last executing test programs: 18.176134326s ago: executing program 3 (id=3019): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) unshare(0x22020600) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf25760000e40800030053595cfbcd921adb3c04807d4275b6473d27794c30648cb357b346c104fdac9fd170d59f7f58336b939e6815f4b95a70a6cba83925966c62878ffadc8e02b949db7f6df7ecaa5983eb040418e54cff2afdf6fe4336f55140d07751822d3e6e92940c515d9ace9fed6aa95194e806432c46be43afa9f23332020893748e73bac445896c5a90651fb9bb12c1614ebf29febbec6ecff9a4ccc79bcdc6b077511e3c2d39b9a103d7520b6b5046dde4b5", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) (async) bind$vsock_stream(r1, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r6, &(0x7f00000000c0)="9d", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r6, 0x0, 0x0, 0x40000003, 0x0, 0x0) (async) close(r0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) accept$alg(r7, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x480, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r11, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x450, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x40, 0xdc2, 0x1000, {0x7, 0x2, 0xe, 0x6, 0x6, 0x1}, {0x0, 0x1, 0x94, 0x9, 0x401}, 0x9, 0x1, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x5, 0x5, 0x0, 0x1, 0x7, 0x4, 0x4, 0x7, 0x3e97, 0x5, 0x18, 0xd, 0xfff, 0x0, 0x5, 0x8, 0x6, 0x0, 0xfce, 0x9, 0x8, 0x5, 0xfff, 0x6, 0xf, 0x6, 0x0, 0x8, 0x5edaf873, 0x1, 0xffff, 0xf1, 0x7, 0x7fffffff, 0x7ff, 0x8, 0x5, 0x4, 0x963e, 0x3, 0x56, 0xfff, 0x875, 0x29c, 0x1000, 0x400, 0x2, 0x1, 0x9, 0x9, 0xfffffffe, 0x7, 0x400, 0xffffff81, 0x0, 0x9, 0x2000, 0x1e2, 0x5, 0xfffffff8, 0x4, 0x0, 0x0, 0x2, 0x7f, 0x0, 0x621, 0x0, 0xff, 0x1ff, 0x3, 0x0, 0x2, 0x9, 0x8, 0x5, 0x3568, 0x4, 0x10001, 0x4, 0x6, 0x5, 0x7fff, 0x4, 0x5, 0x877, 0x6, 0x7, 0x5, 0x7, 0x1, 0x1ff, 0x200, 0x0, 0x9, 0x8, 0x0, 0x7b, 0x3ff, 0x4e, 0xf, 0x3, 0x400, 0x101, 0xfffffff4, 0x1, 0x3, 0x2332, 0x732d4911, 0x9, 0x7, 0xa48, 0x6, 0x7fff, 0x8, 0x6, 0x8, 0xfffffffd, 0x18b, 0x9, 0x7fffffff, 0x5, 0x51e, 0xfffffff8, 0x5, 0x1, 0x7fffffff, 0x6, 0x5, 0x0, 0x0, 0x7ff, 0xa, 0x80000001, 0xde, 0x7a, 0x5, 0x3, 0x1, 0x2, 0x7, 0x6, 0x2792, 0x7, 0x1, 0x8, 0x5, 0x5, 0xa, 0x5, 0x7, 0x400, 0x7, 0x3, 0x2, 0x5, 0x2, 0x252, 0x1, 0x4, 0x40000, 0x3, 0x6, 0x101, 0x1, 0x10, 0x3, 0x4, 0xc, 0xfffff801, 0x8, 0x0, 0x1, 0x6, 0x80000000, 0x1c, 0xd810, 0x1, 0x8001, 0x80, 0x5, 0x1, 0xfffffff8, 0x800, 0x4, 0x9, 0x9, 0x90000000, 0x5, 0x8, 0x6, 0x3ff, 0x53b2, 0x0, 0x9, 0x7, 0x7f, 0x6, 0x1, 0x4, 0xc7, 0x5, 0x6, 0x5, 0x5, 0x7fff, 0x12bc, 0x3, 0xffffffff, 0x1, 0xd, 0xa64, 0x5, 0xfffffff9, 0x2, 0x8, 0x8, 0x200, 0x8, 0xe512, 0xb5, 0x3, 0x0, 0x9f, 0x0, 0x7f, 0x6, 0x1, 0x3b1c, 0xc7, 0x2, 0xfffffffc, 0xa0, 0x100, 0x2, 0x6, 0x101, 0x3ff, 0x2, 0x8, 0x70, 0xd5, 0xffffffff, 0xf, 0xc, 0x1, 0x401, 0xffffffff, 0x1, 0x19d, 0x10001, 0x8fde, 0x8, 0x9]}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x884}, 0x40) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x52, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, {0x0, 0x9fc, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r13, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c76436ffffff8700135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.966083775s ago: executing program 3 (id=3021): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4890) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r3 = openat$cgroup_int(r2, &(0x7f00000006c0)='pids.max\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) (async, rerun: 64) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESDEC=r4], 0x9) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) read(r5, &(0x7f0000000240)=""/176, 0xb0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) (async, rerun: 32) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e0000000400000004000000eeff", @ANYBLOB], 0x50) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000004600000046000000030000000b0000000000000204000000040000000000000e0400000001000000050000000000000b05000000010000000000001102000000ffffffff0100000000000000002e00"], &(0x7f0000000840)=""/137, 0x63, 0x89, 0x0, 0x3}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b00)={0xffffffffffffffff, 0x20, &(0x7f0000001ac0)={&(0x7f00000009c0)=""/4096, 0x1000, 0x0, &(0x7f00000019c0)=""/239, 0xef}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001bc0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18110000", @ANYRES32=r11, @ANYBLOB="6f00000100000000b702000000000000850000009f000000c1690100040000e693990008060000000d7bc0ff010000001800000000e572e9c050a10101000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, &(0x7f0000000240), 0x40f00, 0x0, '\x00', 0x0, 0x1b, r12, 0x8, &(0x7f0000000940)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0xd, 0xfff, 0x6018}, 0x10, r13, 0x0, 0x9, &(0x7f0000001b40), &(0x7f00000003c0)=[{0x2, 0x1, 0xe, 0x4}, {0x5, 0x4, 0x4, 0x7}, {0x4, 0x4, 0xb, 0x1}, {0x4, 0x4, 0x2, 0x1}, {0x1, 0x4, 0xf}, {0x2, 0x1, 0x4, 0xa}, {0x5, 0x2, 0x10, 0x8}, {0x2, 0x4, 0x6, 0xc}, {0x2, 0x4, 0xd}], 0x10, 0x4}, 0x94) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x22, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @alu={0x7, 0x0, 0xb, 0x9, 0xb, 0x100}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0x8f7a5a8554975047, 0x3, 0x0, 0x1}, @alu={0x7, 0x0, 0x8, 0x7, 0x9, 0x30, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x6, 0x94, &(0x7f0000000580)=""/148, 0x41000, 0x8, '\x00', r8, @fallback=0x1a, r1, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, r13, r4, 0x0, &(0x7f0000000680)=[r1, r14], 0x0, 0x10, 0x7}, 0x94) 17.56038387s ago: executing program 3 (id=3025): sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5], 0x31) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000036b500"/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0x30}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff00fc040000000000000000000000000000ff02000000000000000000000000000100000000ff00000000002000000000000400"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x702, 0x1b, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29da", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r9, &(0x7f00000000c0), 0x12) close(r9) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r10, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4f, 0x2b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x1d, 0x1, 0x6, &(0x7f0000000b80)=[0x0], 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000b80), &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000009c0)={0x148, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x946}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}]}, @CTA_LABELS_MASK={0x4}, @CTA_NAT_SRC={0xac, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x54}, 0x20000880) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="90ffffff", @ANYRES16=0x0, @ANYBLOB="010025ad7000ffdbdf2506b1307d53e1d171b205b9d50089000ae57ddd00000d004000000000000e00a00000000000000000000e0084", @ANYRES32=0x0, @ANYBLOB="00000e0040000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 17.114449043s ago: executing program 3 (id=3028): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x7ed, 0x7f, 0x3, 0x59c000}]}, 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r1, 0x107, 0xc, 0x0, 0x0) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e932057", 0x17e}, {&(0x7f0000000700)="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", 0x172}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="31fdffffffffff", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="7a7262ebbadcd6d70e4a2a0e92807cbacbaf1825df0b68eb423034edeb804cb3fa8817e5caf838d4c0e37b661cc240f230ec07c8cc297b786e4eb856c15e2a", 0x3f}, {&(0x7f00000002c0)="1c063cf8e1c05b3286459c56d77a43484c208206d46cb73604a90947e9b6073bfaa076289cdb103febf9dd62a083d2ff449dcfa4dfdeb1e549e4078d4fa115de247fffe69229bfa76df31f93c8e42f5f904e78a0086aca458b6650a3c08117303e02c0615a7ca0a9fd3c2f3290d19c6f1b88fde8079d5726181c2a2c", 0x7c}], 0x2}}], 0x3, 0x2090) (rerun: 64) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = accept4(r2, &(0x7f00000003c0)=@l2, &(0x7f0000000200)=0x80, 0x80000) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={r7, 0x8}, &(0x7f0000000380)=0x8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) (async, rerun: 32) write(r0, &(0x7f0000001e00)="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", 0x362) (rerun: 32) 3.492638787s ago: executing program 0 (id=3111): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) socket$inet6(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38) r4 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff0201007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.162315184s ago: executing program 0 (id=3113): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000540)=""/192, 0xc0}], 0x3}, 0x0) (async) writev(r1, &(0x7f0000000080)=[{&(0x7f00000012c0)="a4eac90f8e3ae7580e2e693731ef6b447fc2057d9a84e61f40c79e10218d131f865d68b23cd7c3f2b681e2205f67f140252abcc3b8015e176881d81a9e61b6a2c92a9d8e1f51861b64e7b61bf9a131e197f5a6c6d4d887d86c79836e81c69e211d2bf4c595b01c94de464ff9aa72b6058fe774c81142bbce9bd0d83f6239362c3347e3daadb292cf3fee4766a2d43cf006a476ce0e4dd221acdcdefcf67733ed2978c2cd564772844077920cf54543db03688079168e36709dbbf84933a2415a32617f7de4336d89967c2cbcd76a973d88a3c440862bc11e51df6f1cd25f1aa711b721c33703645bcf93b775f1eb28c7640d1b7cbe44b9fc0e55d1a4d8f83b8fd537a231fe75ebb7255387d089ae7924c86b36f11d4c09d27626fd8cd62dbee1662558322e3dffdb4c4816e8ee2501b8", 0x130}, {&(0x7f0000000180)="1a39e33c9bb56fd43a362ffea90553761d7ed507c9de39febbf44d3f865312c8f87355b539002cdd0c62a1b4af1b231aedcaa350cbed61f038c59eb5ab370f7078bb09bba3f39fd8421406392f4ce058", 0x50}, {&(0x7f0000000480)="607dd884f33ff413bd131c8b890067b9df813bdca47007b3029f63a8ce8d396f0741075350111184a065fdecf602a80cba8b0ceaac55d2a5ac82ea58fd20f788ba0f910bce416fd530579aec17ed688e6f569c95d7049bea84d87e6477c0d22a895de1f4d49936c287c188a7a1a833", 0x6f}], 0x3) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="d4", 0x1}], 0x1}}], 0x1, 0x24004c41) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.935906463s ago: executing program 0 (id=3115): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000300001000000000000000000080100800c000200000000000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x303}, "2e061109b2497966", "4cc78bd8c8445c6963311f106429d93a3160654c353e314044977b29c500e560", "56852c2f", "37011fb8d37a2a65"}, 0x38) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4048084) (async) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4048084) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getpeername$llc(r7, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000011000000000000001701000003"], 0x1140, 0x4004084}], 0x1, 0x40800) (async) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000011000000000000001701000003"], 0x1140, 0x4004084}], 0x1, 0x40800) r9 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f000000e000)=[{{0x0, 0x0, &(0x7f000000d400)=[{&(0x7f000000d080)="eaba3e5f9c19b49d25d8ec768f0a06bcd9291c2d7aeb39f8db27c9a7f2d4b7b61c8821399d9913a441c8233fca7886eaad96", 0x32}, {&(0x7f000000d100)="f9e5778253cc3fbe6184aaf51726d4ccdf0e3844874dcc9c33c34fead6ff1dfcd5b9122710188c0274a3073f4f0284ce06569ed1c47f2427870173e21318675df806379658debdc302ec76835e20517ab1cc56299142f1aeff2c6af65a7b559109b275a2892ce8b27d82efeb59cf60655db42bad5934b4794ec6395763802ee9d0f71c662d27f912ba2988d772f9e4a405969cdc119b8340c7", 0x99}, {&(0x7f000000d1c0)="989cf6f681284ccb2787f9c14894c81e2a1e9a63eb2530cd2c17f68c1e73a8dd85e6f2fc66cd2eb3189de352d9592b12d2faad4a10b4a4a22e4955c91b0b2554dceb78e0fefbdd7ae130e7", 0x4b}, {&(0x7f000000d240)="ff93941bfac5998a84b767d07aad33f0d5d1d7d3086fb4ddb3818f177aba1dda515b8ff35a55a117f4e44e3602bd08f0ae1c4cb6192dd5cd9bb4aeb4f484a4d8d7c5a9d971f2b95cdca5f4a54bba07f8a12b", 0x52}, {&(0x7f000000d2c0)="15e485d542", 0x5}, {&(0x7f000000d3c0)="c34f64e90c5ef31171a283", 0xb}], 0x6, 0x0, 0x0, 0x20000805}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.895146734s ago: executing program 2 (id=3116): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x64}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x48, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "193914", 0x48, 0x2f, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0xffff, [0x2be7, 0x1]}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2.58779097s ago: executing program 2 (id=3118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0xe, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.394588102s ago: executing program 0 (id=3121): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000) write$cgroup_devices(r2, 0x0, 0x6) ioctl$FITHAW(r3, 0xc0045878) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 1.934398018s ago: executing program 4 (id=3125): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, &(0x7f0000000040)={@_ha_fsid={[0xb2, 0x2]}, {0xfff7, 0xbe, 0x1, 0xb3}}, 0x349a, &(0x7f0000000080), &(0x7f00000000c0)=0x1}, {[0x4, 0x4, 0x8, 0x4]}, 0x9, 0xd8, &(0x7f0000000100)=""/216}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x6d}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x26}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xce9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) recvfrom(r0, &(0x7f0000000440)=""/86, 0x56, 0x10000, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xa8d6, 0x70}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffff1f}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x8, 0x5, 0x9, 0xff, 0x1000, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000680)={r0, 0x0, 0x8, 0x9, 0x3, 0x8, [0xfffffffffffffee4, 0xc8, 0x3, 0x837, 0x7fffffff, 0x9]}) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000700)=0x7, 0x4) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044060) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x3, 0x10001, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x67, 0x0, 0xb, 0x29, 0x0, @loopback, @loopback, {[@noop]}}}}}) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0x0, 0x1f, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x7, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x4, 0x1, 0x5, 0x4, 0x1, 0x6, 0xfffffffffffffffc}]}, &(0x7f0000000980)='syzkaller\x00', 0x6, 0x76, &(0x7f00000009c0)=""/118, 0x41100, 0xa, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0xd, 0xffff9aa7, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r0, r3, r5, r0], 0x0, 0x10, 0x3}, 0x94) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r6, 0x800, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0xfef}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0xc00) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000dc0)) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xa0, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3de9, 0xb}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "baff1f9d7ad0c648c0178360b5a770c3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7f634b86a91076b05fe9ac30cf8912eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "6bd25cd054167db0d8346d1ce31c00b7"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e51fe93f005380928c6b5c2dd6fe0a59"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x200c000}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x9c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x4c080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001180), r7) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, r9, 0x4, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r7) sendmsg$NL80211_CMD_SET_QOS_MAP(r10, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0x9c, r11, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xff, 0x4}, {0x69}, {0x8, 0x2}], "224612f5c129fa41"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x5, 0x3}, {0xf9, 0x5}, {0xd, 0x3}, {0x6, 0x1}, {0x3, 0x2}, {0x8, 0x6}, {0xff, 0x3}, {0x6, 0x2}, {0xff, 0x6}, {0x4, 0x2}, {0x1, 0x1}, {0x8, 0x6}, {0x8, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x4}, {0x80}], "158308ba39777b4a"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7f, 0x7}, {0x4, 0x4}, {0x8, 0x3}, {0xbb, 0x1}, {0x8, 0x4}, {0x2, 0x3}, {0xcb, 0x1}, {0x8, 0x3}, {0x7, 0x7}, {0x89, 0x7}, {0xd, 0x3}, {0x7, 0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x61, 0x3}, {0x78, 0x4}, {0x1, 0x1}, {0x3, 0x5}, {0xf9, 0x3}, {0x2, 0x6}, {0x0, 0x4}], "f04fa99f264b14eb"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24004814}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001440)={'team_slave_0\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000001480)={0x0, "9e15452da428e80fde737d6c67710d85"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000002480)={r12, 0x5, 0x1, 0x1}) ioctl$XFS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000002880)) 1.87813118s ago: executing program 2 (id=3126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)='U', 0xfdef}], 0x1}, 0x3) sendmmsg$sock(r1, &(0x7f00000035c0)=[{{&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000ac0)="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", 0x116}, {&(0x7f0000000540)="34c48bb1cd81fc38d505a2353cc44e8b7c3f94de2ff725482fb25c95c7ece5bf91fe7a4084594450ba117e2cb72940701a8f0aad0d44c00b913745e90f54511e43705974c0f30098b0d2052884de4fdb56fa4e374e76fc611aa625bccd565aca8bd3107f597918d76d43d307fe6fe893b9d23f3521b37cd0cf7d86b980d257c43ffe670064d03907c37b483c22341684c7c6d7797d59a2fd77afae8d69e36fc75e22bba9dd9f1b69ea135d316d53272571c530a5334a4d4218041fe2fb700f94e546e8979bebe0ec0ec0803c06be8720443d13812ff0b0742b9ce4", 0xdb}, {&(0x7f0000000780)="3c18d6dcbf0698b04b4234e6bb1c562901b72d3c31f3ab3d84f6f016fe1fdf0a118c2846ee2ac8bcd25db6b0fbb3a411d7fc3d21be872e8cd538de911e5c0befaf8cc8f44ee786020f1a4f3df084930e945524362ada6d222d9acde6527384de1a8d4a9e9ad2ce4611b21349db7633e956b78d18ece26dddc9d09f0af03eaedf8b", 0x81}, {&(0x7f0000000840)="07bd46e77e34c4c0c96950dc7e71943a5c8cbfc6e2bff4c0212d61aab2a6d8a2340fe82cc637af1f778b306b4a698f920d9e0f71720de87e780b94064b235a812ee4d7c9128d11f41b6d0d5cc2bae0637725dc7049c2cc485c0fb8a5b55bfc814dcf147effd9557f0e6302d471003d6fab3ac0005977f56e30e3f0575f97b1944d34f771d1ed836d2f2c04c158eaf6f32d986f2de71fa2c233d02b", 0x9b}], 0x4, &(0x7f00000009c0)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x18}}, @txtime={{0x18}}], 0x48}}, {{&(0x7f0000000a40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000003280)="8f63fc111224d129b8373482f0c9abbfdbb8542d8a7ac0f2b4168fab033ee11abe1e6276fae1d0bb870a62792eabef29a727e2fafafd54f708045475478d87a82fcabf652efe40514fba6d3b0e611cde194a24d281dca147b6b41a9ffc2922811574a9c8670b868c524bf24d2e6f4a09824244c2dee72c2f911afa6983bb9e11dbdb6a254fedcdfdbd59d2ff4770d84476546c23e83fddd28522fd8cf3f941b866705c7269220495958d9e579454184e311f773253e0f56a6c93d5aa994c3002b9", 0xc1}, {&(0x7f0000003380)="15fb05d1bd35d498b30d667a3230a51beaca0dc1642473bbcd1a2e68f0e54c73c117abd2c8339dc7c9ed225187046db3f6a999e9288d62107d229cb169bcf3c2b80f62ad4d6a25f80ecb9bb31691d481f878607666a556ec5d2aaee5f1e657", 0x5f}, {&(0x7f0000003400)="2596f20a844b877caf46278a37990591346d54bce916e90e5f607391fdffbc28d90bacfaed81ca87275324a0bd44f73902f906e5e46898754813c9d85069cf32ec3f73b9d3e340d10edb2b204080ad3e27c45f78b825764c6c0a", 0x5a}, {&(0x7f0000003480)="0018777efd97cebcab2aacf0993f6557d19dee161ba13c22e7fc2f9abe45ae47d9e5e31235ce7e795eb5e815de60b2cbe6cbcbf6751120e43f491994e6af3842e00b3a508fbd21bde890e8a1a2fa1b096cfb699e43f8f61cecb790060c1b4a743c1b5fb0efaf373755ffef9ac9098d626c79eadf5dfae1e87773312006df", 0x7e}], 0x5, &(0x7f0000003580)=[@timestamping={{0x14, 0x1, 0x25, 0x1ca1}}, @txtime={{0x18, 0x1, 0x3d, 0x17}}], 0x30}}], 0x2, 0x8050) 1.727997934s ago: executing program 4 (id=3128): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x159, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}]}, 0x28}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000006c0)=ANY=[], 0x110) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000800000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0xffff0f00}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2e}, 0x28) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000290000003600000032000000290000003600000001000000000000002e633cb8764fa65d37c3e1fa311d1a3b88e7995de8ce1b3aeb004f4df2de4bd862c0b3ef912602351fa6f02120ae64a7d696e8bacba4cc77bb3599a9bd450f5a8f4aa353ae0a5e1cd14ad1fd260f8a492bc6b365e47f262bf841"], 0x30}, 0x34004894) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000300)={@in6={0xa, 0x4e21, 0x7, @remote, 0xe733}, {&(0x7f0000000080)=""/109, 0x6d}, &(0x7f00000002c0), 0x8}, 0xa0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$rds(r3, &(0x7f0000000780)={&(0x7f00000007c0)={0x2, 0x100, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@cswp={0x58, 0x114, 0x7, {{0x1000, 0x7fffbffe}, &(0x7f0000000680)=0x3, 0x0, 0x8b1a, 0x3, 0x8, 0x9, 0x7c, 0x4939}}], 0x58}, 0x0) 1.676343176s ago: executing program 2 (id=3129): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x3b3e}, @void, @ipv4=@icmp={{0xf, 0x4, 0x1, 0x9, 0x7c, 0x65, 0x0, 0x2, 0x1, 0x0, @empty, @multicast2, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xfd, 0x1, 0x8, [{@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x4}, {@multicast2, 0x4}]}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x5, "d3f70daedbb8a8550cfc3810d38a8b7c8b302228349ae5bca555c8d85a06a6374deb06e078c430027d845f5176d1fafa39fb01d7e57011cb"}}}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf2510000000050010000100000005000f000200000008000100", @ANYRES32=0x0, @ANYBLOB="06001100a8050000aa38"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 1.424663506s ago: executing program 0 (id=3130): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000003d37f8a669bec3be6122ace47bfe2b2ded1ddc3639000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[], 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/84, 0xff1d}, {&(0x7f0000000880)=""/103, 0x67}, {&(0x7f0000001d40)=""/257, 0xf6}, {&(0x7f0000000a00)=""/210, 0xd2}], 0x4, &(0x7f0000000b40)=""/26, 0x1a}, 0x80}, {{&(0x7f0000001bc0)=@caif=@rfm, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c80)=""/134, 0x86}, {&(0x7f0000000d40)=""/249, 0xf9}], 0x2, &(0x7f0000000e80)=""/230, 0xe6}, 0x3}, {{&(0x7f0000000f80), 0x80, &(0x7f0000001480)=[{&(0x7f0000001000)=""/205, 0xcd}, {&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f0000001140)=""/127, 0x7f}, {&(0x7f00000011c0)=""/142, 0x8e}, {&(0x7f0000001280)=""/45, 0x2d}, {&(0x7f00000012c0)=""/237, 0xed}, {&(0x7f0000000c00)=""/80, 0x50}, {&(0x7f0000001440)=""/60, 0x3c}], 0x8, &(0x7f0000001500)=""/38, 0x26}, 0x9}, {{&(0x7f0000001540)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000015c0)=""/104, 0x68}, {&(0x7f0000001640)=""/229, 0xe5}, {&(0x7f0000001740)=""/80, 0x50}, {&(0x7f00000017c0)=""/248, 0xf8}, {&(0x7f00000018c0)=""/244, 0xf9}], 0x5, &(0x7f0000001a40)=""/84, 0x54}, 0x7}], 0x4, 0x1a022, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xb, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0xbd97d000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8) 1.403291747s ago: executing program 4 (id=3132): sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10"], 0x20}}], 0x1, 0x800) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x1d, 0x1, 0x1, 0x7ffff00c}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10"], 0x20}}], 0x1, 0x800) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x1d, 0x1, 0x1, 0x7ffff00c}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async) 1.25821211s ago: executing program 2 (id=3134): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003700010327de7000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4048}, 0x4040004) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c0800034000eaff0708000640ffffff00500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000024000380200000800800034000000002100002800c00028008000180fffffffb04000640140000001000010000000000000000000084000a"], 0xe4}}, 0x4000840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) (async) listen(r3, 0x5) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) (async) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000100000000000010010010000c390b0562886090e000000bd6c554ca3f2e040faed9a9ea04ff68b227a484b480f7fea00be93fbb9e6e351b6f6f3"], 0x28}, 0x0) (async) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) (async) shutdown(r2, 0x0) 1.0943586s ago: executing program 1 (id=3135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000054000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f616400240002800800014000000001080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) 1.059540806s ago: executing program 4 (id=3136): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 959.117653ms ago: executing program 4 (id=3137): r0 = socket(0x29, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000000)=@generic={&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4}, 0x18) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f00000002c0)) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x7, 0x2, {{0x38, 0x4, 0x0, 0x2, 0xe0, 0x68, 0x0, 0x2, 0x0, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0xfe, 0x0}, {[@generic={0x88, 0x8, "3dcd303a5553"}, @lsrr={0x83, 0xf, 0x2a, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x81, 0x3, 0x2, [{@empty, 0xc}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x7}, {@remote, 0x4}, {@private=0xa010102, 0x9}]}, @ssrr={0x89, 0xf, 0x2e, [@loopback, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0x37, 0x3, 0xa, [{@multicast2, 0x85}, {@multicast1}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x8}, {@rand_addr=0x64010102, 0x3}, {@empty, 0x5}]}, @timestamp={0x44, 0x14, 0xa0, 0x0, 0xa, [0x5, 0x7, 0x2c71, 0x9]}, @timestamp={0x44, 0xc, 0x37, 0x0, 0x6, [0x1000, 0x0]}, @timestamp={0x44, 0x1c, 0x3c, 0x0, 0x7, [0x94, 0xa17, 0x8, 0x10, 0x8, 0x80]}, @ssrr={0x89, 0xf, 0xea, [@remote, @multicast2, @local]}]}}}}}) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) (async) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000480)={@private0, 0x0}, &(0x7f0000000500)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x5, 0xb11, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x7, 0x4, 0x7}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090127bd7000fedbdf250d0000004800018008000ca7b64391bb0e050300010020001400020076657468305f746f5f6873720000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="080003000300000008000100", @ANYRES32=r11, @ANYBLOB="18000180140002006970366772653000000000000000000004000180"], 0x78}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20040880) (async) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) 958.516647ms ago: executing program 2 (id=3138): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00000006c0)=0x3, 0x1) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x45833af92e4b39fe, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2, 0x2, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x75, &(0x7f0000000000), 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x40}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000043d3bcdd05cbbdd6f40000000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000280), 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) close(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000380)}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x5761, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000af8000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000cc000480280001800d00010073796e70726f7879000000001400028005000200010000000600014000060000500001800c000100636f756e74657200400002800c00024000000000000000090c00024000000000000000041c00024000000000000000060c00024000000000000000080c000140000000004000000050000180080001006f7366"], 0x120}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fbdbdf2503000000140009000000000000000000000000000000000108000b00", @ANYRES32=0x0, @ANYBLOB="06000a00e5aea3616dfa5dfe0a00000014000700fc000000000000000000000000000001842d5edbbadd975953fe8ca614a58cb64cc0733fb214b798451308c90f3eb2d15250074eb8ba075ee353c39c52a1f22a83f07dae87d25d79b9fdd032d0170df0acbde6293ae865df77e46e34207651af514cd0"], 0x54}, 0x1, 0x0, 0x0, 0x4810}, 0x810) sendmsg$FOU_CMD_DEL(r7, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000cc3a31f3d8561b050d2db124061a91dd82826a7d03270626e23c2d0498fe8e8eba8d38858c1cd8bf2913a89c8edb83b1dd364c951f3dededeffe780387ec9ebf1a4f37682e6255b25512472489d075849436a334def11f646f67d83dacb1a8144278006692e70000056d4aef7be90b0877dd541fbfa842365e79264bee340591dd58d3072cb998f459ccd88738746698520a084100"/168, @ANYRES16=r10, @ANYBLOB="200029bd7000fddbdf25020000000500040002000000050002000a0000000500020002000000060001004e210000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00031000000000000000fddbdf25080012000200020000000000000000002e00ff0003000000000000000000000010006c00000000000000000000000000fc020000000000000080000000000000030005000000000002000400ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x20040084) 914.164155ms ago: executing program 4 (id=3139): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1c00", 0x2}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b40)={r2, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) 871.251886ms ago: executing program 1 (id=3140): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r0, 0x0) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) (async) recvmmsg(r2, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB='/\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="997428bd7000fbdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000884}, 0x20008000) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000240)="20a0", 0x2}, {&(0x7f0000000280)="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", 0xd81}], 0x2) (async) r5 = accept(r0, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000100009060400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}}, 0x20000040) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f00000026c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=r7, @ANYRES32=0x0, @ANYRES8=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r8) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x54, 0xd, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) r12 = gettid() sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0022000018430000140012800900010076657468000000000500000008001300", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001040)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000001140)=0xe8) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002780), r3) sendmsg$ETHTOOL_MSG_PAUSE_GET(r15, &(0x7f0000002880)={&(0x7f0000002740), 0xc, &(0x7f0000002840)={&(0x7f00000028c0)=ANY=[@ANYRESOCT=r14, @ANYRES16=r16, @ANYBLOB="000128bd7000ffdbdf2515000000140001800800030000000000080003000100000048000180140002006361696630000000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="d2000000", @ANYRESOCT, @ANYBLOB="08000300010000000800030001000000080003000200000008000100", @ANYRES32=r13, @ANYBLOB="c2c5faa2dcf47bb6de19859774bc76de52bbe60a4299277e98e37f03da4554cd13a4f96a73668e75849296bdce7d9e8e4a042a9bd39e4e57710bfcb95e3208cc0907bead27d71ad41adb302eb91c7df71ec153c2ac6815785ec4a0a91ab52534d264de6b0865959ac53fd360901fa5e7e9968c8c928b69a93f73fbf4aecd7461ad416d734583f70bd5e39942912b53cf62ff9d00"/161], 0x70}, 0x1, 0x0, 0x0, 0xc051}, 0x48071) (async) sendmsg$nl_generic(r3, &(0x7f0000002540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002500)={&(0x7f0000001180)={0x1364, 0x1e, 0x200, 0x70bd27, 0x25dfdbfc, {0x17}, [@typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@empty}, @nested={0xf9, 0x157, 0x0, 0x1, [@typed={0x14, 0x81, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="1944b9273bc3ad13ea4b3948d11000cfb20263e04ed66356b563d5bcc271f8399d680305b5520ca8a61283ed93688d4bdbc2b1048abdb65a2c7eff3c1614fc30144a7995eb4080a0579ea7b907c4507fa81f4e0c1a5f7ae432d002f2779c023cd3bc3622983248bab0242f3607d861050b00c017a42fc68b3da99585364875046f1d7bc149a7857d8676eef50a0fb4e07ef779d96b052318946d1652136c32ce8de86b4b4e30bd6ffc922d848c0f758d256037b27db0704617ccc1ef2d335f4393", @typed={0x4, 0x66}, @typed={0x8, 0xd7, 0x0, 0x0, @pid=r12}, @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@remote}]}, @generic="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", @nested={0x10, 0x15d, 0x0, 0x1, [@typed={0x8, 0x14f, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}, @nested={0x4, 0x137}]}, @generic="08ec709efdc129a557d12eb4eb6e669434d15b6c9800bbcad3b0fac92ecc97ab114f1d970c6873135b16e8c2a146e3c09250c1baffcbe62f3ba31f0dfaa64359b509616de32a9c00be09c52c3d274f01b1c03326940acd1feb20d6453d750c8933038b0f42064436fa1e79342309d9b51041fc3878a09f90cb02fadeac6354ac37e226597afb5656c031a77c05dc86b899ad9a3578cff7767c0d9f84f4780321110a48dcf4148bf5d2fdc58b0ab45dc52c1766246d56b70bfcae", @nested={0x16a, 0x2c, 0x0, 0x1, [@generic="b5e7adf50d1f8c74445e040fe7b39d15c7d92c9f34dad9b1f31367a20d483861d0bcb3a437e14b68add0bd146af2739b4f76e58c0258ca5e6cee86251483d408a122b7aac0ea41edd8b44afe1f1778005ffce9571ef0b7e0a81570d6702a7180c57ffefb1d94b41d8282b44b0439514b07a85c28bc66f4b57c21258cee0ee0d6ddd7c201b922be9578de174c48abba46f7d155a6d7fa0c6d8e702c4738dfc9c4f124af0c742e33c2908c15641ea66a0a4d1feb4e9eda889f170f6f4da8b8198dec32df1069ccd9269325784a6dca6c11d7", @nested={0x4, 0x67}, @generic="6ac41a94eec394213e0a055cb63fe7eed94a595850119633a21c4fe1bd9c3d86521f3895a0a781432a317b17336c0bb5b6b3d5e0711782a6f66760dcb86ab51ba4aa43bd959dff45b93e88bca110d69c9cb02d3a3384359ee383986f06c073e916664cad723a03d16c9dcde88e", @typed={0xd, 0x12b, 0x0, 0x0, @binary="4cb2724bf0038b6bba"}, @nested={0x4, 0x78}, @nested={0x4, 0x4b}, @typed={0x4, 0xc4}, @typed={0x8, 0x123, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x130, 0x0, 0x0, @uid=r14}]}, 0x1364}, 0x1, 0x0, 0x0, 0x4004}, 0x1) 594.805662ms ago: executing program 1 (id=3141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c854}, 0xc801) r2 = socket$key(0xf, 0x3, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001800)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x48) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) recvfrom(r3, 0x0, 0x0, 0x40000020, 0x0, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_delroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x80, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0xfffffffe}, @RTA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) 437.042312ms ago: executing program 0 (id=3142): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440040000000900010073797a30000000000800034000000a04140000001100010000000000000000000000000a"], 0x64}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) write$cgroup_int(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, 0x0, &(0x7f00000000c0)=""/48}, 0x20) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r7, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0xfea8, 0xa) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0xfffffffc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1a, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000004c0)='GPL\x00', 0x109e, 0xc3, &(0x7f0000000500)=""/195, 0x41100, 0x16, '\x00', r1, @fallback=0xc, r6, 0x8, &(0x7f0000000600)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x10, 0x9, 0x7f}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="d12200000000000061090000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) 392.817015ms ago: executing program 3 (id=3028): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x7ed, 0x7f, 0x3, 0x59c000}]}, 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r1, 0x107, 0xc, 0x0, 0x0) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e932057", 0x17e}, {&(0x7f0000000700)="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", 0x172}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="31fdffffffffff", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="7a7262ebbadcd6d70e4a2a0e92807cbacbaf1825df0b68eb423034edeb804cb3fa8817e5caf838d4c0e37b661cc240f230ec07c8cc297b786e4eb856c15e2a", 0x3f}, {&(0x7f00000002c0)="1c063cf8e1c05b3286459c56d77a43484c208206d46cb73604a90947e9b6073bfaa076289cdb103febf9dd62a083d2ff449dcfa4dfdeb1e549e4078d4fa115de247fffe69229bfa76df31f93c8e42f5f904e78a0086aca458b6650a3c08117303e02c0615a7ca0a9fd3c2f3290d19c6f1b88fde8079d5726181c2a2c", 0x7c}], 0x2}}], 0x3, 0x2090) (rerun: 64) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = accept4(r2, &(0x7f00000003c0)=@l2, &(0x7f0000000200)=0x80, 0x80000) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={r7, 0x8}, &(0x7f0000000380)=0x8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) (async, rerun: 32) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a", 0x362) (rerun: 32) 392.538597ms ago: executing program 1 (id=3143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x850}, 0x408c0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r2, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) 240.709047ms ago: executing program 1 (id=3145): r0 = epoll_create1(0x0) (async) unshare(0x20000400) ppoll(&(0x7f0000000500)=[{r0}], 0x1, &(0x7f0000000400)={0x0, 0x3938700}, 0x0, 0x0) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue=0xfffffffd}) socket$inet_udp(0x2, 0x2, 0x0) 186.533189ms ago: executing program 3 (id=3146): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @loopback, 0x4e20, 0x3, 'lc\x00', 0x2, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x2d}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000fcffffffffffffff00000000000000000000000000000000ffffffffffffffff080000000000000000000000000000000000000000004000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa00000000000000000000000015a3abf97d000000003c000000000000000a01010200000000000000000000000005350000020100000100"/185], 0xfc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ffff2cbd700100800000340000000800b800000000020800030070636900110002"], 0x38}, 0x1, 0x0, 0x0, 0x6008010}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x39b3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002840)=@newtfilter={0x968, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r10, {0xd, 0xc}, {}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x938, 0x2, [@TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0x68be}, @TCA_FLOW_KEYS={0x8, 0x1, 0x16a28}, @TCA_FLOW_EMATCHES={0xec, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc8, 0x3, 0x0, 0x0, {{0x3, 0x9, 0xae}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x93, 0x5, "79de2950f66fe56620dd30a2a3bf479cd98c7a4f7aa6a1c0eb4decec84155a88e27ab8b23c6efc7752152825d2c32a3a8bc3d1d8ad744bddd6bbe96e40b6bed791eb725d7e5a6699e6f65cd5955ad7393aac95e8f771437795bb7b20090eb228466ba4fd9f1ec6fce25b48200a288df40ffd6bd1190cc67ea544252de2de0a57b4979ce5d94bd598c7554caf7ef3ac"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xfff8, 0x2, 0xb1f}, {0x8, 0x8, 0x1, "54b9e550dbbe4740"}}}]}]}, @TCA_FLOW_POLICE={0x818, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0x80, 0xfffffffc, 0x0, 0x9, 0xca11, 0x1ff, 0x0, 0x3, 0xfffffff0, 0xb, 0xfff, 0x7ff, 0x6a, 0x9, 0x2, 0x101, 0x7f, 0x4, 0x2, 0x7fff, 0x0, 0x1, 0xd8e, 0x9, 0xffff, 0x2, 0x3, 0xfffffffd, 0xffffffff, 0x5, 0x7, 0xa435, 0x1, 0x5000, 0x9e3, 0x7f, 0x1, 0xd, 0x0, 0x9, 0x8, 0x7, 0x7, 0x1, 0xa, 0x3, 0x70, 0x80, 0x92, 0x6, 0xffffffff, 0x10001, 0xfffffe01, 0x2d, 0x9, 0x5, 0x755a, 0x2, 0x10000, 0x150, 0x6d5, 0x6, 0x0, 0x0, 0x9, 0x2, 0xaeb, 0x81, 0x3, 0x800, 0x4, 0x0, 0x44, 0x2390, 0x3, 0x900000, 0x8001, 0x8, 0x7ff, 0x62bb0eab, 0x1, 0xc77e, 0xeb8, 0xfffffffd, 0x8f6, 0x1, 0xe, 0x7, 0x9, 0x6ad, 0x81, 0x1, 0x7f, 0x39, 0x7, 0x5, 0x2, 0x1, 0xd3, 0x2, 0x3, 0x3, 0xfffffff9, 0xb9bb, 0x3, 0x10000, 0x7e7c, 0xffffff81, 0x7fff, 0x1, 0x100, 0x3ff, 0x5, 0x5, 0x81, 0x40, 0x7, 0x100, 0xa0, 0xa, 0x9, 0x2, 0x6, 0x8901, 0x1ff, 0x4, 0x5, 0x2, 0x9, 0x7f, 0x456, 0xffffffff, 0x1ff, 0x4f, 0x1, 0x5, 0xf4f, 0x8, 0x0, 0xba5, 0xe, 0x8000, 0x9, 0x9, 0x4, 0x4, 0x2, 0xb07, 0x1, 0xffffffff, 0xfffffffc, 0x4, 0xffffffc0, 0x2, 0xe, 0x4, 0x20, 0x3, 0x1, 0x8101, 0xffff, 0x9, 0x1ff, 0x80000001, 0x1, 0x80002000, 0x13, 0xf42, 0x4648, 0xec, 0x24a, 0x75, 0x504dc81e, 0xe818, 0x1, 0xffffffff, 0xc, 0xd8c1, 0xe9, 0x1000, 0x401, 0x95b, 0x9, 0xc, 0x0, 0x9, 0xef1, 0x7, 0x6, 0x24, 0x7, 0x25, 0x0, 0x9, 0x2, 0x7, 0x0, 0x2, 0x0, 0xfffffffd, 0x9e2, 0x8, 0xffffffff, 0x3, 0xca, 0x1, 0x6, 0xde, 0x7fff, 0x3, 0x401, 0xffffffff, 0xcd, 0x9, 0x1f6b, 0x8, 0x4, 0xffff, 0xffffffff, 0x4, 0xbf0, 0x3, 0x5, 0x6, 0x8, 0xa8, 0x0, 0xffff0000, 0x6, 0x5, 0x6, 0x10001, 0x3, 0x80, 0x519, 0x1, 0x4, 0x5, 0x10001, 0x9, 0x4, 0x3ff, 0xffffffff, 0x2, 0x162, 0x3, 0x7, 0x8, 0x8, 0x5, 0x3, 0xfffffb92, 0x2, 0x3ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3a9, 0x4, 0x1, 0x3, 0x5, 0x6, 0x7, 0x6, 0x0, 0x2, 0x1ff, 0x5, 0x7fff, 0x6, 0x6, 0x3, 0x46312f3e, 0x24, 0x7fffffff, 0x1, 0xfffffffe, 0x0, 0x4, 0x10000, 0x80000001, 0x7fffffff, 0x8, 0x7ff, 0x8, 0x1, 0x6, 0xc, 0x9, 0x8c3, 0x10, 0x7, 0x9, 0xfffffff7, 0x101, 0xc, 0x80000001, 0x4, 0x8, 0x4, 0x0, 0x1ff, 0xffff, 0x7, 0x9, 0x6, 0x1, 0x1, 0x4071c, 0x3, 0x9, 0x6, 0x0, 0x0, 0x8000, 0x1, 0x6, 0xe0000000, 0x8, 0x3, 0x4, 0x3, 0x3, 0x1, 0x8, 0x7, 0x1ff, 0x58, 0x40, 0x100, 0xe7, 0x2, 0x1, 0x8, 0x9, 0x1, 0x81, 0x3, 0x400, 0x3, 0x1, 0xf60, 0x9, 0x0, 0x0, 0xd, 0x40, 0x7fffffff, 0x5, 0xff, 0x1, 0x14, 0x8, 0x1, 0xf, 0x4, 0x8a, 0xfffffff7, 0xd57a, 0x7, 0x7f, 0x7fff, 0x0, 0x4, 0xb9, 0x99bd, 0x5, 0x8, 0x1d, 0x2, 0x8, 0x6, 0x46, 0xd3eb, 0x7, 0x40, 0x8001, 0x953a, 0x0, 0xfffffffe, 0x1ff, 0x101, 0x4, 0x3, 0x7, 0x5, 0x200, 0x9, 0x3, 0x122, 0xfa3, 0x3, 0x10000, 0x3ff, 0xc, 0x5, 0x9, 0x7, 0x6a5, 0xf4, 0x8001, 0x7fff, 0xe, 0x5, 0x7, 0x4d0, 0x6a8, 0x4, 0x0, 0x26507e0, 0x1, 0x6, 0x200, 0x81, 0x101, 0x7, 0x3, 0x0, 0x8, 0x4, 0x8, 0x9b, 0x6, 0x80000001, 0x5, 0x5, 0x8, 0x56, 0xff, 0x2, 0xdcc, 0x7, 0xffff, 0x4, 0x8, 0x120, 0x4, 0x216, 0x8, 0x3, 0x0, 0x9, 0x1, 0x8, 0x6, 0x6, 0x1, 0x17a532c3, 0x0, 0x2, 0x5, 0x3ed691a1, 0x7, 0x10001, 0x7, 0x1, 0xfffffff9, 0x8, 0x7, 0x5, 0x40, 0xb, 0x3, 0x0, 0x200, 0x10, 0x3, 0x4, 0x10, 0xa5d, 0x8001, 0x9, 0x200, 0x400, 0x7, 0x8b789868, 0x400, 0xfffffe00, 0x40000, 0x0, 0x2, 0x6, 0xffff, 0x3, 0x7, 0x0, 0x8, 0x6, 0x3, 0xdc2d, 0xfffffff7, 0xa, 0x1, 0x7, 0x400, 0x0, 0x200, 0x2, 0x1, 0x6, 0x40, 0x3, 0x0, 0x10, 0x18, 0x101, 0x3ff, 0x6c, 0x400, 0x8, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x12ea3eef}]}, @TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xffff}]}}]}, 0x968}, 0x1, 0x0, 0x0, 0x20001894}, 0x4880) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="013732b40dec57bee17aa1544f0000000000000000000010000000180001801400c1f0776c616e31000000000000"], 0x34}}, 0x24008080) 0s ago: executing program 1 (id=3147): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x46}, {0x0, 0xa00}], 0x2, 0xa, 0x6c8) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_team\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) close(0x4) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40048d0}, 0x4004089) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x145003, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.3.1607'. [ 239.779427][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'. [ 239.859864][T11860] bond7: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 239.878171][T11860] bond7 (unregistering): Released all slaves [ 239.977273][T11853] vlan0: entered promiscuous mode [ 240.005342][T11853] bridge0: entered promiscuous mode [ 240.050777][T11844] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20000 [ 240.418510][ T9325] udevd[9325]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 240.419003][T11893] syzkaller1: entered promiscuous mode [ 240.445588][T11893] syzkaller1: entered allmulticast mode [ 240.485677][ T9643] udevd[9643]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 240.567154][T11897] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 240.631088][T11897] ip6gre2: entered promiscuous mode [ 240.643394][T11897] ip6gre2: entered allmulticast mode [ 240.678831][T11899] netlink: 'syz.2.1616': attribute type 1 has an invalid length. [ 240.866878][T11909] tipc: Enabling of bearer rejected, failed to enable media [ 241.046469][T11928] netlink: 'syz.1.1626': attribute type 7 has an invalid length. [ 241.081535][T11928] netlink: 'syz.1.1626': attribute type 8 has an invalid length. [ 241.203497][T11935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.278927][T11935] bond5 (unregistering): Released all slaves [ 241.359324][T11947] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 241.375147][T11947] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 241.595301][T11955] syzkaller1: entered promiscuous mode [ 241.601057][T11955] syzkaller1: entered allmulticast mode [ 241.869027][T11975] netlink: 'syz.4.1637': attribute type 15 has an invalid length. [ 242.066901][T11980] bond0: Device is already in use. [ 242.174336][T11982] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 242.301342][T11992] __nla_validate_parse: 13 callbacks suppressed [ 242.301362][T11992] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1644'. [ 242.642498][T12012] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 242.666463][T12012] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 242.695184][T12012] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1649'. [ 242.775104][T12012] syz_tun: entered allmulticast mode [ 242.887156][T12027] netlink: 'syz.0.1653': attribute type 29 has an invalid length. [ 242.903862][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 242.921082][T12027] netlink: 'syz.0.1653': attribute type 29 has an invalid length. [ 242.930956][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 243.051352][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1655'. [ 243.163727][ T30] audit: type=1804 audit(1786582514.508:8): pid=12038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1656" name="/newroot/292/memory.events" dev="tmpfs" ino=1523 res=1 errno=0 [ 243.307842][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1659'. [ 243.478163][T12047] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 243.516985][T12053] netlink: 'syz.3.1662': attribute type 1 has an invalid length. [ 243.536515][T12053] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1662'. [ 243.561552][T12053] netlink: 2060 bytes leftover after parsing attributes in process `syz.3.1662'. [ 243.600156][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 243.641586][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 243.753023][T12062] netlink: 'syz.0.1664': attribute type 18 has an invalid length. [ 243.794651][T12064] erspan0: left promiscuous mode [ 243.830013][T12067] openvswitch: netlink: Flow actions attr not present in new flow. [ 243.840070][T12064] syz_tun: left promiscuous mode [ 243.867930][T12067] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 243.884991][T12064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.120041][T12064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.130964][T12064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.144974][T12064] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 244.505430][T12101] ip_tables: iptables: counters copy to user failed while replacing table [ 244.599180][T12105] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 244.629095][T12105] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 245.184305][T12135] netlink: 'syz.1.1688': attribute type 3 has an invalid length. [ 245.248693][T12138] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 245.346672][T12145] macvtap0: entered allmulticast mode [ 245.422536][T12138] macvtap1: entered allmulticast mode [ 245.476820][T12145] bond6: (slave bridge7): making interface the new active one [ 245.508646][T12145] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 246.420752][T12213] bond7: option arp_all_targets: invalid value (3) [ 246.438315][T12213] bond7 (unregistering): Released all slaves [ 246.491583][T12205] macsec0: entered allmulticast mode [ 246.713422][T12218] veth1_macvtap: entered allmulticast mode [ 246.732896][T12218] macsec0: left allmulticast mode [ 246.741214][T12218] veth1_macvtap: left allmulticast mode [ 246.817444][T12236] syzkaller0: entered promiscuous mode [ 246.828193][T12236] syzkaller0: entered allmulticast mode [ 246.939670][T12240] Cannot find set identified by id 65534 to match [ 247.264550][T12254] netdevsim netdevsim3: Direct firmware load for .® failed with error -2 [ 247.282657][T12257] xfrm0 speed is unknown, defaulting to 1000 [ 247.304540][T12254] netdevsim netdevsim3: Falling back to sysfs fallback for: .® [ 247.351418][T12269] netlink: 'syz.4.1722': attribute type 2 has an invalid length. [ 247.385020][T12269] __nla_validate_parse: 13 callbacks suppressed [ 247.385039][T12269] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1722'. [ 247.784614][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'. [ 247.920057][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'. [ 248.066166][T12257] wg2 speed is unknown, defaulting to 1000 [ 248.270890][T12320] netlink: 'syz.0.1739': attribute type 1 has an invalid length. [ 248.492547][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1742'. [ 248.523427][T12320] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.619675][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 248.777911][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1747'. [ 249.031490][T12362] syzkaller1: entered promiscuous mode [ 249.059082][T12362] syzkaller1: entered allmulticast mode [ 249.623984][T12396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1763'. [ 249.711490][T12400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1765'. [ 249.919085][T12412] netlink: 'syz.3.1767': attribute type 1 has an invalid length. [ 249.935787][T12415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1769'. [ 250.025577][T12412] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.224201][T12429] xfrm0 speed is unknown, defaulting to 1000 [ 250.637446][T12429] wg2 speed is unknown, defaulting to 1000 [ 251.703871][T12472] xt_HMARK: spi-set and port-set can't be combined [ 251.741249][T12468] netlink: 'syz.3.1785': attribute type 2 has an invalid length. [ 252.655914][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'. [ 252.677529][T12537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1800'. [ 252.702814][T12527] smc: removing ib device syz0 [ 252.841227][T12527] smbdirect: ib_dev[syz0] removed [ 253.155034][T12561] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 253.159712][T12560] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 253.786136][T12594] macvlan1: entered promiscuous mode [ 253.828037][T12594] macvlan1: entered allmulticast mode [ 253.855227][T12594] veth1_vlan: entered allmulticast mode [ 254.149719][T12611] ip_tables: iptables: counters copy to user failed while replacing table [ 254.265017][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 254.277726][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 254.520541][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1830'. [ 254.695127][T12641] netlink: 336 bytes leftover after parsing attributes in process `syz.0.1832'. [ 254.732658][T12641] netlink: 336 bytes leftover after parsing attributes in process `syz.0.1832'. [ 254.769774][T12648] netlink: 'syz.2.1833': attribute type 1 has an invalid length. [ 254.800774][T12648] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1833'. [ 255.053837][T12638] debugfs: 'netdev:syzkaller0' already exists in 'phy4' [ 255.074197][T12653] xt_CT: No such helper "snmp_trap" [ 255.334081][T12672] atomic_op ffff8880520591e0 conn xmit_atomic 0000000000000000 [ 255.422176][T12672] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 255.469192][T12672] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 255.781587][T12687] netlink: 'syz.2.1841': attribute type 3 has an invalid length. [ 255.967415][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1842'. [ 256.844637][T12727] 8021q: VLANs not supported on ipvlan1 [ 256.924461][T12732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1850'. [ 264.104350][ T1594] block nbd1: Possible stuck request ffff888027cf0000: control (read@0,1024B). Runtime 30 seconds [ 264.118074][ T1594] block nbd1: Possible stuck request ffff888027cf01c0: control (read@1024,1024B). Runtime 30 seconds [ 264.129152][ T1594] block nbd1: Possible stuck request ffff888027cf0380: control (read@2048,1024B). Runtime 30 seconds [ 264.140171][ T1594] block nbd1: Possible stuck request ffff888027cf0540: control (read@3072,1024B). Runtime 30 seconds [ 294.083226][ T4979] udevd[4979]: worker [9246] /devices/virtual/block/nbd1 is taking a long time [ 294.184043][ T1594] block nbd1: Possible stuck request ffff888027cf0000: control (read@0,1024B). Runtime 60 seconds [ 294.194789][ T1594] block nbd1: Possible stuck request ffff888027cf01c0: control (read@1024,1024B). Runtime 60 seconds [ 294.205961][ T1594] block nbd1: Possible stuck request ffff888027cf0380: control (read@2048,1024B). Runtime 60 seconds [ 294.217297][ T1594] block nbd1: Possible stuck request ffff888027cf0540: control (read@3072,1024B). Runtime 60 seconds [ 318.179951][T12805] __nla_validate_parse: 1 callbacks suppressed [ 318.179969][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 318.209959][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 318.225722][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 318.238593][T12802] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1858'. [ 318.528405][T12816] bridge0: entered promiscuous mode [ 318.545644][T12816] bridge0: entered allmulticast mode [ 318.626539][T12826] netlink: 'syz.3.1862': attribute type 62 has an invalid length. [ 318.635792][T12827] netlink: 'syz.3.1862': attribute type 62 has an invalid length. [ 319.240081][T12845] wg2 speed is unknown, defaulting to 1000 [ 319.827993][T12865] syzkaller0: entered promiscuous mode [ 319.853730][T12865] syzkaller0: entered allmulticast mode [ 319.907148][T12872] netlink: 'syz.3.1875': attribute type 8 has an invalid length. [ 319.988242][T12874] pim6reg1: entered promiscuous mode [ 320.007275][T12874] pim6reg1: entered allmulticast mode [ 320.066640][T12854] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1868'. [ 320.081786][T12854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1868'. [ 320.166181][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1878'. [ 320.446441][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1881'. [ 320.520256][T12900] erspan0: left allmulticast mode [ 320.522216][T12902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 320.527781][T12900] bridge2: port 1(erspan0) entered blocking state [ 320.552893][T12900] bridge2: port 1(erspan0) entered disabled state [ 320.559928][T12900] erspan0: entered allmulticast mode [ 320.567518][T12900] erspan0: entered promiscuous mode [ 320.569940][T12904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1881'. [ 320.575787][T12900] bridge2: port 1(erspan0) entered blocking state [ 320.588961][T12900] bridge2: port 1(erspan0) entered forwarding state [ 321.181707][T12937] netlink: 'syz.0.1889': attribute type 13 has an invalid length. [ 321.212452][T12937] netlink: 'syz.0.1889': attribute type 17 has an invalid length. [ 321.358930][T12943] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 321.485283][T12937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.510408][T12937] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.578694][T12956] xt_hashlimit: size too large, truncated to 1048576 [ 321.643948][T12937] veth0_vlan: left promiscuous mode [ 321.653715][T12937] veth0_vlan: entered promiscuous mode [ 321.665341][T12937] macvlan1: left promiscuous mode [ 321.670831][T12937] macvlan1: left allmulticast mode [ 321.677243][T12937] veth1_vlan: left allmulticast mode [ 321.690873][T12937] veth0_macvtap: left promiscuous mode [ 321.699160][T12937] veth0_macvtap: entered promiscuous mode [ 321.729363][T12937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.741237][T12937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.754022][T12937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.765738][T12937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.803469][T12937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.813998][T12937] bond2: left promiscuous mode [ 321.818808][T12937] gre1: left promiscuous mode [ 321.842008][T12937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 321.854679][T12937] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.869841][T12937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 322.369635][T12972] xt_TCPMSS: Only works on TCP SYN packets [ 322.380859][ T63] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 322.472995][ T63] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.505892][ T63] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.565729][T13004] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 322.599403][T13003] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 322.685398][T13001] bond7: Unable to set down delay as MII monitoring is disabled [ 322.737151][T13001] bond7 (unregistering): Released all slaves [ 322.835864][ T3329] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.848686][ T3329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.888822][T13014] netlink: 'syz.3.1910': attribute type 1 has an invalid length. [ 322.899519][T13015] batadv_slave_1: entered promiscuous mode [ 324.268315][ T1594] block nbd1: Possible stuck request ffff888027cf0000: control (read@0,1024B). Runtime 90 seconds [ 324.279154][ T1594] block nbd1: Possible stuck request ffff888027cf01c0: control (read@1024,1024B). Runtime 90 seconds [ 324.290104][ T1594] block nbd1: Possible stuck request ffff888027cf0380: control (read@2048,1024B). Runtime 90 seconds [ 324.301216][ T1594] block nbd1: Possible stuck request ffff888027cf0540: control (read@3072,1024B). Runtime 90 seconds [ 324.884667][ T3317] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.921359][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.977936][T13011] batadv_slave_1: left promiscuous mode [ 324.993618][ T3384] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.017025][ T3384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.052166][T13038] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 325.113962][ T3317] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 325.134513][ T3317] bond1: (slave veth3): making interface the new active one [ 325.145468][ T3317] bond1: active interface up! [ 325.177321][T13042] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 325.411174][T13055] vxcan1: entered promiscuous mode [ 325.673097][T13080] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 325.870424][T13092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.934198][T13094] sctp: [Deprecated]: syz.1.1931 (pid 13094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.934198][T13094] Use struct sctp_sack_info instead [ 326.112228][T13104] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 326.128477][T13104] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 326.173581][T13104] tipc: Resetting bearer [ 326.245108][T13110] syzkaller1: entered promiscuous mode [ 326.262985][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 326.284404][T13110] syzkaller1: entered allmulticast mode [ 326.309594][T13110] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 326.574894][T13127] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 326.601530][T13127] netlink: 'syz.4.1940': attribute type 11 has an invalid length. [ 326.615572][T13134] syzkaller0: left promiscuous mode [ 326.626149][T13137] ip_tables: iptables: counters copy to user failed while replacing table [ 326.636372][T13127] __nla_validate_parse: 7 callbacks suppressed [ 326.636390][T13127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1940'. [ 326.652288][T13134] syzkaller0: left allmulticast mode [ 326.703491][T13132] tipc: Resetting bearer [ 327.009569][T13157] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 327.082339][T13149] netdevsim netdevsim2 €Â: renamed from netdevsim0 (while UP) [ 327.314900][T13170] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1951'. [ 327.340342][T13170] unsupported nlmsg_type 40 [ 327.347904][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'. [ 327.469724][T13175] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1953'. [ 327.509466][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1953'. [ 327.543570][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1953'. [ 327.598989][T13178] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 327.631821][T13178] syzkaller0: entered promiscuous mode [ 327.642785][T13178] syzkaller0: entered allmulticast mode [ 327.661101][T13178] tipc: Enabling of bearer rejected, already enabled [ 327.670902][T13181] xt_TCPMSS: Only works on TCP SYN packets [ 327.692556][T13178] syzkaller0: mtu less than device minimum [ 327.699430][T13178] netlink: 'syz.2.1954': attribute type 1 has an invalid length. [ 327.736657][T13178] 8021q: adding VLAN 0 to HW filter on device bond9 [ 327.757515][T13178] bond9: (slave geneve3): making interface the new active one [ 327.767830][T13178] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 328.146260][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1963'. [ 328.161980][T13220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 328.227675][T13220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1966'. [ 328.538541][T13245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1971'. [ 328.985210][T13263] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 329.187340][T13263] bond6 (unregistering): Released all slaves [ 329.586025][T13288] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 329.657655][T13288] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 329.685580][T13288] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 329.894910][T13303] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20004 [ 330.400898][T13327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.428168][T13327] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.607075][T13327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.665964][T13327] veth1_vlan: left promiscuous mode [ 330.677386][T13344] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 330.688665][T13327] veth0_vlan: left promiscuous mode [ 330.708500][T13327] veth0_vlan: entered promiscuous mode [ 330.729652][T13327] veth1_vlan: entered promiscuous mode [ 330.794513][T13327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 330.816083][T13327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.841194][T13327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.864757][T13327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.883954][T13327] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 330.923474][ T3329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.954716][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.961916][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.971933][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.979151][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.058136][ T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.068077][ T63] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.071404][T13348] netlink: 'syz.4.2005': attribute type 1 has an invalid length. [ 331.100362][T13342] netlink: 'syz.1.2003': attribute type 6 has an invalid length. [ 331.161174][T13348] bond7: entered promiscuous mode [ 331.222450][T13348] bond7: entered allmulticast mode [ 331.258073][T13348] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.294940][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.450370][T13374] 8021q: adding VLAN 0 to HW filter on device bond9 [ 331.458781][T13374] bond8: (slave bond9): Enslaving as an active interface with an up link [ 331.476057][T13374] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 332.150895][T13386] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 332.159325][T13386] netlink: 'syz.1.2014': attribute type 4 has an invalid length. [ 332.168810][T13386] __nla_validate_parse: 14 callbacks suppressed [ 332.168824][T13386] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2014'. [ 332.241336][T13391] netlink: 'syz.1.2016': attribute type 1 has an invalid length. [ 332.270837][T13391] 8021q: adding VLAN 0 to HW filter on device bond6 [ 332.299975][T13391] bond6: (slave veth7): Enslaving as an active interface with a down link [ 334.225854][T13357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.436431][T13399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2017'. [ 334.489993][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 334.779877][ T48] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 334.819949][ T48] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 334.838457][ T48] bond0: now running without any active interface! [ 334.852548][T13427] netlink: 558 bytes leftover after parsing attributes in process `syz.1.2026'. [ 334.898958][ T3384] bond6: (slave bond0): link status definitely down, disabling slave [ 334.908410][T13427] netlink: 'syz.1.2026': attribute type 3 has an invalid length. [ 334.919907][ T3384] bond6: now running without any active interface! [ 334.935809][T13436] ip6gretap2: entered allmulticast mode [ 334.944571][T13436] batman_adv: batadv0: Adding interface: ip6gretap2 [ 334.962827][T13436] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.017885][T13436] batman_adv: batadv0: Interface activated: ip6gretap2 [ 335.195160][T13440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2031'. [ 335.225569][T13440] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2031'. [ 335.407593][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 335.916431][T13489] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.951153][T13490] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.966369][T13489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.975074][T13489] IPv6: NLM_F_CREATE should be set when creating new route [ 335.982348][T13489] IPv6: NLM_F_CREATE should be set when creating new route [ 335.989617][T13489] IPv6: NLM_F_CREATE should be set when creating new route [ 336.004345][T13490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.026367][T13490] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2042'. [ 336.228413][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'. [ 336.260151][T13501] vlan3: entered promiscuous mode [ 336.272428][T13501] veth0: entered promiscuous mode [ 336.284589][T13503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.300186][T13507] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 336.486567][T13511] netlink: Conntrack attr has 4 unknown bytes [ 336.502237][T13511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.566137][T13517] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2051'. [ 336.687189][T13519] lo speed is unknown, defaulting to 1000 [ 336.707766][T13519] lo speed is unknown, defaulting to 1000 [ 336.721227][T13519] lo speed is unknown, defaulting to 1000 [ 336.763108][T13519] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 336.788573][T13519] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 336.811887][T13528] netlink: 'syz.1.2055': attribute type 32 has an invalid length. [ 336.812233][T13519] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 336.857170][T13519] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 336.947723][T13519] lo speed is unknown, defaulting to 1000 [ 336.969900][T13519] lo speed is unknown, defaulting to 1000 [ 336.994957][T13519] lo speed is unknown, defaulting to 1000 [ 337.020098][T13519] lo speed is unknown, defaulting to 1000 [ 337.054962][T13519] lo speed is unknown, defaulting to 1000 [ 337.381647][T13561] openvswitch: netlink: Key type 242 is out of range max 32 [ 337.434765][T13551] wg2 speed is unknown, defaulting to 1000 [ 337.498563][T13551] lo speed is unknown, defaulting to 1000 [ 337.636174][T13570] macsec1: entered promiscuous mode [ 337.649093][T13570] macsec1: entered allmulticast mode [ 337.825678][T13579] __nla_validate_parse: 5 callbacks suppressed [ 337.825698][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2070'. [ 338.296381][T13615] sctp: [Deprecated]: syz.1.2077 (pid 13615) Use of int in maxseg socket option. [ 338.296381][T13615] Use struct sctp_assoc_value instead [ 340.739592][T13582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.936888][T13655] sctp: [Deprecated]: syz.2.2089 (pid 13655) Use of int in max_burst socket option. [ 340.936888][T13655] Use struct sctp_assoc_value instead [ 341.216356][T13673] geneve0: entered promiscuous mode [ 341.260895][T13673] geneve0: left promiscuous mode [ 341.553288][T13696] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20002 [ 341.565241][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 341.838927][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 341.906382][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'. [ 341.934729][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 341.968727][T13717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2109'. [ 342.275567][T13731] 0: reclassify loop, rule prio 0, protocol 03 [ 342.440892][T13733] can_create: 1 callbacks suppressed [ 342.440907][T13733] can: request_module (can-proto-0) failed. [ 342.473770][T13740] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20004 [ 342.486176][T13741] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20004 [ 342.567022][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2116'. [ 342.678411][T13743] vlan3: entered promiscuous mode [ 342.703235][T13743] bridge0: entered promiscuous mode [ 342.826996][T13761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.847435][T13761] netlink: 'syz.4.2120': attribute type 3 has an invalid length. [ 342.863387][T13761] netlink: 'syz.4.2120': attribute type 3 has an invalid length. [ 342.876490][T13761] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2120'. [ 343.172145][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2122'. [ 343.445908][T13748] macsec1: left promiscuous mode [ 343.450911][T13748] macsec1: left allmulticast mode [ 343.457554][T13748] vlan3: left promiscuous mode [ 343.463675][T13748] bridge0: left promiscuous mode [ 343.487213][T13763] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2121'. [ 343.579343][T13775] bridge2: port 1(erspan0) entered disabled state [ 343.682083][T13775] bond3: left promiscuous mode [ 343.690610][T13775] ip6tnl1: left allmulticast mode [ 343.697783][T13775] bridge0: left promiscuous mode [ 343.708008][T13775] bridge0: left allmulticast mode [ 343.754965][T13780] tipc: Enabled bearer , priority 10 [ 343.833661][ T48] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.869070][ T48] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.886743][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2127'. [ 344.003515][ T3329] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.021840][ T3329] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.040191][ T3329] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.073677][ T3329] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.086882][ T3329] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.106864][ T3329] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.120522][ T3329] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.134396][ T3329] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.152227][ T3329] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.176370][ T3329] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.267356][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'. [ 345.235015][T13849] netlink: 'syz.1.2144': attribute type 1 has an invalid length. [ 345.270639][T13849] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2144'. [ 345.527304][T13863] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 345.536568][T13863] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 345.725132][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2154'. [ 345.765657][T13884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.136428][T13900] IPVS: persistence engine module ip_vs_pe_ not found [ 346.191922][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'. [ 346.275154][T13923] netlink: 'syz.2.2162': attribute type 26 has an invalid length. [ 346.316882][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2162'. [ 346.336925][T13926] ip6gre1: entered promiscuous mode [ 346.354629][T13926] ip6gre1: entered allmulticast mode [ 346.370645][T13924] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 346.456067][T13943] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 346.456067][T13944] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 346.462027][T13946] netlink: 'syz.0.2169': attribute type 1 has an invalid length. [ 346.532478][T13946] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2169'. [ 346.569377][T13950] netlink: 'syz.3.2171': attribute type 1 has an invalid length. [ 346.702477][T13957] ip_tables: iptables: counters copy to user failed while replacing table [ 346.732191][T13960] bond8: (slave bridge9): making interface the new active one [ 346.741761][T13960] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 346.809354][T13955] netlink: 'syz.3.2171': attribute type 4 has an invalid length. [ 346.856289][ T24] lo speed is unknown, defaulting to 1000 [ 346.882096][ T24] syz2: Port: 1 Link DOWN [ 347.128762][T13985] netlink: 'syz.1.2181': attribute type 15 has an invalid length. [ 347.780882][T14010] x_tables: duplicate underflow at hook 2 [ 347.790830][T14013] netlink: 'syz.0.2187': attribute type 21 has an invalid length. [ 347.799491][T14012] netlink: 'syz.0.2187': attribute type 21 has an invalid length. [ 348.123747][T14026] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 348.307483][T14040] __nla_validate_parse: 7 callbacks suppressed [ 348.307504][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2193'. [ 348.930656][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2203'. [ 348.958229][T14077] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 348.978130][T14077] validate_nla: 2 callbacks suppressed [ 348.978159][T14077] netlink: 'syz.2.2203': attribute type 2 has an invalid length. [ 348.997403][T14077] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2203'. [ 349.007480][T14077] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2203'. [ 349.009812][T14080] vlan2: entered promiscuous mode [ 349.136991][T14083] ip6tnl1: left allmulticast mode [ 349.177592][T14083] gretap1: left allmulticast mode [ 349.207583][T14083] bridge2: left promiscuous mode [ 349.228459][T14083] bond4: left promiscuous mode [ 349.240448][T14083] veth5: left promiscuous mode [ 349.305607][T14083] bond7: left promiscuous mode [ 349.317036][T14083] bond7: left allmulticast mode [ 349.338325][T14083] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 349.354354][T14083] ip6gretap2: left allmulticast mode [ 349.393522][ T63] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.416009][ T63] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.448897][ T63] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.479643][ T63] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.505582][ T63] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.537417][ T63] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.038128][T14136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2220'. [ 350.179933][T14147] debugfs: 'netdev:syzkaller0' already exists in 'phy4' [ 350.198427][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'. [ 350.375897][T14157] netlink: 'syz.1.2226': attribute type 2 has an invalid length. [ 350.539749][T14168] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2228'. [ 350.771447][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2230'. [ 350.987505][T14193] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 351.007814][T14188] netlink: 'syz.3.2231': attribute type 1 has an invalid length. [ 351.179195][T14188] 8021q: adding VLAN 0 to HW filter on device bond9 [ 351.212543][T14200] bond9: (slave veth6): Enslaving as an active interface with a down link [ 351.226322][T14212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.277550][T14186] bond9: (slave veth8): Enslaving as an active interface with a down link [ 351.555815][T14229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2243'. [ 351.565840][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'. [ 351.575623][T14230] netlink: 'syz.3.2242': attribute type 34 has an invalid length. [ 354.049951][T14198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.060822][T14227] __nla_validate_parse: 2 callbacks suppressed [ 354.060839][T14227] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2242'. [ 354.229488][T14246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2248'. [ 354.291630][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 354.343509][ T1594] block nbd1: Possible stuck request ffff888027cf0000: control (read@0,1024B). Runtime 120 seconds [ 354.356437][ T1594] block nbd1: Possible stuck request ffff888027cf01c0: control (read@1024,1024B). Runtime 120 seconds [ 354.367531][ T1594] block nbd1: Possible stuck request ffff888027cf0380: control (read@2048,1024B). Runtime 120 seconds [ 354.378626][ T1594] block nbd1: Possible stuck request ffff888027cf0540: control (read@3072,1024B). Runtime 120 seconds [ 354.563865][ T9643] udevd[9643]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 354.810405][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 354.850087][T14287] bridge6: entered promiscuous mode [ 354.953850][ T253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.969734][ T253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.994736][ T253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.035117][T14297] geneve4: entered promiscuous mode [ 355.299966][T14316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2265'. [ 355.696339][T14330] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2269'. [ 356.130122][T14355] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.2272'. [ 356.326116][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2278'. [ 356.468023][T14368] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 356.473742][T14373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2281'. [ 357.949428][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2293'. [ 359.048530][T14478] syzkaller0: entered promiscuous mode [ 359.069081][T14478] syzkaller0: entered allmulticast mode [ 359.168404][T14477] wg2 speed is unknown, defaulting to 1000 [ 359.186631][T14477] lo speed is unknown, defaulting to 1000 [ 359.544820][T14499] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 359.846063][T14521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.946981][T14529] netlink: 'syz.3.2320': attribute type 13 has an invalid length. [ 360.119842][T14539] __nla_validate_parse: 2 callbacks suppressed [ 360.119856][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2323'. [ 360.153416][T14539] bond11: entered promiscuous mode [ 360.158686][T14539] bond11: entered allmulticast mode [ 360.575933][T14567] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2330'. [ 360.609471][T14567] NCSI netlink: No device for ifindex 0 [ 360.636886][T14573] netlink: 'syz.2.2331': attribute type 1 has an invalid length. [ 360.669610][T14573] 8021q: adding VLAN 0 to HW filter on device bond10 [ 360.702997][T14573] bond10: (slave veth11): Enslaving as an active interface with a down link [ 360.741738][T14573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.754503][T14573] bond10: (slave batadv0): making interface the new active one [ 360.764089][T14573] batadv0: entered promiscuous mode [ 360.772208][T14573] bond10: (slave batadv0): Enslaving as an active interface with an up link [ 360.876928][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2334'. [ 360.917024][T14573] bond10: (slave veth13): Enslaving as an active interface with a down link [ 360.963973][T14588] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 361.006093][T14588] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 361.056229][T14588] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 361.075513][T14597] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2338'. [ 361.102456][T14597] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 361.231375][T14608] netlink: NAT attribute has 1 unknown bytes [ 361.241328][T14609] netlink: 'syz.4.2341': attribute type 1 has an invalid length. [ 361.250091][T14604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2339'. [ 361.276647][T14608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.412144][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 361.651693][T14633] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 361.776383][T14637] nbd3: detected capacity change from 0 to 63 [ 361.808350][T14647] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2351'. [ 361.823333][ T5614] block nbd3: Receive control failed (result -104) [ 361.959214][T14650] syzkaller0: entered promiscuous mode [ 362.000645][T14650] syzkaller0: entered allmulticast mode [ 362.134281][T14663] netlink: 'syz.0.2355': attribute type 1 has an invalid length. [ 362.191470][T14669] netlink: 'syz.0.2355': attribute type 12 has an invalid length. [ 362.215328][T14663] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.322391][T14671] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 362.696303][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 363.027748][T14692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'. [ 363.316557][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 363.342540][T14722] openvswitch: netlink: Unknown key attributes 2 [ 363.568961][T14737] netlink: 'syz.3.2373': attribute type 1 has an invalid length. [ 363.609580][T14739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.625497][T14739] geneve1: entered promiscuous mode [ 363.630971][T14739] geneve1: entered allmulticast mode [ 363.816371][T14742] xt_TPROXY: Can be used only with -p tcp or -p udp [ 363.925184][T14761] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 363.936832][T14761] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 364.030304][T14768] syzkaller0: entered promiscuous mode [ 364.048076][T14768] syzkaller0: entered allmulticast mode [ 364.130715][T14776] netlink: 'syz.3.2383': attribute type 13 has an invalid length. [ 364.130715][T14775] netlink: 'syz.3.2383': attribute type 13 has an invalid length. [ 364.407830][T14784] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 364.422478][T14792] netlink: 'syz.2.2387': attribute type 8 has an invalid length. [ 364.422936][T14784] nbd: must specify a size in bytes for the device [ 364.825926][T14817] netlink: 'syz.2.2396': attribute type 1 has an invalid length. [ 364.853476][T14815] netlink: 'syz.4.2395': attribute type 1 has an invalid length. [ 365.078860][T14825] veth7: entered allmulticast mode [ 365.110666][T14833] netlink: 'syz.0.2399': attribute type 3 has an invalid length. [ 365.118856][T14825] bond12: (slave veth7): Enslaving as an active interface with a down link [ 365.160809][T14833] __nla_validate_parse: 11 callbacks suppressed [ 365.160825][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'. [ 365.167804][T14825] macvlan2: entered promiscuous mode [ 365.167827][T14825] macvlan2: entered allmulticast mode [ 365.168409][T14825] bond12: entered promiscuous mode [ 365.180542][T14825] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 365.233735][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'. [ 365.243351][T14825] bond12: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 365.269977][T14825] bond12: left promiscuous mode [ 365.305644][T14815] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 365.546869][T14853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2404'. [ 365.559479][T14852] netlink: 'syz.1.2405': attribute type 7 has an invalid length. [ 365.598202][T14852] syzkaller0: entered promiscuous mode [ 365.610478][T14852] syzkaller0: entered allmulticast mode [ 365.689436][T14859] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2406'. [ 365.888797][T14865] ip6tnl5: entered allmulticast mode [ 365.918051][ T3317] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 365.940507][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2410'. [ 365.967806][ T8823] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 365.987310][ T3317] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 366.044311][T14875] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2412'. [ 366.089391][T14875] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2412'. [ 366.124136][T14878] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2413'. [ 366.137743][T14875] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2412'. [ 366.174187][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2414'. [ 366.444236][ T8823] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 366.581839][T14904] lo: Caught tx_queue_len zero misconfig [ 366.695710][ T8823] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 367.072081][T14944] x_tables: duplicate underflow at hook 4 [ 367.251529][T14950] macsec0: entered promiscuous mode [ 367.531706][T14964] validate_nla: 5 callbacks suppressed [ 367.531726][T14964] netlink: 'syz.3.2437': attribute type 1 has an invalid length. [ 367.556057][T14965] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 367.674849][T14964] bond11: entered promiscuous mode [ 367.716077][T14964] 8021q: adding VLAN 0 to HW filter on device bond11 [ 367.831280][T14973] 8021q: adding VLAN 0 to HW filter on device bond11 [ 367.850826][T14973] bond11: (slave xfrm2): The slave device specified does not support setting the MAC address [ 367.882784][T14973] bond11: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 367.920342][T14973] bond11: (slave xfrm2): making interface the new active one [ 367.928885][T14973] xfrm2: entered promiscuous mode [ 367.937700][T14973] xfrm2: left promiscuous mode [ 368.295799][T15012] netlink: 'syz.3.2450': attribute type 39 has an invalid length. [ 368.636645][T15031] pim6reg: left allmulticast mode [ 368.656029][T15031] bridge0: left allmulticast mode [ 368.890686][T15046] tunl0: Caught tx_queue_len zero misconfig [ 369.588121][T15058] bond10: (slave batadv0): Releasing active interface [ 369.604228][T15058] batadv0 (unregistering): left promiscuous mode [ 370.032891][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 370.348910][T15116] sch_tbf: burst 0 is lower than device syzkaller0 mtu (65589) ! [ 370.378154][T15119] __nla_validate_parse: 17 callbacks suppressed [ 370.378173][T15119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2477'. [ 370.409135][T15118] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2477'. [ 370.422265][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2477'. [ 370.466458][T15120] netlink: 'syz.3.2477': attribute type 1 has an invalid length. [ 370.508720][T15118] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2477'. [ 370.523972][T15120] netlink: 'syz.3.2477': attribute type 2 has an invalid length. [ 370.631611][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2479'. [ 370.820978][T15144] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 370.844702][T15144] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 370.884765][T15135] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2481'. [ 370.979450][T15150] netlink: 'syz.4.2484': attribute type 29 has an invalid length. [ 371.010703][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 371.046554][T15153] netlink: 'syz.4.2484': attribute type 29 has an invalid length. [ 371.059735][T15152] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 371.076601][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 371.503429][T15169] netlink: 'syz.4.2490': attribute type 5 has an invalid length. [ 371.529368][T15169] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2490'. [ 371.542657][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2491'. [ 371.633341][T15171] bond7: entered allmulticast mode [ 372.015736][T15201] batman_adv: batadv0: Removing interface: ip6gretap2 [ 372.052468][T15206] netlink: 'syz.1.2501': attribute type 1 has an invalid length. [ 372.383131][T15222] block nbd4: server does not support multiple connections per device. [ 372.456114][T15222] block nbd4: shutting down sockets [ 373.142651][T15273] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 373.160753][T15273] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 373.172539][T15273] tipc: Resetting bearer [ 373.279342][T15288] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 373.502174][T15300] syzkaller0: left promiscuous mode [ 373.519237][T15300] syzkaller0: left allmulticast mode [ 373.552476][T15300] netlink: 'syz.2.2528': attribute type 25 has an invalid length. [ 373.583923][T15300] netlink: 'syz.2.2528': attribute type 3 has an invalid length. [ 373.858453][T15279] netlink: 'syz.0.2522': attribute type 2 has an invalid length. [ 373.968368][T15319] netlink: 'syz.3.2532': attribute type 10 has an invalid length. [ 373.982088][ T5614] block nbd4: Receive control failed (result -32) [ 373.983106][ T5629] block nbd4: Receive control failed (result -32) [ 374.245166][T15330] netlink: 'syz.0.2537': attribute type 2 has an invalid length. [ 374.271486][T15332] netlink: 'syz.4.2538': attribute type 4 has an invalid length. [ 376.678887][T15368] __nla_validate_parse: 13 callbacks suppressed [ 376.678905][T15368] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2548'. [ 376.719706][T15368] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2548'. [ 376.787980][T15375] "syz.2.2550" (15375) uses obsolete ecb(arc4) skcipher [ 376.851231][T15379] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2548'. [ 376.864476][T15378] wg2 speed is unknown, defaulting to 1000 [ 376.878260][T15378] lo speed is unknown, defaulting to 1000 [ 376.971898][T15382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2550'. [ 377.340709][T15400] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 377.387618][T15378] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2551'. [ 377.978732][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2563'. [ 378.017535][T15432] ipvlan2: entered promiscuous mode [ 378.023065][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 378.087452][T15434] netlink: 'syz.2.2564': attribute type 21 has an invalid length. [ 378.123375][T15434] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.145424][T15434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.152743][T15434] IPv6: NLM_F_CREATE should be set when creating new route [ 378.160143][T15434] IPv6: NLM_F_CREATE should be set when creating new route [ 378.167616][T15434] IPv6: NLM_F_CREATE should be set when creating new route [ 378.268537][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2563'. [ 378.278321][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2563'. [ 378.499971][T15464] xfrm0 speed is unknown, defaulting to 1000 [ 378.511180][T15464] xfrm0 speed is unknown, defaulting to 1000 [ 378.551221][T15469] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2570'. [ 378.590340][T15468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.684768][T15468] bond_slave_0: entered promiscuous mode [ 378.710619][T15468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 378.733823][T15468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.750487][T15468] veth1_vlan: left promiscuous mode [ 378.758577][T15468] veth0_vlan: left promiscuous mode [ 378.766643][T15468] veth0_vlan: entered promiscuous mode [ 378.775453][T15468] veth1_vlan: entered promiscuous mode [ 378.789085][T15468] veth1_macvtap: left promiscuous mode [ 378.796869][T15468] veth0_macvtap: left promiscuous mode [ 378.804398][T15468] veth0_macvtap: entered promiscuous mode [ 378.812046][T15468] veth1_macvtap: entered promiscuous mode [ 378.828799][T15468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.844725][T15468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.854622][T15468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.864090][T15468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.916486][T15468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.929583][T15468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.950609][T15468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 378.962044][T15468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 378.978693][T15468] 8021q: adding VLAN 0 to HW filter on device bond5 [ 379.000291][T15468] bridge2: port 1(erspan0) entered blocking state [ 379.008385][T15468] bridge2: port 1(erspan0) entered forwarding state [ 379.020211][T15468] 8021q: adding VLAN 0 to HW filter on device bond6 [ 379.038288][T15468] 8021q: adding VLAN 0 to HW filter on device bond7 [ 379.053307][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.065603][T15464] xfrm0 speed is unknown, defaulting to 1000 [ 379.085734][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.116240][T15474] ip6gre3: entered promiscuous mode [ 379.126976][T15474] ip6gre3: entered allmulticast mode [ 379.354420][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.373401][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.404221][T15480] syzkaller0: entered allmulticast mode [ 379.439602][ T3329] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.470449][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.478693][ T3329] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.577221][ T36] bond6: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 379.603868][ T36] bond6: (slave veth7): making interface the new active one [ 379.606294][T15493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.632225][ T36] bond6: active interface up! [ 379.643279][ T8823] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.675571][T15491] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 379.683605][T15491] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 379.715192][T15489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.740071][ T3329] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 379.763365][ T3329] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 379.764486][T15489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.771189][ T5738] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 379.805457][T15464] infiniband syz0: set down [ 379.810153][ T5738] xfrm0 speed is unknown, defaulting to 1000 [ 379.818466][T15464] infiniband syz0: added xfrm0 [ 379.824837][ T3329] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.834571][T15464] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 379.843748][T15464] infiniband syz0: Couldn't open port 1 [ 379.853549][ T3329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.870835][ T3329] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.881401][ T3329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.891689][T15464] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 379.910117][T15464] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 379.928396][T15464] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 379.974989][T15464] RDS/IB: syz0: added [ 379.979568][T15464] smc: adding ib device syz0 with port count 1 [ 379.987224][T15464] smc: ib device syz0 port 1 has no pnetid [ 380.003157][ T8823] xfrm0 speed is unknown, defaulting to 1000 [ 380.011162][T15464] xfrm0 speed is unknown, defaulting to 1000 [ 380.023427][ T5738] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 380.133128][ T8823] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 380.206028][T15503] netlink: Unknown conntrack attr (type=16383, max=9) [ 380.214695][T15503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.227581][T15503] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2581'. [ 380.315203][T15464] xfrm0 speed is unknown, defaulting to 1000 [ 380.487926][T15511] xt_connbytes: Forcing CT accounting to be enabled [ 380.657441][T15519] x_tables: duplicate underflow at hook 3 [ 380.899774][T15464] xfrm0 speed is unknown, defaulting to 1000 [ 380.989404][T15526] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 381.017867][ T5738] lo speed is unknown, defaulting to 1000 [ 381.048640][ T5738] syz2: Port: 1 Link ACTIVE [ 381.431725][T15553] netlink: 'syz.3.2595': attribute type 2 has an invalid length. [ 381.458762][T15553] netlink: 'syz.3.2595': attribute type 2 has an invalid length. [ 381.526996][T15557] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 381.635047][T15464] xfrm0 speed is unknown, defaulting to 1000 [ 381.777871][T15563] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 381.787257][T15563] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 381.930313][ T63] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 381.965791][T15573] xt_ipcomp: unknown flags 1D [ 382.142094][T15575] syzkaller1: entered promiscuous mode [ 382.173558][T15575] syzkaller1: entered allmulticast mode [ 382.226259][T15584] __nla_validate_parse: 3 callbacks suppressed [ 382.226278][T15584] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2602'. [ 382.255228][T15464] xfrm0 speed is unknown, defaulting to 1000 [ 382.270907][T15584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2602'. [ 382.294052][T15584] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2602'. [ 382.325301][T15584] netlink: 'syz.0.2602': attribute type 2 has an invalid length. [ 382.343599][T15584] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2602'. [ 382.396477][T15584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2602'. [ 382.538521][T15567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.585450][T15587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2603'. [ 382.612056][T15587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2603'. [ 382.765271][T15597] syzkaller0: entered promiscuous mode [ 382.778943][T15597] syzkaller0: entered allmulticast mode [ 383.050180][T15606] tc_dump_action: action bad kind [ 383.131222][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2607'. [ 383.143234][T15611] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 383.191069][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2609'. [ 383.265834][T15615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2610'. [ 383.302963][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 383.302983][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 383.831160][ T5629] block nbd5: Receive control failed (result -32) [ 383.863534][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 383.998651][T15633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.091905][T15634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.170929][T15642] "syz.2.2617" (15642) uses obsolete ecb(arc4) skcipher [ 384.425104][ T1594] block nbd1: Possible stuck request ffff888027cf0000: control (read@0,1024B). Runtime 150 seconds [ 384.436484][ T1594] block nbd1: Possible stuck request ffff888027cf01c0: control (read@1024,1024B). Runtime 150 seconds [ 384.447684][ T1594] block nbd1: Possible stuck request ffff888027cf0380: control (read@2048,1024B). Runtime 150 seconds [ 384.459344][ T1594] block nbd1: Possible stuck request ffff888027cf0540: control (read@3072,1024B). Runtime 150 seconds [ 384.485164][T15657] wg2 speed is unknown, defaulting to 1000 [ 384.496905][T15657] lo speed is unknown, defaulting to 1000 [ 384.552528][T15657] xfrm0 speed is unknown, defaulting to 1000 [ 385.248364][T15696] netlink: 'syz.0.2632': attribute type 1 has an invalid length. [ 385.404542][T15703] bond8: (slave geneve3): making interface the new active one [ 385.414007][T15703] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 385.634600][ T5629] block nbd6: Receive control failed (result -32) [ 385.823863][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 385.836265][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 385.932199][T15682] veth11: entered allmulticast mode [ 385.953407][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 385.991566][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 387.095107][ T36] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 387.229756][T15768] tipc: Enabled bearer , priority 0 [ 387.324613][T15775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.495571][T15768] syzkaller0: entered promiscuous mode [ 387.525476][T15768] syzkaller0: entered allmulticast mode [ 387.534268][T15768] tipc: Resetting bearer [ 387.545891][T15777] netlink: 'syz.4.2649': attribute type 210 has an invalid length. [ 387.556859][T15780] team0: Caught tx_queue_len zero misconfig [ 387.737854][T15789] __nla_validate_parse: 8 callbacks suppressed [ 387.737873][T15789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2655'. [ 387.860059][T15792] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 387.920243][T15767] tipc: Resetting bearer [ 388.514138][T15810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2659'. [ 388.578847][T15811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2659'. [ 388.630646][T15821] xt_hashlimit: size too large, truncated to 1048576 [ 388.869352][T15825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2662'. [ 388.879366][T15825] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2662'. [ 390.411755][T15767] tipc: Disabling bearer [ 390.427783][ T5738] tipc: Node number set to 961735298 [ 390.434528][T15810] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 390.568593][T15837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2665'. [ 390.700860][T15850] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2667'. [ 390.771268][T15858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2668'. [ 390.793469][T15862] netlink: 'syz.1.2669': attribute type 2 has an invalid length. [ 390.822971][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 390.893192][T15865] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2671'. [ 390.976044][T15865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2671'. [ 391.018679][T15865] IPVS: Error connecting to the multicast addr [ 391.049286][T15867] netlink: 'syz.3.2672': attribute type 14 has an invalid length. [ 391.230125][T15875] netlink: 'syz.4.2674': attribute type 1 has an invalid length. [ 391.338479][T15875] 8021q: adding VLAN 0 to HW filter on device bond13 [ 391.399688][T15886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.411160][T15886] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.479667][T15886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 391.491591][T15886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.519428][T15886] veth1_vlan: left promiscuous mode [ 391.526963][T15886] veth0_vlan: left promiscuous mode [ 391.534779][T15886] veth0_vlan: entered promiscuous mode [ 391.545014][T15886] veth1_vlan: entered promiscuous mode [ 391.560016][T15886] veth1_macvtap: left promiscuous mode [ 391.568120][T15886] veth0_macvtap: left promiscuous mode [ 391.575744][T15886] veth0_macvtap: entered promiscuous mode [ 391.584395][T15886] veth1_macvtap: entered promiscuous mode [ 391.598390][T15886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.607266][T15886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.615513][T15886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.634608][T15886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.644903][T15886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.680420][T15886] erspan0: entered promiscuous mode [ 391.690100][T15886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.727023][T15886] 8021q: adding VLAN 0 to HW filter on device bond4 [ 391.740358][T15886] 8021q: adding VLAN 0 to HW filter on device bond5 [ 391.754608][T15886] 8021q: adding VLAN 0 to HW filter on device bond6 [ 391.785237][T15886] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.794070][T15886] 8021q: adding VLAN 0 to HW filter on device bond8 [ 391.801695][T15886] 8021q: adding VLAN 0 to HW filter on device bond9 [ 391.812548][T15886] 8021q: adding VLAN 0 to HW filter on device bond10 [ 391.821829][T15886] bond11: left promiscuous mode [ 391.828608][T15886] bond11: left allmulticast mode [ 391.834444][T15886] 8021q: adding VLAN 0 to HW filter on device bond11 [ 391.843452][T15886] 8021q: adding VLAN 0 to HW filter on device bond12 [ 391.851617][T15886] veth7: left allmulticast mode [ 391.857273][T15886] ip6tnl5: left allmulticast mode [ 391.863703][T15886] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 391.893558][ T8821] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 391.919769][T15879] bond13: (slave veth9): Enslaving as an active interface with a down link [ 391.945151][T15875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.956941][T15875] bond13: (slave batadv0): making interface the new active one [ 391.966913][T15875] batadv0: entered promiscuous mode [ 391.975517][T15875] bond13: (slave batadv0): Enslaving as an active interface with an up link [ 391.990661][T15889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.040349][ T3384] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.047572][ T3384] bridge0: port 1(bridge_slave_0) entered listening state [ 392.084839][ T3384] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.092036][ T3384] bridge0: port 2(bridge_slave_1) entered listening state [ 392.106099][ T1594] block nbd3: Possible stuck request ffff888027de5080: control (read@0,1024B). Runtime 30 seconds [ 392.117069][ T1594] block nbd3: Possible stuck request ffff888027de5240: control (read@1024,1024B). Runtime 30 seconds [ 392.131580][ T1594] block nbd3: Possible stuck request ffff888027de5400: control (read@2048,1024B). Runtime 30 seconds [ 392.143451][ T1594] block nbd3: Possible stuck request ffff888027de55c0: control (read@3072,1024B). Runtime 30 seconds [ 392.226640][T15909] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 392.262127][T11387] xfrm0 speed is unknown, defaulting to 1000 [ 392.262226][T15900] geneve1: Caught tx_queue_len zero misconfig [ 392.277672][T11387] syz0: Port: 1 Link ACTIVE [ 392.294654][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.371759][ T3384] bridge0: port 3(team0) entered blocking state [ 392.378199][ T3384] bridge0: port 3(team0) entered listening state [ 392.448737][ T3384] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.471027][T15921] netlink: 'syz.1.2681': attribute type 8 has an invalid length. [ 392.497709][T11387] xfrm0 speed is unknown, defaulting to 1000 [ 392.509408][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 392.533168][ T8822] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 392.541809][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 392.563816][ T8822] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 392.673363][T15935] block nbd7: server does not support multiple connections per device. [ 392.691975][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.732024][T15935] block nbd7: shutting down sockets [ 392.743738][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 392.753374][T11387] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 392.861798][T15935] syzkaller0: entered promiscuous mode [ 392.888548][T15935] syzkaller0: entered allmulticast mode [ 392.907495][T15943] __nla_validate_parse: 6 callbacks suppressed [ 392.907512][T15943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2689'. [ 392.946504][T15949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2690'. [ 392.954152][T15943] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 393.111488][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2688'. [ 393.272087][T15952] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2691'. [ 393.310486][T15952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2691'. [ 393.464066][ T8823] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 394.029818][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 395.694388][ T36] bond12: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 395.725685][ T36] bond12: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 395.764938][ T36] bond12: (slave veth7): making interface the new active one [ 395.815396][ T36] bond12: active interface up! [ 395.827804][T15982] netlink: 'syz.4.2694': attribute type 2 has an invalid length. [ 395.851427][T15980] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 396.105927][T15999] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2695'. [ 396.263144][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 397.051438][T16043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2709'. [ 397.065894][T16040] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 397.297527][T16042] netlink: 'syz.3.2711': attribute type 21 has an invalid length. [ 397.311614][T16042] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2711'. [ 397.749206][T16077] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 397.771610][T16079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2719'. [ 397.857878][T16078] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 397.950580][T16087] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 397.960979][T16087] bridge7: entered allmulticast mode [ 397.980764][T16087] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 397.990194][T16087] bridge8: entered allmulticast mode [ 398.010996][T16087] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 398.019826][T16087] bridge9: entered allmulticast mode [ 398.057093][T16087] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 398.079122][T16087] bridge10: entered allmulticast mode [ 398.124309][T16087] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 398.144745][T16087] bridge11: entered allmulticast mode [ 398.159120][T16098] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 398.161232][T16087] bridge12: the hash_elasticity option has been deprecated and is always 16 [ 398.201321][T16087] bridge12: entered allmulticast mode [ 398.229664][T16087] bridge13: the hash_elasticity option has been deprecated and is always 16 [ 398.238844][T16087] bridge13: entered allmulticast mode [ 398.255549][T16087] bridge14: the hash_elasticity option has been deprecated and is always 16 [ 398.265039][T16087] bridge14: entered allmulticast mode [ 398.298586][T16087] bridge15: the hash_elasticity option has been deprecated and is always 16 [ 398.306956][T16107] netlink: 546 bytes leftover after parsing attributes in process `syz.2.2727'. [ 398.312520][T16087] bridge15: entered allmulticast mode [ 398.370490][T16087] bridge16: the hash_elasticity option has been deprecated and is always 16 [ 398.380641][T16087] bridge16: entered allmulticast mode [ 398.400583][T16087] bridge17: the hash_elasticity option has been deprecated and is always 16 [ 398.411150][T16087] bridge17: entered allmulticast mode [ 398.450227][T16087] bridge18: the hash_elasticity option has been deprecated and is always 16 [ 398.460100][T16087] bridge18: entered allmulticast mode [ 398.490557][T16087] bridge19: the hash_elasticity option has been deprecated and is always 16 [ 398.512509][T16087] bridge19: entered allmulticast mode [ 398.522278][T16114] netlink: 'syz.4.2730': attribute type 1 has an invalid length. [ 398.538025][T16105] wg2 speed is unknown, defaulting to 1000 [ 398.566035][T16087] bridge20: the hash_elasticity option has been deprecated and is always 16 [ 398.580857][T16087] bridge20: entered allmulticast mode [ 398.615199][T16087] bridge21: the hash_elasticity option has been deprecated and is always 16 [ 398.633082][T16087] bridge21: entered allmulticast mode [ 398.653353][T16105] lo speed is unknown, defaulting to 1000 [ 398.665859][T16087] bridge22: the hash_elasticity option has been deprecated and is always 16 [ 398.683405][T16087] bridge22: entered allmulticast mode [ 398.712939][T16087] bridge23: the hash_elasticity option has been deprecated and is always 16 [ 398.749900][T16087] bridge23: entered allmulticast mode [ 398.786333][T16105] xfrm0 speed is unknown, defaulting to 1000 [ 399.586723][T16143] syzkaller0: mtu less than device minimum [ 399.586733][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2737'. [ 399.799849][T16146] veth13: entered allmulticast mode [ 399.973676][T16155] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 400.380638][T16176] netlink: 'syz.3.2743': attribute type 32 has an invalid length. [ 400.408727][T16178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2745'. [ 400.420076][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2743'. [ 400.524814][T16176] bond14: option coupled_control: invalid value (104) [ 400.561064][T16176] bond14 (unregistering): Released all slaves [ 400.692635][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'. [ 400.733788][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 400.872245][T16195] netlink: 'syz.0.2749': attribute type 3 has an invalid length. [ 400.876948][T16191] wg2 speed is unknown, defaulting to 1000 [ 400.905764][T16195] netlink: 'syz.0.2749': attribute type 3 has an invalid length. [ 400.928165][T16191] lo speed is unknown, defaulting to 1000 [ 400.980348][T16191] xfrm0 speed is unknown, defaulting to 1000 [ 401.004426][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2751'. [ 401.019893][T16204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.035296][T16203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2751'. [ 401.044740][T16203] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 401.152492][T16206] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 401.272398][T16212] sctp: [Deprecated]: syz.4.2755 (pid 16212) Use of int in max_burst socket option deprecated. [ 401.272398][T16212] Use struct sctp_assoc_value instead [ 401.311304][T16211] wg2 speed is unknown, defaulting to 1000 [ 401.337046][T16211] lo speed is unknown, defaulting to 1000 [ 401.406571][T16214] veth0: entered promiscuous mode [ 401.452991][T16214] vlan0: entered promiscuous mode [ 401.481368][T16211] xfrm0 speed is unknown, defaulting to 1000 [ 401.788024][T16219] syzkaller1: entered promiscuous mode [ 401.819803][T16219] syzkaller1: entered allmulticast mode [ 401.994662][T16228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2758'. [ 402.127949][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2762'. [ 402.668275][T16268] netlink: 'syz.0.2768': attribute type 1 has an invalid length. [ 402.740436][T16246] bridge0: entered allmulticast mode [ 403.106641][ T36] batadv0: left promiscuous mode [ 403.176368][T16284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.392648][T16298] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 403.461641][T16300] __nla_validate_parse: 53 callbacks suppressed [ 403.461661][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2776'. [ 403.622907][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 403.783804][T16314] tipc: Enabled bearer , priority 0 [ 403.863966][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'. [ 403.970076][T16316] vlan0: entered promiscuous mode [ 403.984011][T16316] bridge0: entered promiscuous mode [ 404.014581][T16324] netlink: ct_mark mask cannot be 0 [ 404.028068][T16325] netlink: ct_mark mask cannot be 0 [ 404.039334][T16325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.049156][T16324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.172038][T16335] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2788'. [ 404.229471][T16334] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 404.260617][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2791'. [ 404.324766][T16344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.341710][T16345] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 404.481998][T16352] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 404.722530][T16363] ip_tables: iptables: counters copy to user failed while replacing table [ 404.738963][T16366] ip_tables: iptables: counters copy to user failed while replacing table [ 404.756539][T16363] netlink: 'syz.1.2799': attribute type 1 has an invalid length. [ 404.774606][T16366] netlink: 'syz.1.2799': attribute type 1 has an invalid length. [ 404.883996][T16376] syzkaller0: entered promiscuous mode [ 404.893017][T16376] syzkaller0: entered allmulticast mode [ 405.096894][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2804'. [ 405.193125][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2809'. [ 405.257081][T16401] netlink: 'syz.0.2804': attribute type 21 has an invalid length. [ 405.272744][T16401] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2804'. [ 405.287537][T16401] netlink: 'syz.0.2804': attribute type 4 has an invalid length. [ 405.303745][T16401] netlink: 'syz.0.2804': attribute type 5 has an invalid length. [ 405.317412][T16401] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2804'. [ 405.340222][T16403] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2811'. [ 405.349967][T16403] 0·: renamed from hsr0 (while UP) [ 405.358714][T16403] 0·: entered allmulticast mode [ 405.364553][T16403] hsr_slave_0: entered allmulticast mode [ 405.370318][T16403] hsr_slave_1: entered allmulticast mode [ 405.377039][T16403] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 405.393641][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2804'. [ 405.515131][T16412] netlink: 'syz.2.2814': attribute type 11 has an invalid length. [ 405.544959][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 406.016951][T16424] xt_l2tp: v2 doesn't support IP mode [ 406.021540][T16426] sch_tbf: peakrate 5120 is lower than or equals to rate 14957533919239850648 ! [ 406.358053][T16447] sock: sock_timestamping_bind_phc: sock not bind to device [ 406.441714][T16446] xt_hashlimit: size too large, truncated to 1048576 [ 406.699509][T16456] geneve5: entered promiscuous mode [ 406.705343][T16456] geneve5: entered allmulticast mode [ 406.972276][T16473] bond13: (slave batadv0): Releasing active interface [ 407.172342][T16480] sctp: [Deprecated]: syz.2.2834 (pid 16480) Use of int in max_burst socket option deprecated. [ 407.172342][T16480] Use struct sctp_assoc_value instead [ 407.323804][T16480] veth17: entered allmulticast mode [ 407.546857][T16499] IPv6: sit2: Disabled Multicast RS [ 407.740101][T16519] syz_tun: entered allmulticast mode [ 407.823504][T16518] syz_tun: left allmulticast mode [ 408.544414][T16561] __nla_validate_parse: 16 callbacks suppressed [ 408.544440][T16561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2858'. [ 408.841300][T16567] sctp: [Deprecated]: syz.3.2859 (pid 16567) Use of int in max_burst socket option. [ 408.841300][T16567] Use struct sctp_assoc_value instead [ 408.898904][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 408.916288][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 408.928939][T16569] sctp: [Deprecated]: syz.3.2859 (pid 16569) Use of int in max_burst socket option. [ 408.928939][T16569] Use struct sctp_assoc_value instead [ 408.943825][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.955585][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.963618][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.016745][T16575] netlink: 'syz.4.2860': attribute type 1 has an invalid length. [ 409.149850][T16575] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 409.380451][T16588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.451936][T16591] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 409.615027][T16598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2866'. [ 409.837904][T16617] x_tables: duplicate underflow at hook 1 [ 409.846715][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 409.944390][T16568] wg2 speed is unknown, defaulting to 1000 [ 409.974794][T16568] lo speed is unknown, defaulting to 1000 [ 410.012449][T16568] xfrm0 speed is unknown, defaulting to 1000 [ 410.025289][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 410.183521][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2872'. [ 410.374393][T16631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2873'. [ 410.558359][T16641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2875'. [ 410.694953][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2875'. [ 410.699945][T16646] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2877'. [ 410.703994][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880543be800: rx timeout, send abort [ 410.751384][T16648] netlink: 'syz.0.2878': attribute type 4 has an invalid length. [ 411.062287][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2882'. [ 411.071745][ T5629] Bluetooth: hci5: command tx timeout [ 411.086296][T16568] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.102105][T16568] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.113265][T16568] bridge_slave_0: entered allmulticast mode [ 411.121088][T16568] bridge_slave_0: entered promiscuous mode [ 411.132104][T16568] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.151037][T16568] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.183884][T16568] bridge_slave_1: entered allmulticast mode [ 411.195612][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880543bf000: rx timeout, send abort [ 411.206039][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880543be800: abort rx timeout. Force session deactivation [ 411.230294][T16568] bridge_slave_1: entered promiscuous mode [ 411.315241][T16679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.354148][T16568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.376618][T16568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.405559][T16679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.505619][T16691] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 411.517710][T16568] team0: Port device team_slave_0 added [ 411.529997][T16568] team0: Port device team_slave_1 added [ 411.632159][T16568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.652020][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.705963][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880543bf000: abort rx timeout. Force session deactivation [ 411.712944][T16568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.754134][T16568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.777801][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.858820][T16704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.870777][T16568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.112526][T16568] hsr_slave_0: entered promiscuous mode [ 412.126112][T16710] xt_connbytes: Forcing CT accounting to be enabled [ 412.136373][T16568] hsr_slave_1: entered promiscuous mode [ 412.142834][T16710] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 412.163903][T16568] debugfs: 'hsr0' already exists in 'hsr' [ 412.182481][T16568] Cannot create hsr debugfs directory [ 412.424058][T16721] bridge0: entered allmulticast mode [ 412.450088][T16721] pim6reg: entered allmulticast mode [ 412.650504][T16726] wg2 speed is unknown, defaulting to 1000 [ 412.687598][T16568] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.745410][T16726] lo speed is unknown, defaulting to 1000 [ 412.776679][T16726] xfrm0 speed is unknown, defaulting to 1000 [ 412.928624][T16568] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.104965][T16568] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.126622][T16741] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2904'. [ 413.143704][ T5629] Bluetooth: hci5: command tx timeout [ 413.453737][T16568] netdevsim netdevsim2 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.910475][T16778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2913'. [ 413.995819][T16778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2913'. [ 414.129867][T16786] tipc: Enabling of bearer rejected, failed to enable media [ 414.162035][T16786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2913'. [ 414.310970][T16568] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 414.353590][T16568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.365682][T16568] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 414.404794][T16568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.418769][T16568] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 414.446106][T16568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.477973][T16568] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 414.497637][T16803] netlink: 'syz.0.2920': attribute type 1 has an invalid length. [ 414.508309][T16568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.516485][ T1594] block nbd1: Possible stuck request ffff888027cf0000: control (read@0,1024B). Runtime 180 seconds [ 414.527802][ T1594] block nbd1: Possible stuck request ffff888027cf01c0: control (read@1024,1024B). Runtime 180 seconds [ 414.539217][ T1594] block nbd1: Possible stuck request ffff888027cf0380: control (read@2048,1024B). Runtime 180 seconds [ 414.550730][ T1594] block nbd1: Possible stuck request ffff888027cf0540: control (read@3072,1024B). Runtime 180 seconds [ 414.621781][T16815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2920'. [ 414.661109][T16803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2920'. [ 414.714168][T16803] bond9: (slave bridge24): making interface the new active one [ 414.724207][T16803] bond9: (slave bridge24): Enslaving as an active interface with an up link [ 414.815077][T16568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.861070][T16568] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.908512][T16820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2924'. [ 414.910578][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.925481][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.966370][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.973596][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.224621][ T5629] Bluetooth: hci5: command tx timeout [ 416.654691][T16568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.996435][T16568] veth0_vlan: entered promiscuous mode [ 417.047597][T16568] veth1_vlan: entered promiscuous mode [ 417.047806][T16938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2951'. [ 417.197906][T16568] veth0_macvtap: entered promiscuous mode [ 417.226721][T16568] veth1_macvtap: entered promiscuous mode [ 417.290573][T16941] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 417.304525][T16568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.317235][ T5629] Bluetooth: hci5: command tx timeout [ 417.364276][T16568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.445115][ T3384] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.475899][ T3384] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.554261][ T3384] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.618912][ T3384] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.635597][T16968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2957'. [ 417.805952][T16968] ipvlan2: entered allmulticast mode [ 418.065523][T11450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.103535][T11450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.207279][ T3329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.248502][ T3329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.343443][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 419.255186][T17022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2965'. [ 419.507510][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 419.525181][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 419.535861][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 419.545253][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 419.557718][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.741885][ T5609] bond0: (slave syz_tun): Releasing backup interface [ 419.861046][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2969'. [ 419.955683][T17034] bond15: entered promiscuous mode [ 419.961314][T17034] 8021q: adding VLAN 0 to HW filter on device bond15 [ 419.983335][T17034] syzkaller0: entered promiscuous mode [ 419.991654][T17034] syzkaller0: entered allmulticast mode [ 420.053815][T17048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2971'. [ 420.115132][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.126548][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.217455][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 420.399557][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.411480][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.507864][T17058] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 420.523488][T17058] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 420.548791][T17058] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 420.671028][T17079] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2979'. [ 420.678888][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.712524][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.792232][T17025] wg2 speed is unknown, defaulting to 1000 [ 420.799882][T17025] lo speed is unknown, defaulting to 1000 [ 420.820581][T17025] xfrm0 speed is unknown, defaulting to 1000 [ 420.861728][T17083] xt_CONNSECMARK: invalid mode: 0 [ 420.898300][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.933549][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.008478][T17090] bond14: option lp_interval: invalid value (0) [ 421.017025][T17090] bond14: option lp_interval: allowed values 1 - 2147483647 [ 421.029896][T17090] bond14 (unregistering): Released all slaves [ 421.067683][T17098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2984'. [ 421.144117][T17098] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2984'. [ 421.297159][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 421.349064][T17093] siw: device registration error -23 [ 421.476073][ T13] erspan0: left allmulticast mode [ 421.488951][ T13] erspan0: left promiscuous mode [ 421.501189][ T13] bridge2: port 1(erspan0) entered disabled state [ 421.619592][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2988'. [ 421.631610][ T5629] Bluetooth: hci0: command tx timeout [ 422.175161][ T13] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 422.187743][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 422.188279][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 422.203849][ T1594] block nbd3: Possible stuck request ffff888027de5080: control (read@0,1024B). Runtime 60 seconds [ 422.214742][ T1594] block nbd3: Possible stuck request ffff888027de5240: control (read@1024,1024B). Runtime 60 seconds [ 422.226490][ T1594] block nbd3: Possible stuck request ffff888027de5400: control (read@2048,1024B). Runtime 60 seconds [ 422.238919][ T1594] block nbd3: Possible stuck request ffff888027de55c0: control (read@3072,1024B). Runtime 60 seconds [ 422.256533][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.269668][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.279756][ T13] bond0 (unregistering): Released all slaves [ 422.292615][ T13] bond1 (unregistering): Released all slaves [ 422.310916][ T13] bond2 (unregistering): Released all slaves [ 422.328495][ T13] bond3 (unregistering): Released all slaves [ 422.344272][ T13] bond4 (unregistering): Released all slaves [ 422.360105][ T13] bond5 (unregistering): Released all slaves [ 422.384752][ T13] bond6 (unregistering): (slave veth7): Releasing active interface [ 422.394567][ T13] bond6 (unregistering): Released all slaves [ 422.408666][ T13] bond7 (unregistering): Released all slaves [ 422.449955][T17114] veth10: entered allmulticast mode [ 422.516549][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 422.642673][ T13] : left promiscuous mode [ 422.730135][T17143] sctp: [Deprecated]: syz.4.2993 (pid 17143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.730135][T17143] Use struct sctp_sack_info instead [ 422.831351][ C0] bridge0: port 3(team0) entered learning state [ 422.924351][ T13] tipc: Left network mode [ 422.988525][T17143] wg2 speed is unknown, defaulting to 1000 [ 423.072780][T17143] lo speed is unknown, defaulting to 1000 [ 423.094303][T17157] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 423.412093][ T13] IPVS: stopping master sync thread 16691 ... [ 423.439326][T17143] xfrm0 speed is unknown, defaulting to 1000 [ 423.446913][ T13] IPVS: stopping backup sync thread 8496 ... [ 423.704203][ T5629] Bluetooth: hci0: command tx timeout [ 423.807601][T17183] netlink: 'syz.3.3001': attribute type 12 has an invalid length. [ 423.906959][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 424.176309][T17025] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.191063][T17025] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.199847][T17025] bridge_slave_0: entered allmulticast mode [ 424.210139][T17025] bridge_slave_0: entered promiscuous mode [ 424.255676][T17173] wg2 speed is unknown, defaulting to 1000 [ 424.278635][T17025] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.301604][T17025] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.316506][T17025] bridge_slave_1: entered allmulticast mode [ 424.332578][T17025] bridge_slave_1: entered promiscuous mode [ 424.422022][T17173] lo speed is unknown, defaulting to 1000 [ 424.494915][T17173] xfrm0 speed is unknown, defaulting to 1000 [ 424.588758][T17025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.628161][T17025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.827235][T17025] team0: Port device team_slave_0 added [ 424.894556][T17025] team0: Port device team_slave_1 added [ 425.027687][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 425.210110][T17025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.217290][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.244174][T17025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.256971][T17025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.264740][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.290917][T17025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.333513][ T36] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 425.346449][ T36] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 425.379736][ T36] bond0: active interface up! [ 425.384981][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 425.432550][T17219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3005'. [ 425.603719][T17025] hsr_slave_0: entered promiscuous mode [ 425.647799][T17025] hsr_slave_1: entered promiscuous mode [ 425.676985][T17025] debugfs: 'hsr0' already exists in 'hsr' [ 425.695746][T17025] Cannot create hsr debugfs directory [ 425.750783][T17223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3006'. [ 425.793221][ T5629] Bluetooth: hci0: command tx timeout [ 425.942108][T17223] ipvlan2: entered allmulticast mode [ 426.071539][T12875] udevd[12875]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 426.111014][ T9572] udevd[9572]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 426.194705][ T13] hsr_slave_0: left promiscuous mode [ 426.201472][ T13] hsr_slave_1: left promiscuous mode [ 426.238117][ T13] veth1_macvtap: left promiscuous mode [ 426.255930][ T13] veth0_macvtap: left promiscuous mode [ 426.270326][ T13] veth1_vlan: left promiscuous mode [ 426.276287][ T13] veth0_vlan: left promiscuous mode [ 426.284752][T17245] netlink: 'syz.4.3010': attribute type 8 has an invalid length. [ 426.299141][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3010'. [ 426.804747][ T63] bond6: (slave bond0): link status definitely up, 20000 Mbps full duplex [ 426.827790][ T63] bond6: (slave bond0): making interface the new active one [ 426.849713][ T63] bond6: active interface up! [ 427.221796][T17271] syz0: rxe_newlink: already configured on xfrm0 [ 427.306467][T17271] netlink: 'syz.4.3016': attribute type 10 has an invalid length. [ 427.383330][T17271] tipc: Resetting bearer [ 427.439040][T17271] bridge0: port 3(team0) entered disabled state [ 427.455214][T17271] team0: left allmulticast mode [ 427.486698][T17271] team_slave_0: left allmulticast mode [ 427.504091][T17271] team_slave_1: left allmulticast mode [ 427.519922][T17271] bridge1: left allmulticast mode [ 427.541076][T17271] team0: left promiscuous mode [ 427.551165][T17271] team_slave_0: left promiscuous mode [ 427.568477][T17271] team_slave_1: left promiscuous mode [ 427.586432][T17283] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3018'. [ 427.587214][T17271] bridge1: left promiscuous mode [ 427.615796][T17271] bridge0: port 3(team0) entered disabled state [ 427.649163][T17271] tipc: Resetting bearer [ 427.659984][T17271] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.688915][T17271] bond0: (slave team0): Enslaving as an active interface with an up link [ 427.777199][T17281] bond1 (unregistering): Released all slaves [ 427.789611][ T13] IPVS: stop unused estimator thread 0... [ 427.862852][ T5629] Bluetooth: hci0: command tx timeout [ 428.087716][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 428.170707][T17297] team1: entered promiscuous mode [ 428.188963][T17297] team1: entered allmulticast mode [ 428.195070][T17297] 8021q: adding VLAN 0 to HW filter on device team1 [ 428.239216][T17299] cgroup: fork rejected by pids controller in /syz3 [ 428.855813][T17430] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 428.880699][T17430] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 429.257904][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.581181][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.592324][T17453] netlink: 'syz.0.3031': attribute type 1 has an invalid length. [ 429.602382][T17453] netlink: 756 bytes leftover after parsing attributes in process `syz.0.3031'. [ 429.671562][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 429.686911][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 429.701000][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 429.711753][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'. [ 429.727530][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 429.736266][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 430.010112][T17449] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.023802][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3032'. [ 430.050192][T17473] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 430.198000][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.373614][ T63] bridge0: port 3(netdevsim0) entered disabled state [ 430.445872][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 430.465945][ T63] bridge0: port 3(netdevsim0) entered disabled state [ 430.528778][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.630955][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3036'. [ 430.895787][T17025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 430.952366][T17025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.986754][T17025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.026807][T17025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.064645][T17025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 431.139793][T17025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.227674][T17025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 431.241181][T17025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.383422][T17528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.410168][T17536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3041'. [ 431.439425][T17454] wg2 speed is unknown, defaulting to 1000 [ 431.519925][T17454] lo speed is unknown, defaulting to 1000 [ 431.606253][T17454] xfrm0 speed is unknown, defaulting to 1000 [ 431.705693][ T63] bridge_slave_1: left allmulticast mode [ 431.736328][ T63] bridge_slave_1: left promiscuous mode [ 431.763236][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.786469][ T5629] Bluetooth: hci3: command tx timeout [ 431.813818][ T63] bridge_slave_0: left allmulticast mode [ 431.822449][ T63] bridge_slave_0: left promiscuous mode [ 431.828934][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.912461][ T63] pim6reg: left allmulticast mode [ 431.917837][ T63] bridge0: left allmulticast mode [ 432.472453][ T63] erspan0 (unregistering): left promiscuous mode [ 432.681285][T17594] netlink: 'syz.0.3046': attribute type 1 has an invalid length. [ 432.698668][ T63] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 432.913763][ T63] bond6 (unregistering): (slave bridge7): Releasing active interface [ 432.940553][ T63] bond8 (unregistering): (slave bridge9): Releasing active interface [ 432.967030][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.978264][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.990489][ T63] bond0 (unregistering): Released all slaves [ 433.009429][ T63] bond1 (unregistering): Released all slaves [ 433.036194][ T63] bond2 (unregistering): Released all slaves [ 433.057160][ T63] bond3 (unregistering): Released all slaves [ 433.081869][ T63] bond4 (unregistering): (slave bond5): Releasing backup interface [ 433.097162][ T63] bond4 (unregistering): Released all slaves [ 433.125120][ T63] bond5 (unregistering): Released all slaves [ 433.151848][ T63] bond6 (unregistering): Released all slaves [ 433.166779][ T63] bond7 (unregistering): Released all slaves [ 433.186668][ T63] bond8 (unregistering): Released all slaves [ 433.210710][ T63] bond9 (unregistering): (slave veth6): Releasing active interface [ 433.220526][ T63] bond9 (unregistering): (slave veth8): Releasing active interface [ 433.229858][ T63] bond9 (unregistering): Released all slaves [ 433.244618][ T63] bond10 (unregistering): Released all slaves [ 433.258377][ T63] bond11 (unregistering): Released all slaves [ 433.271572][ T63] bond12 (unregistering): Released all slaves [ 433.290497][ T63] bond13 (unregistering): Released all slaves [ 433.428259][T17594] 8021q: adding VLAN 0 to HW filter on device bond10 [ 433.476367][T17598] bond10: (slave gretap2): making interface the new active one [ 433.495244][T17598] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 433.629833][ T63] tipc: Disabling bearer [ 433.663067][ T63] tipc: Left network mode [ 433.735793][T17613] syzkaller0: entered promiscuous mode [ 433.767157][T17613] syzkaller0: entered allmulticast mode [ 433.867886][ T5629] Bluetooth: hci3: command tx timeout [ 433.878285][T17610] tipc: Enabled bearer , priority 0 [ 434.056209][T17631] ±ÿ†Ý'É|d<: renamed from lo (while UP) [ 434.188486][T17609] tipc: Resetting bearer [ 434.327789][T17609] tipc: Disabling bearer [ 435.162638][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 435.175762][T17025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.436369][T17025] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.507063][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.514310][ T3317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.569382][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.576636][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.945373][ T5629] Bluetooth: hci3: command tx timeout [ 436.059553][ T63] dummy0: left promiscuous mode [ 436.089212][ T63] hsr_slave_0: left promiscuous mode [ 436.145481][ T63] veth1_vlan: left promiscuous mode [ 436.158245][ T63] veth0_vlan: left promiscuous mode [ 436.481343][ T63] team0 (unregistering): Port device team_slave_1 removed [ 436.498426][ T63] team0 (unregistering): Port device team_slave_0 removed [ 436.668442][ T3384] smbdirect: ib_dev[syz2] removed [ 436.701080][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 436.724120][ T8823] lo speed is unknown, defaulting to 1000 [ 436.741437][ T8823] infiniband syz2: ib_query_port failed (-19) [ 436.908740][T17738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3069'. [ 436.945072][T17731] syzkaller0: entered promiscuous mode [ 436.972828][T17731] syzkaller0: entered allmulticast mode [ 436.982391][T17454] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.005189][T17454] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.012499][T17454] bridge_slave_0: entered allmulticast mode [ 437.020135][T17454] bridge_slave_0: entered promiscuous mode [ 437.284240][T17454] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.302171][T17454] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.325783][T17454] bridge_slave_1: entered allmulticast mode [ 437.342074][T17454] bridge_slave_1: entered promiscuous mode [ 437.499496][T17760] syzkaller0: left promiscuous mode [ 437.517702][T17760] syzkaller0: left allmulticast mode [ 437.549772][ T63] IPVS: stop unused estimator thread 0... [ 437.590004][T17454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.660441][T17454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.801695][T17454] team0: Port device team_slave_0 added [ 437.809356][T17778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3073'. [ 437.846482][T17454] team0: Port device team_slave_1 added [ 437.999796][T17454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.020536][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.052856][ T5629] Bluetooth: hci3: command tx timeout [ 438.059014][T17454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.072138][T17454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.080581][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.088166][T17790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.107386][T17454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.329979][T17454] hsr_slave_0: entered promiscuous mode [ 438.355250][T17454] hsr_slave_1: entered promiscuous mode [ 438.371356][T17454] debugfs: 'hsr0' already exists in 'hsr' [ 438.379927][T17454] Cannot create hsr debugfs directory [ 438.510329][T17803] syzkaller0: entered promiscuous mode [ 438.524586][T17803] syzkaller0: entered allmulticast mode [ 438.624539][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 439.491676][T17025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.643334][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3084'. [ 439.789074][T17025] veth0_vlan: entered promiscuous mode [ 439.838977][T17025] veth1_vlan: entered promiscuous mode [ 440.216542][T17025] veth0_macvtap: entered promiscuous mode [ 440.331498][T17025] veth1_macvtap: entered promiscuous mode [ 440.395977][T17881] netlink: 'syz.0.3092': attribute type 58 has an invalid length. [ 440.440363][T17881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3092'. [ 440.491353][T17879] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3092'. [ 440.551925][T17454] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 440.570889][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.593118][T17454] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 440.611347][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.623487][T17454] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 440.639714][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.649253][T17454] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 440.674829][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.717859][T17025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.766538][T17025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.834300][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.846162][T17906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3096'. [ 440.985234][ T3317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.178557][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.212469][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.326616][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.376726][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.396429][T17454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.401604][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.432982][ T3317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.550253][T17454] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.720759][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2964'. [ 441.722097][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.737015][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.769026][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.776274][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.841565][T17955] bridge_slave_0: left allmulticast mode [ 441.893629][T17955] bridge_slave_0: left promiscuous mode [ 441.922073][T17955] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.020170][T17955] bridge_slave_1: left promiscuous mode [ 442.054010][T17955] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.084253][T17955] bond0: (slave bond_slave_0): Releasing backup interface [ 442.151050][T17955] bond0: (slave bond_slave_1): Releasing backup interface [ 442.219828][T17974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3108'. [ 442.222604][T17955] team0: Port device team_slave_0 removed [ 442.280103][T17955] team0: Port device team_slave_1 removed [ 442.295438][T17955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.303871][T17955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.328782][T17955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.358799][T17955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.388110][T17955] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 442.935269][T17993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3112'. [ 442.998934][T17993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3112'. [ 443.040980][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3112'. [ 443.072659][T17993] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 443.204239][ T3317] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.227449][ T3317] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.255775][T18007] netlink: 'syz.0.3115': attribute type 1 has an invalid length. [ 443.267780][ T3317] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.287011][T18007] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3115'. [ 443.299485][ T3317] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.319067][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3115'. [ 443.398817][T18015] block nbd0: reconnected socket [ 443.423521][ T5629] block nbd0: Receive control failed (result -32) [ 443.600545][T18022] syzkaller0: entered promiscuous mode [ 443.635501][ T63] IPVS: starting estimator thread 0... [ 443.641702][T18022] syzkaller0: entered allmulticast mode [ 443.680831][T18033] tipc: Started in network mode [ 443.692594][T18033] tipc: Node identity e22a9eb12fdd, cluster identity 4711 [ 443.719425][ T30] audit: type=1107 audit(1786582715.058:9): pid=18025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='’]' [ 443.721660][T18033] tipc: Enabled bearer , priority 0 [ 443.745179][ T30] audit: type=1107 audit(1786582715.058:10): pid=18025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='’]' [ 443.763538][T18031] IPVS: using max 33 ests per chain, 79200 per kthread [ 443.850691][T18022] tipc: Resetting bearer [ 443.915955][T18021] tipc: Resetting bearer [ 444.008405][T18021] tipc: Disabling bearer [ 444.072506][T17454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.231205][T17454] veth0_vlan: entered promiscuous mode [ 444.289655][T18035] syzkaller1: entered promiscuous mode [ 444.303496][T18035] syzkaller1: entered allmulticast mode [ 444.396654][T17454] veth1_vlan: entered promiscuous mode [ 444.477747][T18076] netlink: 1355 bytes leftover after parsing attributes in process `syz.4.3128'. [ 444.560209][T18076] atomic_op ffff88807a6531e0 conn xmit_atomic 0000000000000000 [ 444.597778][ T1594] block nbd1: Possible stuck request ffff888027cf0000: control (read@0,1024B). Runtime 210 seconds [ 444.608999][ T1594] block nbd1: Possible stuck request ffff888027cf01c0: control (read@1024,1024B). Runtime 210 seconds [ 444.627442][ T1594] block nbd1: Possible stuck request ffff888027cf0380: control (read@2048,1024B). Runtime 210 seconds [ 444.638825][ T1594] block nbd1: Possible stuck request ffff888027cf0540: control (read@3072,1024B). Runtime 210 seconds [ 444.705537][T17454] veth0_macvtap: entered promiscuous mode [ 444.718910][T17454] veth1_macvtap: entered promiscuous mode [ 444.738706][T17454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.808147][T17454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.883647][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.933247][ T63] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.973711][ T63] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.053084][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.255258][T18116] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3139'. [ 445.263217][ T3317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.288544][ T3317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.292834][T18116] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3139'. [ 445.337494][T18116] netlink: 'syz.4.3139': attribute type 5 has an invalid length. [ 445.364917][T18116] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3139'. [ 445.397914][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.412454][T18125] netlink: 'syz.2.3138': attribute type 2 has an invalid length. [ 445.423198][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.706734][T18125] netlink: 'syz.2.3138': attribute type 2 has an invalid length. [ 445.971987][ T36] IPVS: starting estimator thread 0... [ 446.073747][T18125] netlink: 'syz.2.3138': attribute type 2 has an invalid length. [ 446.132857][T18152] IPVS: using max 35 ests per chain, 84000 per kthread [ 446.164025][T18153] netlink: 'syz.0.3142': attribute type 1 has an invalid length. [ 446.193944][T18153] netlink: 'syz.0.3142': attribute type 4 has an invalid length. [ 446.327317][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 446.338928][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 446.350465][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 446.366026][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 446.375932][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 446.398182][ T5614] [ 446.400546][ T5614] ====================================================== [ 446.407571][ T5614] WARNING: possible circular locking dependency detected [ 446.414615][ T5614] syzkaller #0 Not tainted [ 446.419033][ T5614] ------------------------------------------------------ [ 446.426130][ T5614] kworker/u9:2/5614 is trying to acquire lock: [ 446.432270][ T5614] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 446.442894][ T5614] [ 446.442894][ T5614] but task is already holding lock: [ 446.450261][ T5614] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 446.459772][ T5614] [ 446.459772][ T5614] which lock already depends on the new lock. [ 446.459772][ T5614] [ 446.470213][ T5614] [ 446.470213][ T5614] the existing dependency chain (in reverse order) is: [ 446.479220][ T5614] [ 446.479220][ T5614] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 446.487219][ T5614] down_write+0x96/0x200 [ 446.492019][ T5614] kernfs_add_one+0x41/0x5e0 [ 446.497306][ T5614] kernfs_create_dir_ns+0x1a1/0x230 [ 446.503030][ T5614] internal_create_group+0x440/0x1180 [ 446.508931][ T5614] cpuhp_invoke_callback+0x434/0x810 [ 446.514778][ T5614] cpuhp_issue_call+0x3f0/0x750 [ 446.520153][ T5614] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 446.526736][ T5614] __cpuhp_setup_state+0x3f/0x60 [ 446.532196][ T5614] do_one_initcall+0x250/0x870 [ 446.537474][ T5614] do_initcall_level+0x10a/0x1a0 [ 446.542933][ T5614] do_initcalls+0x59/0xa0 [ 446.547785][ T5614] kernel_init_freeable+0x29d/0x3e0 [ 446.553510][ T5614] kernel_init+0x1d/0x1d0 [ 446.558357][ T5614] ret_from_fork+0x514/0xb70 [ 446.563505][ T5614] ret_from_fork_asm+0x1a/0x30 [ 446.568814][ T5614] [ 446.568814][ T5614] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 446.576792][ T5614] [ 446.576792][ T5614] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 446.584570][ T5614] cpus_read_lock+0x42/0x160 [ 446.589716][ T5614] static_key_slow_inc+0x12/0x30 [ 446.595214][ T5614] nbd_genl_reconfigure+0x1301/0x1e80 [ 446.601285][ T5614] genl_family_rcv_msg_doit+0x233/0x340 [ 446.607399][ T5614] genl_rcv_msg+0x614/0x7a0 [ 446.612489][ T5614] netlink_rcv_skb+0x226/0x4a0 [ 446.617820][ T5614] genl_rcv+0x28/0x40 [ 446.622366][ T5614] netlink_unicast+0x7bb/0x940 [ 446.627678][ T5614] netlink_sendmsg+0x813/0xb40 [ 446.633013][ T5614] sock_sendmsg_nosec+0x13a/0x180 [ 446.638681][ T5614] ____sys_sendmsg+0x54e/0x850 [ 446.644006][ T5614] ___sys_sendmsg+0x2a5/0x360 [ 446.649232][ T5614] __x64_sys_sendmsg+0x1b1/0x290 [ 446.654710][ T5614] do_syscall_64+0x174/0x580 [ 446.659971][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.666427][ T5614] [ 446.666427][ T5614] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 446.674210][ T5614] __mutex_lock+0x19d/0x1550 [ 446.679378][ T5614] nbd_queue_rq+0x373/0x1150 [ 446.684540][ T5614] blk_mq_dispatch_rq_list+0x499/0x1990 [ 446.690656][ T5614] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 446.697563][ T5614] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 446.704101][ T5614] blk_mq_run_work_fn+0x16c/0x300 [ 446.709700][ T5614] process_scheduled_works+0xa8e/0x14e0 [ 446.715792][ T5614] worker_thread+0xa47/0xfb0 [ 446.720934][ T5614] kthread+0x388/0x470 [ 446.725561][ T5614] ret_from_fork+0x514/0xb70 [ 446.730715][ T5614] ret_from_fork_asm+0x1a/0x30 [ 446.736053][ T5614] [ 446.736053][ T5614] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 446.743328][ T5614] __mutex_lock+0x19d/0x1550 [ 446.748491][ T5614] nbd_queue_rq+0xc1/0x1150 [ 446.753600][ T5614] blk_mq_dispatch_rq_list+0x499/0x1990 [ 446.759741][ T5614] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 446.766673][ T5614] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 446.773234][ T5614] blk_mq_run_work_fn+0x16c/0x300 [ 446.778934][ T5614] process_scheduled_works+0xa8e/0x14e0 [ 446.785135][ T5614] worker_thread+0xa47/0xfb0 [ 446.790296][ T5614] kthread+0x388/0x470 [ 446.794921][ T5614] ret_from_fork+0x514/0xb70 [ 446.800115][ T5614] ret_from_fork_asm+0x1a/0x30 [ 446.805471][ T5614] [ 446.805471][ T5614] -> #4 (set->srcu){.+.+}-{0:0}: [ 446.812680][ T5614] __synchronize_srcu+0xc9/0x2f0 [ 446.818198][ T5614] elevator_switch+0x1e8/0x7b0 [ 446.823640][ T5614] elevator_change+0x2fa/0x480 [ 446.828976][ T5614] elevator_set_default+0x375/0x440 [ 446.834894][ T5614] blk_register_queue+0x3f3/0x4e0 [ 446.840484][ T5614] __add_disk+0x6cb/0xe30 [ 446.845395][ T5614] add_disk_fwnode+0x100/0x3a0 [ 446.850740][ T5614] nbd_dev_add+0x733/0xb60 [ 446.855806][ T5614] nbd_init+0x15f/0x1e0 [ 446.860519][ T5614] do_one_initcall+0x250/0x870 [ 446.865846][ T5614] do_initcall_level+0x10a/0x1a0 [ 446.871431][ T5614] do_initcalls+0x59/0xa0 [ 446.876299][ T5614] kernel_init_freeable+0x29d/0x3e0 [ 446.882061][ T5614] kernel_init+0x1d/0x1d0 [ 446.886965][ T5614] ret_from_fork+0x514/0xb70 [ 446.892146][ T5614] ret_from_fork_asm+0x1a/0x30 [ 446.897525][ T5614] [ 446.897525][ T5614] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 446.905496][ T5614] __mutex_lock+0x19d/0x1550 [ 446.910771][ T5614] elevator_change+0x1af/0x480 [ 446.916097][ T5614] elevator_set_none+0xb5/0x140 [ 446.921573][ T5614] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 446.928090][ T5614] nbd_start_device+0x189/0xb30 [ 446.933509][ T5614] nbd_genl_connect+0x1597/0x1c10 [ 446.939096][ T5614] genl_family_rcv_msg_doit+0x233/0x340 [ 446.945201][ T5614] genl_rcv_msg+0x614/0x7a0 [ 446.950277][ T5614] netlink_rcv_skb+0x226/0x4a0 [ 446.955611][ T5614] genl_rcv+0x28/0x40 [ 446.960153][ T5614] netlink_unicast+0x7bb/0x940 [ 446.965459][ T5614] netlink_sendmsg+0x813/0xb40 [ 446.970778][ T5614] sock_sendmsg_nosec+0x13a/0x180 [ 446.976364][ T5614] ____sys_sendmsg+0x54e/0x850 [ 446.981667][ T5614] ___sys_sendmsg+0x2a5/0x360 [ 446.986896][ T5614] __x64_sys_sendmsg+0x1b1/0x290 [ 446.992376][ T5614] do_syscall_64+0x174/0x580 [ 446.997545][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.004036][ T5614] [ 447.004036][ T5614] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 447.012718][ T5614] blk_alloc_queue+0x544/0x690 [ 447.018120][ T5614] __blk_mq_alloc_disk+0x194/0x390 [ 447.023813][ T5614] nbd_dev_add+0x494/0xb60 [ 447.028805][ T5614] nbd_init+0x15f/0x1e0 [ 447.033625][ T5614] do_one_initcall+0x250/0x870 [ 447.038951][ T5614] do_initcall_level+0x10a/0x1a0 [ 447.044623][ T5614] do_initcalls+0x59/0xa0 [ 447.049581][ T5614] kernel_init_freeable+0x29d/0x3e0 [ 447.055407][ T5614] kernel_init+0x1d/0x1d0 [ 447.060293][ T5614] ret_from_fork+0x514/0xb70 [ 447.065543][ T5614] ret_from_fork_asm+0x1a/0x30 [ 447.070883][ T5614] [ 447.070883][ T5614] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 447.078233][ T5614] fs_reclaim_acquire+0x71/0x100 [ 447.083814][ T5614] kmem_cache_alloc_noprof+0x64/0x5f0 [ 447.089709][ T5614] __kernfs_iattrs+0xdd/0x380 [ 447.094916][ T5614] kernfs_iop_setattr+0xe6/0x3f0 [ 447.100401][ T5614] notify_change+0xbba/0xea0 [ 447.105883][ T5614] do_truncate+0x1c2/0x250 [ 447.110915][ T5614] path_openat+0x2fed/0x3830 [ 447.116039][ T5614] do_file_open+0x23e/0x4a0 [ 447.121117][ T5614] do_sys_openat2+0x115/0x200 [ 447.126323][ T5614] __x64_sys_openat+0x138/0x170 [ 447.131696][ T5614] do_syscall_64+0x174/0x580 [ 447.136805][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.143221][ T5614] [ 447.143221][ T5614] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 447.151741][ T5614] __lock_acquire+0x1520/0x2cf0 [ 447.157134][ T5614] lock_acquire+0x106/0x350 [ 447.162175][ T5614] down_write+0x96/0x200 [ 447.166952][ T5614] kernfs_link_sibling+0x4c7/0x5a0 [ 447.172586][ T5614] kernfs_add_one+0x1d2/0x5e0 [ 447.177823][ T5614] kernfs_create_dir_ns+0x1a1/0x230 [ 447.183669][ T5614] sysfs_create_dir_ns+0x12f/0x2a0 [ 447.189384][ T5614] kobject_add_internal+0x622/0xcd0 [ 447.195153][ T5614] kobject_add+0x163/0x240 [ 447.200105][ T5614] device_add+0x3fa/0xb80 [ 447.205139][ T5614] hci_conn_add_sysfs+0xd5/0x210 [ 447.210885][ T5614] hci_conn_complete_evt+0x8a8/0x1350 [ 447.216882][ T5614] hci_event_packet+0x6cd/0xf10 [ 447.222258][ T5614] hci_rx_work+0x3ee/0x1020 [ 447.227289][ T5614] process_scheduled_works+0xa8e/0x14e0 [ 447.233404][ T5614] worker_thread+0xa47/0xfb0 [ 447.238525][ T5614] kthread+0x388/0x470 [ 447.243111][ T5614] ret_from_fork+0x514/0xb70 [ 447.248226][ T5614] ret_from_fork_asm+0x1a/0x30 [ 447.253598][ T5614] [ 447.253598][ T5614] other info that might help us debug this: [ 447.253598][ T5614] [ 447.263815][ T5614] Chain exists of: [ 447.263815][ T5614] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 447.263815][ T5614] [ 447.278277][ T5614] Possible unsafe locking scenario: [ 447.278277][ T5614] [ 447.285813][ T5614] CPU0 CPU1 [ 447.291187][ T5614] ---- ---- [ 447.296554][ T5614] lock(&root->kernfs_rwsem); [ 447.301318][ T5614] lock(cpuhp_state_mutex); [ 447.308687][ T5614] lock(&root->kernfs_rwsem); [ 447.315971][ T5614] lock(&root->kernfs_iattr_rwsem); [ 447.321268][ T5614] [ 447.321268][ T5614] *** DEADLOCK *** [ 447.321268][ T5614] [ 447.329403][ T5614] 4 locks held by kworker/u9:2/5614: [ 447.334852][ T5614] #0: ffff88801f2eb940 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 447.345829][ T5614] #1: ffffc9000425fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 447.358014][ T5614] #2: ffff888038cdc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 447.367854][ T5614] #3: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 447.377692][ T5614] [ 447.377692][ T5614] stack backtrace: [ 447.383602][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 447.383625][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 447.383636][ T5614] Workqueue: hci4 hci_rx_work [ 447.383668][ T5614] Call Trace: [ 447.383674][ T5614] [ 447.383681][ T5614] dump_stack_lvl+0xe8/0x150 [ 447.383703][ T5614] print_circular_bug+0x2e1/0x300 [ 447.383729][ T5614] check_noncircular+0x12e/0x150 [ 447.383754][ T5614] __lock_acquire+0x1520/0x2cf0 [ 447.383782][ T5614] ? __lock_acquire+0x683/0x2cf0 [ 447.383806][ T5614] ? kernfs_link_sibling+0x4c7/0x5a0 [ 447.383829][ T5614] lock_acquire+0x106/0x350 [ 447.383847][ T5614] ? kernfs_link_sibling+0x4c7/0x5a0 [ 447.383874][ T5614] down_write+0x96/0x200 [ 447.383889][ T5614] ? kernfs_link_sibling+0x4c7/0x5a0 [ 447.383911][ T5614] ? __pfx_down_write+0x10/0x10 [ 447.383925][ T5614] ? kernfs_root+0x1c/0x230 [ 447.383944][ T5614] ? kernfs_root+0x1c/0x230 [ 447.383963][ T5614] ? kernfs_root+0x1c/0x230 [ 447.383983][ T5614] ? kernfs_root+0x1ea/0x230 [ 447.384003][ T5614] kernfs_link_sibling+0x4c7/0x5a0 [ 447.384030][ T5614] kernfs_add_one+0x1d2/0x5e0 [ 447.384053][ T5614] kernfs_create_dir_ns+0x1a1/0x230 [ 447.384078][ T5614] sysfs_create_dir_ns+0x12f/0x2a0 [ 447.384099][ T5614] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 447.384120][ T5614] ? do_raw_spin_unlock+0xf5/0x210 [ 447.384137][ T5614] kobject_add_internal+0x622/0xcd0 [ 447.384158][ T5614] kobject_add+0x163/0x240 [ 447.384176][ T5614] ? __pfx_kobject_add+0x10/0x10 [ 447.384194][ T5614] ? get_device_parent+0x366/0x3a0 [ 447.384219][ T5614] device_add+0x3fa/0xb80 [ 447.384241][ T5614] hci_conn_add_sysfs+0xd5/0x210 [ 447.384264][ T5614] hci_conn_complete_evt+0x8a8/0x1350 [ 447.384288][ T5614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 447.384312][ T5614] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 447.384334][ T5614] ? skb_pull_data+0xf0/0x200 [ 447.384355][ T5614] hci_event_packet+0x6cd/0xf10 [ 447.384379][ T5614] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 447.384400][ T5614] ? __pfx_hci_event_packet+0x10/0x10 [ 447.384423][ T5614] ? audit_tree_freeing_mark+0x8d0/0xb20 [ 447.384440][ T5614] ? hci_send_to_monitor+0xe2/0x590 [ 447.384460][ T5614] hci_rx_work+0x3ee/0x1020 [ 447.384484][ T5614] ? process_scheduled_works+0xa20/0x14e0 [ 447.384500][ T5614] process_scheduled_works+0xa8e/0x14e0 [ 447.384525][ T5614] ? __pfx_process_scheduled_works+0x10/0x10 [ 447.384543][ T5614] ? assign_work+0x3cf/0x5d0 [ 447.384560][ T5614] worker_thread+0xa47/0xfb0 [ 447.384587][ T5614] kthread+0x388/0x470 [ 447.384607][ T5614] ? __pfx_worker_thread+0x10/0x10 [ 447.384622][ T5614] ? __pfx_kthread+0x10/0x10 [ 447.384643][ T5614] ret_from_fork+0x514/0xb70 [ 447.384664][ T5614] ? __pfx_ret_from_fork+0x10/0x10 [ 447.384684][ T5614] ? __switch_to+0xc89/0x1420 [ 447.384701][ T5614] ? __pfx_kthread+0x10/0x10 [ 447.384721][ T5614] ret_from_fork_asm+0x1a/0x30 [ 447.384749][ T5614] [ 447.970176][T18164] tipc: Enabling of bearer rejected, failed to enable media [ 448.315789][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.407384][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.423626][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 448.456392][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.517542][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.693586][ T63] bond0 (unregistering): Released all slaves [ 448.748273][ T63] tipc: Left network mode [ 448.881228][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 448.988188][ T63] hsr_slave_0: left promiscuous mode [ 448.994394][ T63] hsr_slave_1: left promiscuous mode [ 449.002715][ T63] veth1_macvtap: left promiscuous mode [ 449.025256][ T63] veth0_macvtap: left promiscuous mode [ 449.038624][ T63] veth1_vlan: left promiscuous mode [ 449.045228][ T63] veth0_vlan: left promiscuous mode [ 449.245514][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 449.521858][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.539246][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 449.558186][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.624317][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.684454][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.756072][ T63] bridge_slave_1: left allmulticast mode [ 449.770511][ T63] bridge_slave_1: left promiscuous mode [ 449.776396][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.787109][ T63] bridge_slave_0: left allmulticast mode [ 449.794007][ T63] bridge_slave_0: left promiscuous mode [ 449.799756][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.859787][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.870019][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.879706][ T63] bond0 (unregistering): Released all slaves [ 449.890515][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 450.194490][ T63] hsr_slave_0: left promiscuous mode [ 450.200158][ T63] hsr_slave_1: left promiscuous mode [ 450.207203][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.215075][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.223462][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.230936][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.240895][ T63] veth1_macvtap: left promiscuous mode [ 450.246468][ T63] veth0_macvtap: left promiscuous mode [ 450.252069][ T63] veth1_vlan: left promiscuous mode [ 450.258152][ T63] veth0_vlan: left promiscuous mode [ 450.342360][ T63] team0 (unregistering): Port device team_slave_1 removed [ 450.355556][ T63] team0 (unregistering): Port device team_slave_0 removed [ 450.392176][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 450.629422][ T63] IPVS: stop unused estimator thread 0... [ 450.683748][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 450.899445][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 451.098800][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8 [ 452.263014][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.270248][ C0] bridge0: topology change detected, propagating [ 452.276891][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.284124][ C0] bridge0: topology change detected, propagating [ 452.290953][ T1594] block nbd3: Possible stuck request ffff888027de5080: control (read@0,1024B). Runtime 90 seconds [ 452.301976][ T1594] block nbd3: Possible stuck request ffff888027de5240: control (read@1024,1024B). Runtime 90 seconds [ 452.313479][ T1594] block nbd3: Possible stuck request ffff888027de5400: control (read@2048,1024B). Runtime 90 seconds [ 452.324574][ T1594] block nbd3: Possible stuck request ffff888027de55c0: control (read@3072,1024B). Runtime 90 seconds [ 453.648163][ T4979] udevd[4979]: worker [9246] /devices/virtual/block/nbd1 timeout; kill it [ 453.656954][ T4979] udevd[4979]: seq 15746 '/devices/virtual/block/nbd1' killed [ 453.664578][ T4979] udevd[4979]: worker [9643] /devices/virtual/block/nbd3 is taking a long time