last executing test programs: 17.743307939s ago: executing program 3 (id=19659): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x42, 0x4000006, 0x8, 0x0, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e34, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x20000000000000cc, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x40, 0x0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x18b9185c, 0x34}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000c05}, 0x4000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r10, 0x800000}, 0x38) listen(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x8}, &(0x7f0000000000)={0xff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0xd}, 0x0, 0x0, 0x0) 16.766203768s ago: executing program 3 (id=19662): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e8040000000", 0x24) r2 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r7, 0x2f, 0x1, 0x2, 0x1, 0x26, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x1, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="6115a400000000006113540000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15", @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES64=r2, @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0xa000000b}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000140)={0x8000001c}) 16.188495932s ago: executing program 3 (id=19663): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000030000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="5c250ed6087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16.061397261s ago: executing program 3 (id=19664): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r2], 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@remote, r5}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000080000000000009500000000000000000000000000000013835661c2b771142af9cb0000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8}]}]}, 0x34}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0xf9}) write$cgroup_int(r10, &(0x7f0000000200)=0xf, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r10, 0x15, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map=r12, r10, 0x2d, 0x18, 0x0, @void, @value=r6, @void, @void, r11}, 0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0), 0x802}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000086000000bf092000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000000040)) sendmsg$nl_generic(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xd4, 0x3e, 0xd8e721062bd96405, 0x70bd2b, 0xfffffffc, {0x4}, [@nested={0xbd, 0x8bf, 0x0, 0x1, [@generic="6e463c46e438da852897746a812bfb2cd9802cda8db7f70ba8294c17d6db191ff9b00545914ea1cacf916d59c303a1eebb75d147e4fbdb9757498d9c5ce124936b118e794d2cca6dfcfe5bfa6073a5bd1b4520803e3e2f7664", @generic="da99cae86306005ce60d867dd12b7a58c078bbc373c92649f66ec95770cfe2199814075c5235ab9842e7cf45ad66342b0dc7768fdc74f847fdf4d19e6541c033dbece1c569f7d9cf36ef77f5c615dc8b9052a1fdf1986359cd22fe619b70785a"]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 15.753008657s ago: executing program 3 (id=19666): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x22, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_open_procfs$namespace(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 15.085448806s ago: executing program 2 (id=19671): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000ae3ff62791c38e3d14ec66e16bf69f66"], 0x28}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) ioctl(r0, 0x8b29, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r3, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x7}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xb, 0x3, 0x18, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x700, 0x10, 0x7ff, 0x3}}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@remote, 0x11, r8}) 14.859018312s ago: executing program 2 (id=19672): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x23}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r4 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18fff400010000000000000000020000000000000000feab9500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="3414fff6", @ANYRES16=r9, @ANYBLOB="02002dbd7000ffdbdf250400000008000200030000000800030000000000"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40001) socket$inet6_tcp(0xa, 0x1, 0x0) 14.61172917s ago: executing program 0 (id=19675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r1, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x3, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x24b30b80f5cd5bc5, 0x0, 0x0, 0x0, 0x3}]}]}, 0x13c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5e0}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x40, 0x7, 0x21, @empty, @mcast1, 0x80, 0x7800, 0x3ff, 0xffffffff}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5ab2e7a381329822}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c810}, 0x841) 13.901256476s ago: executing program 2 (id=19676): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7f}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, 0x0) listen(0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0xda) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000500), &(0x7f00000002c0)=r5}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) accept4$alg(r4, 0x0, 0x0, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) 10.452211671s ago: executing program 0 (id=19677): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x22, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8.736242598s ago: executing program 1 (id=19680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r1, &(0x7f0000002f40)=[{{&(0x7f0000000480)=@sco={0x1f, @none}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/137, 0x89}], 0x1, &(0x7f0000000780)=""/94, 0x5e}}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000880)=""/102, 0x66}, {&(0x7f0000000900)=""/94, 0x5e}, {&(0x7f0000000a00)=""/244, 0xf4}, {&(0x7f0000000b00)=""/7, 0x7}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/155, 0x9b}], 0x6, &(0x7f0000003100)=""/250, 0xfa}, 0x800}, {{&(0x7f0000000e80)=@ax25={{0x3, @rose}, [@netrom, @netrom, @netrom, @bcast, @rose, @bcast, @remote, @netrom]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f00)=""/48, 0x30}], 0x1, &(0x7f0000000f80)=""/20, 0x14}, 0x1}, {{&(0x7f0000000fc0)=@nfc_llcp, 0x80, &(0x7f0000002480)=[{&(0x7f0000001040)=""/91, 0x5b}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/48, 0x30}, {&(0x7f0000002100)=""/166, 0xa6}, {&(0x7f00000021c0)=""/44, 0x2c}, {&(0x7f0000000d80)=""/249, 0xf9}, {&(0x7f0000002300)=""/175, 0xaf}, {&(0x7f00000023c0)=""/149, 0x95}], 0x8, &(0x7f0000002500)=""/118, 0x76}, 0x9}, {{&(0x7f0000002580)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002600)=""/181, 0xb5}, {&(0x7f00000026c0)=""/159, 0x9f}, {&(0x7f0000002780)=""/48, 0x30}], 0x3, &(0x7f0000002800)=""/132, 0x84}, 0xfffffff9}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002940)=""/223, 0xdf}, {&(0x7f0000002a40)=""/248, 0xf8}, {&(0x7f0000002b40)=""/195, 0xc3}], 0x3, &(0x7f0000002c80)=""/71, 0x47}, 0x8}], 0x6, 0x12020, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000022c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x5f, 0x30, 0x2e]}}, &(0x7f0000002200)=""/135, 0x2d, 0x87, 0x0, 0x3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=@base={0x20, 0x80, 0x3, 0x40, 0x1400, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x5, 0x0, 0x3}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000540)={'veth0_vlan\x00', 0x200}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000004240)=@delneigh={0x28, 0x1d, 0x1, 0x70bd25, 0x7, {0xa, 0x0, 0x0, 0x0, 0x0, 0x84, 0x2}, [@NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x44) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x2}, &(0x7f0000000180)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100037040100fbffffff000000000000", @ANYRES32=r9, @ANYBLOB="83000500012c00001c0012800b00010067726574617000000c00028008000700ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r7, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @local}}}], 0x20}}], 0x1, 0x24000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r11, 0x1, 0x24, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40054}, 0x4) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) 7.871557765s ago: executing program 1 (id=19683): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x42, 0x4000006, 0x8, 0x0, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e34, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x20000000000000cc, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 7.454704459s ago: executing program 1 (id=19684): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x5, 0x4, "dd197221"}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000400), 0x8) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x108}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', r9, 0x80, 0x40, 0xffffffff, 0x7ff, {{0x22, 0x4, 0x2, 0x9, 0x88, 0x67, 0x0, 0xf6, 0x2f, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x44, 0x2, [{0x0, 0xf, "a44ad9e563eff3c155df36a37c"}, {0x1, 0x11, "7a1afad85000ec3759ded5627a908f"}, {0x7, 0xf, "d590efb720b6d558d3e914f928"}, {0x1, 0x8, "c25585fe0e0a"}, {0x5, 0x7, "2204229b11"}]}, @timestamp_prespec={0x44, 0x24, 0x54, 0x3, 0x6, [{@multicast1, 0x6}, {@multicast2, 0x84000000}, {@loopback, 0xeb}, {@broadcast, 0x3}]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x7, [0x71aa, 0x6]}]}}}}}) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xb3, 0xab, &(0x7f0000000080)="13a9c9b7aaa831f75db47ddadaf4dd4288a274f543a3f12e975916c795878baa70132b7b9e2a76bb795625936cbd03fb0b18157fe04c9ec203ae1efa7a2747574dfcd71824b5156579636789b59a26ed9fca575907f0315af09ba37bf6499b3c69f336c917708a835cfa5333b89ea81cfd72e52b7c9dce0c0199218ac82de9d59e77e674ea81bd445ce5b0b5d91e3fc8237be1f14d646e312da8fc87326246fdad85db8db3cf78d5e1d14f08dcae4636a94c14", &(0x7f0000000140)=""/171, 0x2, 0x0, 0xe0, 0x27, &(0x7f0000000200)="9924e98e24b291c44ad229d4c623a63388f4ee17cb37c6512c9eebdc33190501fe83bdbe74552940bfec4b207a7851e8befd951f14ea431998e76f4a7f3cf5190e05366b80eef17c5f6269ee08b24da4a965e04f627389342198081e846333c633a0099ca0ae4a804f5c960bb8cedb6a2a9f1ce6415853b9e691535c91a7b5bfe43644ac8dc03a480d43b540422f184c1de4d150422da7cef5daa460fb8786b24d0266d31bde23f6a6f996a159204ecd297900cdada7cb1e2acb1e9b2ee8c8fa12fef5b45ab2d5b3171e5504a097bd0fe551f21de64a5a4c0dfa440b814b9af8", &(0x7f0000000300)="b940e7a09764696841c8300c69e5df256994dd4bb1007fcc3386eff968b35102784d2f9acd6dd3", 0x4, 0x0, 0xf7}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 6.031435886s ago: executing program 1 (id=19687): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r1, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x3, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x24b30b80f5cd5bc5, 0x0, 0x0, 0x0, 0x3}]}]}, 0x13c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5e0}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x40, 0x7, 0x21, @empty, @mcast1, 0x80, 0x7800, 0x3ff, 0xffffffff}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5ab2e7a381329822}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c810}, 0x841) 5.851677931s ago: executing program 3 (id=19688): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000080)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETSNDBUF(r4, 0x800454d3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, 0x0, 0x20048041) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x89, [0x8, 0xe, 0x5, 0x8, 0x1, 0xa, 0x8, 0x1, 0x6, 0x2, 0xe, 0x4a, 0x7, 0xe, 0xe, 0x2], 0x0, [0x3, 0x4, 0xd9, 0x1, 0x2, 0x1, 0xdc9, 0x4, 0x9a, 0x6, 0xa, 0x3ff, 0xa331, 0x100, 0x4, 0x3], [0xd, 0x9, 0x6, 0x6, 0xcbb, 0x7, 0xfff, 0x5, 0x1, 0x6, 0x6, 0x8, 0x9, 0x7291, 0xd, 0x573f]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010c300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "f35cdffa4c22ce"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000110700)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}], 0x7, "e81e98e4abedff"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000113700)) 4.734161148s ago: executing program 4 (id=19689): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000714010000000000000000000500600004"], 0x18}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) pipe(&(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x4}) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xe8, 0x8) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x403, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x8054) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 1.964052223s ago: executing program 1 (id=19690): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {0x0}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 1.781823281s ago: executing program 4 (id=19691): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e8040000000", 0x24) r2 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r7, 0x2f, 0x1, 0x2, 0x1, 0x26, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x1, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES64=r2, @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0xa000000b}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000140)={0x8000001c}) 1.779680269s ago: executing program 2 (id=19701): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) syz_emit_ethernet(0x5ea, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5b4, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "90c8a1a190c999b1f046a5f8502e73670cb7f4ab8035ca5ba53c4253cc4da3a75b04f4b82f3a1689ee3df70953d7085fdec7f497f5cc2d62a193023253aac15e73dbd3281353568d55068daae5fac37a26b04243257dcf4dc0fbd797d756a071225dfd6cd3dc31ad8c7c0c92bbfc03794c373498d3d89d05bb6386f13aa31d109ac4810e4502e74aae68aafa112cd1e90befbd59485a3396a44ff5387f60c329e0a740e62fb7bb9d695e12d9948a6e240b80ccc2ec5f2a69358b65cfa87a4bbd80e9b803b9816992fbc6c812c65fc10082b7468954573bedffa93ffd656148cf54a7ac3ef550a2be49f3b590db70c5286751c254d6fd14c3f699d1ff2c86b9f631078a31134ea0ad64f61a87a7a6506c79db494d7ef8eecf24e9ea143c259b6ec138e37d965d5577c23d225636d30385bbd04e5b57ebcbdf1984bd45eaf6a5659c22cc323c48dbf5fb3b77ccc125b38b8eb0cd11aaac4e77334f103895d82b4c3aecbd22186cf61b1d88da424bc3ddec9c49c0606e5aa1f6121052873fb08cbf344f6352d24150a865ea12da53ef04eb518f224c035c49a48ba2926b366e4530d60d27cdb4a850f9adba7f1e26b4fa6c941ced501439ef20e06c405dd0b384bec002dd591f8df1504d5634c96d4c67597fdd66a3576a97348d9610af83519fbf13bfb40ad39235068617582b387bce8d281d508b4a0b100cf629d157e8b777847a02a242a90906e6a084588b9d7461e6fb93532615ce6ea71e9d0d3fb13bb56982788d5786272d156e96996f23330eed4f84d7c120bf74441f35a137e313dd9e1a2a2a23504918e06d9a4f320522fe0d6df149364c032d3f14250b0db7e8ba445430515edb445e3fbdd8486067083f38042e973d58e3c79b575fdba68fee6b38f09001ef9b84e38f330a1aa65e48106a8629e7591fffa4f23c681c6584144d77c624b8369f5ae99faa194c7766fae96be118514d4b83f511f484515774c6261dc99189c12d46e67b9cecfefc5ad32cd0f5f59ab032bc93adb4d4476f6c8a5c011e00ebaca53eb4469c389122db553aabaed119fd640729d9557c50d78cfca4af346803804306a9796b090265e256dc820546c58fa2d3723c7205540006e831e1cfb3960ca77f606a6de6afd49e733c3720c801e1afc2142dbfad94ffd06c036395fcc2cd12c37ebd37d4c57ca8a83c45f0dd7f0020650c0e793e997bb9be183014f7225d84edb092362fadb3b30755331f9e7dd056c9148329a8ed848603770170e7ab2e9aae5b8ad97ab61179927427093feb59da6664fd14f14f059d04adac8d525c23a1fbf59f2eb334de8a38a0dc28943662e2eed21cefbb52e24f914723579e3b6ab9419f1399cec79d1a51b2c2668af2f71bcf3cf98cef743eace692612059486cf28365f897c6ae9a5e7176ad91404def08efe340e92ea3c790218511b9d69fcda5b500d694d59a768c866839cb22b918b9322689e6ac66d21866159c84e2a0e41d9324c092a6cfc14c6e42b1bf3657ed763fb3ee007e9633253e3250f7d5d2d574e4c89b4517d9cc7a9ff92b80e5870dd822d075e6082cae341f2db748921f2909264bad93d1ca36f01aa414c3681e382bf294cf2f436e5fee6871d8acadf504f784de821ac21811b894f0c78548a9cced0ef27bc07ab29a2556318e5133623ca3f346d197632455279b111a9ed789a927cf3b09c53ac1ebc7457cf50c79f211a7402d8ff5371bbaeb8fca4b52efdc944e81ddf7737475568c8589a353687a8d7cff5e7003a696d286bc51198b07b2676c9675a161b42c33aface83cd24976ec4af28e8e5a35a60ac1798d672a0b23ea519bc6f55be62c0e3db3a432cb54e3e75ea0adc375e4a8c1a645370a921e93d2a1b040d894d9153c4ba86f60b2aae3fd2c2b86502691a0728860e9e12210d237dc9dbe1d1795ef65c81f4e2e948466ca14829b3c7ee86e0e0510a232fd0d22c1fc7c62bdb2e7d2d11f22fc74c85974c6b88c5c02b6df180cd22ba092a1ae8ea4c60cb29e2faec1e97ebbf886c34815bb906ccb2a4f86f75a"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0xdabc}], 0x1, 0x10022, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000800) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x8, 0xf9, 0x16, @private0, @private2, 0x40, 0x8, 0x6, 0x9e}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001d80)={0x78c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf2a}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x5c, 0x0, 0x7}, {0xf2, 0x8, 0x5, 0x8}, {0x4, 0x1, 0x7, 0xfffffffb}]}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x78c}, 0x1, 0x0, 0x0, 0x44}, 0x41) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x84, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000008000000000000000000000000000000000000000000000000000000020000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r7, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}}, 0x20048014) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000050500010007000000a330d15f35"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x24040000) 1.697966944s ago: executing program 0 (id=19692): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'team0\x00'}) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23, 0xe7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffff01}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000002925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000080)=0x4db2, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(r7, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="51420000000000002800128008000100687372001c00028008000200", @ANYRES32=r5, @ANYBLOB="050007000100000008000100", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) getsockname$unix(r1, &(0x7f0000000400), &(0x7f0000000480)=0x6e) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r12, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x22010000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r10, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x801) 1.512842897s ago: executing program 2 (id=19693): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000a80000", @ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000540)={0x0, 0xffffffffffffff79, &(0x7f0000000000)={&(0x7f00000025c0)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbff, {0x24}}, 0x6a}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x400000, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x33}, 0xa, @in6=@private1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) unshare(0x8040480) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x8, &(0x7f0000000200), 0x4) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0xfff, 0x4}, &(0x7f0000000640)=0x90) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f00000026c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002680)={&(0x7f00000016c0)={0xefc, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x47}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "854f83"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "77b902f9e7c3"}, @NL80211_ATTR_FILS_ERP_RRK={0x59, 0xfc, "668d778f722c999958450739a2f4f17cda0373e2a840582861884c4f7531e12c07160ed8937a21e9acb3328ef648316c5a9d1db9d1020e19d2e897c87cc889616ba4a4f0015e70816c7b92d67aa2a338c3ba311904"}, @NL80211_ATTR_FILS_ERP_REALM={0xc1, 0xfa, "72ec55edb8e501f7d9e43d01830554deb7aa388ca4fad3ddc790de4ac5b8f494149a9038f07ac5e4801e837db06f5592303d22b21da069402d2e7008410aa0e534e2565af10d4367fe43e48c8510140e40ebb400cee35ed12d881a3e50c3f27667ddcbb4e47bab3a5b41b6f892b2484a1b5f230c9c85f8607432cb390196fbc51b02f7828cfc060469fa80325073979dc293fe6f18790cb09ae6f0b34d19b83e1ec2cf9487c5011551ed8b3634c32457f9eac85627346b0a21ee875c3a"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xcd, 0xfa, "a31ac43fc0e212a665c36fa134036488452e911d254e0a3739f2c6ea73dd560dd32788201921dda7c305fccb89eef505285dca27cf7e57ef04521a563e156260098dfcb0f36985a99253033e835cf033d91bc077f55aecc3ba11305b69c8c8940d8643c36ddcf4f0a2789055423f92c390fb66f95f1617b2e756b37984db21ffa168cb12a5059032f5dda7b57ff646e034b6086dcf8b0d487eb862e559a3dabb49f41ed450f62aab3bbe7e326b92228cc03c860b79da572f2a34b4c45969106c63709d4c4a438061b4"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x101}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "579e2689e938846bd04e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x4a, 0xfc, "218af3113d37000a0ce55c40295e51b3875c06ae85bb019ee52f3d8dd49ad2caba485bc03bcf6432098630e5303ddebf414a13432b0371235400d91b1ac46b778a2fbea9445c"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "b0340c8bbc4b2f913c637d6fa5f0"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0xf8, 0xfa, "54f117449977ec9f26a49a3522322a4015c57cf6c6d93a410c1dcba0fd6835eb6758cf98832d792c2d1c2713e4b9d381d027dd31ed3eb34f930b6caf2ce12b90ecabd00f139d5c6f0d1de548d58f26bcafb29bbbe3a0cfd218c3a3829c52a4bda48ff78bc784bc65f1e60b87b1d5a49eccbd53858b019a865aaac0958a9e3478a327062891d5e22f00e389d3a0e37198dfb964daad2bfbd2ae1a575752cd7d925a89d140157be86280aeffadc22f607e3eb09542c05a17ce8953893a82c10507e0b070de48316f8d4e47cad9b5db15cdef77e4334af51dde0419a8caf0048774418b104fdee9c27074f715d078c79dc0dcc4b0a3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "f8355728bc308803f1f7"}], @NL80211_ATTR_IE={0x204, 0x2a, [@supported_rates={0x1, 0x8, [{0x6, 0x1}, {0x36}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xc}, {0x16, 0x1}, {0x9, 0x1}]}, @ht={0x2d, 0x1a, {0x300, 0x0, 0x1, 0x0, {0x2, 0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1}, 0x1}}, @mic={0x8c, 0x10, {0x493, "6ba92e3d403c", @short="890b35e1006a4a2f"}}, @ibss={0x6, 0x2, 0x1}, @tim={0x5, 0xe7, {0x2e, 0x4b, 0x4, "81823131b137479e1652044f781f32b4f379601db8b5c56b8177efca0e271d594defef43ee250b4d6385354cd183d3821c1dee0ff5ae75867f64473afad33c58fabd5d9dc4c265eadb98b8a451022f6135ffd3392d3dcd87eb5630fe192c9eba247551688e305605c4743f6f6367486fb023fd60f3a960041b9ad4bbeb9ae15c74bfcb94b9a2e3bc623779f2e8703cf6949c8b310bb6c4f45b730a08ab7f9ce9b0a5826c65999c3d42e0f853cf488320f6ec5329d7ec4a655211e0edc5fb9a71dd21033bc42db83c5b72001d83f5d1934d183d48ec02ba44e56eed93d44351b2f78491c7"}}, @mesh_chsw={0x76, 0x6, {0x0, 0x8, 0x1, 0x6}}, @cf={0x4, 0x6, {0x5, 0x1, 0x4, 0x5}}, @dsss={0x3, 0x1, 0x74}, @perr={0x84, 0xaf, {0x0, 0xb, [{{}, @device_b, 0x8, @void, 0x27}, {{}, @broadcast, 0x4, @void, 0x33}, {{}, @device_b, 0x9, @void, 0x3a}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x4}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0x2d}, {{0x0, 0x1}, @device_a, 0x52, @value=@device_b, 0x27}, {{}, @broadcast, 0x40, @void, 0x19}, {{}, @device_a, 0x10001, @void, 0x16}, {{0x0, 0x1}, @broadcast, 0x9c0, @value=@device_b, 0x38}, {{}, @device_b, 0x3, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x1e}]}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0xa, 0x7, @device_b, 0x3, 0x1, 0x2}}]}, @NL80211_ATTR_IE={0x14d, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x1b, 0xad}}, @perr={0x84, 0x12e, {0x4, 0x12, [{{}, @device_b, 0x8001, @void, 0x3a}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x31}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x1f}, {{}, @device_b, 0x122, @void, 0x26}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0x25}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x32}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x4}, {{}, @broadcast, 0x4, @void, 0x9}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x29}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x1c}, {{}, @device_a, 0xdd, @void, 0x38}, {{0x0, 0x1}, @device_a, 0x56, @value, 0xe}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x1b}, {{}, @broadcast, 0x5, @void, 0x17}, {{}, @device_a, 0x2, @void, 0x1d}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x19}, {{0x0, 0x1}, @device_a, 0xc, @value=@broadcast, 0x1b}, {{}, @broadcast, 0x7fffffff, @void, 0x35}]}}, @cf={0x4, 0x6, {0x1, 0x9, 0xfffc, 0xc0}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x2, 0x29}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_IE={0x172, 0x2a, [@mesh_chsw={0x76, 0x6, {0x2, 0x19, 0x3a, 0x8000}}, @tim={0x5, 0x19, {0x40, 0x80, 0x1, "3726fa8c83b133eafc44b1282757a1e5d24b19c43215"}}, @measure_req={0x26, 0x6a, {0x2, 0xb, 0xff, "0b9223078b4118c4971282365b7e0d5b9e0a461cc562b40625c5366a3cf9560acc1dee4e0ae3fd8898ee76a232601c97feb5de82b5f2650f4f018b204444cafae795407aa098c2f9d25ebc9a0be33b364c96eb6e155c03e5acda8253c07082201dfd33fea5e2d0"}}, @peer_mgmt={0x75, 0x8, {0x1, 0x1, @val=0x2, @val=0x2c, @void}}, @random={0x9, 0xd3, "c5fd7b3a5ead99afed0ef9dcfe37fd745eed1afda502697d9477d1cfa29c9be4f96b4912ab6f65366c069a955ec625e5a318615ef3f8496f64ed063f22fd83f4bf04018a6ef1945e3aa7e41b4d2387f9b55ed1c337d2c15776181a7bee24ef4368d3f28d03d066fafa438a199518fc9f9249c6b613470cc9642aec090075f53fa0ce34522ab2db1e012d5e45b8fd283af38d2d2362c2dedade52f39328e5d0acf3fd17a23edeb9066dfef34ddea0d7fbc34282cb42cc3e7617d946af45c0f4f3d02123070c65bb5bfb0e55eecf024b80eed367"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "0b26f49aa0782457c6949828"}, @NL80211_ATTR_FILS_ERP_RRK={0xb8, 0xfc, "0fd1588834272d488247c24fce70f2503a43e2ee7fcf7fdc2e07a4dccd8efb54acfb980b5dd0408a89c08332d382f6e97e7c14b9565673bdd55f38960fb0dca0d6d26ed854e47a3099087ea923528d009700aec7dae0080ed01afc1e597bfa8de56a9d935c782e3452f03c540de2e1d6ae815d17ba43cf861d182e57ea819f1fc7fdee752e2fcb230161114b602fcebe14515b4ec1af2af6ceaa62537da8767faf54fb2ce9320c12a13bdd70261402986cfc3c3e"}, @NL80211_ATTR_FILS_ERP_REALM={0x9, 0xfa, "d46bd5a4c6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x800}], @NL80211_ATTR_IE={0x1b4, 0x2a, [@perr={0x84, 0x10f, {0x67, 0x11, [{{}, @device_b, 0xff7, @void, 0x23}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0xe}, {{}, @device_a, 0xfff, @void, 0xf}, {{}, @device_b, 0x7, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x32}, {{}, @broadcast, 0x8, @void, 0x40}, {{}, @broadcast, 0x1ff, @void, 0x35}, {{}, @device_a, 0x8, @void, 0x4}, {{0x0, 0x1}, @device_a, 0x401, @value=@broadcast, 0x16}, {{0x0, 0x1}, @device_b, 0x7ff, @value=@broadcast, 0x23}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x14}, {{}, @broadcast, 0x2, @void, 0x1d}, {{}, @device_b, 0x4, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x19}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x33}, {{0x0, 0x1}, @device_a, 0x100, @value=@broadcast, 0x32}, {{}, @device_a, 0xfffffffb, @void, 0xf}]}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @erp={0x2a, 0x1}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x3, @broadcast, 0x40, @value=@device_b, 0x3, 0x852, @device_a, 0x5}}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x6b, 0x7, @device_a, 0x2, 0x6, 0x93}}, @mic={0x8c, 0x18, {0x104, "886772d1b728", @long="c6c5ce881d1a993c489eb0032df40e72"}}, @tim={0x5, 0x3f, {0xf, 0xec, 0x2, "8d6251f2e48c2e8b641002b674e58c7691ac31f1a36d4ae70bee391550d156c66a0bc8087087e390b244c01680754b420b2ff6a8da1a853493da7aca"}}]}, @NL80211_ATTR_IE={0x3e7, 0x2a, [@random_vendor={0xdd, 0xdb, "ad8c6bce5dc41bca00c583b02bdf9b0f5b225626c96bcc03b017c26a8c8d579f02e330d44da0521bdde58033dc82d207310a9a84a1bc8b028ce899430c0f1dc65cc6d6c8d4e229db4d243a67b765b0e155f8dbdf38daba4bd5b41201d897e8c89f653581a7d43b026254ec8fdcfd8a6af7f961a50d06075f8133c6f532e39ce187239627fa8902fc24ddfa0846da23744de8a98f2bb1f86e4f3b404da5ed8b5114a032d748f59f392230d995db46a8f3030d665406ef937058b303272c7fca616b9cb9b80b421d0ba75592e9943485570fde7336cc29d1719aad70"}, @challenge={0x10, 0x1, 0x61}, @mic={0x8c, 0x18, {0x3c9, "f90bee948ec2", @long="48f01fa6a5b073dcd767d00f29ecfc97"}}, @random={0x8, 0xf8, "c5a8ffda27597b74eea1355f94ec6b0f47e6b47881d66d9cad02f433887b741b68b7397abc9e4a7a5c87042b7b87cd98287388c58e0614a696e438989683462a81d5286ffa6bd6dcbcc272a8dcb2be3bcb7f85071465fb4c133a6b3483d2d3b8175f54b9b0526efdd190103d30dbeab56bbcfd7c29c246695f9db6a807b2bb40c0ec94d7c7a63cf7c845f94ce63c2fc9178521871a7100d03e210c2e8d059eaef665b40f8f5ae33f420e0037d3e54f99fd66e8f73c3394bb6c15abbf65ef956f88130f95d2a1023bb0e0fc05366995b510e62b51ed9113e0b84935d72960998af255a6f5bb4034d793b0a397c198bcf1c283d159ead7994a"}, @random_vendor={0xdd, 0x55, "c8feda45265e047c6b4035dc413483d8e88e00719e510d10ddddce61006532e2908590d9592ff2a2b296273ef2746cfffb90ecfbfff96a7e3ad21ebfc59e9333212462e71d5d066340581997b7fae7eaea66a2f4b6"}, @perr={0x84, 0xbc, {0x7b, 0xc, [{{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x27}, {{}, @device_a, 0x5, @void, 0x3c}, {{}, @broadcast, 0x6, @void, 0x5}, {{}, @device_b, 0x6f, @void, 0x36}, {{}, @device_b, 0x3, @void, 0x42}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x14}, {{0x0, 0x1}, @device_a, 0x3, @value, 0xa}, {{}, @broadcast, 0x400, @void, 0x2e}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0x2e}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x14}, {{}, @device_a, 0x8a0, @void, 0x3a}, {{}, @broadcast, 0x8, @void, 0x6}]}}, @measure_req={0x26, 0xd8, {0x7, 0xd, 0x3, "8c2d908306cfd7689db6c7cbe0af8a2478d7a0078af4860900129a2625e07d16af58092c7336f6db8ed5c1f03fa47dcad3e77d3e758d9b0c8f48cbcfa44d5b5bb88a927646fe4ffaed3006b0d591cd3e4d8fab8a6370d2e90447f979be5e22d010ef85a6b7992ee59d68e697ae53c72ed5a46cceb81f13ba0390da35b844aef2b3a5db12915e42910927f602b05bcb666d12f7cf7f0f23f567bf4290c804b53f84282624e06363a813df34bb49ce99bd6508a419642d038826e720140add38b307aabde5fc9303e759f075e9b0c2c4fcbc2ed95382"}}]}]}, 0xefc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000002c0)=0x4) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x22) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000300)={r0, 0x400, 0x0, 0x7}) setsockopt$sock_int(r4, 0x1, 0xb, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r8) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xa1, &(0x7f0000000000)={@random="59b39dd1953e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x7f, 0x0, @gue={{0x1, 0x0, 0x0, 0xb1, 0x100, @void}, "501f3685b027e340ed7cb6d2539f2e0dbc8106c7f2e56dd18678e028a4736104c1de704622a2fd932c3696bfd3aa187d3807842efe7427f178ea808960034d156b215e5c1422965f5b026ed3c951c2e30c48ddf805b1aa25ce3279138c1157c4467fbf97db339dc093cf8c5c747ac583757a6f"}}}}}}, 0x0) 1.473148131s ago: executing program 0 (id=19694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x48, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={r2, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r7, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 1.384777407s ago: executing program 4 (id=19695): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x42, 0x4000006, 0x8, 0x0, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e34, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x20000000000000cc, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x40, 0x0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x18b9185c, 0x34}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000c05}, 0x4000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, 0x800000}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) listen(r0, 0x0) 1.111851855s ago: executing program 4 (id=19696): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="5c250ed6087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.058553727s ago: executing program 1 (id=19697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r3, @ANYBLOB="0800020001"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0xfffffffe, 0xd00, 0x2}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) unshare(0x2c060000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000400000048031180"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000002c00070127bd7000fcdbdf25097c00000804003200040003805fe867247ccab6b79bc03d4ec030d1cf7a7e901a9a523937121609f798a36545aa55edd624aae998082d76983f43f2ec1c582f9b38799f2e3b145dc7041f6c8ff9e68ffdd92f56bb82f7d187d215c60107d397a235998d5562b2d0fb9d8e2d50e66c17744466a300613908552b2932e3435cdd45dc5c26ac75486338190eda0665047c1eba4e978f8133ce84557964e599"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x4090) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r10, 0xf501, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 999.979297ms ago: executing program 4 (id=19698): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x14, &(0x7f00000019c0)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/81, @ANYBLOB="6e101fc9b7d05ebc5eead3eea1298cc6f49f4988ea4b6ba10c28e0b689d0824f054741360b832d1af2049228252c9d8b77355c6e30c41bf35adfc03260cfe2f2324298ff3a6a66ac3b3782b8a2120fb0ad7f843571418af087a604a4a7ae7831288c4f34504e388485f6180acab007ccc0f62feca97378e797b0b1bcf3dadc37c91c8e0e7dcefd80401f89491ea265490e5e46b545d01395dfbd72e77b296dd527211a1109ac9ef753e816273c83bff519fcd27fdd0fcc9666fa547f5976abf40d825e1e40fb0fe11d926bed05595873bc423bd3432c9c01dbad5719d26b813f109ef9438caeff5d27a802f2d165db96d1f71a2d09b09a372fb0ed459fd0dd09059c23cbf5416224554b7ad6c492b8cbf1bef23548c9ea52c0f835903efbecebc33545206b5d249722c82892949fe17d7afc9c70e2cdfdced74726d1e180695ac3f5f5726273f53222c4f0607f6578e8f0788efbf69de04ca2924d7cf54aeae13b2bc4da14a8e7f0a2c570437257e94194ddf9f4af7978570ba39c043fc52ba10d45a41189c00736869a37e31164888bdd0781e61f3e05cedce39ee8e2acfc1f4ae2699f10ec3115a93e1d1f817bb5c3121d3747d2ccde41c5bf8632bd2e8e6db92ff7136a15b81cc24ad67bc69f41d34e9d250a7945bb5cbc6fcfc8cfdef2ee5e3f8c8681ca5a17b5bded54fc4e47df861dfefc35c802568d1992a813ba0b611a2f326ea3a81e372290f3f9f9831ad3421902715515068ea7f068091ec73f95040c2716fc117fcef020e62f8d05b9b50ec6ebc2e194ce35912dc57701a302d5c404d4d637d076db3c31238ed1bec1c886eb9ddb5b0081210c72aac9c6718de6f8104246cc55593f367581eea68210de8184b4af267f49f419837cf914f5a6ee89d6130577dc936b5c9dcbc230dd50a3d669b3d5d6a5b3621546cc97b3f457bbce7507bb5185eb41055e9b40fbf25daa9fcf17dbe09bdcb8bcaee3c4cef9addd4f625287950a516438ddca51e3c5fb4e63e91ba186e3fc50cd7406c955a2d60aefddaba2d877c5fc7b46b9ee6b3428004da5f4d257955f39d527a5687e69246e01a02e07a9d3bf553fa341ce2bd2af245decaf0f7d703f843176104c6fa4772856a138436d65f6232113de6e62763bfbd73fdf6a4399125a7c4839b89a0f45c95308097870e1f2f6de932097dcdc3ad4ccde32dd86d208a58b2a76c25eafc7c765aab6931dbe25d66c86486e5b7f3d7fa5eb458a10b6a71a386b06c0e9926dd413c7a51f0c4a166bbc41151099f57320eb2546f5d275ab6ab2836eac429a381498ccdc1648cbd8d52605a74cfd2bdc48345d70fd5831d28dd352da918be5d499d563aa2c83c88c7f7e2cf1551bb73b42bb495601010e625c07d4e109160f67089408faa4618d1983ea0458182ede2eb31270c4cae1de45a1df192f9b9b675472e3b74405be89aa0978f34726e4342c378c38e801d487148515c5d6fefdb93f695355ff1925368c01cf07f1d6ebb077c6c57bacb28928c1b392f1dcae4c54659a3a64c661359eb1c718699d3507e1efcce752043f4173378010713c3351e83e5404ff4dd686a50a2a367e236f4579830ae0681c0ca8234dccc7d59066369b15418bcc02429b8f85983a1e9b93c5a2487c9aff8a87b3db80a89982b916b49cca3725bffb7ec64950e89cd611406b0462beff35a83816caede447d0ce6ebe8a12d55976a43c53b2700902554080139bc3551e8912d0abcdbca502fa26054ac2a6c518ce4ecede9479bff9d39712e766b23d7248ded14915ef2fcab79c0b0d8699fc29192b1550cc1f4b007b592a8df812f341fa9225a09b4267b75bb7152091117c99dec07e0b25ec4d63df16bac3f808a3526ef686fd22865975d6d14779c2bb66a4701e85294f243cfa4bdf47e37455b33f2f361ef694d786efbdd21b9f2c50f06d1659ae1201c87623513f6706010d9b41b30ecb46c62a3ba146cb9214bda1d9ab19ab89719f476ee0a643f2dd7297ec816b3746dbaee901e174d735a30b6c9c84a377fa68a5d15e3bba1995f3ef719716579d8250ceeedc12129870f032cbc868b6c9c5f63ca0596b903e2aeefb09b7c19f00b4f3facca97408152a138170d71dc3a91f1ac23978e7170bc0fabde291ea5fc4214389ff2c42687fd9ac1f7a4a0a4e5e279d21ea153472049937eacfcd59991784472359f39dda0ce4106292e757ec2616ee2c1bc094a8b1d3cd5bd3ccc5efdfc18d6e81f32145e92cc92a019dac4d13571316a5715ecdefff26a776cdd6683b00636ef1045629e77aaf37e7386a8434f5a7a19e507936e3b74fcb63dc2856172e352786de3cfa4f3d21456a61f141cd3401d2c8fa43931db6438b84665558cb35b13253d95fbc548f47420cd25048cd6de48c76016b7ea9df1792d853ee88e2b86ea026e1d077ed6a7e31437596632d24275af9255b3682deea733cac3084c271e94309672ffbf675c6033d9584c4e19c43789307c70f9cdbcc5bfd0ad7a74b5cfa9b6bd3fba02ebf5cc5f50851e6dd8a6a94719b0254a8ebdd0edd7a80b28675f18a0632e503e0c22349c02844fdd66a36b82c5c48de5b2080d4b7b0716abcd2e4aad21dbbbaaefb957321ec9b14bdbe56072e7bc6b857d0937c6873e58a1e5d6c03466f29fad9fc86c0a39fe6027d8ccc82b9f17fb0547573c12b2933fdaad591e90855ac314c03486147fcbbe9d423532274e9bd52b513362ae9bccfe7c7ca57882c3ed014da9679fef228d774ddf484d66f4d253e0337049df64c018766c301bc1365be3d9a480b688345694837f5b937174a330fdff46c8bcc8529a52e73ea51969a6c26c9969c8b4ce8c5dc0e341130b1e90d72eed4e85defbf01bc0bbd4a2d7a747b9f4540e638f781ae4ea2b402ccfaa68d143621aece5d0b5fee692e59597084ae9bc4981da9d7463149777db191e471c3242dcfbe2d0181c744b2ca650361a0655d086ea1f1abd5741a89d7951d23b935c67ba9b978050b4b60350147563370e3469203ef0ec672c244b2bb7f57187ae12d9310e6558efd39fe86c5af267657cb8b9565d705a983155a139802acaa9cfe5d04195f1c2e0dec9baa6191d515962fa67f7e3e37c7950ae33fdbe1fcfa8a0bc014013eefcbc9901374416375dac6760cb9b36febd560d1367d0e659f0c8d9ba2f4ea146e45ac9b80766c1d40155344834d013ad6ecbec6f7da3046b34bda2d8add0c2220f2a1409011c067640a11a562023517f4304008ce29ef49c12fe5f2257e5dd3be8ce60a9107105428aeca1e7b7fb452f244f36f8d129089527fcbbb317aaf0c595507cbf3bb61c0baf9136dba9af4d2fcc38646a8e1f543f80b29b00238d5ca9efb837cbf77847200f11e5a6385d86faf8057f229eaa095b9f236c48c317012cd88462549b9a346868afe7dc2f0b75aa67dd2fb1069bd7ddb83be3526ac15398fb51aedd12cf743d4ca6557ac599a8d8008ca21aa590168bf50dc4f867712faa6aaad202841acde276c2384e5bd9bc1e28eb2cb0e9f41c31d665a76cb812d749b14095d7b0b0ef76df5b8bfe7a63d4b5c6b009570a3ca8e912ad2a6f996832b2393bca68ec231b872f11cee0820560a1548ca151e859596d6b13050a99a07d30d4131c86f922bac5d26ed238c6e8ac65604f52f4187c1476c72e1dafe6feb3f1f776d999e00fde220ecebf184c8163a58411ae3d928cc9272a307865b8e8251c2bbc54252662b23bd6c86c8f6421f0dc220aad11f737a516ca77e33908434a6ccbae0455b5843f9053ea0d189254f19e914ba909dc66b352af74e23ab91aee55c284516addacec0de7ce81b3e954d07e5642a3577a8c215678eff2bd2561212938c532a57aba1579c303423e2896721c1196df1d3e4c104f7a24e5018f6a3f04fdfc8b151d34e673a7532e60b3059321d1e296371140dbaa109f316c401055a7a69589b40d1359fa42859792678d4baf3b99da0e569a42eb2fdfddd03095e45d6ded9dd8a5fe90b719d283d095c09f2a86d1268457df7cbb9eac28f187682f90b03a075a5aea4015cbfb76427ffa9c22bdd3e6573ce47b02efa1975ce90eb362dfa82abf49a8f319d8449698891a5778103c3936b41afed52a25fac475415de99a82b3cd930c8a2ff36c6fab344d726eac02a6d58ece19578d1f9d24b3831a86ef0dfad4bfe87262f3d6508be9f64aaa8e26feef8a21dc6cc072dea54135fec0368e1eaadfc1bc20686e863b0aac5c293ea7e7d14f7415b49d2f5c054529b34aa083eb6ab772a478ff6201140cf504a6e21dad81a0e502aebf8ab59922169e8e8380cfb906858e28407619f6f5e8f8662448b02f4413af5ef8077dff138737b65a1dac6e19248cc9ad681e29a9eca41d488aae77dcb230771cb13f4bf36d1a507b2cb8e73537565c072aaaa3555c2df640c9810196f3d362c2f66b1fbab2bcd55e783cd27a487b9a24be92296259b007ff810a0318a3066e3cdd4f3038f64b3b8b3cb322696ee0d1340c5ec1bd11a6ce28fd76cc39a773415e010c46a9e83f69d5859c86e56cf028264c27d9a627389ea89d4b9d61891faca37c3c19740f126666e24c15424c6db3353d0242d7321210dad3a015d274d886985b979e8e451927d742fdad558f14799eaa47ee5a46c85486498db7c17ac543fdd1acca3eeb5ad73b33887b3e8cf2fa6d314e9eee0284f4d126e83a4527ebf71843233f682712213b66ee2ae9699d62524a45969585a3494d392adaaa297406ee9269ad83e8f19209c39fbbbcc335d7ca4b11e241869eec331153ca2810e176eb3886eac3baf3d48bda7d9e24e0fe15e85a98c29d0661e86f2876937cbd33ab69f29ec2bf56b71df58d59a001b95a2030c0bde4f0d820d20cb1b11b01d61a7f8d6d0de639eca266f83057d1b679cd4f4cd4538c41461afd3dcbdcd96b507fdfc9bd9910e8599a1846d35c953654a2e7e13a04c523db773292a018f030411187e93ff17784251bbca38e9133126ca4cbe2f7f6dbdbf0b3b52a7e188c6b7ee6a1893bcefb7174cdb752812e4da043ddc92a4e6d86c07995e8fe2a1302ad0af9c37d3be68fd4dcc2bb72efc1b80bf14844559e8e2debb44050c923383daf0f1e2a81ae4f9ac058d043dd3893e24d5ea26368ffb66692989fd3afb75540a0cf61e5628fd44408e005127d02ca6a5fa63931ed053f7cc3bc21281d4c09c1b1c44ff62d5659ac59c4bcbc060b869fb7f976e103881c38af5363ffa894053662423076e1600ca1420b28ac0ec5a8f6525822119a2810634267d2f3207931eed589dc9045a7e41e3efe1b69756a9e4721e6fa949e5bd70b7a9861899940e675384cb2dfc5206a4dcb7f07027f55c2726f111245844801ae993ae344aa1a5adaea95bdf2dcff4e90c41b5a993ac6f50de95b970cedb1157522ba037644ae1e8fd6bfe071356657d185d2d00ccb4a4f654f0ace3ef07f7ecdc1e6fdad9f22f5a42cd477e0affd2d0c7304dc1793c6c08dccb378bcd4c99ca9d188ad668d6af0655d12a2904515b9e551ed6fcb17382283cda3b9df26a11ec2468de4e649554d1f823bad418500449793d5dd5c8f0b76f33b4f36923062fcef21fd1e09e530e630c92bf065736d259021a0f57dc3385fb1f9981a0ab203525e27e0f76bbd629fd10733cf1d5a2102d41e363c6eddae1766dfc3afb4eade6a711490e68a91fbfe0b04558254872d2e965221a65716f2f0e82e926ce39073056b25fc5113c43060c45879909fb2922e3b8b4ba1db84f1ec0144b7e4fad7308b8fd6df18885517a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x28000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000f5fffff20000000010ffffff20b15b84001000000000001810f70df20f84a8810c1a06a8896c908fd26ba0685bc532c0ca364f1e893c6ae2e9f3fffe7aba990a93adbdcec86188bb6047ea29c7a5ef7d66df53a3adb9ec767270b1d30e3af094957c61b0d4900da8002e0033e305bd436a67fc74915f24979c840800dcd37f23", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, r1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x4, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 998.681151ms ago: executing program 0 (id=19699): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}, 0x21) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa080}, 0xc, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000005600000325bd7000fcdbdf25070000", @ANYRES32=0x0, @ANYBLOB="e8495f118accdfb94aa069e0f579029368f4d46af24de42ed08ea392b5215e50821d21f09e8c5f67725e770d6f0a1309f8a138557b9be7464bcc94a782dae79a37fa1c65e6570b16ba2accf9ba0d4c7d077b0680b389dea3e412e08ad0576d79886acc6341c39bad6a53131bc22e06ab3b1d7b8f19018820d471951a7833dfc499"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4095, 0xfff}], 0x1}}], 0x1, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="110a28bd7000fddbdf6509000000050008000300000008000300", @ANYRES32=r8, @ANYBLOB="050007"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, 0x0, 0x2004c0c4) 245.418486ms ago: executing program 2 (id=19700): r0 = socket(0x2a, 0xa, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0x1a) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x6000, 0x4, 0x20c, 0x3, 0x8, 0x10000, 0x4, 0x4, r2}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="440100f610000100fefffffffddbdf25fe880002000000000000000000000001fc0100000001000107144e230005000000803c000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRESDEC=r6], 0x144}, 0x1, 0x0, 0x0, 0x8850}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESDEC=r4, @ANYRESDEC=r1, @ANYRESDEC=r3, @ANYRES16=r6], 0x6c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) connect$inet(r9, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', r5, 0x0, r6}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf, 0xc}, {}, {0x1c, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xf7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x41bd31d4576420eb}, 0x8851) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000004c0)={0x7, &(0x7f0000000200)=[{0x0, 0x3, 0x80, 0x11}, {0x5, 0xb0, 0x4, 0x1}, {0x3, 0x2, 0x3, 0x8000}, {0x7, 0xf, 0x8, 0x723dde45}, {0x400, 0xfa, 0x2, 0x1}, {0x3, 0xe5, 0x7, 0x8}, {0x2, 0x4, 0x1}]}, 0x10) 1.69826ms ago: executing program 0 (id=19702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffde000000000000000000000000000000000000000000000000000000000800000000"], 0x90) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002000010025c77000fcdbdf25601800000800a500", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000851}, 0x24040004) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x40000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000500410009002abdf000000000000333a0f91af30000000004000ab7bdb9293a0e"], 0x18}}, 0x4004080) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x40, 0x0, 0x0, 0xffeffffc}, {0x6, 0x0, 0x0, 0x8}]}) write$ppp(r1, &(0x7f0000000300)="5af9", 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000030800020000000000000000000047b2907437bacb000905000300060000000c0004800800094000"], 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 0s ago: executing program 4 (id=19703): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x389c, 0x7}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x312, 0x5, 0xd, 0x3, 0x9, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r4 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000480)="3e314cfc204b39401b3c77c0b48c", 0x0, 0xae8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): link [ 1282.153957][ T6457] bond17: (slave bridge18): failed to get link speed/duplex [ 1282.312139][ T5714] bond17: (slave bridge18): failed to get link speed/duplex [ 1282.351938][T31777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.364425][T31777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.468579][T17048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18285'. [ 1282.481248][ T5714] bond17: (slave bridge18): failed to get link speed/duplex [ 1282.503080][T17048] nbd: couldn't find a device at index 0 [ 1282.605664][ T5714] bond17: (slave bridge18): failed to get link speed/duplex [ 1282.747684][T17063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18287'. [ 1282.906703][T17067] netlink: 'syz.2.18288': attribute type 13 has an invalid length. [ 1283.033213][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18288'. [ 1283.139322][T17059] bridge0: port 4(vlan1) entered disabled state [ 1283.145988][T17059] bridge0: port 3(vlan0) entered disabled state [ 1283.152568][T17059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.159857][T17059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.404319][T17059] bridge14: port 2(veth0_to_bond) entered disabled state [ 1283.549445][T17059] tipc: Resetting bearer [ 1283.773956][T17059] ip6tnl5: left allmulticast mode [ 1283.877551][ T9414] lo speed is unknown, defaulting to 1000 [ 1283.899599][ T9414] sqz0: Port: 1 Link DOWN [ 1283.953321][ T59] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1283.973761][ T59] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1283.996017][ T59] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1284.008632][ T59] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1284.018833][ T8046] lo speed is unknown, defaulting to 1000 [ 1284.018839][ T59] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1284.052090][ T59] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1284.078728][ T59] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1284.097614][ T59] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1284.160505][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1284.280629][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1284.410653][ T5714] bond17: (slave bridge18): failed to get link speed/duplex [ 1284.540892][ T12] bond17: (slave bridge18): failed to get link speed/duplex [ 1284.985185][T17109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18299'. [ 1285.182407][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18300'. [ 1285.232057][T17114] netlink: 'syz.3.18301': attribute type 13 has an invalid length. [ 1285.313235][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18300'. [ 1285.382220][T17115] netlink: 348 bytes leftover after parsing attributes in process `syz.2.18300'. [ 1285.395947][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18301'. [ 1285.443248][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18300'. [ 1286.644746][T17129] lo speed is unknown, defaulting to 1000 [ 1286.800560][ T59] net_ratelimit: 3333 callbacks suppressed [ 1286.800583][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1286.961142][ T5714] bond17: (slave bridge18): failed to get link speed/duplex [ 1287.102135][T17159] __nla_validate_parse: 2 callbacks suppressed [ 1287.102157][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18306'. [ 1287.120162][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1287.202287][T17159] openvswitch: netlink: Invalid VLAN frame [ 1287.354057][ T5714] bond17: (slave bridge18): failed to get link speed/duplex [ 1287.500080][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1287.574140][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18311'. [ 1287.607132][T17179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18311'. [ 1287.633235][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1287.774258][T17185] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1287.830215][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1287.950575][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1288.092030][T17129] lo speed is unknown, defaulting to 1000 [ 1288.108911][T17129] lo speed is unknown, defaulting to 1000 [ 1288.216495][T17192] lo speed is unknown, defaulting to 1000 [ 1288.976942][T17203] veth1_macvtap: left promiscuous mode [ 1289.000267][T17203] veth0_macvtap: left promiscuous mode [ 1289.025245][T17203] veth0_macvtap: entered promiscuous mode [ 1289.063762][T17203] veth1_macvtap: entered promiscuous mode [ 1289.108583][T17203] geneve0: entered promiscuous mode [ 1289.200189][T17203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1289.252505][T17203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1289.274412][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1289.342629][T17203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1289.423864][T17203] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 1289.462365][T17193] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1289.483565][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.490962][T17193] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1289.493441][ T35] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.520885][T17193] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1289.531364][T17220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18317'. [ 1289.626255][T17220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18317'. [ 1289.646712][T17218] netlink: 244 bytes leftover after parsing attributes in process `syz.4.18317'. [ 1289.775448][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.811891][ T35] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.946193][T17220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18317'. [ 1290.334265][T17192] lo speed is unknown, defaulting to 1000 [ 1290.362968][T17192] lo speed is unknown, defaulting to 1000 [ 1290.399232][T17246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18322'. [ 1290.436923][T17246] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 1290.538859][T17252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18324'. [ 1290.894006][T17244] siw: device registration error -23 [ 1291.132003][T17269] netlink: 316 bytes leftover after parsing attributes in process `syz.0.18328'. [ 1291.364552][T17275] netlink: 'syz.0.18330': attribute type 9 has an invalid length. [ 1291.375254][T17275] syz0: rxe_newlink: already configured on lo [ 1291.687942][T17280] netlink: 'syz.2.18332': attribute type 12 has an invalid length. [ 1291.767744][T17280] macsec0: entered promiscuous mode [ 1291.786064][T17280] veth1_macvtap: left promiscuous mode [ 1291.797191][T17280] macsec0 (unregistering): left promiscuous mode [ 1291.835194][ T35] wlan1: Trigger new scan to find an IBSS to join [ 1291.880444][ T5714] net_ratelimit: 22 callbacks suppressed [ 1291.880470][ T5714] bond17: (slave bridge18): failed to get link speed/duplex [ 1292.050327][ T35] bond17: (slave bridge18): failed to get link speed/duplex [ 1292.211078][T32558] bond17: (slave bridge18): failed to get link speed/duplex [ 1292.451420][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1292.466254][T17284] lo speed is unknown, defaulting to 1000 [ 1292.485455][T17296] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 1292.500238][T17296] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 1292.517711][T17296] veth0_virt_wifi: entered allmulticast mode [ 1292.559768][T17296] veth0_virt_wifi: entered promiscuous mode [ 1292.940630][ T5714] bond17: (slave bridge18): failed to get link speed/duplex [ 1293.100005][ T35] bond17: (slave bridge18): failed to get link speed/duplex [ 1293.220443][ T35] bond17: (slave bridge18): failed to get link speed/duplex [ 1293.360147][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1293.531605][ T5714] bond17: (slave bridge18): failed to get link speed/duplex [ 1293.653581][T17284] lo speed is unknown, defaulting to 1000 [ 1293.697424][T17284] lo speed is unknown, defaulting to 1000 [ 1293.900457][ T35] bond17: (slave bridge18): failed to get link speed/duplex [ 1294.998031][T17377] __nla_validate_parse: 5 callbacks suppressed [ 1294.998051][T17377] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18346'. [ 1295.245057][T17383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18347'. [ 1295.282140][T17383] nbd: must specify a device to reconfigure [ 1295.742335][ T9411] lo speed is unknown, defaulting to 1000 [ 1296.015820][T17375] lo speed is unknown, defaulting to 1000 [ 1296.736313][T17428] debugfs: '1ùà^!‚Y‡°”õËí [ 1296.736313][T17428] 3ìUH†5rºBnœæ\' already exists in 'ieee80211' [ 1296.900848][T32558] net_ratelimit: 9 callbacks suppressed [ 1296.900871][T32558] bond17: (slave bridge18): failed to get link speed/duplex [ 1297.070227][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1297.200673][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1297.330184][T32558] bond17: (slave bridge18): failed to get link speed/duplex [ 1297.470026][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1297.492305][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18357'. [ 1297.596704][T32558] bond17: (slave bridge18): failed to get link speed/duplex [ 1297.637300][T17448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18357'. [ 1297.705336][T17423] lo speed is unknown, defaulting to 1000 [ 1297.720418][ T35] bond17: (slave bridge18): failed to get link speed/duplex [ 1297.850015][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1297.972080][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1298.090503][ T35] bond17: (slave bridge18): failed to get link speed/duplex [ 1298.343715][T17375] lo speed is unknown, defaulting to 1000 [ 1298.361909][T17375] lo speed is unknown, defaulting to 1000 [ 1298.467130][T17465] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18358'. [ 1298.654366][T17468] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1298.804582][T17468] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1299.003996][T17482] bridge26: entered promiscuous mode [ 1299.027316][T17482] bridge26: entered allmulticast mode [ 1299.066944][T17482] team0: Port device bridge26 added [ 1299.131975][T17480] bridge27: entered promiscuous mode [ 1299.161231][T17480] bridge27: entered allmulticast mode [ 1299.198007][T17480] team0: Port device bridge27 added [ 1299.249053][T17475] bridge0: port 2(team0) entered blocking state [ 1299.256763][T17475] bridge0: port 2(team0) entered disabled state [ 1299.263705][T17475] team0: entered allmulticast mode [ 1299.269220][T17475] bridge25: entered allmulticast mode [ 1299.278535][T17475] team0: entered promiscuous mode [ 1299.284173][T17475] bridge25: entered promiscuous mode [ 1299.292302][T17475] vlan6: entered promiscuous mode [ 1299.343466][T17423] lo speed is unknown, defaulting to 1000 [ 1299.380339][T17468] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1299.474839][T17423] lo speed is unknown, defaulting to 1000 [ 1299.548267][T17468] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1299.820340][ T35] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1299.869503][ T35] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1299.919231][ T35] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1299.983497][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1300.511478][T17508] lo: Caught tx_queue_len zero misconfig [ 1300.714489][T17520] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18364'. [ 1301.034961][T17520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18364'. [ 1301.190668][T17523] sctp: [Deprecated]: syz.1.18364 (pid 17523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1301.190668][T17523] Use struct sctp_sack_info instead [ 1301.272186][T17531] vlan0: entered promiscuous mode [ 1301.289489][T17531] gretap0: entered promiscuous mode [ 1301.306728][T17531] vlan0: entered allmulticast mode [ 1301.320630][T17531] gretap0: entered allmulticast mode [ 1301.413280][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18367'. [ 1301.951132][T32558] net_ratelimit: 12 callbacks suppressed [ 1301.951156][T32558] bond17: (slave bridge18): failed to get link speed/duplex [ 1302.099974][T32558] bond17: (slave bridge18): failed to get link speed/duplex [ 1302.187168][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18369'. [ 1302.220116][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1302.277469][T17565] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18371'. [ 1302.410460][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1302.540013][ T35] bond17: (slave bridge18): failed to get link speed/duplex [ 1302.670310][T31777] bond17: (slave bridge18): failed to get link speed/duplex [ 1302.740111][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18373'. [ 1302.780741][T17581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18373'. [ 1302.814845][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1302.950097][T32558] bond17: (slave bridge18): failed to get link speed/duplex [ 1303.100096][T32558] bond17: (slave bridge18): failed to get link speed/duplex [ 1303.230111][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1303.635307][T17580] xt_hashlimit: size too large, truncated to 1048576 [ 1306.283875][T17632] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.319989][T17632] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.457598][T17632] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.485766][T17632] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.552389][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1306.612303][T17632] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.654211][T17632] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.789111][T17632] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.825464][T17632] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.901284][T17648] netlink: 'syz.1.18385': attribute type 1 has an invalid length. [ 1306.985932][T17650] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18384'. [ 1307.020164][T32558] net_ratelimit: 9 callbacks suppressed [ 1307.020184][T32558] bond17: (slave bridge18): failed to get link speed/duplex [ 1307.075220][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18384'. [ 1307.152552][T17650] gretap0: left promiscuous mode [ 1307.239326][T17650] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.256114][T17650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.363154][T17650] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1307.380081][ T8046] lo speed is unknown, defaulting to 1000 [ 1307.385996][ T8046] syz2: Port: 1 Link ACTIVE [ 1307.739457][T17659] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1307.762876][T32558] bond17: (slave bridge18): failed to get link speed/duplex [ 1307.773542][ T9414] syz1: Port: 1 Link ACTIVE [ 1307.819036][T17653] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1307.855489][ T8046] lo speed is unknown, defaulting to 1000 [ 1307.870499][ T8046] sqz0: Port: 1 Link ACTIVE [ 1307.949708][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.957011][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.989608][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.996897][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.008163][ T59] bridge0: port 4(vlan1) entered blocking state [ 1308.014651][ T59] bridge0: port 4(vlan1) entered forwarding state [ 1308.086796][T31777] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.096041][ T8046] lo speed is unknown, defaulting to 1000 [ 1308.109482][T31777] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.140560][T31777] bond17: (slave bridge18): failed to get link speed/duplex [ 1308.232359][ T35] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.251044][ T35] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.271585][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1308.309465][ T35] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.324174][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.374297][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.384429][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.411579][ T6457] bond17: (slave bridge18): failed to get link speed/duplex [ 1308.570019][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1308.614264][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18392'. [ 1308.640154][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18392'. [ 1308.706907][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1308.750575][T17685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18391'. [ 1308.960927][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1310.737820][ T8046] IPVS: starting estimator thread 0... [ 1310.860044][T17733] IPVS: using max 30 ests per chain, 72000 per kthread [ 1311.433239][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18408'. [ 1311.465329][T17749] netlink: 256 bytes leftover after parsing attributes in process `syz.4.18408'. [ 1311.550610][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18405'. [ 1311.676717][T17753] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1311.833385][T17753] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1311.947417][T17753] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1312.160733][T17753] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1312.200074][ T59] net_ratelimit: 25 callbacks suppressed [ 1312.200095][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1312.219717][T17760] netlink: 316 bytes leftover after parsing attributes in process `syz.4.18413'. [ 1312.241776][T17760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18413'. [ 1312.354689][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1312.365129][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1312.439156][ T6457] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1312.483354][T31777] bond17: (slave bridge18): failed to get link speed/duplex [ 1312.529445][T17768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18415'. [ 1312.556813][ T6457] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1312.604061][T31777] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1312.640090][T31777] bond17: (slave bridge18): failed to get link speed/duplex [ 1312.770234][ T6457] bond17: (slave bridge18): failed to get link speed/duplex [ 1312.808932][T17785] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18420'. [ 1312.827418][T17777] lo speed is unknown, defaulting to 1000 [ 1312.893005][ T35] bond17: (slave bridge18): failed to get link speed/duplex [ 1313.014233][ T35] bond17: (slave bridge18): failed to get link speed/duplex [ 1313.125573][T17798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18423'. [ 1313.161541][T17798] ip6gre4: entered promiscuous mode [ 1313.177162][T17798] ip6gre4: entered allmulticast mode [ 1313.192464][T31777] bond17: (slave bridge18): failed to get link speed/duplex [ 1313.217231][T17798] netlink: 'syz.3.18423': attribute type 6 has an invalid length. [ 1313.228896][T17798] netlink: 72 bytes leftover after parsing attributes in process `syz.3.18423'. [ 1313.312401][T31777] bond17: (slave bridge18): failed to get link speed/duplex [ 1313.332202][T17804] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1313.347503][T17789] lo speed is unknown, defaulting to 1000 [ 1313.441083][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18425'. [ 1313.552003][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18425'. [ 1313.598748][T17807] netlink: 348 bytes leftover after parsing attributes in process `syz.2.18425'. [ 1313.672568][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18425'. [ 1314.080465][T17777] lo speed is unknown, defaulting to 1000 [ 1314.101851][T17777] lo speed is unknown, defaulting to 1000 [ 1314.769161][T17789] lo speed is unknown, defaulting to 1000 [ 1314.823205][T17789] lo speed is unknown, defaulting to 1000 [ 1315.696069][T17859] --map-set only usable from mangle table [ 1316.786498][T17871] erspan0: left promiscuous mode [ 1316.857928][T17871] batadv0: left promiscuous mode [ 1316.865323][T17871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1316.994212][T17871] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1318.361219][ T13] net_ratelimit: 2836 callbacks suppressed [ 1318.361245][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1318.420993][ T5714] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.443942][ T5714] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.471650][ T5714] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.491447][ T5714] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.533266][ T5714] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.545068][ T5714] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.563872][ T5714] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.585544][ T5714] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.639980][T31777] bond17: (slave bridge18): failed to get link speed/duplex [ 1318.762044][T31777] bond17: (slave bridge18): failed to get link speed/duplex [ 1318.880892][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1319.107299][T17910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.178531][T17915] __nla_validate_parse: 5 callbacks suppressed [ 1319.178554][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18457'. [ 1319.271912][T17909] netlink: 'syz.0.18455': attribute type 4 has an invalid length. [ 1319.284016][T17915] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 1319.306989][ T6457] bond17: (slave bridge18): failed to get link speed/duplex [ 1319.331808][T17915] mac80211_hwsim hwsim12 syzkaller0: Caught tx_queue_len zero misconfig [ 1319.409431][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18457'. [ 1319.439961][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1319.549972][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1319.670591][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1319.748410][T17933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18459'. [ 1319.979988][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1320.079222][T17941] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18463'. [ 1320.414705][T17958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18465'. [ 1320.528635][T17961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18465'. [ 1321.039177][T17978] netlink: 'syz.2.18473': attribute type 12 has an invalid length. [ 1321.172343][T17985] netlink: 'syz.3.18476': attribute type 4 has an invalid length. [ 1321.200904][T17981] block nbd3: server does not support multiple connections per device. [ 1321.219612][T17981] block nbd3: shutting down sockets [ 1321.294697][T17986] netlink: 124 bytes leftover after parsing attributes in process `syz.4.18475'. [ 1321.975734][T18008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18480'. [ 1322.043933][T18008] bridge_slave_0: left allmulticast mode [ 1322.049661][T18008] bridge_slave_0: left promiscuous mode [ 1322.083213][T18008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.116227][T18008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.145703][T18008] veth0_to_bond: left allmulticast mode [ 1322.169730][T18008] veth0_to_bond: left promiscuous mode [ 1322.186514][T18008] bridge14: port 2(veth0_to_bond) entered disabled state [ 1322.478669][T18027] pim6reg: entered allmulticast mode [ 1322.493509][T18027] pim6reg: left allmulticast mode [ 1323.261149][T18059] netlink: 'syz.4.18498': attribute type 4 has an invalid length. [ 1323.348360][T18065] netlink: 220 bytes leftover after parsing attributes in process `syz.2.18499'. [ 1323.428709][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18497'. [ 1323.494725][ T2312] net_ratelimit: 24 callbacks suppressed [ 1323.494749][ T2312] bond17: (slave bridge18): failed to get link speed/duplex [ 1323.614550][T18072] lo speed is unknown, defaulting to 1000 [ 1323.630206][ T2312] bond17: (slave bridge18): failed to get link speed/duplex [ 1323.770246][ T2312] bond17: (slave bridge18): failed to get link speed/duplex [ 1323.890507][T31777] bond17: (slave bridge18): failed to get link speed/duplex [ 1324.033104][ T12] bond17: (slave bridge18): failed to get link speed/duplex [ 1324.152077][ T2312] bond17: (slave bridge18): failed to get link speed/duplex [ 1324.270968][T18089] lo speed is unknown, defaulting to 1000 [ 1324.279994][ T12] bond17: (slave bridge18): failed to get link speed/duplex [ 1324.400026][ T6457] bond17: (slave bridge18): failed to get link speed/duplex [ 1324.514223][T18102] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1324.522536][T31777] bond17: (slave bridge18): failed to get link speed/duplex [ 1324.638202][T18105] netlink: 220 bytes leftover after parsing attributes in process `syz.1.18510'. [ 1324.654045][T31777] bond17: (slave bridge18): failed to get link speed/duplex [ 1325.036642][T18109] dvmrp0: entered allmulticast mode [ 1325.447727][T18072] lo speed is unknown, defaulting to 1000 [ 1325.486726][T18072] lo speed is unknown, defaulting to 1000 [ 1326.381913][T18089] lo speed is unknown, defaulting to 1000 [ 1326.409295][T18120] tipc: Resetting bearer [ 1326.487536][T18131] netlink: 3 bytes leftover after parsing attributes in process `syz.3.18517'. [ 1326.653543][T18089] lo speed is unknown, defaulting to 1000 [ 1326.659648][T18131] 0ªX¹¦À: renamed from batadv0 (while UP) [ 1326.683554][T18131] 0ªX¹¦À: entered allmulticast mode [ 1326.806328][T18135] netlink: 'syz.3.18519': attribute type 4 has an invalid length. [ 1326.910307][T18140] netlink: 220 bytes leftover after parsing attributes in process `syz.1.18521'. [ 1327.055969][T18145] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18522'. [ 1327.103269][T18145] bridge0: port 4(vlan1) entered disabled state [ 1327.915291][T18158] team0: left allmulticast mode [ 1327.933921][T18158] bridge25: left allmulticast mode [ 1327.948227][T18158] team0: left promiscuous mode [ 1327.978287][T18158] bridge25: left promiscuous mode [ 1328.002885][T18158] bridge0: port 2(team0) entered disabled state [ 1328.051450][T18158] vlan6: left promiscuous mode [ 1328.062237][T18158] geneve0: left promiscuous mode [ 1328.080399][T18158] geneve0: entered promiscuous mode [ 1328.900062][ T13] net_ratelimit: 204 callbacks suppressed [ 1328.900085][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1329.049978][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1329.079080][T18183] netlink: 220 bytes leftover after parsing attributes in process `syz.4.18532'. [ 1329.179992][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1329.310330][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1329.342011][T18192] netlink: 'syz.4.18535': attribute type 4 has an invalid length. [ 1329.451609][ T2312] bond17: (slave bridge18): failed to get link speed/duplex [ 1329.640203][ T13] bond17: (slave bridge18): failed to get link speed/duplex [ 1329.771123][ T59] bond17: (slave bridge18): failed to get link speed/duplex [ 1329.841638][T18209] sctp: [Deprecated]: syz.3.18537 (pid 18209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1329.841638][T18209] Use struct sctp_sack_info instead [ 1329.900101][T18211] sctp: [Deprecated]: syz.3.18537 (pid 18211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1329.900101][T18211] Use struct sctp_sack_info instead [ 1329.919040][ T6457] bond17: (slave bridge18): failed to get link speed/duplex [ 1330.052424][ T2312] bond17: (slave bridge18): failed to get link speed/duplex [ 1330.170507][ T2312] bond17: (slave bridge18): failed to get link speed/duplex [ 1330.826285][T18222] tipc: Resetting bearer [ 1330.934913][T18231] netlink: 220 bytes leftover after parsing attributes in process `syz.2.18545'. [ 1331.757101][T18222] bridge0: port 1(vlan6) entered disabled state [ 1333.460392][T20739] uyz0: Port: 1 Link DOWN [ 1333.547470][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18549'. [ 1333.574439][T31777] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.615424][T31777] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1333.649196][T31777] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.676547][T31777] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1333.859138][T18260] 0ªî{X¹¦: left promiscuous mode [ 1333.960048][T18260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.973688][T18260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.039027][T18260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1334.050765][T18260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1334.077956][T18260] veth1_macvtap: left promiscuous mode [ 1334.087773][T18260] veth1_macvtap: entered promiscuous mode [ 1334.097350][T18260] geneve0: left promiscuous mode [ 1334.107813][T18260] geneve0: entered promiscuous mode [ 1334.121421][T18260] net_ratelimit: 2 callbacks suppressed [ 1334.121442][T18260] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1334.143877][T31777] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1334.153406][T31777] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1334.168388][T31777] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1334.179632][T31777] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1334.190580][T31777] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1334.199020][T31777] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1334.241174][T18262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.250629][T18262] 8021q: adding VLAN 0 to HW filter on device team0 [ 1334.289088][T18262] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1334.306395][T18266] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 1334.314728][T18266] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 1334.404490][T18268] syzkaller1: entered promiscuous mode [ 1334.410654][T18268] syzkaller1: entered allmulticast mode [ 1334.667711][T18275] gretap2: left allmulticast mode [ 1334.681195][T18275] syzkaller1: left promiscuous mode [ 1334.686515][T18275] syzkaller1: left allmulticast mode [ 1334.697802][ T9407] uyz0: Port: 1 Link ACTIVE [ 1334.706822][T18276] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1334.720788][T31777] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1334.729475][T31777] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1334.739132][T31777] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1334.748422][T31777] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.761647][ T9412] lo speed is unknown, defaulting to 1000 [ 1334.780856][ T9412] syz2: Port: 1 Link DOWN [ 1334.809618][T16178] syz1: Port: 1 Link DOWN [ 1334.943358][T18285] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 1334.951696][T18285] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 1335.084540][T18289] netlink: 220 bytes leftover after parsing attributes in process `syz.2.18556'. [ 1335.122708][T18291] netlink: 316 bytes leftover after parsing attributes in process `syz.3.18557'. [ 1335.133372][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18557'. [ 1335.222921][T18294] A link change request failed with some changes committed already. Interface 0A may have been left with an inconsistent configuration, please check. [ 1335.261361][T18294] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18558'. [ 1335.742717][T18304] 0ªX¹¦À: left allmulticast mode [ 1335.953401][T18304] ip6gre4: left promiscuous mode [ 1335.958641][T18304] ip6gre4: left allmulticast mode [ 1335.978140][ T5714] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1336.005829][ T5714] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1336.029075][ T5714] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1336.048388][ T5714] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1336.317949][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18565'. [ 1336.521635][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18565'. [ 1337.037280][T18346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18574'. [ 1337.142709][T18351] rdma_rxe: rxe_newlink: failed to add wg1 [ 1337.174333][T18349] openvswitch: netlink: Flow actions attr not present in new flow. [ 1337.565908][T18369] netlink: 316 bytes leftover after parsing attributes in process `syz.2.18581'. [ 1337.591625][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18581'. [ 1338.080432][T18387] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18585'. [ 1338.437924][T18394] netlink: 'syz.2.18587': attribute type 4 has an invalid length. [ 1338.529518][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18588'. [ 1338.584499][T18381] tipc: Resetting bearer [ 1338.777111][T18396] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 1338.844185][T18396] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1339.725105][T18440] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18598'. [ 1339.737659][T18440] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 1339.906334][T18444] lo speed is unknown, defaulting to 1000 [ 1340.008056][T18446] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1340.196915][T18455] xt_hashlimit: size too large, truncated to 1048576 [ 1340.408892][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18601'. [ 1340.477775][T18462] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1340.956940][T18482] tipc: Resetting bearer [ 1341.394464][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18611'. [ 1342.442969][T18482] bridge26: left promiscuous mode [ 1342.448134][T18482] bridge26: left allmulticast mode [ 1342.455065][T18482] bridge27: left promiscuous mode [ 1342.460596][T18482] bridge27: left allmulticast mode [ 1342.466409][T18482] vlan0: left promiscuous mode [ 1342.473278][T18482] gretap0: left promiscuous mode [ 1342.478665][T18482] vlan0: left allmulticast mode [ 1342.483954][T18482] gretap0: left allmulticast mode [ 1342.490249][T18444] lo speed is unknown, defaulting to 1000 [ 1342.502184][T18444] lo speed is unknown, defaulting to 1000 [ 1342.531150][ T9414] uyz0: Port: 1 Link DOWN [ 1342.531169][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.584579][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.628241][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.647313][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.063117][T18529] netlink: 'syz.0.18627': attribute type 4 has an invalid length. [ 1343.530793][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18618'. [ 1343.754083][T18544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18619'. [ 1343.790457][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18618'. [ 1344.098164][T18532] tipc: Resetting bearer [ 1344.457394][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18622'. [ 1345.023857][T18575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18628'. [ 1345.053244][T18575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1345.079384][T18576] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18629'. [ 1345.386414][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18635'. [ 1345.900854][T18619] netlink: 'syz.0.18643': attribute type 32 has an invalid length. [ 1346.629264][T18640] netlink: 316 bytes leftover after parsing attributes in process `syz.0.18647'. [ 1346.649246][T18608] tipc: Resetting bearer [ 1346.663255][T18640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18647'. [ 1346.744679][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18649'. [ 1347.163186][T18660] netlink: 244 bytes leftover after parsing attributes in process `syz.2.18653'. [ 1347.309079][T18660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18653'. [ 1347.439354][T18660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18653'. [ 1347.737187][T18677] lo speed is unknown, defaulting to 1000 [ 1347.866487][T18660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18653'. [ 1348.045351][T18685] netlink: 'syz.1.18658': attribute type 13 has an invalid length. [ 1348.087052][T18685] netlink: 'syz.1.18658': attribute type 17 has an invalid length. [ 1348.524366][T18683] tipc: Resetting bearer [ 1348.602563][ T9414] lo speed is unknown, defaulting to 1000 [ 1348.807083][T18685] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1348.821906][T18685] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1348.841462][T18685] 8021q: adding VLAN 0 to HW filter on device c0· [ 1348.859264][T18685] bridge0: port 3(vlan0) entered blocking state [ 1348.865802][T18685] bridge0: port 3(vlan0) entered listening state [ 1348.892006][T18685] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1348.959487][T31777] bridge0: port 4(vlan1) entered blocking state [ 1348.965977][T31777] bridge0: port 4(vlan1) entered listening state [ 1349.069083][ T9414] lo speed is unknown, defaulting to 1000 [ 1349.098453][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.146754][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.220426][T13482] lo speed is unknown, defaulting to 1000 [ 1349.227001][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.253901][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.509641][T18723] netlink: 316 bytes leftover after parsing attributes in process `syz.4.18666'. [ 1349.539641][T18723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18666'. [ 1350.285801][T18677] lo speed is unknown, defaulting to 1000 [ 1350.303756][T18677] lo speed is unknown, defaulting to 1000 [ 1350.558337][T18749] bridge0: port 4(vlan1) entered disabled state [ 1350.564989][T18749] bridge0: port 3(vlan0) entered disabled state [ 1350.582188][T18734] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1350.751536][T18749] tipc: Resetting bearer [ 1350.812785][T13482] lo speed is unknown, defaulting to 1000 [ 1350.818953][T13482] sqz0: Port: 1 Link DOWN [ 1350.829276][T31777] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.850589][T31777] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.866050][T31777] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.926390][ T9409] lo speed is unknown, defaulting to 1000 [ 1350.952355][T31777] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.362913][T18762] netlink: 316 bytes leftover after parsing attributes in process `syz.2.18679'. [ 1352.042800][T18783] __nla_validate_parse: 1 callbacks suppressed [ 1352.042822][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18685'. [ 1352.394557][T18783] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1352.449217][T18785] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 1352.483196][T18785] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 1352.929267][T18790] lo speed is unknown, defaulting to 1000 [ 1353.176189][T18806] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1353.814768][T18821] netlink: 316 bytes leftover after parsing attributes in process `syz.1.18692'. [ 1353.855048][T18821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18692'. [ 1354.516438][T18840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18697'. [ 1355.038582][T18855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18699'. [ 1355.097992][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18701'. [ 1355.324323][T18854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.486516][T18854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1355.580052][T18854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1355.592157][T18854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1355.623477][T18854] veth1_macvtap: left promiscuous mode [ 1355.635618][T18854] veth1_macvtap: entered promiscuous mode [ 1355.645561][T18854] geneve0: left promiscuous mode [ 1355.670109][T18854] geneve0: entered promiscuous mode [ 1355.735878][T18854] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1355.824643][T18790] lo speed is unknown, defaulting to 1000 [ 1355.846595][T18790] lo speed is unknown, defaulting to 1000 [ 1356.067038][T18878] netlink: 316 bytes leftover after parsing attributes in process `syz.0.18704'. [ 1356.121238][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18704'. [ 1356.191843][T13491] uyz0: Port: 1 Link ACTIVE [ 1356.196492][ T6457] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.211902][ T6457] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.376576][ T6457] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.397815][ T6457] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.495404][T18915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18712'. [ 1357.780899][T18916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.855626][T18916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1358.118419][T18916] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1358.141598][T13491] lo speed is unknown, defaulting to 1000 [ 1358.163872][T13491] syz2: Port: 1 Link ACTIVE [ 1358.298855][ T9409] syz1: Port: 1 Link ACTIVE [ 1359.027654][T18942] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18719'. [ 1359.380035][T18954] netlink: 244 bytes leftover after parsing attributes in process `syz.4.18723'. [ 1359.490868][T18957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18723'. [ 1359.696789][T18957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18723'. [ 1360.027922][T18957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18723'. [ 1360.122950][T18976] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1360.304468][T18985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18728'. [ 1360.374296][T18985] tipc: Resetting bearer [ 1360.701949][T18985] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1361.031625][T19007] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18732'. [ 1361.268200][T19020] netlink: 244 bytes leftover after parsing attributes in process `syz.1.18733'. [ 1361.369320][T19024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18733'. [ 1361.701159][T19041] netlink: 'syz.2.18740': attribute type 13 has an invalid length. [ 1361.728740][T19041] netlink: 'syz.2.18740': attribute type 17 has an invalid length. [ 1363.329560][T19066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1363.723633][T19041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.740507][T19066] __nla_validate_parse: 2 callbacks suppressed [ 1363.740530][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18745'. [ 1363.764401][T19041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1364.103531][T19041] A link change request failed with some changes committed already. Interface 0A may have been left with an inconsistent configuration, please check. [ 1364.126407][T19054] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1364.137891][T19054] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1364.153442][T19054] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1364.475196][ T9414] lo speed is unknown, defaulting to 1000 [ 1364.557894][T19037] lo speed is unknown, defaulting to 1000 [ 1364.633998][T19073] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18746'. [ 1366.008003][T19037] lo speed is unknown, defaulting to 1000 [ 1366.022058][T19037] lo speed is unknown, defaulting to 1000 [ 1366.936438][T19105] lo speed is unknown, defaulting to 1000 [ 1367.602416][T19115] netlink: 316 bytes leftover after parsing attributes in process `syz.1.18757'. [ 1368.005317][T19121] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18758'. [ 1368.610428][T19123] netlink: 'syz.3.18760': attribute type 4 has an invalid length. [ 1368.626933][T19123] netlink: 17 bytes leftover after parsing attributes in process `syz.3.18760'. [ 1369.472190][T19143] netlink: 244 bytes leftover after parsing attributes in process `syz.1.18765'. [ 1369.546040][T19143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18765'. [ 1369.701051][T19143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18765'. [ 1369.864536][T19105] lo speed is unknown, defaulting to 1000 [ 1369.906116][T19105] lo speed is unknown, defaulting to 1000 [ 1370.002976][T19152] netlink: 316 bytes leftover after parsing attributes in process `syz.3.18766'. [ 1370.023938][T19143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18765'. [ 1370.052447][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18766'. [ 1370.528450][T19047] Set syz1 is full, maxelem 65536 reached [ 1370.757203][T19162] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18770'. [ 1370.809726][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18769'. [ 1370.824914][T19162] bond0 (unregistering): Released all slaves [ 1371.644964][T19179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18774'. [ 1371.775726][T19175] lo speed is unknown, defaulting to 1000 [ 1372.567900][T19192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1372.925109][T19193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18778'. [ 1374.249557][T19175] lo speed is unknown, defaulting to 1000 [ 1374.280545][T19175] lo speed is unknown, defaulting to 1000 [ 1374.505427][T19212] lo speed is unknown, defaulting to 1000 [ 1375.072527][T19224] syzkaller1: entered promiscuous mode [ 1375.078270][T19224] syzkaller1: entered allmulticast mode [ 1375.159371][T19224] tipc: Resetting bearer [ 1376.042120][T19229] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1376.299617][T19224] syzkaller1: left promiscuous mode [ 1376.305604][T19224] syzkaller1: left allmulticast mode [ 1376.319104][T19225] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1376.342386][ T9407] uyz0: Port: 1 Link DOWN [ 1376.420580][ T59] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.454661][ T59] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.480218][ T59] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.504162][ T59] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.667594][T19212] lo speed is unknown, defaulting to 1000 [ 1376.681150][T19212] lo speed is unknown, defaulting to 1000 [ 1377.815410][T19248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.273796][T19251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18790'. [ 1379.719636][T19274] netlink: 'syz.2.18797': attribute type 49 has an invalid length. [ 1379.789982][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18797'. [ 1380.588343][T19280] syzkaller0: entered promiscuous mode [ 1380.633144][T19280] syzkaller0: entered allmulticast mode [ 1380.816636][T19295] team0 (unregistering): Port device bond8 removed [ 1384.571844][T19294] syzkaller1: entered promiscuous mode [ 1384.578056][T19294] syzkaller1: entered allmulticast mode [ 1384.736989][T19300] syzkaller1: left promiscuous mode [ 1384.744221][T19300] syzkaller1: left allmulticast mode [ 1384.762943][T19301] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1384.818869][T19306] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18803'. [ 1385.595599][T19330] lo speed is unknown, defaulting to 1000 [ 1385.767535][T19340] syzkaller1: entered promiscuous mode [ 1385.789227][T19340] syzkaller1: entered allmulticast mode [ 1386.158794][T19354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18814'. [ 1386.311209][T19356] tap0: tun_chr_ioctl cmd 1074025681 [ 1386.424410][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18816'. [ 1387.956766][T19390] xt_hashlimit: size too large, truncated to 1048576 [ 1391.133035][T19330] lo speed is unknown, defaulting to 1000 [ 1391.145251][T19330] lo speed is unknown, defaulting to 1000 [ 1391.224985][T19391] bond5: left allmulticast mode [ 1391.231085][T19391] bond6: left allmulticast mode [ 1391.237557][T19391] vlan2: left allmulticast mode [ 1391.246021][T19391] bond7: left allmulticast mode [ 1391.253459][T19391] geneve2: left allmulticast mode [ 1391.260664][T19391] bond8: left promiscuous mode [ 1391.266143][T19391] team_slave_1: left promiscuous mode [ 1391.272864][T19391] bond8: left allmulticast mode [ 1391.278463][T19391] team_slave_1: left allmulticast mode [ 1391.286161][T19391] bond9: left promiscuous mode [ 1391.292417][T19391] bridge6: left promiscuous mode [ 1391.298590][T19391] bridge7: left promiscuous mode [ 1391.305784][T19391] bond9: left allmulticast mode [ 1391.312042][T19391] bridge6: left allmulticast mode [ 1391.317850][T19391] bridge7: left allmulticast mode [ 1391.326984][T19391] veth15: left allmulticast mode [ 1391.337184][T19391] bond13: left promiscuous mode [ 1391.343770][T19391] bridge11: left promiscuous mode [ 1391.353659][T19391] vlan4: left promiscuous mode [ 1391.359052][T19391] geneve1: left promiscuous mode [ 1391.366151][T19391] vlan4: left allmulticast mode [ 1391.372568][T19391] geneve1: left allmulticast mode [ 1391.383101][T19393] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1391.619197][T19401] netlink: 316 bytes leftover after parsing attributes in process `syz.1.18820'. [ 1391.658963][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18820'. [ 1392.076700][T19417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18823'. [ 1392.692867][T19413] lo speed is unknown, defaulting to 1000 [ 1393.724472][T19443] netlink: 'syz.4.18829': attribute type 13 has an invalid length. [ 1393.735149][T19443] netlink: 'syz.4.18829': attribute type 17 has an invalid length. [ 1393.736919][T19442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.851749][T19442] xt_hashlimit: size too large, truncated to 1048576 [ 1393.995358][T19449] netlink: 'syz.0.18830': attribute type 1 has an invalid length. [ 1394.023554][T19449] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18830'. [ 1394.363759][T19443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.431674][T19443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1394.574105][T19443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1394.606707][T19443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1394.811022][T19443] veth1_macvtap: left promiscuous mode [ 1394.827220][T19443] veth1_macvtap: entered promiscuous mode [ 1394.845125][T19443] geneve0: left promiscuous mode [ 1394.863568][T19443] geneve0: entered promiscuous mode [ 1394.885192][T19443] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1394.927127][ T9413] uyz0: Port: 1 Link ACTIVE [ 1395.202381][T31777] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.240621][T31777] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.335254][T31777] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.383237][T31777] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.545155][T19457] lo speed is unknown, defaulting to 1000 [ 1395.551304][T19455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.158872][T19473] netlink: 316 bytes leftover after parsing attributes in process `syz.2.18837'. [ 1396.185651][T19473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18837'. [ 1396.260227][T19413] lo speed is unknown, defaulting to 1000 [ 1396.280318][T19413] lo speed is unknown, defaulting to 1000 [ 1396.808363][T19475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18838'. [ 1397.036563][T19457] lo speed is unknown, defaulting to 1000 [ 1397.045406][T19457] lo speed is unknown, defaulting to 1000 [ 1398.505106][T19490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18842'. [ 1400.874720][T19440] Set syz1 is full, maxelem 65536 reached [ 1400.882019][T19519] lo speed is unknown, defaulting to 1000 [ 1402.049526][T19535] lo speed is unknown, defaulting to 1000 [ 1402.916809][T19552] lo speed is unknown, defaulting to 1000 [ 1403.319207][T19566] netlink: 'syz.3.18859': attribute type 13 has an invalid length. [ 1403.348313][T19566] netlink: 'syz.3.18859': attribute type 17 has an invalid length. [ 1404.144626][T19566] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 1404.235114][T19566] veth1_vlan: left promiscuous mode [ 1404.247565][T19566] veth0_vlan: left promiscuous mode [ 1404.267609][T19566] veth0_vlan: entered promiscuous mode [ 1404.287577][T19566] veth1_vlan: entered promiscuous mode [ 1404.305413][T19566] veth1_macvtap: left promiscuous mode [ 1404.317415][T19566] veth0_macvtap: left promiscuous mode [ 1404.325909][T19566] veth0_macvtap: entered promiscuous mode [ 1404.334099][T19520] Set syz1 is full, maxelem 65536 reached [ 1404.352140][T19566] veth1_macvtap: entered promiscuous mode [ 1404.367215][T19566] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1404.384642][T19519] lo speed is unknown, defaulting to 1000 [ 1404.467682][T31777] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.493314][T31777] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.540201][T19519] lo speed is unknown, defaulting to 1000 [ 1404.573159][T31777] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.604596][T31777] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.060526][T19535] lo speed is unknown, defaulting to 1000 [ 1405.323742][T19592] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18863'. [ 1405.419113][T19535] lo speed is unknown, defaulting to 1000 [ 1405.740434][T19596] xt_hashlimit: size too large, truncated to 1048576 [ 1406.168781][T19552] lo speed is unknown, defaulting to 1000 [ 1406.347996][T19552] lo speed is unknown, defaulting to 1000 [ 1406.440076][T19605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18865'. [ 1407.359175][T19606] smbdirect: ib_dev[syz1] removed [ 1408.195106][T19627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18871'. [ 1408.855357][T19641] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18875'. [ 1409.948172][T19655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18878'. [ 1410.144574][T19666] netlink: 'syz.2.18881': attribute type 4 has an invalid length. [ 1410.857068][T19687] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18887'. [ 1411.268623][T19698] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.467174][T19710] netlink: 316 bytes leftover after parsing attributes in process `syz.2.18894'. [ 1411.513637][T19710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18894'. [ 1411.613462][T19698] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.827095][T19698] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.994628][T19698] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.219546][T31777] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.281700][T31777] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.341385][T31777] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.423921][T31777] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.725021][T19740] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18901'. [ 1413.237280][T19749] xt_hashlimit: size too large, truncated to 1048576 [ 1414.215994][T19779] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.356278][T19784] tipc: Resetting bearer [ 1414.839026][T19779] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.315375][T19805] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18919'. [ 1415.493934][T19779] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.636480][T19779] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.852186][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.958484][T19814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18920'. [ 1416.133042][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.185032][T31777] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.243040][T31777] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.344409][T19826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.516146][T19837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18926'. [ 1416.946767][T19842] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 1416.963786][T19832] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1417.244772][T19853] netlink: 160 bytes leftover after parsing attributes in process `syz.3.18932'. [ 1417.292408][T19853] netlink: 'syz.3.18932': attribute type 11 has an invalid length. [ 1417.300404][T19855] netlink: 'syz.0.18931': attribute type 13 has an invalid length. [ 1417.300428][T19855] netlink: 'syz.0.18931': attribute type 17 has an invalid length. [ 1417.574297][T19860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18932'. [ 1417.879307][ T9413] lo speed is unknown, defaulting to 1000 [ 1417.893206][ T9413] syz2: Port: 1 Link DOWN [ 1418.270638][T19855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.302204][T19855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.423818][T19855] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1418.519086][ T9413] lo speed is unknown, defaulting to 1000 [ 1418.535578][ T9413] syz2: Port: 1 Link ACTIVE [ 1419.499538][T19906] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 1419.702939][T19909] netlink: 316 bytes leftover after parsing attributes in process `syz.3.18945'. [ 1419.736331][T19909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18945'. [ 1419.903839][T19913] lo speed is unknown, defaulting to 1000 [ 1419.972959][T19911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.983465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.028696][T19917] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1420.052363][T19917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.060695][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1420.067949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.324131][T19928] netlink: 'syz.3.18950': attribute type 13 has an invalid length. [ 1420.357725][T19928] netlink: 'syz.3.18950': attribute type 17 has an invalid length. [ 1421.430960][T19928] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 1421.475646][T19928] veth1_vlan: left promiscuous mode [ 1421.482861][T19928] veth0_vlan: left promiscuous mode [ 1421.490193][T19928] veth0_vlan: entered promiscuous mode [ 1421.500667][T19928] veth1_vlan: entered promiscuous mode [ 1421.516862][T19928] veth1_macvtap: left promiscuous mode [ 1421.523965][T19928] veth0_macvtap: left promiscuous mode [ 1421.531187][T19928] veth0_macvtap: entered promiscuous mode [ 1421.537866][T19928] veth1_macvtap: entered promiscuous mode [ 1421.553106][T19928] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1422.125843][T19913] lo speed is unknown, defaulting to 1000 [ 1422.143390][T19913] lo speed is unknown, defaulting to 1000 [ 1422.588750][T19967] sctp: [Deprecated]: syz.1.18959 (pid 19967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1422.588750][T19967] Use struct sctp_sack_info instead [ 1422.612625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.750123][T19962] sctp: [Deprecated]: syz.1.18959 (pid 19962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1422.750123][T19962] Use struct sctp_sack_info instead [ 1423.033627][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.095150][ T9411] lo speed is unknown, defaulting to 1000 [ 1423.106983][ T9411] syz2: Port: 1 Link DOWN [ 1423.537391][T19983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18962'. [ 1423.996490][T19990] sctp: [Deprecated]: syz.0.18964 (pid 19990) Use of int in max_burst socket option. [ 1423.996490][T19990] Use struct sctp_assoc_value instead [ 1425.568505][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18974'. [ 1425.962005][T20027] tipc: Resetting bearer [ 1426.956197][T20040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.982569][T20040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.075758][T20040] veth0_macvtap: left promiscuous mode [ 1427.082678][T20040] veth0_macvtap: entered promiscuous mode [ 1427.105954][T20040] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1427.176511][ T9408] uyz0: Port: 1 Link DOWN [ 1427.185473][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.247685][T13491] lo speed is unknown, defaulting to 1000 [ 1427.265301][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.283299][T13491] syz2: Port: 1 Link ACTIVE [ 1427.369561][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.400332][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.439168][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.484911][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.602059][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.663186][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.708535][T20060] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.856084][T20060] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.005989][T20060] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.171908][T20060] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.350417][T20078] lo speed is unknown, defaulting to 1000 [ 1428.360896][T20073] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1428.384131][T20073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.396146][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1428.404453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.441286][T20081] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1428.460225][T20081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.469747][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1428.477978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.728003][T16755] lo speed is unknown, defaulting to 1000 [ 1429.002906][ T5714] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.041882][ T5714] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.085593][ T5714] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.146140][ T2312] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.342931][T20094] netlink: 'syz.2.18989': attribute type 12 has an invalid length. [ 1429.653479][T20097] xt_CT: No such helper "snmp" [ 1430.368128][T20078] lo speed is unknown, defaulting to 1000 [ 1430.405908][T20078] lo speed is unknown, defaulting to 1000 [ 1430.687974][T20122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18997'. [ 1430.863696][T20126] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.886280][T20128] netlink: 'syz.3.18998': attribute type 2 has an invalid length. [ 1431.025076][T20126] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.196301][T20126] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.327672][T20126] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.586545][T31777] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.823553][ T2312] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.895599][ T5714] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.964319][ T5714] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.506529][T20166] netlink: 316 bytes leftover after parsing attributes in process `syz.2.19008'. [ 1432.527745][T20166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19008'. [ 1432.568679][T20168] netlink: 316 bytes leftover after parsing attributes in process `syz.0.19009'. [ 1432.608601][T20168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19009'. [ 1432.915931][T20174] netlink: 'syz.3.19011': attribute type 12 has an invalid length. [ 1433.006707][T20178] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19012'. [ 1433.073668][T20180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19013'. [ 1433.126689][T20180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19013'. [ 1433.183527][T20180] netlink: 'syz.1.19013': attribute type 4 has an invalid length. [ 1433.460275][T20191] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.19014'. [ 1433.768811][T20199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.759663][T20248] lo speed is unknown, defaulting to 1000 [ 1435.852135][T20245] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1435.904549][T20252] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1435.923739][T20245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.932237][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1435.939670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.962452][T20252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.971981][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1435.980202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.193239][T20265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.841227][T20248] lo speed is unknown, defaulting to 1000 [ 1437.849228][T20248] lo speed is unknown, defaulting to 1000 [ 1437.979152][T20302] netlink: 'syz.4.19044': attribute type 1 has an invalid length. [ 1438.126016][T20306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19044'. [ 1439.035546][T20319] netlink: 316 bytes leftover after parsing attributes in process `syz.0.19046'. [ 1439.085200][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19046'. [ 1440.607581][T20347] netlink: 316 bytes leftover after parsing attributes in process `syz.2.19053'. [ 1440.718532][T20347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19053'. [ 1442.771153][T20279] Set syz1 is full, maxelem 65536 reached [ 1443.126669][T20389] netlink: 316 bytes leftover after parsing attributes in process `syz.3.19061'. [ 1443.148619][T20389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19061'. [ 1443.828776][T20402] netlink: 316 bytes leftover after parsing attributes in process `syz.3.19065'. [ 1443.841399][T20402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19065'. [ 1443.883768][T20400] netlink: 316 bytes leftover after parsing attributes in process `syz.2.19064'. [ 1443.916126][T20400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19064'. [ 1444.543172][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19071'. [ 1444.577651][T20420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.742547][T20427] netlink: 5000 bytes leftover after parsing attributes in process `syz.0.19071'. [ 1444.761145][T20427] openvswitch: netlink: Flow key attr not present in new flow. [ 1444.838345][T20424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19072'. [ 1445.099098][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19072'. [ 1445.445293][T20443] netlink: 'syz.3.19077': attribute type 4 has an invalid length. [ 1445.541392][T20446] netlink: 316 bytes leftover after parsing attributes in process `syz.1.19079'. [ 1446.828865][T20473] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.978835][T20473] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.108766][T20473] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.280856][T20473] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.355135][T20507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.365131][T20508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.115724][T20506] netlink: 'syz.0.19094': attribute type 12 has an invalid length. [ 1452.212127][ T5714] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.232969][T20515] netlink: 'syz.4.19096': attribute type 4 has an invalid length. [ 1452.267771][ T5714] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.315221][ T5714] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.382629][ T5714] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.616340][T20531] __nla_validate_parse: 5 callbacks suppressed [ 1452.616363][T20531] netlink: 316 bytes leftover after parsing attributes in process `syz.0.19101'. [ 1452.659136][T20531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19101'. [ 1453.036859][T20537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.623517][T20549] netlink: 316 bytes leftover after parsing attributes in process `syz.1.19105'. [ 1453.637984][T20546] netlink: 'syz.3.19107': attribute type 1 has an invalid length. [ 1453.660549][T20549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19105'. [ 1454.093753][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19112'. [ 1454.105215][T20556] sctp: [Deprecated]: syz.2.19109 (pid 20556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1454.105215][T20556] Use struct sctp_sack_info instead [ 1454.124841][T20556] sctp: [Deprecated]: syz.2.19109 (pid 20556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1454.124841][T20556] Use struct sctp_sack_info instead [ 1454.147750][T20560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19110'. [ 1454.375993][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19110'. [ 1454.431762][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19110'. [ 1459.069462][T20567] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.276091][T20584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19114'. [ 1459.313227][T20584] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 1459.336074][T20567] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.386550][T20584] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 1459.447498][T20567] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.596207][T20567] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.624552][T20588] netlink: 'syz.3.19115': attribute type 29 has an invalid length. [ 1459.636280][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19115'. [ 1459.655707][T20588] netlink: 'syz.3.19115': attribute type 29 has an invalid length. [ 1459.674672][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19115'. [ 1459.694344][T20588] netlink: 'syz.3.19115': attribute type 29 has an invalid length. [ 1459.722607][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19115'. [ 1459.758517][T20594] hsr0: entered promiscuous mode [ 1459.777121][T20588] netlink: 'syz.3.19115': attribute type 29 has an invalid length. [ 1459.811358][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19115'. [ 1459.833435][T20588] netlink: 'syz.3.19115': attribute type 29 has an invalid length. [ 1459.846913][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19115'. [ 1459.864233][T20588] netlink: 'syz.3.19115': attribute type 29 has an invalid length. [ 1459.878526][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19115'. [ 1459.892602][T20588] netlink: 'syz.3.19115': attribute type 29 has an invalid length. [ 1459.910426][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19115'. [ 1459.930308][T20588] netlink: 'syz.3.19115': attribute type 29 has an invalid length. [ 1459.949428][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19115'. [ 1459.960983][T20588] netlink: 'syz.3.19115': attribute type 29 has an invalid length. [ 1459.970544][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19115'. [ 1459.981231][T20588] netlink: 'syz.3.19115': attribute type 29 has an invalid length. [ 1460.034145][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.091288][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.194908][ T5714] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.266838][ T5714] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.511966][T20637] bond0 (unregistering): Released all slaves [ 1461.711852][T20650] block nbd3: NBD_DISCONNECT [ 1462.979377][T20686] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 1463.467762][T20693] openvswitch: netlink: Flow key attr not present in new flow. [ 1463.604311][T20707] openvswitch: netlink: EtherType 50a is less than min 600 [ 1464.751933][T20751] validate_nla: 48 callbacks suppressed [ 1464.751955][T20751] netlink: 'syz.3.19155': attribute type 4 has an invalid length. [ 1464.877953][T20755] __nla_validate_parse: 59 callbacks suppressed [ 1464.877976][T20755] netlink: 84 bytes leftover after parsing attributes in process `syz.4.19158'. [ 1464.916699][T20761] netlink: 'syz.1.19160': attribute type 58 has an invalid length. [ 1464.935530][T20759] netlink: 364 bytes leftover after parsing attributes in process `syz.2.19159'. [ 1464.946353][T20761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19160'. [ 1465.510377][T13482] syzkaller0: tun_net_xmit 76 [ 1465.611710][T20772] syzkaller0: delete flow: hash 3301392048 index 1 [ 1466.224199][T20789] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1468.011781][T20830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19171'. [ 1468.178809][T20832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19172'. [ 1468.256235][T20815] xt_hashlimit: size too large, truncated to 1048576 [ 1468.888619][T20843] netlink: 'syz.4.19173': attribute type 1 has an invalid length. [ 1468.982607][T20844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19173'. [ 1471.826657][T20811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19167'. [ 1472.104780][T20843] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1472.126836][T20853] netlink: 'syz.0.19175': attribute type 4 has an invalid length. [ 1472.146521][T20856] hsr0: entered promiscuous mode [ 1472.157184][T20847] netlink: 'syz.4.19173': attribute type 1 has an invalid length. [ 1472.182906][T20854] hsr0: left promiscuous mode [ 1472.651444][T20881] netlink: 'syz.3.19180': attribute type 4 has an invalid length. [ 1472.900311][T20888] tipc: Failed to remove unknown binding: 66,0,0/127:223799952/223799954 [ 1472.944634][T20888] tipc: Failed to remove unknown binding: 66,0,0/127:223799952/223799953 [ 1472.973639][T20888] tipc: Failed to remove unknown binding: 66,0,0/127:223799952/223799954 [ 1473.020070][T20888] tipc: Failed to remove unknown binding: 66,0,0/127:223799952/223799953 [ 1473.204263][T20866] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1473.324155][T20896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19182'. [ 1473.463309][T20898] netlink: 'syz.0.19183': attribute type 3 has an invalid length. [ 1473.607871][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19184'. [ 1474.038366][T20914] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19186'. [ 1474.758081][T20926] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19190'. [ 1474.823911][T20926] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19190'. [ 1475.130393][T20939] netlink: 'syz.2.19193': attribute type 4 has an invalid length. [ 1475.191998][T20912] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1476.111057][T20952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19195'. [ 1476.556240][T20964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19199'. [ 1476.618919][T20965] nbd: must specify a size in bytes for the device [ 1476.629134][T20966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19199'. [ 1476.707291][T20965] nbd: couldn't find device at index 2 [ 1476.754687][T20968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19201'. [ 1476.843360][T20968] ip6gre2: entered promiscuous mode [ 1476.872841][T20968] ip6gre2: entered allmulticast mode [ 1476.914008][T20973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19202'. [ 1476.934113][T20968] netlink: 'syz.4.19201': attribute type 6 has an invalid length. [ 1476.954088][T20968] netlink: 72 bytes leftover after parsing attributes in process `syz.4.19201'. [ 1477.093258][T20980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19204'. [ 1477.221944][T20979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19203'. [ 1477.236545][T20979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19203'. [ 1477.251481][T20979] netlink: 'syz.3.19203': attribute type 4 has an invalid length. [ 1477.565878][T20990] veth29: entered allmulticast mode [ 1477.637435][T20990] bond19: (slave veth29): Enslaving as an active interface with an up link [ 1477.701775][T20998] netlink: 316 bytes leftover after parsing attributes in process `syz.4.19208'. [ 1477.752347][T20998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19208'. [ 1477.901154][T20980] bond19 (unregistering): (slave veth29): Releasing backup interface [ 1477.950992][T20980] bond19 (unregistering): Released all slaves [ 1478.009234][T20995] netlink: 'syz.2.19207': attribute type 4 has an invalid length. [ 1478.423384][T21019] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19213'. [ 1478.437937][T21020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19212'. [ 1479.060935][T21036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19213'. [ 1479.094053][T21035] GUP no longer grows the stack in syz.2.19215 (21035): 200000003000-20000000a000 (200000001000) [ 1479.150562][T21035] CPU: 1 UID: 0 PID: 21035 Comm: syz.2.19215 Not tainted syzkaller #0 PREEMPT(full) [ 1479.150595][T21035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1479.150611][T21035] Call Trace: [ 1479.150621][T21035] [ 1479.150633][T21035] dump_stack_lvl+0xe8/0x150 [ 1479.150670][T21035] __get_user_pages+0x2378/0x2720 [ 1479.150705][T21035] ? __gup_longterm_locked+0xc4e/0x1630 [ 1479.150760][T21035] ? __gup_longterm_locked+0xc4e/0x1630 [ 1479.150787][T21035] ? down_read_killable+0x1bb/0x340 [ 1479.150901][T21035] __gup_longterm_locked+0xdcf/0x1630 [ 1479.150934][T21035] ? lock_acquire+0x106/0x350 [ 1479.150992][T21035] gup_fast_fallback+0x1d84/0x20d0 [ 1479.151060][T21035] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1479.151090][T21035] ? is_valid_gup_args+0x11f/0x200 [ 1479.151118][T21035] ? get_user_pages_fast+0x4d/0xb0 [ 1479.151147][T21035] __iov_iter_get_pages_alloc+0x370/0xa10 [ 1479.151246][T21035] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1479.151300][T21035] iov_iter_get_pages2+0x5e/0xa0 [ 1479.151336][T21035] __se_sys_vmsplice+0x7c7/0x1620 [ 1479.151389][T21035] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1479.151420][T21035] ? __pfx_futex_wake+0x10/0x10 [ 1479.151472][T21035] ? fdget+0x148/0x1e0 [ 1479.151516][T21035] ? put_files_struct+0x256/0x350 [ 1479.151541][T21035] ? 0xffffffffff600000 [ 1479.151602][T21035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.151628][T21035] do_syscall_64+0x15f/0xf80 [ 1479.151659][T21035] ? trace_irq_disable+0x3b/0x140 [ 1479.151692][T21035] ? clear_bhb_loop+0x40/0x90 [ 1479.151720][T21035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.151741][T21035] RIP: 0033:0x7f6a72b9ce59 [ 1479.151770][T21035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1479.151791][T21035] RSP: 002b:00007f6a73ab1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1479.151815][T21035] RAX: ffffffffffffffda RBX: 00007f6a72e15fa0 RCX: 00007f6a72b9ce59 [ 1479.151831][T21035] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1479.151845][T21035] RBP: 00007f6a72c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1479.151859][T21035] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1479.151872][T21035] R13: 00007f6a72e16038 R14: 00007f6a72e15fa0 R15: 00007ffcdfd017f8 [ 1479.151913][T21035] [ 1480.145277][ T9409] lo speed is unknown, defaulting to 1000 [ 1480.153143][T21017] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1480.169081][ T9409] syz2: Port: 1 Link DOWN [ 1480.173800][T21017] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1480.174397][T21031] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1480.183896][T21017] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1480.260021][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.313642][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.363026][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.393069][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.481064][T21052] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 1480.644531][T21057] netlink: 'syz.1.19229': attribute type 1 has an invalid length. [ 1480.768208][T21057] bond18: entered promiscuous mode [ 1480.782700][T21057] bond18: entered allmulticast mode [ 1480.806260][T21057] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1480.896323][T21066] erspan2: entered allmulticast mode [ 1480.937238][T21066] bond18: (slave erspan2): making interface the new active one [ 1480.956243][T21066] erspan2: entered promiscuous mode [ 1480.964269][T21066] bond18: (slave erspan2): Enslaving as an active interface with an up link [ 1480.976296][T21062] netlink: 'syz.4.19219': attribute type 4 has an invalid length. [ 1481.053501][T21080] syz.1.19229 (21080) used obsolete PPPIOCDETACH ioctl [ 1484.482486][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.769565][T21107] netlink: 'syz.4.19225': attribute type 4 has an invalid length. [ 1485.215307][T21134] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1485.312629][T21134] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 1485.338146][T21134] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ2 [ 1485.347378][T21139] __nla_validate_parse: 3 callbacks suppressed [ 1485.347398][T21139] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.19230'. [ 1485.403810][T21141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19231'. [ 1485.927533][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19233'. [ 1485.968748][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19233'. [ 1486.131428][T21157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19233'. [ 1486.190232][T21157] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19233'. [ 1486.290908][T21157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19233'. [ 1486.691056][T21188] netlink: 'syz.4.19238': attribute type 58 has an invalid length. [ 1486.709413][T21188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19238'. [ 1486.758233][T21189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19239'. [ 1487.146127][T21149] syzkaller0: delete flow: hash 3097976949 index 1 [ 1491.103316][T21213] lo speed is unknown, defaulting to 1000 [ 1491.428906][T21240] netlink: 316 bytes leftover after parsing attributes in process `syz.0.19245'. [ 1491.455861][T21240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19245'. [ 1491.499296][T21241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19248'. [ 1492.225292][T21213] lo speed is unknown, defaulting to 1000 [ 1492.238625][T21213] lo speed is unknown, defaulting to 1000 [ 1493.672408][T21299] netlink: 316 bytes leftover after parsing attributes in process `syz.4.19259'. [ 1494.362975][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19266'. [ 1495.089546][T21324] vlan5: entered promiscuous mode [ 1495.107516][T21324] veth0: entered promiscuous mode [ 1495.158686][T21331] netlink: 'syz.3.19270': attribute type 4 has an invalid length. [ 1495.444921][T21338] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1495.484028][T21343] netlink: 316 bytes leftover after parsing attributes in process `syz.0.19273'. [ 1495.522079][T21343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19273'. [ 1495.607376][T21352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19277'. [ 1495.711207][T21355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19277'. [ 1495.729320][T21355] nbd: device at index 64 is going down [ 1496.166854][T21359] udevd[21359]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1496.186448][T21369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19279'. [ 1496.208951][T21336] udevd[21336]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1496.689268][T21391] __nla_validate_parse: 1 callbacks suppressed [ 1496.689290][T21391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19282'. [ 1496.752653][T21386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.763988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.799568][T21390] lo speed is unknown, defaulting to 1000 [ 1497.113544][T21400] netlink: 'syz.4.19286': attribute type 1 has an invalid length. [ 1497.123781][T21401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19285'. [ 1497.141299][T21401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19285'. [ 1497.342288][T21405] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19286'. [ 1497.378256][T21400] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1497.410948][T21400] bond0: (slave bond24): making interface the new active one [ 1497.419461][T21400] bond0: (slave bond24): Enslaving as an active interface with an up link [ 1497.472401][T21412] netlink: 316 bytes leftover after parsing attributes in process `syz.1.19288'. [ 1497.514779][T21412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19288'. [ 1497.900298][T21390] lo speed is unknown, defaulting to 1000 [ 1497.926353][T21390] lo speed is unknown, defaulting to 1000 [ 1498.411221][T21431] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.19292'. [ 1498.539940][T21433] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 1498.891475][T21451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19295'. [ 1498.958463][T21448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19295'. [ 1498.969607][T21448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19295'. [ 1499.618000][T21462] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1499.668105][T21462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1500.555369][T21484] lo speed is unknown, defaulting to 1000 [ 1501.247653][T21497] syzkaller1: entered promiscuous mode [ 1501.281030][T21497] syzkaller1: entered allmulticast mode [ 1501.638444][T21510] sctp: [Deprecated]: syz.3.19310 (pid 21510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1501.638444][T21510] Use struct sctp_sack_info instead [ 1501.994018][T21517] __nla_validate_parse: 7 callbacks suppressed [ 1501.994040][T21517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19312'. [ 1502.032997][T21484] lo speed is unknown, defaulting to 1000 [ 1502.051296][T21484] lo speed is unknown, defaulting to 1000 [ 1502.262507][T21522] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1502.550638][T21532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19315'. [ 1502.636391][T21534] netlink: 'syz.3.19316': attribute type 32 has an invalid length. [ 1502.971752][T21535] netlink: 76 bytes leftover after parsing attributes in process `syz.3.19316'. [ 1503.264996][T21541] lo speed is unknown, defaulting to 1000 [ 1504.670487][T21559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19323'. [ 1504.828425][T21561] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.980249][T21561] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.014383][T21541] lo speed is unknown, defaulting to 1000 [ 1505.056774][T21541] lo speed is unknown, defaulting to 1000 [ 1505.074048][T21561] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.216815][T21561] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.244332][T21568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19326'. [ 1505.580720][ T6457] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.718320][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.828974][ T6457] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.005887][ T6457] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.136645][T21572] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1507.027924][T21590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19332'. [ 1507.106504][ T5720] block nbd3: Receive control failed (result -1) [ 1508.474151][T21628] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1508.663449][T21632] netlink: 'syz.1.19342': attribute type 13 has an invalid length. [ 1508.681746][T21632] netlink: 'syz.1.19342': attribute type 17 has an invalid length. [ 1509.008919][T21632] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1509.030931][T21632] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1509.053411][T21632] 8021q: adding VLAN 0 to HW filter on device c0· [ 1509.072277][T21632] bridge0: port 3(vlan0) entered blocking state [ 1509.078761][T21632] bridge0: port 3(vlan0) entered listening state [ 1509.091408][T21632] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1509.111176][ T9411] lo speed is unknown, defaulting to 1000 [ 1509.129992][ T9411] sqz0: Port: 1 Link ACTIVE [ 1509.196698][ T6457] bridge0: port 4(vlan1) entered blocking state [ 1509.204183][ T6457] bridge0: port 4(vlan1) entered listening state [ 1509.263778][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.295109][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.335215][ T9411] lo speed is unknown, defaulting to 1000 [ 1509.343978][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.372826][T21646] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19345'. [ 1509.399409][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.623832][T21650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19345'. [ 1509.744760][T21654] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19347'. [ 1509.969937][T21663] lo speed is unknown, defaulting to 1000 [ 1510.262313][T21672] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19350'. [ 1511.566464][T21663] lo speed is unknown, defaulting to 1000 [ 1511.591961][T21663] lo speed is unknown, defaulting to 1000 [ 1512.219843][T21706] x_tables: duplicate underflow at hook 2 [ 1512.454621][T21690] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1512.833580][T21723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19362'. [ 1513.541580][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19362'. [ 1514.797619][T21756] lo speed is unknown, defaulting to 1000 [ 1515.242105][T21770] netlink: 316 bytes leftover after parsing attributes in process `syz.2.19373'. [ 1515.285438][T21770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19373'. [ 1516.109232][T21760] lo speed is unknown, defaulting to 1000 [ 1516.790062][ T29] audit: type=1800 audit(1779371072.709:23): pid=21784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.19375" name="memory.events" dev="tmpfs" ino=19348 res=0 errno=0 [ 1517.060874][T21791] lo speed is unknown, defaulting to 1000 [ 1517.150194][T21809] netlink: 'syz.2.19380': attribute type 13 has an invalid length. [ 1517.171501][T21809] netlink: 'syz.2.19380': attribute type 17 has an invalid length. [ 1517.401742][T21809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1517.421717][T21809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1517.443440][T21817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19380'. [ 1517.464641][T21809] A link change request failed with some changes committed already. Interface 0A may have been left with an inconsistent configuration, please check. [ 1517.500522][T21756] lo speed is unknown, defaulting to 1000 [ 1517.550189][T21756] lo speed is unknown, defaulting to 1000 [ 1517.971667][T21819] netlink: 64 bytes leftover after parsing attributes in process `syz.2.19383'. [ 1517.991857][T21819] netlink: 388 bytes leftover after parsing attributes in process `syz.2.19383'. [ 1518.001228][T21819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19383'. [ 1518.118264][T21796] lo speed is unknown, defaulting to 1000 [ 1518.372929][T21760] lo speed is unknown, defaulting to 1000 [ 1518.503219][T21760] lo speed is unknown, defaulting to 1000 [ 1519.389667][T21855] netlink: 188 bytes leftover after parsing attributes in process `syz.2.19393'. [ 1519.553394][T21861] netlink: 64 bytes leftover after parsing attributes in process `syz.4.19394'. [ 1519.586694][T21861] netlink: 388 bytes leftover after parsing attributes in process `syz.4.19394'. [ 1519.608996][T21861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19394'. [ 1520.031301][T21791] lo speed is unknown, defaulting to 1000 [ 1520.174288][T21791] lo speed is unknown, defaulting to 1000 [ 1521.420065][T21887] lo speed is unknown, defaulting to 1000 [ 1521.467906][T21901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19403'. [ 1522.133761][T21914] netlink: 64 bytes leftover after parsing attributes in process `syz.3.19406'. [ 1522.153758][T21914] netlink: 388 bytes leftover after parsing attributes in process `syz.3.19406'. [ 1522.514674][T21916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1522.537371][T21796] lo speed is unknown, defaulting to 1000 [ 1522.751655][T21796] lo speed is unknown, defaulting to 1000 [ 1523.888777][T21887] lo speed is unknown, defaulting to 1000 [ 1523.923541][T21959] hsr0: entered promiscuous mode [ 1524.032510][T21958] hsr0: left promiscuous mode [ 1524.151613][ C1] bridge0: port 3(vlan0) entered learning state [ 1524.176386][T21887] lo speed is unknown, defaulting to 1000 [ 1524.790611][ C0] bridge0: port 4(vlan1) entered learning state [ 1525.943183][T21986] xt_hashlimit: invalid rate [ 1525.985035][T21985] __nla_validate_parse: 1 callbacks suppressed [ 1525.985058][T21985] netlink: 144 bytes leftover after parsing attributes in process `syz.1.19418'. [ 1526.662872][T21996] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.19421'. [ 1528.101353][T20746] lo speed is unknown, defaulting to 1000 [ 1528.540279][T22015] netlink: 64 bytes leftover after parsing attributes in process `syz.3.19424'. [ 1528.624280][T22019] netlink: 388 bytes leftover after parsing attributes in process `syz.3.19424'. [ 1528.668309][T22019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19424'. [ 1528.715182][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19427'. [ 1528.948653][T22030] bridge0: port 1(erspan0) entered blocking state [ 1528.972500][T22030] bridge0: port 1(erspan0) entered disabled state [ 1529.002139][T22030] erspan0: entered allmulticast mode [ 1529.080065][T22030] erspan0: left allmulticast mode [ 1529.136981][T22030] netlink: 68 bytes leftover after parsing attributes in process `syz.3.19428'. [ 1529.173578][T22030] netlink: 64 bytes leftover after parsing attributes in process `syz.3.19428'. [ 1529.828638][T22037] xt_hashlimit: size too large, truncated to 1048576 [ 1529.933019][T22043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19429'. [ 1530.337251][T22051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19433'. [ 1530.729469][T22052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1530.831874][T22052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1531.258364][T22052] veth0_macvtap: left promiscuous mode [ 1531.291983][T22052] veth0_macvtap: entered promiscuous mode [ 1531.385739][T22052] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1531.429444][T20746] lo speed is unknown, defaulting to 1000 [ 1531.447799][T20746] syz2: Port: 1 Link ACTIVE [ 1532.038299][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.078803][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.178081][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.222728][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.313506][T22080] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.343536][T22095] __nla_validate_parse: 1 callbacks suppressed [ 1532.343557][T22095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19439'. [ 1533.052193][T22080] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.464439][T22080] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.661512][T22080] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.794139][T22103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19439'. [ 1534.140529][T22124] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 1534.280816][ T6457] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.370637][T22130] netlink: 'syz.0.19445': attribute type 3 has an invalid length. [ 1534.398932][T22130] netlink: 666 bytes leftover after parsing attributes in process `syz.0.19445'. [ 1534.706539][ T6457] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.723064][T22137] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19447'. [ 1534.796099][T21946] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.912196][T32558] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.942498][T22119] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1535.185189][T22145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19449'. [ 1535.301183][T22150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19449'. [ 1535.335778][T22150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19449'. [ 1535.362591][T22151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1536.285255][T22176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19457'. [ 1536.739231][T22183] netlink: 14 bytes leftover after parsing attributes in process `syz.3.19458'. [ 1536.875799][T22189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19459'. [ 1537.553495][T22205] netlink: 'syz.3.19463': attribute type 16 has an invalid length. [ 1537.649170][T22211] __nla_validate_parse: 1 callbacks suppressed [ 1537.649226][T22211] netlink: 64 bytes leftover after parsing attributes in process `syz.1.19466'. [ 1537.696452][T22211] netlink: 388 bytes leftover after parsing attributes in process `syz.1.19466'. [ 1537.719943][T22211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19466'. [ 1538.173923][T22199] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1538.204139][T22228] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19471'. [ 1538.681752][T22239] netlink: 'syz.4.19475': attribute type 13 has an invalid length. [ 1538.691144][T22239] netlink: 'syz.4.19475': attribute type 17 has an invalid length. [ 1538.734438][T22239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1538.747485][T22239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.821307][T22239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1538.842605][T22239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1538.867445][T22246] netlink: 'syz.2.19476': attribute type 13 has an invalid length. [ 1538.877139][T22239] veth1_macvtap: left promiscuous mode [ 1538.890480][T22239] veth1_macvtap: entered promiscuous mode [ 1538.944415][T22239] geneve0: left promiscuous mode [ 1538.979499][T22239] geneve0: entered promiscuous mode [ 1539.011271][T22239] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1539.182588][T13482] uyz0: Port: 1 Link ACTIVE [ 1539.509861][ C1] bridge0: port 3(vlan0) entered forwarding state [ 1539.516947][ C1] bridge0: topology change detected, propagating [ 1539.612755][T22269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19477'. [ 1540.153394][ C0] bridge0: port 4(vlan1) entered forwarding state [ 1540.160816][ C0] bridge0: topology change detected, propagating [ 1541.568387][T22243] Set syz1 is full, maxelem 65536 reached [ 1544.407278][ T2310] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.416525][ T2310] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.667112][T22283] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19483'. [ 1544.744237][ T2310] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.761214][ T2310] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.117816][T22295] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1545.546763][T22288] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1545.709194][T22326] can: request_module (can-proto-5) failed. [ 1545.916279][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.183803][T22342] ªªªªªª: renamed from wg2 (while UP) [ 1546.197998][T22343] netlink: 14 bytes leftover after parsing attributes in process `syz.1.19495'. [ 1546.374825][T22354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19499'. [ 1546.609678][T22364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19499'. [ 1546.649912][T22364] nbd: device at index 64 is going down [ 1546.903752][T22370] udevd[22370]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1546.957063][T22369] udevd[22369]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1546.982734][T22387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19505'. [ 1547.002947][T22387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19505'. [ 1547.389552][T22377] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1548.170425][T22421] netlink: 14 bytes leftover after parsing attributes in process `syz.3.19509'. [ 1548.326005][T22431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19512'. [ 1548.400172][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19511'. [ 1548.476952][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19511'. [ 1548.807115][T22447] lo speed is unknown, defaulting to 1000 [ 1549.010700][T22456] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1549.695863][T22447] lo speed is unknown, defaulting to 1000 [ 1549.708371][T22447] lo speed is unknown, defaulting to 1000 [ 1550.012923][T22481] __nla_validate_parse: 6 callbacks suppressed [ 1550.012943][T22481] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19526'. [ 1550.866645][T22508] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19533'. [ 1550.988078][T22509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19532'. [ 1551.661991][T22532] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19541'. [ 1551.909589][T22538] syzkaller1: entered promiscuous mode [ 1551.915847][T22538] syzkaller1: entered allmulticast mode [ 1552.114926][T22546] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19545'. [ 1552.275005][T22554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19546'. [ 1552.505275][T22559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19546'. [ 1552.537173][T22559] nbd: nbd64 already in use [ 1552.796929][T22577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19549'. [ 1552.884628][T22369] udevd[22369]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1552.997951][T22584] netlink: 316 bytes leftover after parsing attributes in process `syz.3.19553'. [ 1553.023075][T22584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19553'. [ 1553.029354][T22581] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1553.052494][T22572] lo speed is unknown, defaulting to 1000 [ 1553.861707][T22572] lo speed is unknown, defaulting to 1000 [ 1553.870449][T22572] lo speed is unknown, defaulting to 1000 [ 1555.028565][T22631] __nla_validate_parse: 6 callbacks suppressed [ 1555.028587][T22631] netlink: 316 bytes leftover after parsing attributes in process `syz.1.19566'. [ 1555.116256][T22631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19566'. [ 1555.169650][T22639] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19568'. [ 1555.213316][T22641] netlink: 14 bytes leftover after parsing attributes in process `syz.3.19569'. [ 1555.263714][T22629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19561'. [ 1555.302493][T22629] nbd: device at index 64 is going down [ 1555.688061][T22369] udevd[22369]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1556.111326][T22662] netlink: 316 bytes leftover after parsing attributes in process `syz.3.19574'. [ 1556.131179][T22662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19574'. [ 1556.367875][T22667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19576'. [ 1556.906521][T22680] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19580'. [ 1556.985836][T22676] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19577'. [ 1557.632930][T22705] lo speed is unknown, defaulting to 1000 [ 1557.688283][T22700] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1557.710465][T22700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.718802][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1557.726180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.755063][T22707] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1557.770243][T22707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.778546][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1557.785825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.163135][T22704] lo speed is unknown, defaulting to 1000 [ 1558.568849][T22723] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 1558.928910][T22705] lo speed is unknown, defaulting to 1000 [ 1558.948115][T22705] lo speed is unknown, defaulting to 1000 [ 1563.340173][T22704] lo speed is unknown, defaulting to 1000 [ 1563.353367][T22754] __nla_validate_parse: 6 callbacks suppressed [ 1563.353388][T22754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19597'. [ 1563.406590][T22704] lo speed is unknown, defaulting to 1000 [ 1563.583216][T22768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19600'. [ 1564.421761][T22788] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.544513][T22788] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.667651][T22795] ip6tnl0: Caught tx_queue_len zero misconfig [ 1564.737867][T22788] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.844756][T22788] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.105895][ T2310] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.188026][ T2310] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.328847][ T2310] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.428121][ T2310] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.780485][T22807] lo speed is unknown, defaulting to 1000 [ 1565.785168][T22810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.797411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.824638][T22810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.933463][T22805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.944715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.974096][T22805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.012156][T22805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.020698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.030802][T22805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.061888][T22805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.896644][T22839] lo speed is unknown, defaulting to 1000 [ 1566.910826][T22849] netlink: 56 bytes leftover after parsing attributes in process `syz.2.19615'. [ 1567.536664][T22848] lo speed is unknown, defaulting to 1000 [ 1567.542922][T22807] lo speed is unknown, defaulting to 1000 [ 1567.566712][T22807] lo speed is unknown, defaulting to 1000 [ 1568.139639][T22867] lo speed is unknown, defaulting to 1000 [ 1568.176253][T22839] lo speed is unknown, defaulting to 1000 [ 1568.205445][T22839] lo speed is unknown, defaulting to 1000 [ 1568.561323][T22874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19622'. [ 1568.914995][T22848] lo speed is unknown, defaulting to 1000 [ 1568.958828][T22848] lo speed is unknown, defaulting to 1000 [ 1569.707419][T22867] lo speed is unknown, defaulting to 1000 [ 1569.811800][T22867] lo speed is unknown, defaulting to 1000 [ 1571.608822][T22901] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19626'. [ 1571.683971][T22903] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19626'. [ 1571.995738][T22913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19627'. [ 1572.255704][T22913] net_ratelimit: 22 callbacks suppressed [ 1572.255729][T22913] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1572.960102][T22935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19632'. [ 1573.542999][T22952] nbd: couldn't find a device at index 2 [ 1573.705507][T22956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19635'. [ 1577.637746][T22950] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1577.732661][T22973] lo speed is unknown, defaulting to 1000 [ 1578.324519][T23003] lo speed is unknown, defaulting to 1000 [ 1578.768420][T23018] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1578.830073][T22973] lo speed is unknown, defaulting to 1000 [ 1578.860278][T22973] lo speed is unknown, defaulting to 1000 [ 1578.990625][T23021] team0 (unregistering): Port device bridge25 removed [ 1579.005690][T23021] team0 (unregistering): Port device bridge26 removed [ 1579.036130][T23021] team0 (unregistering): Port device bridge27 removed [ 1583.159665][ T5720] block nbd7: Receive control failed (result -22) [ 1583.218312][T23040] nbd7: detected capacity change from 0 to 32 [ 1583.330822][T23003] lo speed is unknown, defaulting to 1000 [ 1583.340498][T23003] lo speed is unknown, defaulting to 1000 [ 1583.393587][T23037] block nbd7: Dead connection, failed to find a fallback [ 1583.429105][T23037] block nbd7: shutting down sockets [ 1583.462009][T23037] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1583.504797][T23037] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1583.525008][T23037] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1583.548982][T23037] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1583.562350][T23037] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1583.579812][T23037] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1583.599986][T23037] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1583.621045][T23037] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1583.637707][T23037] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1583.657266][T23037] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1583.695703][T23037] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1583.724433][T23037] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1583.748657][T23037] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1583.778691][T23037] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1583.805634][T23037] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1583.834344][T23037] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1583.891153][T23037] ldm_validate_partition_table(): Disk read failed. [ 1583.916911][T23037] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1583.936652][T23037] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1583.944794][T23051] lo speed is unknown, defaulting to 1000 [ 1583.955645][T23037] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1583.976468][T23037] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1583.994090][T23037] Dev nbd7: unable to read RDB block 0 [ 1584.006563][T23037] nbd7: unable to read partition table [ 1584.038448][T23037] ldm_validate_partition_table(): Disk read failed. [ 1584.046737][T23037] Dev nbd7: unable to read RDB block 0 [ 1584.064483][T23037] nbd7: unable to read partition table [ 1584.522846][T23076] netlink: 'syz.3.19662': attribute type 13 has an invalid length. [ 1584.683836][T23076] hsr0: left promiscuous mode [ 1585.357706][T23086] netlink: 188 bytes leftover after parsing attributes in process `syz.3.19664'. [ 1585.898128][T23099] lo speed is unknown, defaulting to 1000 [ 1585.905487][T23051] lo speed is unknown, defaulting to 1000 [ 1585.927423][T23051] lo speed is unknown, defaulting to 1000 [ 1586.163160][T23123] netlink: 'syz.0.19670': attribute type 25 has an invalid length. [ 1586.189896][T23123] netlink: 'syz.0.19670': attribute type 3 has an invalid length. [ 1586.201592][T23123] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19670'. [ 1586.451990][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19672'. [ 1586.485304][T23133] netlink: 'syz.2.19672': attribute type 13 has an invalid length. [ 1586.509892][T23133] netlink: 'syz.2.19672': attribute type 17 has an invalid length. [ 1586.626794][T23133] A link change request failed with some changes committed already. Interface 0A may have been left with an inconsistent configuration, please check. [ 1586.728521][T23133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19672'. [ 1590.677369][T23099] lo speed is unknown, defaulting to 1000 [ 1590.724522][T23099] lo speed is unknown, defaulting to 1000 [ 1590.766278][T23146] lo speed is unknown, defaulting to 1000 [ 1591.026483][T23153] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1591.038280][T23153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.046627][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1591.053913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.070747][T23153] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1591.078047][T23153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.086421][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1591.093683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.441064][T23155] lo speed is unknown, defaulting to 1000 [ 1592.489131][T23166] netlink: 188 bytes leftover after parsing attributes in process `syz.4.19679'. [ 1592.592436][T23146] lo speed is unknown, defaulting to 1000 [ 1592.611671][T23155] lo speed is unknown, defaulting to 1000 [ 1592.622848][T23146] lo speed is unknown, defaulting to 1000 [ 1592.652173][T23172] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.701922][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19680'. [ 1592.761883][T23172] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.852007][T23172] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.941434][T23172] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.143011][T32558] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.183094][T32558] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.217122][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.241045][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.364305][T23155] lo speed is unknown, defaulting to 1000 [ 1593.857256][T23186] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19685'. [ 1594.020993][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19685'. [ 1595.137465][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19686'. [ 1595.906342][T23202] lo speed is unknown, defaulting to 1000 [ 1596.736251][T23219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19689'. [ 1599.468978][T23229] netlink: 'syz.4.19691': attribute type 13 has an invalid length. [ 1599.617773][T23202] lo speed is unknown, defaulting to 1000 [ 1599.634290][T23202] lo speed is unknown, defaulting to 1000 [ 1600.325183][T23258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19697'. [ 1600.644410][T23261] tipc: Resetting bearer [ 1601.053612][T23267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19697'. [ 1601.140857][T23272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19700'. [ 1601.205127][T23272] [ 1601.207491][T23272] ====================================================== [ 1601.214523][T23272] WARNING: possible circular locking dependency detected [ 1601.221585][T23272] syzkaller #0 Not tainted [ 1601.226017][T23272] ------------------------------------------------------ [ 1601.233057][T23272] syz.2.19700/23272 is trying to acquire lock: [ 1601.239244][T23272] ffff8880b1c8f898 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300 [ 1601.248204][T23272] [ 1601.248204][T23272] but task is already holding lock: [ 1601.255600][T23272] ffff888028c72178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1601.265183][T23272] [ 1601.265183][T23272] which lock already depends on the new lock. [ 1601.265183][T23272] [ 1601.275630][T23272] [ 1601.275630][T23272] the existing dependency chain (in reverse order) is: [ 1601.284678][T23272] [ 1601.284678][T23272] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1601.292544][T23272] __mutex_lock+0x1a3/0x1550 [ 1601.297687][T23272] elevator_change+0x1b3/0x450 [ 1601.303016][T23272] elevator_set_none+0xb5/0x140 [ 1601.308420][T23272] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1601.314834][T23272] nbd_start_device+0x17f/0xb10 [ 1601.320349][T23272] nbd_genl_connect+0x165b/0x1cf0 [ 1601.325912][T23272] genl_family_rcv_msg_doit+0x22a/0x330 [ 1601.332096][T23272] genl_rcv_msg+0x61c/0x7a0 [ 1601.337138][T23272] netlink_rcv_skb+0x232/0x4b0 [ 1601.342449][T23272] genl_rcv+0x28/0x40 [ 1601.346975][T23272] netlink_unicast+0x75c/0x8e0 [ 1601.352278][T23272] netlink_sendmsg+0x813/0xb40 [ 1601.357581][T23272] ____sys_sendmsg+0x972/0x9f0 [ 1601.362879][T23272] ___sys_sendmsg+0x2a5/0x360 [ 1601.368089][T23272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1601.373559][T23272] do_syscall_64+0x15f/0xf80 [ 1601.378690][T23272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.385116][T23272] [ 1601.385116][T23272] -> #5 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 1601.393747][T23272] blk_alloc_queue+0x546/0x680 [ 1601.399128][T23272] __blk_mq_alloc_disk+0x197/0x390 [ 1601.404773][T23272] nbd_dev_add+0x499/0xb50 [ 1601.409727][T23272] nbd_init+0x168/0x1f0 [ 1601.414513][T23272] do_one_initcall+0x250/0x870 [ 1601.419902][T23272] do_initcall_level+0x104/0x190 [ 1601.425433][T23272] do_initcalls+0x59/0xa0 [ 1601.430309][T23272] kernel_init_freeable+0x2a6/0x3e0 [ 1601.436066][T23272] kernel_init+0x1d/0x1d0 [ 1601.441014][T23272] ret_from_fork+0x514/0xb70 [ 1601.446168][T23272] ret_from_fork_asm+0x1a/0x30 [ 1601.451485][T23272] [ 1601.451485][T23272] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1601.458716][T23272] fs_reclaim_acquire+0x71/0x100 [ 1601.464210][T23272] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1601.470577][T23272] __alloc_skb+0x1d0/0x7d0 [ 1601.475621][T23272] __ip6_append_data+0x2d3c/0x3f60 [ 1601.481341][T23272] ip6_append_data+0x10f/0x280 [ 1601.486650][T23272] rawv6_sendmsg+0x12d3/0x18e0 [ 1601.492032][T23272] ____sys_sendmsg+0x80a/0x9f0 [ 1601.497335][T23272] ___sys_sendmsg+0x2a5/0x360 [ 1601.502545][T23272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1601.508021][T23272] do_syscall_64+0x15f/0xf80 [ 1601.513164][T23272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.519592][T23272] [ 1601.519592][T23272] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1601.527590][T23272] lock_sock_nested+0x41/0x100 [ 1601.532915][T23272] inet_shutdown+0x6a/0x390 [ 1601.538059][T23272] nbd_mark_nsock_dead+0x2e9/0x560 [ 1601.543704][T23272] sock_shutdown+0x15e/0x260 [ 1601.548827][T23272] nbd_clear_sock+0x24/0x170 [ 1601.553957][T23272] nbd_config_put+0x2dd/0x580 [ 1601.559176][T23272] nbd_genl_connect+0x19d5/0x1cf0 [ 1601.564737][T23272] genl_family_rcv_msg_doit+0x22a/0x330 [ 1601.570831][T23272] genl_rcv_msg+0x61c/0x7a0 [ 1601.575871][T23272] netlink_rcv_skb+0x232/0x4b0 [ 1601.581179][T23272] genl_rcv+0x28/0x40 [ 1601.585697][T23272] netlink_unicast+0x75c/0x8e0 [ 1601.591020][T23272] netlink_sendmsg+0x813/0xb40 [ 1601.596338][T23272] ____sys_sendmsg+0x972/0x9f0 [ 1601.601645][T23272] ___sys_sendmsg+0x2a5/0x360 [ 1601.606861][T23272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1601.612332][T23272] do_syscall_64+0x15f/0xf80 [ 1601.617466][T23272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.623894][T23272] [ 1601.623894][T23272] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1601.631561][T23272] __mutex_lock+0x1a3/0x1550 [ 1601.636687][T23272] nbd_queue_rq+0x37b/0x1100 [ 1601.641818][T23272] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1601.648002][T23272] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1601.654905][T23272] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1601.661458][T23272] blk_mq_run_hw_queue+0x348/0x4f0 [ 1601.667112][T23272] blk_mq_dispatch_list+0xd16/0xe10 [ 1601.672851][T23272] blk_mq_flush_plug_list+0x48d/0x570 [ 1601.678763][T23272] __blk_flush_plug+0x3ed/0x4d0 [ 1601.684162][T23272] __submit_bio+0x28d/0x580 [ 1601.689198][T23272] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1601.695384][T23272] block_read_full_folio+0x7b7/0x830 [ 1601.701251][T23272] filemap_read_folio+0x137/0x3b0 [ 1601.706835][T23272] do_read_cache_folio+0x358/0x590 [ 1601.712485][T23272] read_part_sector+0xb6/0x2b0 [ 1601.717795][T23272] adfspart_check_ICS+0xb1/0x960 [ 1601.723330][T23272] bdev_disk_changed+0x817/0x1770 [ 1601.728893][T23272] blkdev_get_whole+0x380/0x510 [ 1601.734318][T23272] bdev_open+0x31e/0xd30 [ 1601.739120][T23272] blkdev_open+0x470/0x610 [ 1601.744069][T23272] do_dentry_open+0x785/0x14e0 [ 1601.749387][T23272] vfs_open+0x3b/0x340 [ 1601.753993][T23272] path_openat+0x2e08/0x3860 [ 1601.759136][T23272] do_file_open+0x23e/0x4a0 [ 1601.764180][T23272] do_sys_openat2+0x113/0x200 [ 1601.769396][T23272] __x64_sys_openat+0x138/0x170 [ 1601.774783][T23272] do_syscall_64+0x15f/0xf80 [ 1601.779922][T23272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.786356][T23272] [ 1601.786356][T23272] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1601.793582][T23272] __mutex_lock+0x1a3/0x1550 [ 1601.798709][T23272] nbd_queue_rq+0xc6/0x1100 [ 1601.803744][T23272] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1601.809832][T23272] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1601.816707][T23272] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1601.823229][T23272] blk_mq_run_hw_queue+0x348/0x4f0 [ 1601.828880][T23272] blk_mq_dispatch_list+0xd16/0xe10 [ 1601.834616][T23272] blk_mq_flush_plug_list+0x48d/0x570 [ 1601.840530][T23272] __blk_flush_plug+0x3ed/0x4d0 [ 1601.845921][T23272] __submit_bio+0x28d/0x580 [ 1601.850966][T23272] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1601.857144][T23272] block_read_full_folio+0x7b7/0x830 [ 1601.862972][T23272] filemap_read_folio+0x137/0x3b0 [ 1601.868534][T23272] do_read_cache_folio+0x358/0x590 [ 1601.874185][T23272] read_part_sector+0xb6/0x2b0 [ 1601.879492][T23272] adfspart_check_ICS+0xb1/0x960 [ 1601.884969][T23272] bdev_disk_changed+0x817/0x1770 [ 1601.890536][T23272] blkdev_get_whole+0x380/0x510 [ 1601.895926][T23272] bdev_open+0x31e/0xd30 [ 1601.900719][T23272] blkdev_open+0x470/0x610 [ 1601.905678][T23272] do_dentry_open+0x785/0x14e0 [ 1601.910983][T23272] vfs_open+0x3b/0x340 [ 1601.915589][T23272] path_openat+0x2e08/0x3860 [ 1601.920713][T23272] do_file_open+0x23e/0x4a0 [ 1601.925753][T23272] do_sys_openat2+0x113/0x200 [ 1601.930966][T23272] __x64_sys_openat+0x138/0x170 [ 1601.936366][T23272] do_syscall_64+0x15f/0xf80 [ 1601.941507][T23272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.947955][T23272] [ 1601.947955][T23272] -> #0 (set->srcu){.+.+}-{0:0}: [ 1601.955112][T23272] __lock_acquire+0x15a5/0x2cf0 [ 1601.960510][T23272] lock_sync+0x9d/0x120 [ 1601.965203][T23272] __synchronize_srcu+0xca/0x300 [ 1601.970672][T23272] elevator_switch+0x1e8/0x7a0 [ 1601.975982][T23272] elevator_change+0x2cc/0x450 [ 1601.981298][T23272] elevator_set_default+0x36c/0x430 [ 1601.987037][T23272] blk_register_queue+0x3e9/0x4e0 [ 1601.992596][T23272] __add_disk+0x677/0xd50 [ 1601.997468][T23272] add_disk_fwnode+0xfb/0x480 [ 1602.002681][T23272] nbd_dev_add+0x72c/0xb50 [ 1602.007633][T23272] nbd_genl_connect+0x962/0x1cf0 [ 1602.013112][T23272] genl_family_rcv_msg_doit+0x22a/0x330 [ 1602.019197][T23272] genl_rcv_msg+0x61c/0x7a0 [ 1602.024238][T23272] netlink_rcv_skb+0x232/0x4b0 [ 1602.029798][T23272] genl_rcv+0x28/0x40 [ 1602.034319][T23272] netlink_unicast+0x75c/0x8e0 [ 1602.039622][T23272] netlink_sendmsg+0x813/0xb40 [ 1602.044922][T23272] ____sys_sendmsg+0x972/0x9f0 [ 1602.050222][T23272] ___sys_sendmsg+0x2a5/0x360 [ 1602.055430][T23272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1602.060901][T23272] do_syscall_64+0x15f/0xf80 [ 1602.066040][T23272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.072473][T23272] [ 1602.072473][T23272] other info that might help us debug this: [ 1602.072473][T23272] [ 1602.082711][T23272] Chain exists of: [ 1602.082711][T23272] set->srcu --> &q->q_usage_counter(io)#54 --> &q->elevator_lock [ 1602.082711][T23272] [ 1602.096389][T23272] Possible unsafe locking scenario: [ 1602.096389][T23272] [ 1602.103849][T23272] CPU0 CPU1 [ 1602.109223][T23272] ---- ---- [ 1602.114599][T23272] lock(&q->elevator_lock); [ 1602.119219][T23272] lock(&q->q_usage_counter(io)#54); [ 1602.127130][T23272] lock(&q->elevator_lock); [ 1602.134266][T23272] sync(set->srcu); [ 1602.138193][T23272] [ 1602.138193][T23272] *** DEADLOCK *** [ 1602.138193][T23272] [ 1602.146357][T23272] 6 locks held by syz.2.19700/23272: [ 1602.151657][T23272] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1602.159872][T23272] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1602.168864][T23272] #2: ffff88809b3299c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 1602.179324][T23272] #3: ffff888028c72200 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x119/0x4e0 [ 1602.189178][T23272] #4: ffff888028c71c88 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1602.200086][T23272] #5: ffff888028c72178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1602.209942][T23272] [ 1602.209942][T23272] stack backtrace: [ 1602.215842][T23272] CPU: 1 UID: 0 PID: 23272 Comm: syz.2.19700 Not tainted syzkaller #0 PREEMPT(full) [ 1602.215862][T23272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1602.215875][T23272] Call Trace: [ 1602.215884][T23272] [ 1602.215893][T23272] dump_stack_lvl+0xe8/0x150 [ 1602.215916][T23272] print_circular_bug+0x2e1/0x300 [ 1602.215941][T23272] check_noncircular+0x12e/0x150 [ 1602.215967][T23272] __lock_acquire+0x15a5/0x2cf0 [ 1602.215992][T23272] ? lockdep_unlock+0x5d/0xd0 [ 1602.216006][T23272] ? __lock_acquire+0x146e/0x2cf0 [ 1602.216025][T23272] ? __lock_acquire+0x146e/0x2cf0 [ 1602.216044][T23272] ? __synchronize_srcu+0xb6/0x300 [ 1602.216060][T23272] lock_sync+0x9d/0x120 [ 1602.216076][T23272] ? __synchronize_srcu+0xb6/0x300 [ 1602.216095][T23272] __synchronize_srcu+0xca/0x300 [ 1602.216112][T23272] ? do_raw_spin_lock+0x12b/0x2f0 [ 1602.216136][T23272] ? __pfx___synchronize_srcu+0x10/0x10 [ 1602.216157][T23272] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1602.216253][T23272] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1602.216280][T23272] ? synchronize_srcu+0x20d/0x270 [ 1602.216299][T23272] elevator_switch+0x1e8/0x7a0 [ 1602.216322][T23272] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1602.216341][T23272] elevator_change+0x2cc/0x450 [ 1602.216365][T23272] ? do_raw_spin_unlock+0xf5/0x210 [ 1602.216391][T23272] elevator_set_default+0x36c/0x430 [ 1602.216416][T23272] ? __pfx_elevator_set_default+0x10/0x10 [ 1602.216445][T23272] ? disk_register_independent_access_ranges+0x2db/0x380 [ 1602.216486][T23272] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1602.216564][T23272] blk_register_queue+0x3e9/0x4e0 [ 1602.216585][T23272] __add_disk+0x677/0xd50 [ 1602.216605][T23272] ? down_read+0x270/0x2e0 [ 1602.216623][T23272] add_disk_fwnode+0xfb/0x480 [ 1602.216644][T23272] nbd_dev_add+0x72c/0xb50 [ 1602.216664][T23272] ? __pfx_nbd_dev_add+0x10/0x10 [ 1602.216690][T23272] ? bpf_lsm_capable+0x9/0x20 [ 1602.216707][T23272] ? security_capable+0x7e/0x2c0 [ 1602.216781][T23272] ? radix_tree_lookup+0x25c/0x290 [ 1602.216850][T23272] nbd_genl_connect+0x962/0x1cf0 [ 1602.216867][T23272] ? __pfx___nla_validate_parse+0x10/0x10 [ 1602.216947][T23272] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1602.216967][T23272] ? rcu_is_watching+0x15/0xb0 [ 1602.216987][T23272] ? trace_kmalloc+0x2a/0xf0 [ 1602.217013][T23272] ? __nla_parse+0x40/0x60 [ 1602.217038][T23272] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1602.217063][T23272] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1602.217089][T23272] genl_family_rcv_msg_doit+0x22a/0x330 [ 1602.217115][T23272] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1602.217143][T23272] ? __lock_acquire+0x6b5/0x2cf0 [ 1602.217164][T23272] genl_rcv_msg+0x61c/0x7a0 [ 1602.217189][T23272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1602.217210][T23272] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1602.217233][T23272] netlink_rcv_skb+0x232/0x4b0 [ 1602.217250][T23272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1602.217271][T23272] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1602.217295][T23272] ? down_read+0x270/0x2e0 [ 1602.217310][T23272] ? genl_rcv+0xd/0x40 [ 1602.217330][T23272] genl_rcv+0x28/0x40 [ 1602.217350][T23272] netlink_unicast+0x75c/0x8e0 [ 1602.217380][T23272] netlink_sendmsg+0x813/0xb40 [ 1602.217401][T23272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1602.217420][T23272] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1602.217443][T23272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1602.217473][T23272] ____sys_sendmsg+0x972/0x9f0 [ 1602.217490][T23272] ? __might_fault+0xaf/0x130 [ 1602.217514][T23272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1602.217534][T23272] ? import_iovec+0x73/0xa0 [ 1602.217560][T23272] ___sys_sendmsg+0x2a5/0x360 [ 1602.217575][T23272] ? __lock_acquire+0x6b5/0x2cf0 [ 1602.217594][T23272] ? __pfx____sys_sendmsg+0x10/0x10 [ 1602.217613][T23272] ? futex_wait+0x2a2/0x390 [ 1602.217649][T23272] ? __fget_files+0x2a/0x420 [ 1602.217669][T23272] ? __fget_files+0x3a0/0x420 [ 1602.217693][T23272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1602.217711][T23272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1602.217732][T23272] ? rcu_is_watching+0x15/0xb0 [ 1602.217755][T23272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.217773][T23272] do_syscall_64+0x15f/0xf80 [ 1602.217798][T23272] ? trace_irq_disable+0x3b/0x140 [ 1602.217823][T23272] ? clear_bhb_loop+0x40/0x90 [ 1602.217842][T23272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.217858][T23272] RIP: 0033:0x7f6a72b9ce59 [ 1602.217876][T23272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1602.217891][T23272] RSP: 002b:00007f6a73a90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1602.217910][T23272] RAX: ffffffffffffffda RBX: 00007f6a72e16090 RCX: 00007f6a72b9ce59 [ 1602.217922][T23272] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 1602.217933][T23272] RBP: 00007f6a72c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1602.217944][T23272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1602.217954][T23272] R13: 00007f6a72e16128 R14: 00007f6a72e16090 R15: 00007ffcdfd017f8 [ 1602.217978][T23272] [ 1602.854021][T23218] udevd[23218]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1602.866999][T23151] udevd[23151]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1607.350509][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog