: entered allmulticast mode [ 584.414300][T20088] netlink: 376 bytes leftover after parsing attributes in process `syz.0.3478'. [ 585.327755][T20104] nbd: couldn't find a device at index 0 [ 586.244740][T20143] netlink: 'syz.1.3494': attribute type 18 has an invalid length. [ 586.468663][ T5639] block nbd3: Receive control failed (result -32) [ 586.533509][T20153] __nla_validate_parse: 4 callbacks suppressed [ 586.533530][T20153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3496'. [ 586.607228][T20155] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3497'. [ 586.645671][T18813] block nbd3: Receive control failed (result -32) [ 586.646169][ T5641] block nbd3: Receive control failed (result -32) [ 586.777319][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3499'. [ 586.786749][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3499'. [ 586.796204][T20158] netlink: 'syz.2.3499': attribute type 6 has an invalid length. [ 586.811921][T20158] netlink: 'syz.2.3499': attribute type 12 has an invalid length. [ 586.876207][T20160] tipc: Enabling of bearer rejected, failed to enable media [ 586.897767][T15336] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.921310][T15336] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.950803][T15336] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.981270][T15336] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.278524][T20176] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3503'. [ 587.361020][T20178] netlink: 'syz.1.3504': attribute type 1 has an invalid length. [ 587.377946][T20178] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3504'. [ 587.409808][T20178] netlink: 'syz.1.3504': attribute type 8 has an invalid length. [ 587.412105][T20179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3503'. [ 587.438289][T20178] netlink: 610 bytes leftover after parsing attributes in process `syz.1.3504'. [ 587.549114][T20184] netlink: 'syz.4.3505': attribute type 39 has an invalid length. [ 587.706834][T20193] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3506'. [ 587.911358][T20198] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3508'. [ 587.977987][T20200] netlink: 'syz.1.3509': attribute type 1 has an invalid length. [ 588.158729][T20200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 588.236862][T20207] veth5: entered promiscuous mode [ 588.505670][T20231] netlink: 'syz.3.3517': attribute type 1 has an invalid length. [ 588.525079][T20231] net_ratelimit: 98 callbacks suppressed [ 588.525102][T20231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.168093][T20254] lo speed is unknown, defaulting to 1000 [ 589.451519][T20275] ieee802154 phy0 wpan0: encryption failed: -22 [ 590.507839][T20317] netlink: 'syz.0.3536': attribute type 21 has an invalid length. [ 590.788978][T20331] erspan0: entered promiscuous mode [ 590.820916][T20331] gretap0: entered promiscuous mode [ 590.836641][T20331] debugfs: 'hsr1' already exists in 'hsr' [ 590.858010][T20331] Cannot create hsr debugfs directory [ 590.947399][T20335] syzkaller0: entered promiscuous mode [ 590.966567][T20335] syzkaller0: entered allmulticast mode [ 591.799294][T20254] dummy0 speed is unknown, defaulting to 1000 [ 592.131350][T20367] __nla_validate_parse: 20 callbacks suppressed [ 592.131372][T20367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3548'. [ 592.354835][T20377] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3552'. [ 592.364765][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3552'. [ 593.145627][T20375] bond3 (unregistering): Released all slaves [ 593.233787][T20383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3553'. [ 593.312808][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3555'. [ 593.338409][T20387] netlink: 'syz.2.3555': attribute type 3 has an invalid length. [ 593.349808][T20388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3554'. [ 593.365847][T20388] netlink: 376 bytes leftover after parsing attributes in process `syz.3.3554'. [ 593.380311][T20388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3554'. [ 593.411088][T20387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3555'. [ 593.449894][T20387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.477022][T20391] ieee802154 phy0 wpan0: encryption failed: -126 [ 593.723608][T20406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3560'. [ 594.201686][T20424] batadv_slave_1: entered promiscuous mode [ 594.614560][T20438] netlink: 'syz.3.3569': attribute type 4 has an invalid length. [ 595.110363][T20453] xt_bpf: check failed: parse error [ 595.184692][T20455] dvmrp0: entered allmulticast mode [ 595.201151][T20457] dvmrp0: left allmulticast mode [ 595.329506][T20459] dvmrp0: entered allmulticast mode [ 595.400608][T20464] netlink: 'syz.0.3575': attribute type 30 has an invalid length. [ 595.508510][T20464] bond0: option arp_missed_max: invalid value (0) [ 595.516735][T20464] bond0: option arp_missed_max: allowed values 1 - 255 [ 595.534625][T20464] bond0 (unregistering): Released all slaves [ 595.852439][T20485] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 596.049564][T20499] syzkaller0: entered promiscuous mode [ 596.087920][T20499] syzkaller0: entered allmulticast mode [ 596.216774][T20484] netlink: 'syz.3.3582': attribute type 15 has an invalid length. [ 596.311660][T20516] syzkaller0: entered promiscuous mode [ 596.317271][T20516] syzkaller0: entered allmulticast mode [ 596.668295][T20522] lo speed is unknown, defaulting to 1000 [ 596.697254][T20526] netlink: 'syz.3.3591': attribute type 1 has an invalid length. [ 596.754716][T20526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.816476][T20526] bond2: (slave geneve2): making interface the new active one [ 596.846002][T20526] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 597.281909][T20537] syzkaller1: entered promiscuous mode [ 597.299493][T20537] syzkaller1: entered allmulticast mode [ 597.315228][T20537] netlink: 'syz.0.3595': attribute type 8 has an invalid length. [ 597.442184][T20540] bond3 (unregistering): Released all slaves [ 597.548298][T20546] __nla_validate_parse: 6 callbacks suppressed [ 597.548321][T20546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3597'. [ 597.801583][T20522] dummy0 speed is unknown, defaulting to 1000 [ 598.071069][T20562] syzkaller0: entered promiscuous mode [ 598.098409][T20562] syzkaller0: entered allmulticast mode [ 598.142904][T20544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3598'. [ 598.648522][T20581] Cannot find del_set index 1 as target [ 598.689373][T20585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3607'. [ 598.710645][T20579] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3605'. [ 598.983209][T20593] ip6gre1: entered promiscuous mode [ 599.101323][T20599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3612'. [ 599.222653][T20601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'. [ 599.277555][T20601] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3613'. [ 599.320303][T20604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3614'. [ 599.482279][T20601] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3613'. [ 599.817069][T20615] siw: device registration error -23 [ 600.051964][T20626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3619'. [ 600.342086][T20626] ipvlan2: entered allmulticast mode [ 600.357428][T20626] syz_tun: entered allmulticast mode [ 601.094453][T18813] Bluetooth: hci5: command 0x0406 tx timeout [ 604.137684][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 604.366634][T20655] __nla_validate_parse: 2 callbacks suppressed [ 604.366658][T20655] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3627'. [ 604.460828][T20659] lo speed is unknown, defaulting to 1000 [ 604.738891][T20672] syzkaller0: entered promiscuous mode [ 604.755156][T20672] syzkaller0: entered allmulticast mode [ 604.971788][T20680] syzkaller0: entered promiscuous mode [ 604.981663][T20680] syzkaller0: entered allmulticast mode [ 605.356597][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3638'. [ 605.661995][T20711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.104234][T20722] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 606.150790][T20728] netlink: 'syz.2.3646': attribute type 2 has an invalid length. [ 606.170933][T20659] dummy0 speed is unknown, defaulting to 1000 [ 606.184991][T20728] netlink: 'syz.2.3646': attribute type 2 has an invalid length. [ 606.598358][T20736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.676427][T20739] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 606.690936][T20741] lo speed is unknown, defaulting to 1000 [ 606.727803][T20743] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3649'. [ 607.066952][T20746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3650'. [ 607.211698][T20750] batadv_slave_1: left promiscuous mode [ 607.285484][T20750] vlan2: left allmulticast mode [ 607.290588][T20750] veth0_to_bridge: left allmulticast mode [ 607.376527][T20750] veth0_to_team: entered promiscuous mode [ 607.402066][T20750] bond1: left promiscuous mode [ 607.407657][T20750] bridge1: left promiscuous mode [ 607.416338][T20750] bridge2: left allmulticast mode [ 607.601829][T20762] netlink: 'syz.3.3653': attribute type 11 has an invalid length. [ 607.622743][T20753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.639896][ T5896] dummy0 speed is unknown, defaulting to 1000 [ 608.195154][T20741] dummy0 speed is unknown, defaulting to 1000 [ 608.386742][T20775] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3660'. [ 608.588838][T20779] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3661'. [ 609.110041][T20796] syzkaller0: entered promiscuous mode [ 609.125560][T20796] syzkaller0: entered allmulticast mode [ 609.522574][T20812] netlink: 'syz.3.3666': attribute type 8 has an invalid length. [ 609.548725][T20812] netlink: 16020 bytes leftover after parsing attributes in process `syz.3.3666'. [ 609.709640][T20817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3667'. [ 610.108072][T15331] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.132657][T15331] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.170733][T15331] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.207130][T15331] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.299912][T20817] lo speed is unknown, defaulting to 1000 [ 610.641733][T20840] netlink: 'syz.4.3672': attribute type 2 has an invalid length. [ 610.662149][T20840] netlink: 'syz.4.3672': attribute type 2 has an invalid length. [ 610.903977][T20842] tipc: Started in network mode [ 610.919995][T20842] tipc: Node identity ac14140f, cluster identity 4711 [ 610.972811][T20842] tipc: New replicast peer: 255.255.255.255 [ 610.995848][T20842] tipc: Enabled bearer , priority 10 [ 611.333240][T18813] Bluetooth: hci3: command 0x0406 tx timeout [ 611.517908][T20860] netlink: 'syz.4.3677': attribute type 1 has an invalid length. [ 611.552840][T20858] netlink: 'syz.3.3676': attribute type 1 has an invalid length. [ 611.589769][T20858] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3676'. [ 611.698511][T20860] bond2: entered promiscuous mode [ 611.713815][T20860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 611.872629][T20866] lo speed is unknown, defaulting to 1000 [ 611.940333][T20872] netlink: 376 bytes leftover after parsing attributes in process `syz.4.3681'. [ 611.986546][T20873] netlink: 'syz.3.3680': attribute type 2 has an invalid length. [ 612.008925][T20873] netlink: 'syz.3.3680': attribute type 2 has an invalid length. [ 612.164746][ T7963] tipc: Node number set to 2886997007 [ 612.419247][T20817] dummy0 speed is unknown, defaulting to 1000 [ 612.600037][T20895] netlink: 'syz.4.3687': attribute type 10 has an invalid length. [ 612.713840][T20895] team0: Port device dummy0 added [ 612.750307][T20903] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3689'. [ 612.945842][T20909] netlink: 'syz.4.3691': attribute type 33 has an invalid length. [ 612.999127][T20906] tipc: Started in network mode [ 613.023695][T20906] tipc: Node identity 06678383f24b, cluster identity 4711 [ 613.047729][T20906] tipc: Enabled bearer , priority 0 [ 613.129175][T20916] xt_hashlimit: size too large, truncated to 1048576 [ 613.266811][T20905] tipc: Disabling bearer [ 613.521790][T20924] netlink: 376 bytes leftover after parsing attributes in process `syz.3.3693'. [ 613.886122][T20938] netlink: 'syz.1.3696': attribute type 2 has an invalid length. [ 613.902492][T20938] netlink: 'syz.1.3696': attribute type 2 has an invalid length. [ 613.924515][T20866] dummy0 speed is unknown, defaulting to 1000 [ 614.325494][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3698'. [ 614.577626][T20959] netlink: 'syz.3.3700': attribute type 2 has an invalid length. [ 614.636297][T20959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3700'. [ 614.708712][T20959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.733566][T20960] netlink: 'syz.3.3700': attribute type 2 has an invalid length. [ 614.746231][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3700'. [ 614.768106][T20960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.844412][T20964] openvswitch: : Dropping previously announced user features [ 615.225161][T20983] netlink: 376 bytes leftover after parsing attributes in process `syz.4.3705'. [ 615.228830][T20973] xt_TCPMSS: Only works on TCP SYN packets [ 615.455458][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3707'. [ 615.528294][T20978] lo speed is unknown, defaulting to 1000 [ 615.528438][T20989] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 615.590762][T20990] kthread_run failed with err -4 [ 615.858376][T20999] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3709'. [ 615.872753][T20999] tipc: Enabled bearer , priority 0 [ 615.889796][T20999] syzkaller0: entered promiscuous mode [ 615.896546][T20999] syzkaller0: entered allmulticast mode [ 615.921567][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3710'. [ 615.936048][T20999] tipc: Resetting bearer [ 616.241847][T21012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3713'. [ 616.332827][T20978] dummy0 speed is unknown, defaulting to 1000 [ 616.617476][T20997] tipc: Resetting bearer [ 616.646815][T20997] tipc: Disabling bearer [ 616.969216][T21026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3717'. [ 616.981489][T21026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3717'. [ 616.996753][T21025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3717'. [ 617.066441][T21022] lo speed is unknown, defaulting to 1000 [ 617.347290][T21036] validate_nla: 1 callbacks suppressed [ 617.347311][T21036] netlink: 'syz.2.3721': attribute type 8 has an invalid length. [ 617.981123][T21056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.012064][T21054] IPVS: Unknown mcast interface: . [ 618.452205][T21022] dummy0 speed is unknown, defaulting to 1000 [ 618.830811][T21072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.961175][T21078] bond0: (slave batadv1): Opening slave failed [ 619.591134][T21103] netlink: 'syz.0.3733': attribute type 1 has an invalid length. [ 620.056557][T21089] hsr0: left allmulticast mode [ 620.061476][T21089] hsr_slave_0: left allmulticast mode [ 620.071113][T21089] hsr_slave_1: left allmulticast mode [ 620.230990][T15332] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.247662][T15332] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.274253][T15332] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.295464][T15332] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.349557][T15332] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.362344][T15332] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.372249][T15332] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.388816][T15332] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.430858][T21109] »»»»»»: renamed from veth0_to_batadv [ 620.984002][T21129] openvswitch: netlink: Actions may not be safe on all matching packets [ 621.467226][T21139] nbd4: detected capacity change from 0 to 63 [ 621.521175][ T5641] block nbd4: Receive control failed (result -104) [ 621.823864][T21153] __nla_validate_parse: 5 callbacks suppressed [ 621.823888][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3748'. [ 621.905580][T21153] netlink: 'syz.2.3748': attribute type 10 has an invalid length. [ 622.548178][T21184] netlink: 'syz.3.3756': attribute type 1 has an invalid length. [ 622.619684][T21184] 8021q: adding VLAN 0 to HW filter on device bond3 [ 622.632500][T21198] netlink: 'syz.3.3756': attribute type 8 has an invalid length. [ 622.781088][T21198] bond3: (slave geneve3): making interface the new active one [ 622.806506][T21198] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 622.843829][T15330] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 623.107394][T15330] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 623.120280][T21216] netlink: 'syz.3.3762': attribute type 39 has an invalid length. [ 623.128721][T15330] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 623.128771][T15330] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 623.206558][T21205] bond2: Unable to set down delay as MII monitoring is disabled [ 623.232286][T21205] bond2 (unregistering): Released all slaves [ 623.305141][T21221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3764'. [ 623.615239][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3765'. [ 623.681579][T21211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 623.705488][T21234] netlink: 'syz.4.3767': attribute type 2 has an invalid length. [ 623.749294][T21234] netlink: 'syz.4.3767': attribute type 2 has an invalid length. [ 624.117132][T21246] tipc: Started in network mode [ 624.122363][T21246] tipc: Node identity 9a5a8bd0393b, cluster identity 4711 [ 624.136160][T21246] tipc: Enabled bearer , priority 0 [ 624.167837][T21246] tipc: Resetting bearer [ 624.224438][T21245] tipc: Disabling bearer [ 624.237126][T21252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 624.366485][T21260] xt_TCPMSS: Only works on TCP SYN packets [ 624.440634][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3777'. [ 624.450515][T21267] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3776'. [ 624.454273][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3777'. [ 624.474067][T21267] syzkaller1: entered promiscuous mode [ 624.479647][T21267] syzkaller1: entered allmulticast mode [ 624.620508][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.629546][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.748824][T21284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.765412][T21283] netlink: 376 bytes leftover after parsing attributes in process `syz.4.3781'. [ 624.917010][T21290] netlink: 'syz.1.3785': attribute type 1 has an invalid length. [ 624.925018][T21290] netlink: 'syz.1.3785': attribute type 2 has an invalid length. [ 624.996420][T21293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3786'. [ 625.021557][T21297] netlink: 428 bytes leftover after parsing attributes in process `syz.4.3787'. [ 625.047448][T21286] netlink: 'syz.3.3783': attribute type 13 has an invalid length. [ 625.051947][T21297] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3787'. [ 625.075818][T21286] netlink: 'syz.3.3783': attribute type 27 has an invalid length. [ 625.169663][T21300] bond0: entered promiscuous mode [ 625.176115][T21300] bond_slave_0: entered promiscuous mode [ 625.194278][T21300] bond_slave_1: entered promiscuous mode [ 625.527452][T21311] tipc: Enabled bearer , priority 0 [ 625.718788][T21311] syzkaller0: entered promiscuous mode [ 625.726486][T21311] syzkaller0: entered allmulticast mode [ 625.744612][T21311] tipc: Resetting bearer [ 625.822530][T21309] tipc: Resetting bearer [ 630.102018][T21309] tipc: Disabling bearer [ 630.458951][T21372] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 630.528036][T21372] syzkaller1: entered promiscuous mode [ 630.544672][T21372] syzkaller1: entered allmulticast mode [ 630.777714][T21392] __nla_validate_parse: 3 callbacks suppressed [ 630.777736][T21392] netlink: 376 bytes leftover after parsing attributes in process `syz.3.3814'. [ 630.794923][T21392] netlink: 376 bytes leftover after parsing attributes in process `syz.3.3814'. [ 630.917978][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3813'. [ 630.965205][T21394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3813'. [ 631.430944][T21419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3819'. [ 631.708343][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3821'. [ 632.369588][T21461] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3829'. [ 632.424593][T21461] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3829'. [ 632.476060][T21459] lo speed is unknown, defaulting to 1000 [ 632.513489][T21461] netlink: 'syz.1.3829': attribute type 6 has an invalid length. [ 632.534041][T21469] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3830'. [ 632.552848][T21461] netlink: 'syz.1.3829': attribute type 6 has an invalid length. [ 632.821942][T21486] ip6t_srh: unknown srh invflags 4000 [ 632.834736][T21486] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3832'. [ 633.142163][T21477] lo speed is unknown, defaulting to 1000 [ 633.810095][T21495] nbd: socks must be embedded in a SOCK_ITEM attr [ 633.824108][T21497] nbd: nbd64 already in use [ 634.055808][T21510] netlink: 'syz.4.3841': attribute type 1 has an invalid length. [ 634.092741][T20267] udevd[20267]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 634.095915][T21459] dummy0 speed is unknown, defaulting to 1000 [ 634.148148][T21512] netlink: 'syz.4.3841': attribute type 8 has an invalid length. [ 634.158510][T21510] bond3: entered promiscuous mode [ 634.165137][T21510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 634.191303][T21512] netlink: 'syz.4.3841': attribute type 4 has an invalid length. [ 634.317127][T21510] bond3: (slave bridge4): making interface the new active one [ 634.333579][T21510] bridge4: entered promiscuous mode [ 634.362511][T21510] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 634.981576][T21477] dummy0 speed is unknown, defaulting to 1000 [ 635.266294][T21546] ip6gre1: entered promiscuous mode [ 637.074183][T21598] netlink: 'syz.3.3860': attribute type 1 has an invalid length. [ 637.219577][T21612] __nla_validate_parse: 7 callbacks suppressed [ 637.219599][T21612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3860'. [ 637.339455][T21598] 8021q: adding VLAN 0 to HW filter on device bond4 [ 637.373590][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 637.410051][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 637.423271][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 637.433945][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 637.480104][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 637.553311][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 637.586174][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 637.612689][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 637.627064][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 637.939791][T21626] bond0 (unregistering): Released all slaves [ 638.531407][T21644] xfrm1: entered promiscuous mode [ 638.544237][T21644] xfrm1: entered allmulticast mode [ 638.985628][T21678] tipc: Invalid UDP bearer configuration [ 638.985687][T21678] tipc: Enabling of bearer rejected, failed to enable media [ 639.191746][T21686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 639.219355][T21687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 639.369920][T21698] x_tables: unsorted underflow at hook 3 [ 639.379195][T21698] x_tables: unsorted underflow at hook 3 [ 639.407277][T21699] bond0: entered promiscuous mode [ 639.426153][T21699] bond_slave_0: entered promiscuous mode [ 639.444393][T21699] bond_slave_1: entered promiscuous mode [ 639.467910][T21699] batadv0: entered promiscuous mode [ 639.491833][T21699] debugfs: 'hsr1' already exists in 'hsr' [ 639.508953][T21699] Cannot create hsr debugfs directory [ 639.649928][T21712] netlink: 'syz.0.3891': attribute type 2 has an invalid length. [ 639.669983][T21712] netlink: 'syz.0.3891': attribute type 2 has an invalid length. [ 640.600422][T21739] netlink: 'syz.2.3897': attribute type 1 has an invalid length. [ 640.648073][T21739] netlink: 'syz.2.3897': attribute type 1 has an invalid length. [ 641.161841][T21762] syzkaller1: entered promiscuous mode [ 641.182262][T21762] syzkaller1: entered allmulticast mode [ 641.329097][T21773] netlink: 'syz.4.3906': attribute type 2 has an invalid length. [ 641.360743][T21773] netlink: 'syz.4.3906': attribute type 2 has an invalid length. [ 641.413993][T21769] lo speed is unknown, defaulting to 1000 [ 641.750639][T21792] xt_TCPMSS: Only works on TCP SYN packets [ 641.928014][T21800] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 642.439168][T21817] bond0: option packets_per_slave: invalid value (5001287) [ 642.485279][T21817] bond0: option packets_per_slave: allowed values 0 - 65535 [ 642.503361][T21828] netlink: 'syz.0.3921': attribute type 2 has an invalid length. [ 642.515834][T21828] netlink: 'syz.0.3921': attribute type 2 has an invalid length. [ 642.528582][T21817] bond0 (unregistering): Released all slaves [ 642.644536][T21822] netlink: 'syz.4.3920': attribute type 4 has an invalid length. [ 642.859309][T21769] dummy0 speed is unknown, defaulting to 1000 [ 642.991011][T21839] netlink: 'syz.4.3923': attribute type 2 has an invalid length. [ 643.030911][T21841] __nla_validate_parse: 95 callbacks suppressed [ 643.030938][T21841] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3924'. [ 643.579380][T21862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3928'. [ 643.686392][T21862] bond5: entered promiscuous mode [ 643.693634][T21862] 8021q: adding VLAN 0 to HW filter on device bond5 [ 643.737137][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3929'. [ 643.898361][T21863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 643.921392][T21863] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 643.950697][T21863] bond5: (slave sit1): Error -95 calling set_mac_address [ 644.190101][T21870] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3930'. [ 644.237542][T21870] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3930'. [ 644.481032][T21876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'. [ 644.499839][T21880] syzkaller0: entered promiscuous mode [ 644.533854][T21880] syzkaller0: entered allmulticast mode [ 644.640581][ T29] audit: type=1800 audit(1777456144.562:11): pid=21883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3934" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1155 res=0 errno=0 [ 644.850457][T21886] validate_nla: 1 callbacks suppressed [ 644.850482][T21886] netlink: 'syz.4.3935': attribute type 2 has an invalid length. [ 644.867273][T21886] netlink: 'syz.4.3935': attribute type 2 has an invalid length. [ 645.587397][T21903] openvswitch: netlink: Flow actions attr not present in new flow. [ 645.609207][T21904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3941'. [ 645.685685][T21899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3939'. [ 645.900103][T21914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3945'. [ 645.948840][T21914] ip6gre2: entered promiscuous mode [ 645.969543][T21914] ip6gre2: entered allmulticast mode [ 646.356470][T21933] netlink: 'syz.4.3949': attribute type 2 has an invalid length. [ 646.378916][T21933] netlink: 'syz.4.3949': attribute type 2 has an invalid length. [ 646.744163][T21952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3956'. [ 646.881434][T21956] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 647.189045][T18813] Bluetooth: hci4: command 0x0406 tx timeout [ 647.205865][T21981] netlink: 'syz.4.3964': attribute type 2 has an invalid length. [ 647.231902][T21981] netlink: 'syz.4.3964': attribute type 2 has an invalid length. [ 648.765001][T22017] __nla_validate_parse: 2 callbacks suppressed [ 648.765030][T22017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3975'. [ 649.716139][T15336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.725146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.768203][T15336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.776743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.819797][T15336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.828936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.857810][T15336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.866595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.914162][T15336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.136444][T22054] syzkaller1: entered promiscuous mode [ 650.155368][T22054] syzkaller1: entered allmulticast mode [ 650.184996][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3987'. [ 650.340395][T22063] netlink: 1484 bytes leftover after parsing attributes in process `syz.1.3990'. [ 650.477481][T22070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3992'. [ 650.503453][T22070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3992'. [ 650.539862][T22070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3992'. [ 650.599677][T22070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3992'. [ 650.621983][T22070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3992'. [ 650.625954][T22077] bond4 (unregistering): Released all slaves [ 650.644997][T22070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3992'. [ 650.661018][T22070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3992'. [ 650.845774][T22078] bond4 (unregistering): Released all slaves [ 650.969696][T15336] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.014323][T15336] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.090952][T15336] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.117478][T15336] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.666614][T22115] bond0: Error: Cannot enslave bond to itself. [ 652.160977][ T1651] block nbd4: Possible stuck request ffff8880269f0000: control (read@0,1024B). Runtime 30 seconds [ 652.177534][ T1651] block nbd4: Possible stuck request ffff8880269f01c0: control (read@1024,1024B). Runtime 30 seconds [ 652.188840][ T1651] block nbd4: Possible stuck request ffff8880269f0380: control (read@2048,1024B). Runtime 30 seconds [ 652.204711][ T1651] block nbd4: Possible stuck request ffff8880269f0540: control (read@3072,1024B). Runtime 30 seconds [ 652.300132][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 652.366278][T22140] netlink: 'syz.0.4011': attribute type 21 has an invalid length. [ 653.377594][T22188] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 653.511181][T22193] netlink: 'syz.3.4027': attribute type 11 has an invalid length. [ 653.736276][T22207] netlink: 'syz.4.4033': attribute type 1 has an invalid length. [ 653.765131][T22208] gretap1: entered allmulticast mode [ 653.894988][T22216] __nla_validate_parse: 68 callbacks suppressed [ 653.895004][T22216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4031'. [ 653.956045][T22219] smc: removing ib device sqz0 [ 654.018652][T22223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4034'. [ 654.067537][T22219] smbdirect: ib_dev[sqz0] removed [ 654.630396][T22240] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20000 [ 654.765148][T22243] sctp: [Deprecated]: syz.3.4040 (pid 22243) Use of int in max_burst socket option. [ 654.765148][T22243] Use struct sctp_assoc_value instead [ 654.959669][T22247] netlink: 'syz.1.4041': attribute type 1 has an invalid length. [ 654.992122][T22253] net_ratelimit: 5 callbacks suppressed [ 654.992144][T22253] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 655.069052][T22258] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4043'. [ 655.234734][T22261] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4045'. [ 655.257312][T22262] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 656.606521][T22299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4054'. [ 656.990401][T22306] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 656.997201][T22304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4055'. [ 657.074083][T22304] netlink: 'syz.3.4055': attribute type 30 has an invalid length. [ 657.099382][T22304] netlink: 'syz.3.4055': attribute type 29 has an invalid length. [ 657.131868][T22312] syzkaller0: entered promiscuous mode [ 657.146230][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4055'. [ 657.166450][T22312] syzkaller0: entered allmulticast mode [ 657.226670][T22316] veth0_virt_wifi: entered allmulticast mode [ 657.707839][T22326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4061'. [ 657.814460][T22325] netlink: 'syz.2.4061': attribute type 16 has an invalid length. [ 657.836744][T22325] netlink: 'syz.2.4061': attribute type 17 has an invalid length. [ 657.941235][T22328] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 658.210527][T22325] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.258396][T22325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.545562][T22325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 658.585120][T22325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 658.618168][T22325] hsr0: left promiscuous mode [ 658.626133][T22325] veth0_virt_wifi: left allmulticast mode [ 658.637208][T22325] veth1_vlan: left promiscuous mode [ 658.645718][T22325] veth0_vlan: left promiscuous mode [ 658.653954][T22325] veth0_vlan: entered promiscuous mode [ 658.667849][T22325] veth1_vlan: entered promiscuous mode [ 658.682346][T22325] veth1_macvtap: left promiscuous mode [ 658.692325][T22325] veth0_macvtap: left promiscuous mode [ 658.721856][T22325] veth0_macvtap: entered promiscuous mode [ 658.730381][T22325] veth1_macvtap: entered promiscuous mode [ 658.753522][T22325] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 658.996347][T22341] syzkaller0: refused to change device tx_queue_len [ 659.013632][T15332] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.033929][T15332] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.085849][T15332] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.121057][T15332] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.190080][T22358] netlink: 'syz.4.4069': attribute type 2 has an invalid length. [ 659.250124][T22361] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 659.280051][T22358] netlink: 'syz.4.4069': attribute type 2 has an invalid length. [ 659.406057][T22371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4070'. [ 659.418482][T22355] "syz.3.4068" (22355) uses obsolete ecb(arc4) skcipher [ 659.496181][T22371] ip6gre2: entered promiscuous mode [ 659.616830][T22378] syzkaller0: entered promiscuous mode [ 659.626728][T22378] syzkaller0: entered allmulticast mode [ 659.669628][T22378] tipc: Enabled bearer , priority 0 [ 660.025209][T22376] tipc: Resetting bearer [ 660.136318][T22376] tipc: Disabling bearer [ 660.208683][T22389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4077'. [ 660.292023][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4079'. [ 660.602885][T22405] netlink: 'syz.2.4079': attribute type 1 has an invalid length. [ 660.689910][T22412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.745913][T22411] bond5: entered allmulticast mode [ 661.007007][T22407] dummy0 speed is unknown, defaulting to 1000 [ 661.089561][T22424] netlink: 376 bytes leftover after parsing attributes in process `syz.4.4085'. [ 661.117924][T22424] netlink: 376 bytes leftover after parsing attributes in process `syz.4.4085'. [ 661.249261][T22429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4086'. [ 661.413810][T22435] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4090'. [ 661.484863][T22437] 8021q: adding VLAN 0 to HW filter on device bond7 [ 661.511319][T22440] netlink: 592 bytes leftover after parsing attributes in process `syz.4.4089'. [ 661.557350][T22437] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4089'. [ 661.664935][T22447] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4092'. [ 661.988699][ T7972] IPVS: starting estimator thread 0... [ 662.086859][T22452] IPVS: using max 24 ests per chain, 57600 per kthread [ 662.205700][T22446] dummy0 speed is unknown, defaulting to 1000 [ 663.530029][T22478] netlink: 'syz.1.4100': attribute type 18 has an invalid length. [ 663.695356][T22449] dummy0 speed is unknown, defaulting to 1000 [ 663.968938][T22490] syzkaller0: entered promiscuous mode [ 663.983977][T22490] syzkaller0: entered allmulticast mode [ 664.265554][T22495] bond8: Unable to set up delay as MII monitoring is disabled [ 664.279212][T22495] bond8 (unregistering): Released all slaves [ 664.413660][T22498] team0: Port device team_slave_0 removed [ 664.439983][T22503] __nla_validate_parse: 5 callbacks suppressed [ 664.440005][T22503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4107'. [ 664.467795][T22504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4105'. [ 664.485234][T22504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4105'. [ 664.571709][T22460] dummy0 speed is unknown, defaulting to 1000 [ 664.631171][T22511] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4108'. [ 664.729772][T22501] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 664.746771][T22511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4108'. [ 665.498267][T22527] bridge0: port 1(vlan3) entered blocking state [ 665.513621][T22527] bridge0: port 1(vlan3) entered disabled state [ 665.520547][T22527] vlan3: entered allmulticast mode [ 665.529710][T22527] bridge0: entered allmulticast mode [ 665.536311][T22527] bridge0: entered promiscuous mode [ 665.545371][T22534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4111'. [ 665.561612][T22527] vlan3: left allmulticast mode [ 665.567828][T22527] bridge0: left allmulticast mode [ 665.594912][T22534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4111'. [ 665.604711][ T7957] bridge0: left promiscuous mode [ 666.205665][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4115'. [ 666.693812][T21503] block nbd5: NBD_DISCONNECT [ 666.717289][T21503] block nbd5: Disconnected due to user request. [ 666.739591][T22552] vcan1: entered promiscuous mode [ 666.744820][T21503] block nbd5: shutting down sockets [ 667.049995][ T7957] IPVS: starting estimator thread 0... [ 667.157648][T21503] udevd[21503]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 667.174690][T22559] IPVS: using max 26 ests per chain, 62400 per kthread [ 667.527314][T22569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4119'. [ 667.851103][T22581] netlink: 'syz.2.4122': attribute type 2 has an invalid length. [ 667.892192][T22581] netlink: 'syz.2.4122': attribute type 1 has an invalid length. [ 667.981108][T22591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4124'. [ 668.021021][T22591] netlink: 'syz.0.4124': attribute type 21 has an invalid length. [ 668.596000][T22569] dummy0 speed is unknown, defaulting to 1000 [ 669.684733][T22665] __nla_validate_parse: 11 callbacks suppressed [ 669.684757][T22665] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4145'. [ 670.227691][T22648] dummy0 speed is unknown, defaulting to 1000 [ 670.236286][T22685] netlink: 376 bytes leftover after parsing attributes in process `syz.2.4152'. [ 670.367811][T22687] netlink: 'syz.0.4153': attribute type 2 has an invalid length. [ 670.407890][T22687] netlink: 'syz.0.4153': attribute type 2 has an invalid length. [ 670.832360][T22700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4156'. [ 670.842147][T22698] tun0: tun_chr_ioctl cmd 1074025675 [ 670.858044][T22698] tun0: persist enabled [ 670.872635][T22698] tun0: tun_chr_ioctl cmd 1074025675 [ 670.888922][T22698] tun0: persist disabled [ 671.025983][T22705] netlink: 'syz.4.4158': attribute type 6 has an invalid length. [ 671.063788][T22705] netlink: 'syz.4.4158': attribute type 23 has an invalid length. [ 671.083472][T22705] IPv6: NLM_F_CREATE should be specified when creating new route [ 671.596882][T22718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4162'. [ 671.650710][T18813] block nbd6: Receive control failed (result -1) [ 672.239300][T22722] tc_dump_action: action bad kind [ 672.661173][T22735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4165'. [ 672.806956][T22739] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4168'. [ 672.834663][T22739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4168'. [ 672.946828][T22744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4170'. [ 672.980122][T22746] netlink: 'syz.0.4167': attribute type 1 has an invalid length. [ 673.109196][T22753] bond2: (slave bridge2): making interface the new active one [ 673.121769][T22753] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 673.702589][T22786] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4182'. [ 673.738712][T22788] netlink: 'syz.4.4181': attribute type 2 has an invalid length. [ 673.761523][T22787] netlink: 'syz.4.4181': attribute type 2 has an invalid length. [ 673.946691][T22800] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4186'. [ 674.380716][T22795] dummy0 speed is unknown, defaulting to 1000 [ 677.128639][T22827] __nla_validate_parse: 1 callbacks suppressed [ 677.128679][T22827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4194'. [ 677.508936][T22847] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4199'. [ 677.839523][T22867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4204'. [ 677.931930][T22869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4204'. [ 677.999833][T22865] netlink: 'syz.2.4203': attribute type 1 has an invalid length. [ 678.304691][T22878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4207'. [ 678.326815][T22878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4207'. [ 678.338027][T22882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4208'. [ 678.757820][T22885] netlink: 'syz.2.4209': attribute type 1 has an invalid length. [ 678.798656][T22910] netlink: 376 bytes leftover after parsing attributes in process `syz.1.4214'. [ 678.818005][T22910] netlink: 376 bytes leftover after parsing attributes in process `syz.1.4214'. [ 678.972067][ T7957] hid-generic 0005:4B58:5505.0002: item fetching failed at offset 0/2 [ 679.001723][ T7957] hid-generic 0005:4B58:5505.0002: probe with driver hid-generic failed with error -22 [ 679.036628][T22921] netlink: 41 bytes leftover after parsing attributes in process `syz.2.4218'. [ 679.054426][ T7957] [ 679.056813][ T7957] ====================================================== [ 679.063858][ T7957] WARNING: possible circular locking dependency detected [ 679.070902][ T7957] syzkaller #0 Not tainted [ 679.075334][ T7957] ------------------------------------------------------ [ 679.082371][ T7957] kworker/0:10/7957 is trying to acquire lock: [ 679.088605][ T7957] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x174/0x8e0 [ 679.099449][ T7957] [ 679.099449][ T7957] but task is already holding lock: [ 679.106839][ T7957] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 679.117167][ T7957] [ 679.117167][ T7957] which lock already depends on the new lock. [ 679.117167][ T7957] [ 679.127605][ T7957] [ 679.127605][ T7957] the existing dependency chain (in reverse order) is: [ 679.136656][ T7957] [ 679.136656][ T7957] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 679.144780][ T7957] down_write+0x96/0x200 [ 679.149596][ T7957] kernfs_add_one+0x41/0x5c0 [ 679.154827][ T7957] kernfs_create_dir_ns+0xde/0x130 [ 679.160582][ T7957] internal_create_group+0x425/0x1180 [ 679.166562][ T7957] cpuhp_invoke_callback+0x445/0x860 [ 679.172531][ T7957] cpuhp_issue_call+0x430/0x7a0 [ 679.177937][ T7957] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 679.184545][ T7957] __cpuhp_setup_state+0x3f/0x60 [ 679.190016][ T7957] do_one_initcall+0x250/0x870 [ 679.195312][ T7957] do_initcall_level+0x104/0x190 [ 679.200978][ T7957] do_initcalls+0x59/0xa0 [ 679.205836][ T7957] kernel_init_freeable+0x2a6/0x3e0 [ 679.211566][ T7957] kernel_init+0x1d/0x1d0 [ 679.216533][ T7957] ret_from_fork+0x514/0xb70 [ 679.221659][ T7957] ret_from_fork_asm+0x1a/0x30 [ 679.226974][ T7957] [ 679.226974][ T7957] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 679.234802][ T7957] [ 679.234802][ T7957] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 679.242540][ T7957] cpus_read_lock+0x42/0x160 [ 679.247745][ T7957] static_key_slow_inc+0x12/0x30 [ 679.253208][ T7957] udp_tunnel_encap_enable+0x86/0xb0 [ 679.259203][ T7957] udp_lib_setsockopt+0x2da/0x6b0 [ 679.264753][ T7957] udpv6_setsockopt+0x67/0xb0 [ 679.269954][ T7957] do_sock_setsockopt+0x17c/0x1b0 [ 679.275568][ T7957] __x64_sys_setsockopt+0x13d/0x1b0 [ 679.281328][ T7957] do_syscall_64+0x15f/0xf80 [ 679.286465][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.292978][ T7957] [ 679.292978][ T7957] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 679.300721][ T7957] lock_sock_nested+0x41/0x100 [ 679.306017][ T7957] inet_shutdown+0x6a/0x390 [ 679.311051][ T7957] nbd_mark_nsock_dead+0x2e9/0x560 [ 679.316787][ T7957] recv_work+0x1c2e/0x1d40 [ 679.321823][ T7957] process_scheduled_works+0xb5d/0x1860 [ 679.327891][ T7957] worker_thread+0xa53/0xfc0 [ 679.333008][ T7957] kthread+0x388/0x470 [ 679.337614][ T7957] ret_from_fork+0x514/0xb70 [ 679.342726][ T7957] ret_from_fork_asm+0x1a/0x30 [ 679.348015][ T7957] [ 679.348015][ T7957] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 679.355671][ T7957] __mutex_lock+0x1a3/0x1550 [ 679.360891][ T7957] nbd_queue_rq+0x37b/0x1100 [ 679.366012][ T7957] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 679.372090][ T7957] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 679.378955][ T7957] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 679.385645][ T7957] blk_mq_run_hw_queue+0x348/0x4f0 [ 679.391302][ T7957] blk_mq_dispatch_list+0xd16/0xe10 [ 679.397117][ T7957] blk_mq_flush_plug_list+0x48d/0x570 [ 679.403126][ T7957] __blk_flush_plug+0x3ed/0x4d0 [ 679.408708][ T7957] __submit_bio+0x28d/0x580 [ 679.413747][ T7957] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 679.420042][ T7957] block_read_full_folio+0x599/0x830 [ 679.425860][ T7957] filemap_read_folio+0x137/0x3b0 [ 679.431411][ T7957] do_read_cache_folio+0x358/0x590 [ 679.437050][ T7957] read_part_sector+0xb6/0x2b0 [ 679.442622][ T7957] adfspart_check_ICS+0xb1/0x960 [ 679.448178][ T7957] bdev_disk_changed+0x817/0x1770 [ 679.453736][ T7957] blkdev_get_whole+0x380/0x510 [ 679.459217][ T7957] bdev_open+0x31e/0xd30 [ 679.464075][ T7957] blkdev_open+0x470/0x610 [ 679.469104][ T7957] do_dentry_open+0x785/0x14e0 [ 679.474392][ T7957] vfs_open+0x3b/0x340 [ 679.479074][ T7957] path_openat+0x2e08/0x3860 [ 679.484193][ T7957] do_file_open+0x23e/0x4a0 [ 679.489314][ T7957] do_sys_openat2+0x113/0x200 [ 679.494518][ T7957] __x64_sys_openat+0x138/0x170 [ 679.499899][ T7957] do_syscall_64+0x15f/0xf80 [ 679.505019][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.511523][ T7957] [ 679.511523][ T7957] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 679.518830][ T7957] __mutex_lock+0x1a3/0x1550 [ 679.523954][ T7957] nbd_queue_rq+0xc6/0x1100 [ 679.529078][ T7957] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 679.535166][ T7957] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 679.542208][ T7957] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 679.548757][ T7957] blk_mq_run_hw_queue+0x348/0x4f0 [ 679.554400][ T7957] blk_mq_dispatch_list+0xd16/0xe10 [ 679.560300][ T7957] blk_mq_flush_plug_list+0x48d/0x570 [ 679.566386][ T7957] __blk_flush_plug+0x3ed/0x4d0 [ 679.571769][ T7957] __submit_bio+0x28d/0x580 [ 679.576978][ T7957] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 679.583151][ T7957] block_read_full_folio+0x599/0x830 [ 679.589052][ T7957] filemap_read_folio+0x137/0x3b0 [ 679.594609][ T7957] do_read_cache_folio+0x358/0x590 [ 679.600423][ T7957] read_part_sector+0xb6/0x2b0 [ 679.605714][ T7957] adfspart_check_ICS+0xb1/0x960 [ 679.611187][ T7957] bdev_disk_changed+0x817/0x1770 [ 679.616826][ T7957] blkdev_get_whole+0x380/0x510 [ 679.622475][ T7957] bdev_open+0x31e/0xd30 [ 679.627244][ T7957] blkdev_open+0x470/0x610 [ 679.632182][ T7957] do_dentry_open+0x785/0x14e0 [ 679.637534][ T7957] vfs_open+0x3b/0x340 [ 679.642305][ T7957] path_openat+0x2e08/0x3860 [ 679.647504][ T7957] do_file_open+0x23e/0x4a0 [ 679.652629][ T7957] do_sys_openat2+0x113/0x200 [ 679.657831][ T7957] __x64_sys_openat+0x138/0x170 [ 679.663211][ T7957] do_syscall_64+0x15f/0xf80 [ 679.668425][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.674847][ T7957] [ 679.674847][ T7957] -> #4 (set->srcu){.+.+}-{0:0}: [ 679.681978][ T7957] __synchronize_srcu+0xca/0x300 [ 679.687457][ T7957] elevator_switch+0x1e8/0x7a0 [ 679.692776][ T7957] elevator_change+0x2cc/0x450 [ 679.698086][ T7957] elevator_set_default+0x36c/0x430 [ 679.703845][ T7957] blk_register_queue+0x3e9/0x4e0 [ 679.709584][ T7957] __add_disk+0x677/0xd50 [ 679.714441][ T7957] add_disk_fwnode+0xfb/0x480 [ 679.719826][ T7957] nbd_dev_add+0x72c/0xb50 [ 679.724777][ T7957] nbd_init+0x168/0x1f0 [ 679.729513][ T7957] do_one_initcall+0x250/0x870 [ 679.734803][ T7957] do_initcall_level+0x104/0x190 [ 679.740290][ T7957] do_initcalls+0x59/0xa0 [ 679.745143][ T7957] kernel_init_freeable+0x2a6/0x3e0 [ 679.751041][ T7957] kernel_init+0x1d/0x1d0 [ 679.755988][ T7957] ret_from_fork+0x514/0xb70 [ 679.761107][ T7957] ret_from_fork_asm+0x1a/0x30 [ 679.766578][ T7957] [ 679.766578][ T7957] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 679.774671][ T7957] __mutex_lock+0x1a3/0x1550 [ 679.780322][ T7957] elevator_change+0x1b3/0x450 [ 679.785729][ T7957] elevator_set_none+0xb5/0x140 [ 679.791129][ T7957] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 679.797466][ T7957] nbd_start_device+0x17f/0xb10 [ 679.802935][ T7957] nbd_genl_connect+0x165b/0x1cf0 [ 679.808580][ T7957] genl_family_rcv_msg_doit+0x22a/0x330 [ 679.814770][ T7957] genl_rcv_msg+0x61c/0x7a0 [ 679.819804][ T7957] netlink_rcv_skb+0x232/0x4b0 [ 679.825186][ T7957] genl_rcv+0x28/0x40 [ 679.829701][ T7957] netlink_unicast+0x75c/0x8e0 [ 679.835076][ T7957] netlink_sendmsg+0x813/0xb40 [ 679.840369][ T7957] ____sys_sendmsg+0x972/0x9f0 [ 679.845757][ T7957] ___sys_sendmsg+0x2a5/0x360 [ 679.851145][ T7957] __x64_sys_sendmsg+0x1bd/0x2a0 [ 679.856613][ T7957] do_syscall_64+0x15f/0xf80 [ 679.861748][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.868340][ T7957] [ 679.868340][ T7957] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 679.877048][ T7957] blk_alloc_queue+0x546/0x680 [ 679.882352][ T7957] __blk_mq_alloc_disk+0x197/0x390 [ 679.887994][ T7957] nbd_dev_add+0x499/0xb50 [ 679.892943][ T7957] nbd_init+0x168/0x1f0 [ 679.897650][ T7957] do_one_initcall+0x250/0x870 [ 679.902959][ T7957] do_initcall_level+0x104/0x190 [ 679.908434][ T7957] do_initcalls+0x59/0xa0 [ 679.913294][ T7957] kernel_init_freeable+0x2a6/0x3e0 [ 679.919113][ T7957] kernel_init+0x1d/0x1d0 [ 679.923970][ T7957] ret_from_fork+0x514/0xb70 [ 679.929093][ T7957] ret_from_fork_asm+0x1a/0x30 [ 679.934564][ T7957] [ 679.934564][ T7957] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 679.941784][ T7957] fs_reclaim_acquire+0x71/0x100 [ 679.947279][ T7957] kmem_cache_alloc_noprof+0x40/0x650 [ 679.953191][ T7957] __kernfs_iattrs+0xdf/0x320 [ 679.958416][ T7957] kernfs_iop_setattr+0xea/0x3f0 [ 679.963887][ T7957] notify_change+0xc1a/0xf40 [ 679.969020][ T7957] do_truncate+0x1c2/0x250 [ 679.974073][ T7957] path_openat+0x2f89/0x3860 [ 679.979218][ T7957] do_file_open+0x23e/0x4a0 [ 679.984264][ T7957] do_sys_openat2+0x113/0x200 [ 679.989482][ T7957] __x64_sys_openat+0x138/0x170 [ 679.994868][ T7957] do_syscall_64+0x15f/0xf80 [ 680.000005][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.006436][ T7957] [ 680.006436][ T7957] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 680.015056][ T7957] __lock_acquire+0x15a5/0x2cf0 [ 680.020528][ T7957] lock_acquire+0x106/0x350 [ 680.025558][ T7957] down_write+0x96/0x200 [ 680.030342][ T7957] __kernfs_remove+0x174/0x8e0 [ 680.035659][ T7957] kernfs_remove_by_name_ns+0xc0/0x140 [ 680.041762][ T7957] really_probe+0x382/0xaf0 [ 680.046790][ T7957] __driver_probe_device+0x1ef/0x380 [ 680.052603][ T7957] driver_probe_device+0x4f/0x240 [ 680.058166][ T7957] __device_attach_driver+0x279/0x430 [ 680.064088][ T7957] bus_for_each_drv+0x258/0x2f0 [ 680.069516][ T7957] __device_attach+0x2c5/0x450 [ 680.074820][ T7957] device_initial_probe+0xa1/0xd0 [ 680.080476][ T7957] bus_probe_device+0x12a/0x220 [ 680.085869][ T7957] device_add+0x7e9/0xbb0 [ 680.090870][ T7957] hid_add_device+0x272/0x3e0 [ 680.096088][ T7957] hidp_session_dev_work+0x45/0x160 [ 680.101834][ T7957] process_scheduled_works+0xb5d/0x1860 [ 680.107914][ T7957] worker_thread+0xa53/0xfc0 [ 680.113032][ T7957] kthread+0x388/0x470 [ 680.117640][ T7957] ret_from_fork+0x514/0xb70 [ 680.122930][ T7957] ret_from_fork_asm+0x1a/0x30 [ 680.128404][ T7957] [ 680.128404][ T7957] other info that might help us debug this: [ 680.128404][ T7957] [ 680.138631][ T7957] Chain exists of: [ 680.138631][ T7957] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 680.138631][ T7957] [ 680.153063][ T7957] Possible unsafe locking scenario: [ 680.153063][ T7957] [ 680.160512][ T7957] CPU0 CPU1 [ 680.165882][ T7957] ---- ---- [ 680.171246][ T7957] lock(&root->kernfs_rwsem); [ 680.176017][ T7957] lock(cpuhp_state_mutex); [ 680.183130][ T7957] lock(&root->kernfs_rwsem); [ 680.190420][ T7957] lock(&root->kernfs_iattr_rwsem); [ 680.195711][ T7957] [ 680.195711][ T7957] *** DEADLOCK *** [ 680.195711][ T7957] [ 680.203860][ T7957] 5 locks held by kworker/0:10/7957: [ 680.209143][ T7957] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 680.220118][ T7957] #1: ffffc9000696fc40 ((work_completion)(&session->dev_init)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 680.232654][ T7957] #2: ffff88805f945a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 680.241982][ T7957] #3: ffff88801be8d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 680.253478][ T7957] #4: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 680.264285][ T7957] [ 680.264285][ T7957] stack backtrace: [ 680.270276][ T7957] CPU: 0 UID: 0 PID: 7957 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 680.270296][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.270307][ T7957] Workqueue: events hidp_session_dev_work [ 680.270333][ T7957] Call Trace: [ 680.270341][ T7957] [ 680.270348][ T7957] dump_stack_lvl+0xe8/0x150 [ 680.270365][ T7957] print_circular_bug+0x2e1/0x300 [ 680.270387][ T7957] check_noncircular+0x12e/0x150 [ 680.270409][ T7957] __lock_acquire+0x15a5/0x2cf0 [ 680.270428][ T7957] ? __lock_acquire+0x6b5/0x2cf0 [ 680.270445][ T7957] ? __lock_acquire+0x6b5/0x2cf0 [ 680.270462][ T7957] ? __kernfs_remove+0x174/0x8e0 [ 680.270483][ T7957] lock_acquire+0x106/0x350 [ 680.270498][ T7957] ? __kernfs_remove+0x174/0x8e0 [ 680.270523][ T7957] down_write+0x96/0x200 [ 680.270543][ T7957] ? __kernfs_remove+0x174/0x8e0 [ 680.270563][ T7957] ? __pfx_down_write+0x10/0x10 [ 680.270581][ T7957] ? kernfs_root+0x1c/0x230 [ 680.270605][ T7957] ? kernfs_root+0x1c/0x230 [ 680.270623][ T7957] ? kernfs_root+0x1ea/0x230 [ 680.270642][ T7957] __kernfs_remove+0x174/0x8e0 [ 680.270663][ T7957] ? kernfs_find_ns+0x51c/0x570 [ 680.270684][ T7957] kernfs_remove_by_name_ns+0xc0/0x140 [ 680.270708][ T7957] really_probe+0x382/0xaf0 [ 680.270729][ T7957] __driver_probe_device+0x1ef/0x380 [ 680.270747][ T7957] driver_probe_device+0x4f/0x240 [ 680.270767][ T7957] __device_attach_driver+0x279/0x430 [ 680.270786][ T7957] bus_for_each_drv+0x258/0x2f0 [ 680.270809][ T7957] ? __pfx___device_attach_driver+0x10/0x10 [ 680.270827][ T7957] ? __pfx_bus_for_each_drv+0x10/0x10 [ 680.270850][ T7957] ? lockdep_hardirqs_on+0x7a/0x110 [ 680.270866][ T7957] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 680.270882][ T7957] __device_attach+0x2c5/0x450 [ 680.270900][ T7957] ? __pfx___device_attach+0x10/0x10 [ 680.270917][ T7957] ? do_raw_spin_unlock+0xf5/0x210 [ 680.270939][ T7957] ? _raw_spin_unlock+0x28/0x50 [ 680.270953][ T7957] device_initial_probe+0xa1/0xd0 [ 680.270971][ T7957] bus_probe_device+0x12a/0x220 [ 680.270994][ T7957] device_add+0x7e9/0xbb0 [ 680.271011][ T7957] hid_add_device+0x272/0x3e0 [ 680.271031][ T7957] ? hidp_session_dev_work+0x1e/0x160 [ 680.271053][ T7957] hidp_session_dev_work+0x45/0x160 [ 680.271074][ T7957] ? process_scheduled_works+0xa70/0x1860 [ 680.271090][ T7957] process_scheduled_works+0xb5d/0x1860 [ 680.271115][ T7957] ? __pfx_process_scheduled_works+0x10/0x10 [ 680.271133][ T7957] ? assign_work+0x3d5/0x5e0 [ 680.271148][ T7957] worker_thread+0xa53/0xfc0 [ 680.271173][ T7957] kthread+0x388/0x470 [ 680.271192][ T7957] ? __pfx_worker_thread+0x10/0x10 [ 680.271207][ T7957] ? __pfx_kthread+0x10/0x10 [ 680.271226][ T7957] ret_from_fork+0x514/0xb70 [ 680.271243][ T7957] ? __pfx_ret_from_fork+0x10/0x10 [ 680.271258][ T7957] ? __switch_to+0xc79/0x1410 [ 680.271281][ T7957] ? __pfx_kthread+0x10/0x10 [ 680.271300][ T7957] ret_from_fork_asm+0x1a/0x30 [ 680.271323][ T7957] [ 682.213801][ T1651] block nbd4: Possible stuck request ffff8880269f0000: control (read@0,1024B). Runtime 60 seconds [ 682.224644][ T1651] block nbd4: Possible stuck request ffff8880269f01c0: control (read@1024,1024B). Runtime 60 seconds [ 682.235800][ T1651] block nbd4: Possible stuck request ffff8880269f0380: control (read@2048,1024B). Runtime 60 seconds [ 682.247091][ T1651] block nbd4: Possible stuck request ffff8880269f0540: control (read@3072,1024B). Runtime 60 seconds [ 683.613831][ T4993] udevd[4993]: worker [19655] /devices/virtual/block/nbd4 is taking a long time [ 686.064220][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.072741][ T1314] ieee802154 phy0 wpan0: encryption failed: -22