last executing test programs: 2m49.864695371s ago: executing program 2 (id=8961): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x70, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @broadcast}]}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x58}, @IFLA_MAP={0x24, 0xe, {0x8, 0x0, 0x100, 0xf, 0x80, 0x4}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40045) 2m49.768036354s ago: executing program 2 (id=8962): unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r1) sendfile(r1, r0, 0x0, 0xf03a0005) recvmsg$qrtr(r1, &(0x7f0000000a80)={&(0x7f0000000080), 0xc, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000400)=""/128, 0x80}, {&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f0000000600)=""/202, 0xca}, {&(0x7f0000000700)=""/146, 0x92}], 0x9, &(0x7f0000000880)=[{0xd8, 0x0, 0x0, ""/200}, {0xf0, 0x0, 0x0, ""/217}, {0x18, 0x0, 0x0, ""/3}], 0x1e0, 0x101}, 0x38, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 2m49.512439352s ago: executing program 2 (id=8965): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x44, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 2m49.415463421s ago: executing program 2 (id=8966): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000300000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x20000000}, 0x41) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f0000000140)="bdfce954922f64ff27746a53f0491c7a30b68048a677013ce5769b69b4afa423f7") socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="d80000002f00090027bd7000fbdbdf2504000000c4001a803e00", @ANYRES64=r3], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x80014) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000400000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m46.223229296s ago: executing program 2 (id=8986): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000001c98000000000000bf980000000000004c080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m45.75261316s ago: executing program 2 (id=8991): unshare(0x6a040000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="5bf9080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect(r4, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_buf(r6, 0x0, 0x2f, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYRESOCT=r5, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="7da3b2db9f5791412f2f685e8227bba7bd6b884571f91fa4cc628d120d272fea62f0f77f29880d45eb1055aa71c2efce642b847b0e9965aad7c82e206f91a91decd1459d5b6e6d6777d50bc12d554e9b674ba936adfe77804a8a0e0b13d13d74315378fcbe38ebae2e37e5dc3a93f42107e796"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r7}) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x4, 0xa3, [0xc416, 0x9, 0x83e4, 0xb, 0x1, 0x20ff], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000400)=""/163}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf250000", @ANYRES32=0x0, @ANYBLOB="000000000080801fd87fe12db878b9004800128008000104687372003c000280060005000180000008000100", @ANYRES32=r10, @ANYRES8=r9], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 2m30.575582417s ago: executing program 32 (id=8991): unshare(0x6a040000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="5bf9080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect(r4, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_buf(r6, 0x0, 0x2f, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYRESOCT=r5, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="7da3b2db9f5791412f2f685e8227bba7bd6b884571f91fa4cc628d120d272fea62f0f77f29880d45eb1055aa71c2efce642b847b0e9965aad7c82e206f91a91decd1459d5b6e6d6777d50bc12d554e9b674ba936adfe77804a8a0e0b13d13d74315378fcbe38ebae2e37e5dc3a93f42107e796"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r7}) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x4, 0xa3, [0xc416, 0x9, 0x83e4, 0xb, 0x1, 0x20ff], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000400)=""/163}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf250000", @ANYRES32=0x0, @ANYBLOB="000000000080801fd87fe12db878b9004800128008000104687372003c000280060005000180000008000100", @ANYRES32=r10, @ANYRES8=r9], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 6.8203879s ago: executing program 0 (id=10066): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002640)={0x18, 0x10, 0xa, 0x201, 0x70bd27, 0x25dfdbfe, {0x5, 0x0, 0x7}, [@generic="93a52d1f"]}, 0x18}}, 0x40) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4ea3, 0x7, @local, 0x9}, 0x1c) listen(r4, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20054000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000800000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa100000000000007010000f8ffffffb702000008000000b70300000000000085000000990000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 5.559209434s ago: executing program 0 (id=10077): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010102}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20040054) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=@flushpolicy={0x244, 0x1d, 0x100, 0x70bd2b, 0x25dfdbff, "", [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @algo_auth={0xe7, 0x1, {{'sha1_mb\x00'}, 0x4f8, "f6eae033d6eb09057f9451640a0d5395c77ed87e00d292c50c51f0cce53b4b39a5031967db59986f63a75cfd829e31769c150099a0c031f8e1d0ab901bdfe1114ad72dceb226d371221ee7b8a74eec8fde1c56645b55a0c7ef4ea2403c7210dc467c94bf1ce56f2eba30ea64c7a9c6375da517689c526840f479f8b3f9e847b1824c6f063c0171869bcb9366b580dfe26d1c94637c33bcddc25d9f9ae2acfb"}}, @policy_type={0xa, 0x10, {0x1}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e21, @in6=@empty}}, @algo_auth={0xfb, 0x1, {{'blake2s-224-x86\x00'}, 0x598, "347350ddc18c732d75cc2ad38da095c7cb032ed0dd9fc3ae5a2d3711099fff83c2808c2686ef93fac563ee7169b19eb347553fb8a3b061f43b3ad1c73103a0715b32ddcb7d6c94dd59b5ec54ad0cdb0c97059c24ae5a10204b7020a616661f3e7fe56ce2b857b800436b86a038318f02e0da66ebe0fd3645f25bd7e54566208ec2ce67c5a37f60aeef2220a0be37fd8ef977c0ecd2589b3e4ce27e35d1f9ab8ff507c8d41f09b9fe0abba2f51f26869405b926"}}, @mark={0xc, 0x15, {0x350759, 0x8}}, @offload={0xc, 0x1c, {r3, 0x1}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delneigh={0x38, 0x1d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x2, 0x0, 0x0, r3, 0x28, 0x3c, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NDA_MASTER={0x8, 0x9, 0xffff0001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x54, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 5.016371187s ago: executing program 0 (id=10081): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x928f01}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x134, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x77}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8000000}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_DATA={0x78, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x80}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x86}, @IPSET_ATTR_COMMENT={0xd, 0x1a, '*@$./-,}\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xf724}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x134}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400a1ac65b426a69c5e2f723b14865cc4121000010426bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280060002000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$xdp(r3, &(0x7f0000000800)={&(0x7f0000000040)={0x2c, 0x2, r1, 0x9}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="67f058a8fa3e2daaacf3969c0c2baea9ec4f973ba89c32979426293bf14136691f8d024ed06e7c50921b254124f9caa07f65f22c501ecca70b5659a880b1c650bd", 0x41}, {&(0x7f0000000540)="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", 0xfc}, {&(0x7f0000000640)="f5d026b176e805560f72cbfce720dd86a94acad6b54abb649e6fa66954da34e40a860b25f5d6e07e49f87acee4134127faf4f5eb2ed662e04bb564952cad4e288c48659fc848ddebeca7152f40c03fe6994278b974bc9300cf8400601b32995768bd4325482648f8f07b1b74df0876ea9fff25ada782d326f4a135e84bd14ebe9b0b35bbcc18bb8f96d785f815d736cc21db88cde011a5e43762dd62062ee4f2", 0xa0}, {&(0x7f0000000700)="4401337686ea7465ab7c1217282e671815135762043b9012d7fba7088c4bcaafe75b621b8ee48bef2bd8462c97e51152b2dee3c65c879faf89d5fc826f8386de498d9f2df3739b00bcbca48f4830fddbeb56931eec1656e044705debf3da2181bd14b497b3a1a81bdabdc27cfc7212f246b888a75eda90340d63d7798680e8777583a8e15871ca1d4f55a3726f8da6b8a2b91b001c6f8a2ee3ed711590f86870457d49fba30544800514929f7a79aa150daa", 0xb2}], 0x4, 0x0, 0x0, 0x10}, 0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x2f, 0x6e, 0xd1, 0x1, 0x38, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7800, 0x7, 0xc}}) 4.669307788s ago: executing program 0 (id=10086): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="180800005800000000000000000000110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf27000000000000070800", @ANYRESDEC=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004a40)=@newqdisc={0x8c, 0x24, 0x200, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x4, 0x2003, 0x4004000, 0x0, 0x40}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x3d, 0xc, {0x2, 0x5, 0xfffffa9a, 0x4000000, 0x4, 0x6}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x14048814}, 0x0) socket$netlink(0x10, 0x3, 0xa) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000380)=0x4) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000380)=0x4) socket(0x23, 0x800, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x3}, 0x1c) r8 = socket(0x1e, 0x4, 0x0) r9 = socket(0x840000000002, 0x3, 0x102) getsockopt$inet_pktinfo(r9, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x3, 0x100}, 0xc) socket$netlink(0x10, 0x3, 0x10) (async) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x21, &(0x7f0000000000), 0x4) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) 3.893781259s ago: executing program 0 (id=10090): unshare(0x6a040000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000104004000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900020001000000300012800b00010067656e65766500002000020000000000020800"], 0x50}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 3.429614113s ago: executing program 4 (id=10094): socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="05000000000000000000000000000000a5f63a380a30185c75ee87cd4b29ad19763bb58b7d40180cf294a5dce07257743f93cc8895a163e9a3d92971e165f2078439ed49751ed30a67b6b1a933cb80177ff4d302942a56a2e1208fba1acb5ff42a916b968f690982891d9391fa2011b5d58b7527deb857fd1af9e2d14c8d8f7a429642b1e6d0dc83ae0da17c52", @ANYRES64=0x0, @ANYBLOB="8710965b7f0086dee26ab339cd04d09f6f56322a93b19175c658dd0896fb58879547b8402f48c120ff76e0d6c3de6c2150ceccd784e88f849f2357ee3da393380796bc0fd006934283f53154665e6a1c61d855e54477c03697c842de", @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="200000caa4e938335fd400"/23], 0x20000078}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xd}, {0x0, 0x9, 0x7, 0x0, 0x8, 0x0, 0x4, 0x8}, {0x9, 0x0, 0x40000000000, 0x7}, {0x0, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x3}, 0x0, 0x796b82bf}}, 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0xc0) (rerun: 32) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0xfdee, 0x2, 0x1, 0x0, 0x7f}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) (async) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000240), &(0x7f0000000140)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl(r5, 0x920, &(0x7f0000000580)="3901ac2f2d5543d008") (async, rerun: 32) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x2c, r7, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0x250}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) (async, rerun: 64) r8 = socket$inet(0x2, 0x1, 0x0) (rerun: 64) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000540)=0xff, 0x4) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r9) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x20, r10, 0x615, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0xc040) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 3.399514109s ago: executing program 5 (id=10095): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x40400c4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000003c0)={{r1, &(0x7f0000000000)='\x00', 0x4700, &(0x7f0000000080)={@_ha_fsid={[0xb0d, 0xffffff7f]}, {0x3, 0x6, 0xa96f, 0xfea}}, 0x7, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000280)=0x6}, {[0xfffffffe, 0x3, 0x1, 0xf265]}, 0x7ff, 0x36, &(0x7f00000002c0)=""/54}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16=r5, @ANYRES8=r6, @ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.39627928s ago: executing program 3 (id=10096): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) socket(0x15, 0x6, 0x8) (async) r1 = socket(0x15, 0x6, 0x8) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x902, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4068010) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r2, &(0x7f0000000280)=@name, &(0x7f00000002c0)=0x10, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f0000000300)={0x7, 0x1}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'nr0\x00', &(0x7f0000000340)=@ethtool_sfeatures={0x3b, 0x8, [{0x6, 0x6}, {0x3ff, 0x3}, {0x2, 0xcb2}, {0x6c, 0x3}, {0xf, 0x3}, {0x10000, 0x8a}, {0xffff, 0x4}, {0x4, 0x800}]}}) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x0, 0x0, 0xd8, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000440), {[{{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x1], 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x5, 0x2}, {0x3, 0x4}, {0xffffffffffffffff, 0x5, 0x2}, 0x2, 0x82d9}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffffff, 0xff000000, 'macvtap0\x00', 'wlan0\x00', {}, {0xff}, 0x6c, 0x0, 0x9}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="46cc3a614bc2", 0x769c, 0x2, [0x19, 0x1f, 0x25, 0x29, 0x19, 0x39, 0x1, 0x17, 0xc, 0x1, 0x25, 0x26, 0x1f, 0x1a, 0x26, 0x2f], 0x4, 0xc2, 0xff}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'geneve1\x00', 'macvlan1\x00', {0xff}, {}, 0x33, 0x0, 0x40}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x6, 0x5, 0xe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000800), &(0x7f0000000840)) (async) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000800), &(0x7f0000000840)) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x10, 0x3e8, 0x400, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000001) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x200800, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000a40)={0x1, 0x1, 0x7e, &(0x7f00000009c0)=""/126}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000a40)={0x1, 0x1, 0x7e, &(0x7f00000009c0)=""/126}) sendmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000a80)="33603beb7fa17a0791b2e313eaee97ad35b2e3be5850dc5e9afca3f7ca5da148089bc7b3e818ecaa9d8a7c745b0ebb7e2e47022f13717bbe36435d79f883ac5df38651c33f4e71de4e80e0251e94bb8a7eb6bdb96b583ce9582026962c3bfca81f9e2d332b715d7323c04f1c10c3da1c35f9b8e4f7cfafb87e428d4061bd237ae2a5b4c0d99f72b79b3dfbdb148afe92c3a71745e5de3f7aa257bb136bc0cda89160aabab16e9a909ae05ff62112a4fa7028f36514f0", 0xb6}, {&(0x7f0000000b40)="185ec58acdac1b56f57b3308b4b8f14b4ba96d74403d6e66450d7bf8e53358498eac384d78bcfe88fee2f82bd129cc3ac5a0d4eb73bf4e5e64c61cf546ea81382af9aa37d1205f4bbf4c3591846965fc2cc48174006350037070dc0bba5c7c23c84104121c0bc294b72c7cafd801d41e253579fa28a25047dde7444fe84e7af35014d1e5b83dc0bdc289c76393ef484b6e337706f10ef25d60706a20552fb1d63a07483dab1028d099a5ba0d3b8dfa2486fb2fade30d55c477121c91083f00cc15aee413d5ea7ae53663972600bea7f32363b86550e4a935922336d372f63e6d618966a39b790de3bfd8110e22e345cda73ec5c163c77ee69398e90817f185ca082717e758bfcf0d14b93fe0919a64c48e0fa3aeeaa8ed39c41c23c512ad4f97657f55349fc545d4cb8a9399ce7b7d1cc3ac9c26fb181c9d27a8bf31761f5155e1a14ba12b853513eedd5398d3bc0d67df6efa1df2dc53348334f276ae79558622509c5197d77edb7a6bd8829f636e603bf02b8406ee982ed10f92ba9ced29fd0d8f72974fafee506b1a49cdf75d91c1fd19e25e633e3fe1edaf11de882ff0d36284db2a58a84253994cef0b9a5dc164b94ef236d45945dab357fd0bea9a28f6c87ec68d4f2c15f08b2afb347eb2dd8b488909f3cf5318c2e8667608a2bff4eb509c5b3b11aed82f86556384455144be4e86a8fa5e25f7c4a179446a4b0b3b65f33e6b00bd0ce71c13c6c35a668b15461a2438dac175f5c9c6f9b10f8f4918a652ce7161d1658a93ed84f6c337c9488c934193df323189edec117071d9481dd4d8d6185cf4a3aa7c47e1592dcb06b932b5d7c35d4626f65d0753f24316982926c6a4f8c7ca0e3349afb63da72ea0c5a03090c5dc8e053ec3e8f664beb6f8acfd0c733ea44004769611ca3b63e46927ee9de17be5569e0e5316880f8fb77996bbbaa850b37ec38aff2d22419548ed2c1c97e3f8dc8ea9acb3c37558aa67178089a6bd600e4196edfd073007d60cbfb84e2b4279ef2f9f73f3d8cf7ae383f8a62e9f1a6fc1308f11db4bb0c90af8eb0b621fc8a24d4a040b39a0f176b9b3f6277fc696c3530a86f591695c877ff84530c26123ec4e0d13d05e2f2f58cc9a66572af4ff380dc43c5b2b2c5d1fb2ce373c3c0a0a33c1467a9a1cb6245768b97636aa16f9e42f59401548c5fe1f92551f16c4139d977b2472893d1430ea711f50d0c259ccbf1b1d16340b17473483de7a5cb7356953e36fb747f766d37b4f547d382b2086c464a2d4da0a4e7b8f323934146fa9a89a39bd5da19d3fd1fbb18335bf0990e983a76b8bb1fc306a21e34cc5e1752ab5c54390d2f70d342099f00f9d744e6d333490b30c84261e9cf8f70dd678bc7ad24266fdd9c5be0c99eaa3c336bcc6de9ed9c89e1df0df0d219d724115b9a3478178d3007070fe8a5d8e5139e8be6de7faf2faf68d57a58590fc1116745ae0cdb8cc98ac5061a9e86767711a213bf84127b03b7b23045b892a64d67e77f1a0b4fdf20761dcfe4392a365c272c2238dd86546456f1eaa21721aa89dbafe358430bef442545104b6c209696a9e90850a027f9d55870b8f9c04d88b50fc3496ebe791a6809013dffa04c956c3cdf721af86a6cb2448fa4a357c5c96b2199c0acb6cb466f7962bc1c71bbfed697b5709ec46c1058edd67d9e97f99fec6b83d6774e15346c9ce61e9b95023ae377b75eba71a237c8f51c41ca7c371c7c790d53ea4df3210c396f1cf6d1d825baff0bad3852fb976836a7470d68948fdce0ceb245aa859833067ad7006671db154ebd8d1744c9835f7968a709e21cbf2d63f66055550dfd681a3a2401a1ade3a642897fe009e2ec70d2e9a4d69d9ef3d7431d36f673aba16e0dbee16dc2a030ee8ce25a691ba23bf239772b74af35bad5ead7d2542557bb3914a7b574b12e8d35c93e17efb1bf412fec94ae26d12498961afcf53e62defceab695869bfcc5ca525b6545f8aea1f9f6bbceb3e0c57247b24fb0a332bbaba68119fe3170159d3c55029504620c550e3bf37ab7486c63b514288911b1c89de3d290066a5ee196a0a1e1789ffc141a06e64df026d000084a78cb1d82d21116d06ec4799bb827a3fc11c45c9005e2ba396b39771fc1ee8acb594e3042a7d2dc9f333e00c12afa884fa8004cbf4b5432c01efbc19a9a1718900fd1acd4dfb2a11dbc6ca8e97a5bfbabb0273b3b5728985708a8d28c95fb713d6473aa05379d2e094c5e7f3595a03c49201aaed994d051482b5fecbcd23fdc77650fd88c8ed1333f6bf94077142a781ade7476bea0c3c4875a91ea120dddb0ef9e9d1edc24cb4e78dbe4f2af4cad47abaa382ebc8940dde2a49ce6db3f2e93133249da8f41388dc270147bb2ed1afbde6ede71e970b910000d82f4a04891c02707f4e5ed577deb99338103b6236902fa5f0d20d9b1e9c2733c5349003a9c7a4ba0652ae74e653e820fe77bffd71ca57477483d387b4c8dc924fe692cf37df11f2dab84f946d12919a2cde583817ddd51630ececf1703e3357d09bbaf59148a74bb2bd6c40d6088af5cf51a5d2f9c51fc07b730574681ea6a12d8ae6355b1687824cd8b25894a49a49067c5d95e6e212c3c6020e2682324863ff3957cae2a200939fedcf4842a78944ea626fd23541af1c6228cefd1485482a8d4a04a6920d9a58ec4d4cc13bec13c9194b5fbc3bbb15732281d0ee607a7bf5bb599c93ceba12eeeb76f253024e24be0538e549def6f81902494339af3747ffbe74ff05222c5c1c936b0c60ed8644924a5487951672ef5f0461cc59f06cf0b75c83f2a9757f199155bf26f4c90d6bd39c1d9e4fd0066cca715bb2395e06f353dceab6cb5595467b437fb6fe416e30ee3233fd94290ba4611b2aff6f59bef651d2d852dffe522f179fc207097b4e7c5c583640a80ffb53c5633bbd2d817676eed5d2bea6d27e6cab7253a12786d52592e8c74569b09bd7a3c815d91184383a4ee177787b7e9398a7a6ca2c8b534b257c440c4b0772679c81976be2848b6ea97800030c1143bf41ac372f75ca2726610ef41be1a9654dc99dcca002bf4bc15c9d574214be734f915dadc3d449c0410f40dcafb2f697924d1498d9103f5817d1dabdd1060947a66c48178a12314ce22e0794c6e541ada4d94364ff55189c36fceeb1eb756571256cd930f223180ed7f9af078777bd7eef3abd134187ba02a838b4a10ad19139013990681950c5c13a2df49b9719877a127c34636117c28f426f091d7c3786b02b7c23b079ff774e12512e620d3a89702ef81feaac5e26a6a2824191e83aea70b3b65a1811b0a3816a96756595cf2f7029c6e12f45db55ef626875787a967d49c28db15b18aa462315d3672c39b08f5854a9c89393bb9dca87a3f517fe01dd5019b34f3f03abb88c166479caa5d505d6627fbd203da3dde8cec78e98db513dc0ecd016757ef99763e60a621ab5d8faa185125760bce9567b09a50e7a347a94999725ec01672152e7e25bbb3d2ca33c4af6c3ce70e58827b7950dbb51986c784f47fcc690b1c09004b0ff163910a7b12087988e5a00e0849289cdb508a31b457790dd253305948a0927673eed8753af87311b3bdaab53fffd093aeb689a9d3bb3d62f0f9f6fc10449d4d4b95da5124ef9a08a80857cd3efe43fcaadb255b6af0889bf4edf11a1283411751f5f2f380af0dd7e27b5ca4a0ea975bd73601c6025c5b6a50961e6431cc41f509aa8750ebf88ed24a9dc5b8804041a67a53f7f19afe2876c488b9b9d36eb46e3fb2c58a710d9a3df168bfc312d2e03043a4b884ca884430ef210c1642ab30e60b055de4502d9988f982b4e8f7dcf9e34ebda9230578e392cb9228c473da2a186e91ac53cedfc3619bd57e3ebadc1905b5bbe493de6fb8ba3fafde6afaf4d18a302d73242d2c518e4c86693700b52614e57594ecf1b00b2e446522f49a1c6a2caa965bb9ab2d7c5a476ff4345eda1da01240ff4909b56f47a32c6ecdd9fe22b10ceb14edc4adf8d1a930ef4885e3a45c285a5d20a83746579bb73a895e1c7deeed2342912359e4247d38f67cca3d06dc6172930c1710c2a6ee64105900c49d76a590b79a3da3741ea086a78a9d35e33296e16e0fcbeea0511d423dbd3d6175649c9b2790889dddaa757f5e9c243d96e8875e4674217c48ffdf7273ba0b398c4796acf1bb8bdd24a253e37eb17538c1b84d92aec5b8ec4674aebb0d695b393a20660258a2289ac3702bf4cdd2912c445979ee71ca38d07af8558c0039b78c326092501944f13497b48c437a1c4987d15a73cde287003be952e5a475f2ad4f25cc4680c314971a0120a45023b86c5ab6bb145dedf50344afdb1a5dd21962dcffd963f50b230da9119c2eb174f139435efe761671ec62b92db53ab44cf858c0e3a5cfc964d832b0a0df3d4bc532d286b9493f776506f8ac57c687ad923f2d5ca38abb39e7ddf48a32766489294048d1584c3d2f3a8b457b1665189772c7df2a832ec8614292ef55f75869650f7cbb715e203fb1e692911139d2886689612f6544f8de7a51c7233f542b7b3c172494a285538d9862f407e73775386247b08db73ddb52d4f39abe47ce810264738db9acefa4746e03e39041118808e5ae9141559a841c3f68e2c7d30e6c51154f231ca7cc86155ae4e3cd357586d59859bcb77a7dec5fd1a232a4a9b4e2e5aa9d7ddfa7226489efa3d89d7aacdcb2cd14a7928663154cb0b1bcc4c6a63ba0989c9cf58bd2a5955888d992b663514c0d2c7fe60add8f1be94aaf08c4476a4b93eb4dbd7ee5d91b54a666884deef53460305f5f3ca363ef8b21102474f6af268be1f1193b0cb5cbaa72f18353d1e592d346f34e7b825527521cff393e4cbfa607eff8ab7386ab891591eaca25bd930f93fe6d9929504b43824309ec7545a70b8ee3539e3641a66b717668e7e5e6328f8b8517e932192af43522a0a78c05e80bdfecd4f660e9c4ccc0d4cf896e98dbc34011a0ff2f017c3fac0e9c717dfb87075771c2dee83e11d262b39a6f10d2edded4cf5a5c98ef5333071660b0f1d7c96a4459def58932bb7f0e976b2efb1e53adf313e8a709c79876d291cc6350fad8c180afb5d3e6efdcf3ce8aea8d3fbf0bb7b0d2442937ec7505be9d8a1e3a7aff94b61965f7c765415d0e704adaf2273d1eb196988cd34b2c59ee794d70896e834568289cba05f7b7c1cd702454c440110d08a554ce090470bad6dd70aaa4fff09717c470469d6a086ba93e7fb856f37763e2f048c99f294674fdedd4ab6af4fadec4c6c0e452729fc2a8893bb6444bdd549dce00a041b0fce0535f7af32a6c4abbb8cbddf9417e465a2eb0781bcdf11e8f8e97bc0f799fb2260f53b41570b6f240d2ccdd225d4f412e164e9fadbb4073fd90c8a13813d11c9c3439d6c9c33c4e19f60963fce1fc7cfba60b2e57f867102bb204d7862354858062a945a2ed7c20b82170cd9596ae4bf67ab6221d74d8f3be7021f10b6e6b0c1c6cb152bd9b9c001106d3eeebe5cdf1cfea926acf93b14097fe72d0d075b3c512ff3124e48fd50cd7ac3f663fbf37c50bfdb706b81d5621405a1fbb231d2b4478737a44eb0afff0a999a59ad090bea9c943b060370e063bfdb397ba8b141c85e1a6484743ffb14f1b5f30adb7af6844ab2b5476128a60395b1f24260d87c6521ae3b8bdb0acf36259369ed74bbd078c975344d2dec5000f2e02ac0a498b96a598772df9b6587d97167f87433f862528d7c7fa2de9d303c6963f305606729892c371202b14e3525bf2d0e466d779c", 0x1000}], 0x2, &(0x7f0000001b80)=[{0x70, 0x102, 0x8000, "61ce0a22e46b2aa5de072f01896fb487fe82156553222a43bc94f60d9c27fec9702ede7f50737a0090be05b3042f0d949804d6ecff7206390797ae4e0513077db48f108d65b435ca75d2b94f1cd685a132132c3ba5a601002d382fffb84e67ff"}], 0x70}, 0x4000) (async) sendmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000a80)="33603beb7fa17a0791b2e313eaee97ad35b2e3be5850dc5e9afca3f7ca5da148089bc7b3e818ecaa9d8a7c745b0ebb7e2e47022f13717bbe36435d79f883ac5df38651c33f4e71de4e80e0251e94bb8a7eb6bdb96b583ce9582026962c3bfca81f9e2d332b715d7323c04f1c10c3da1c35f9b8e4f7cfafb87e428d4061bd237ae2a5b4c0d99f72b79b3dfbdb148afe92c3a71745e5de3f7aa257bb136bc0cda89160aabab16e9a909ae05ff62112a4fa7028f36514f0", 0xb6}, {&(0x7f0000000b40)="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", 0x1000}], 0x2, &(0x7f0000001b80)=[{0x70, 0x102, 0x8000, "61ce0a22e46b2aa5de072f01896fb487fe82156553222a43bc94f60d9c27fec9702ede7f50737a0090be05b3042f0d949804d6ecff7206390797ae4e0513077db48f108d65b435ca75d2b94f1cd685a132132c3ba5a601002d382fffb84e67ff"}], 0x70}, 0x4000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000001c40)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001c80)={{{@in=@initdev, @in=@empty}}, {{@in=@multicast1}}}, &(0x7f0000001d80)=0xe8) ioctl$OCFS2_IOC_UNRESVSP64(r5, 0x4030582b, &(0x7f0000001dc0)={0x2, 0x2, 0xfffffffffffffffd, 0x0, 0x40, 0x8}) (async) ioctl$OCFS2_IOC_UNRESVSP64(r5, 0x4030582b, &(0x7f0000001dc0)={0x2, 0x2, 0xfffffffffffffffd, 0x0, 0x40, 0x8}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001e00)={{0x0, 0x44, 0x5, 0x7, 0x4, 0xfff, 0x8, 0x9, 0x400, 0xffffffff, 0x6, 0x7, 0x0, 0x0, 0x8}}) epoll_pwait(0xffffffffffffffff, &(0x7f0000002e00)=[{}, {}], 0x2, 0x7f, &(0x7f0000002e40)={[0x3]}, 0x8) (async) epoll_pwait(0xffffffffffffffff, &(0x7f0000002e00)=[{}, {}], 0x2, 0x7f, &(0x7f0000002e40)={[0x3]}, 0x8) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x3c, 0x1407, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 3.099311212s ago: executing program 1 (id=10098): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x43}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0x1003, 0x0, 0x8ba, 0xa3, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x7, 0xa, 0xd81, 0x0, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb97, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x8, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x8, 0x5, 0x6cdf13a3, 0x7, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x10000, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x83, 0xffff8000, 0x5, 0x5, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4010000, 0x101, 0x9, 0xfffffff6, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x8, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff8, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0x9, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x9, 0x2, 0xfffff803, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0xffffffff, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x468}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in=@broadcast, @in=@rand_addr=0x64010102, 0x3c, 0x4, 0x0, 0x2000, 0xa, 0xa}, {@in=@private=0xa010101, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) 2.930207783s ago: executing program 3 (id=10099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c120000190001002dbd700000000000200100000000000000000000000000006401010200000000000000000000000000000000000000010a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000200000000000000000000000000020000000000000000000008000c00fcffffff0c0015005b0735000400000008001f"], 0x121c}}, 0x2c000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0x0, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x20}, @TCA_PIE_TUPDATE={0xfffffd47, 0x3, 0x6}, @TCA_PIE_TUPDATE={0x8}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_TARGET={0x8, 0x1, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc021}, 0x0) 2.77904081s ago: executing program 5 (id=10100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x2, 0x300) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x1968) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2642, 0x0) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d90400000300", 0x7}], 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4820, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r8, &(0x7f0000000180)={0x2, 0x0, @broadcast, 0x2}, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) close(0x3) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r10, 0x6, 0x1c, &(0x7f0000000580)=""/4096, &(0x7f0000001580)=0x1000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x5}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$cgroup_devices(r11, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 2.658199178s ago: executing program 1 (id=10101): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$kcm(0x2, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pwritev(r0, &(0x7f00000007c0)=[{&(0x7f00000001c0)="09d7e9b98aa590619404312e72503a74e8275b2e17a2955186519f853eedaec51649a68ac562ea020e029d95547459ea0de7faff0d6e30a158fe8fe96fa29e65b2523a090b6f6d3f045b172333d83c119b3a7ac5772f6ce668b0d6bfc63db7c03218fef2a5d37ea1c8087797d9d9", 0x6e}, {&(0x7f0000000240)="521700d6f2797451b1d80c9c8210a4c549bc480d4ad69b769586124441b39754d400345a5b045aa351068496a3990cae934506d251c989cfecf00cd7c9", 0x3d}, {&(0x7f0000000380)="939a6b072b0522623a78c149c661f998e1a7d823286d700e589c376aa9d42eafc32f0f622680ecc961a8c5305d85819d8b32b0f11c24a3bff5eae31cccc056048ad22eaf09b9840342e0d5a3a3c782dfcc91a7cf510dbea5b04681ff72db237edf4ddf85843dddfc05557c4fa587ac14345dfd1239bd7c51021ac3dd49d66fc9107df0946b112334dca3b29b44fce282d024ffa065b0319ec02f848df84ffa9e0f170464ad6758ad8937c8346dc3c6a1d496e080a9a69f8e377d685d289eefd305b778e61e43eaa87ac5d9510b1f", 0xce}, {&(0x7f00000004c0)="c78becb5e11e181ca2fa5b2d0c99f4983775e0f1e45911de366436c8ffa6314292416e6c4bde5684ff7f7e86e22a53c62ec48086a57014f21dd3923412561a329172d788d769c11c7d533df41fa49c37541e0219c6b289e612253745e88cdcf99cdae96e44cd05e94633ee83b2d18504c92fbc687501ab5e7966e6643696f0747c78efcc1690b3bb1a97327eb9a545a04df6cc958b31cbe1711e0a7258366a67", 0xa0}, {&(0x7f0000000580)="98edd51fd1c7c045c4eccdf678d9af379ac18c688906a29893ef4954e40dc0e1bfe2f31cdc0d0ca472044fedd2316d5b934cac5a919f33af536659d288c9a2a9f50ffb5cdeb8aa196ee2acedfc03ae8316fb2df12dbcbc560bedb53979907cdad020", 0x62}, {&(0x7f0000000600)="10194eaaf52ccbf39fd4f91c563a1ca706119dfa93beeb2ea242e54d31e8b429016a3c72da9ae0ac080970db53b48f2c44c5bc3647144351b8d397fe286d788b8af6ac58b250", 0x46}, {&(0x7f0000000680)="676550fc291a9a2819d64d99e5ed587f6168d8b43c4810f95766eadd3d61dd2df736edc8e71f0c6ddcd787906064cb0b9c8085", 0x33}, {&(0x7f00000006c0)="9b6a5030b7ef052a8ae084a4f5ee79cb2b7d645d94785187ed79701e390599896718dcc7dfa107fa99767a64e384b637c896f71dcb468a582928cacb5b3e8181526c236f58eaf3d32712bdc99a43e535fcb2b0af6cf5e41b7f7a00bf6851f25ca0129fa68b77e53820674e26e6d20c01b25a074fa11bf6e04bfa15e741924c300bf09a052c7bb7c5b66a25e7ebf4552e90f8ac5e4b8d78fdf0f23f3aaa4ef5fb4c2b940aedf432ce033306f04ca5de72ecf235d700397b6f778d88b2177ae1eb0c95a1ed5b261a1afac99ef2dae9d1e73d65db01cc3caaf071bd1f1c476f1546bd958347e2e78e7e24ce5f534c31", 0xee}], 0x8, 0x59e0a458, 0x59c) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) (async, rerun: 32) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="05000000edfe9f"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 2.509241337s ago: executing program 4 (id=10102): r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x1e2a, 0x7f, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r1, &(0x7f0000000340)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x4c, 0x40, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x14, 0xc2, 0x0, 0x1, [@typed={0xc, 0x99, 0x0, 0x0, @u64=0x5e7}, @nested={0x4, 0x7b}]}, @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="576b1de253b6ea52f433fc877671e81437a258482539e68aa89ee0e674d6d0"]}, 0x4c}, {&(0x7f0000000140)={0x10, 0x1c, 0x10, 0x70bd29, 0x25dfdbfe}, 0x10}, {&(0x7f0000000180)={0x128, 0x13, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@generic="86770c65f917d62bb209270f8ba0e1b508d4e6308b1718aa1781f8a0a29fe37fdd04eb61cf1d1da49bcadd1a55d43cd58e918578bc92a86c52cba0d7c6ded16edfb43352c60a2cac818dd70bd6116bf73cfa5545050ab0b476eb828076b9bb02b0c1b492f3daae8931889e098a408a07a22812871e80cafc89103669f2e5726f6493fd769310b8e0af51898996f84cf8d398fd7cedf761df", @generic="c1d8d8a1d40afd9493fd3ba3231b35857f5ec756b75cd32d47bddf20c8dc4fdfe6faa4c8aebd9650249dfeada849b3f9b4b39adde3bdc97e8330826de3bb23490a7959b4aee576a241dc829c302fa504b14fb834d11c1c387a67c8d1ca1b94806867353a6d36eb4987e662ab4eb54e393f19fa2972d38ae1a0ff1c66337d"]}, 0x128}, {&(0x7f00000002c0)={0x20, 0x25, 0x0, 0x70bd25, 0x25dfdbfd, "", [@nested={0xe, 0xa, 0x0, 0x1, [@nested={0x4, 0xd6}, @generic="57744be51a3c"]}]}, 0x20}], 0x4, 0x0, 0x0, 0x44810}, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)={[{0x6, 'freezer'}, {0x2d, 'cpuset'}, {0x2d, 'rdma'}, {0x2d, 'freezer'}, {0x2b, 'pids'}]}, 0x26) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000440)={0x1, 0x5}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000600)={{r2, &(0x7f0000000480)='}&\\', 0x218000, &(0x7f00000004c0)={@_ha_fsid={[0x0, 0x1]}, {0x0, 0x3, 0x2, 0x99d}}, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0xc867}, {[0x629f, 0x0, 0x3ff, 0x200000]}, 0x8, 0x51, &(0x7f0000000580)=""/81}) writev(r4, &(0x7f0000001700)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="9fd7c0dcbc832499344e398452c63464ac5e0f5430fd4cc5ac0d4d12e2a18432d82baf52721f3c019192bb8bc69c4fbeb15b8a797bc75ca63a9fe830468d5d98060d3f109608530144", 0x49}], 0x2) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001740)={0x0, @multicast1, @dev}, &(0x7f0000001780)=0xc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), r1) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0xc4080000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x6c, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) getsockopt$inet_buf(r4, 0x0, 0x2f, &(0x7f0000001940)=""/235, &(0x7f0000001a40)=0xeb) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), r1) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000001c40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b00)={0xcc, r7, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x37a7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5b9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbdb}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff00}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x961a}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x155}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44}, 0x80c4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000001c80)={0x3, 'veth0_macvtap\x00', {0x9}, 0xadaa}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d00), r9) r10 = accept4$nfc_llcp(r4, &(0x7f0000001d40), &(0x7f0000001dc0)=0x60, 0x400) recvmmsg(r10, &(0x7f000000c240)=[{{&(0x7f0000001e00)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001e80)=""/231, 0xe7}, {&(0x7f0000001f80)=""/96, 0x60}, {&(0x7f0000002000)=""/135, 0x87}, {&(0x7f00000020c0)=""/158, 0x9e}, {&(0x7f0000002180)=""/224, 0xe0}, {&(0x7f0000002280)=""/105, 0x69}, {&(0x7f0000002300)=""/138, 0x8a}], 0x7, &(0x7f0000002440)=""/16, 0x10}, 0x3}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002500)=""/194, 0xc2}, {&(0x7f0000002600)=""/241, 0xf1}, {&(0x7f0000002700)=""/162, 0xa2}, {&(0x7f00000027c0)=""/222, 0xde}, {&(0x7f00000028c0)=""/126, 0x7e}, {&(0x7f0000002940)=""/46, 0x2e}, {&(0x7f0000002980)=""/22, 0x16}], 0x7, &(0x7f0000002a40)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000003a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000003ac0)=""/148, 0x94}, {&(0x7f0000003b80)=""/73, 0x49}, {&(0x7f0000003c00)=""/21, 0x15}, {&(0x7f0000003c40)=""/84, 0x54}, {&(0x7f0000003cc0)=""/203, 0xcb}, {&(0x7f0000003dc0)=""/207, 0xcf}, {&(0x7f0000003ec0)=""/152, 0x98}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/27, 0x1b}], 0x9, &(0x7f0000005080)=""/205, 0xcd}, 0x6}, {{&(0x7f0000005180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000008580)=[{&(0x7f0000005200)=""/235, 0xeb}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/186, 0xba}, {&(0x7f00000073c0)=""/4096, 0x1000}, {&(0x7f00000083c0)=""/181, 0xb5}, {&(0x7f0000008480)=""/82, 0x52}, {&(0x7f0000008500)=""/57, 0x39}, {&(0x7f0000008540)=""/41, 0x29}], 0x9}, 0xffffffff}, {{&(0x7f0000008640)=@isdn, 0x80, &(0x7f0000008bc0)=[{&(0x7f00000086c0)=""/192, 0xc0}, {&(0x7f0000008780)=""/111, 0x6f}, {&(0x7f0000008800)=""/240, 0xf0}, {&(0x7f0000008900)=""/154, 0x9a}, {&(0x7f00000089c0)=""/54, 0x36}, {&(0x7f0000008a00)=""/100, 0x64}, {&(0x7f0000008a80)=""/216, 0xd8}, {&(0x7f0000008b80)}], 0x8}}, {{0x0, 0x0, &(0x7f000000ae80)=[{&(0x7f0000008c40)=""/4096, 0x1000}, {&(0x7f0000009c40)=""/225, 0xe1}, {&(0x7f0000009d40)=""/129, 0x81}, {&(0x7f0000009e00)=""/86, 0x56}, {&(0x7f0000009e80)=""/4096, 0x1000}], 0x5, &(0x7f000000af00)=""/79, 0x4f}, 0x169}, {{&(0x7f000000af80)=@alg, 0x80, &(0x7f000000c180)=[{&(0x7f000000b000)=""/4096, 0x1000}, {&(0x7f000000c000)=""/149, 0x95}, {&(0x7f000000c0c0)=""/171, 0xab}], 0x3, &(0x7f000000c1c0)=""/92, 0x5c}, 0x82d9}], 0x7, 0x0, &(0x7f000000c400)={0x0, 0x989680}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = accept$packet(r11, &(0x7f000000c440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f000000c480)=0x14) setsockopt$packet_drop_memb(r12, 0x107, 0x2, &(0x7f000000c4c0)={r5, 0x1, 0x6, @multicast}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f000000c500)={0x1, 0xaa, "662e8c542867a040cc66afe54b0909ffa6c3b857013ea86de472a11bde50d3cea816b0166da59efced34cb3ad067a11608566f13a5fd877610ab22a3172cd1692c1690cb342a9d4bfd1f74be4d1f4c87312487ac345b633d44be3e6ef5559d66405016347d0e25223543555eaceaba2d4bf87338308e5deb5bd544034744188fc071678bd1ad8acb17ed03767eeb98e563235b4573d419b5bd8e1abc440eb60c891b5395809707db9345"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f000000c5c0)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f000000c980)={&(0x7f000000c600)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f000000c940)={&(0x7f000000c680)={0x288, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x60, 0x9, 0x6, 0x0, 0x0, 0x7ab6, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x3, 0xb0, 0x11c, 0x2, 0x3, 0xff99, 0xfff]}}]}]}, @NL80211_ATTR_TX_RATES={0x234, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x61, 0x6c, 0x1, 0x16, 0x2a, 0x2, 0x48, 0xb, 0x3, 0x1, 0x1b, 0x18, 0x16, 0x24, 0x16, 0x5, 0x24, 0x3, 0x2, 0x6c, 0x1, 0x0, 0x9, 0x6, 0x24, 0x4, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x16, 0x30, 0x16, 0x16, 0x48, 0x2, 0x2, 0x24, 0x30, 0x63, 0x0, 0x24, 0x9, 0x2, 0x60, 0x12, 0x18, 0x46, 0x1, 0x1, 0x6, 0x16, 0x11, 0x6c, 0x6, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x35c5, 0xff09, 0xb42, 0xc13, 0xe, 0xff, 0x6, 0xa1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x12, 0xc, 0x16, 0x22, 0x48, 0xcc542d34bc3b217d]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x16, 0x6, 0x18, 0x2, 0x5, 0x6c, 0x60, 0x12, 0x60, 0x36, 0x24, 0x24, 0x18, 0x4, 0x1b, 0x0, 0x1, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffb, 0x3, 0x0, 0x6, 0xd315, 0x6, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe1, 0x3, 0x7, 0x1, 0x7ff, 0x0, 0xe3c5]}}]}, @NL80211_BAND_60GHZ={0xf4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x4}, {0x5, 0x4}, {0x2, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0xa}, {0x7, 0x8}, {0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x2, 0x4}, {0x7, 0x9}, {0x4, 0x6}, {0x4, 0x1}, {0x3, 0xa}, {0x7, 0x1}, {0x5, 0x4}, {0x6, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x7, 0x8}, {0x3, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x6}, {0x2, 0x8}, {0x7, 0x9}, {0x4, 0x9}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x47, 0x1, 0xc, 0x4, 0x6, 0x1b, 0x18, 0x1, 0xc, 0x6, 0x5, 0x2, 0x24, 0x60, 0x2, 0x4, 0x48, 0x1, 0x3, 0x6c, 0x12, 0x3, 0x1, 0x5, 0x1, 0x5, 0x60, 0x1, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x5}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0x1}, {0x7, 0xa}, {0x5, 0x8}, {0x1, 0x9}, {0x2, 0x3}, {0x3, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x4, 0xa}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0x8}, {0x5}, {0x7, 0x8}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x9}, {0x3, 0x8}, {0x4, 0x7}, {0x0, 0x4}, {0x6}, {0x0, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {}, {0x6, 0x1}, {0x6, 0x5}, {0x4}, {0x7, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0xa}, {0x7, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0x3}, {0x7, 0x4}, {0x0, 0x2}, {0x7, 0x7}, {0x4}, {0x3, 0x7}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x40, 0x60, 0x2, 0x24, 0x24, 0x6c, 0x4, 0xb, 0x1, 0xc, 0x0, 0x10, 0x1, 0x2, 0x16, 0x2, 0xc, 0xb, 0x1, 0xc, 0xb, 0xb, 0xb, 0x0, 0x0, 0xb, 0x36, 0x0, 0x9, 0xd5a0d1b2c433847c, 0x3, 0x2]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x0, 0x60, 0xc, 0x4, 0xc, 0x32, 0x3, 0x12, 0x0, 0xc, 0x32, 0x16, 0x4, 0x1, 0x18, 0xb, 0xc, 0x1, 0x3c, 0x4, 0xc, 0x48, 0x3, 0x1b, 0x36]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x1b, 0x5, 0x6, 0x66, 0x18, 0x5, 0x2, 0x1b, 0x0, 0x1, 0x24, 0x16, 0x36, 0x4, 0x12, 0x0, 0x6c, 0x48, 0x30, 0xc, 0xb, 0x9945b7c6d20780ce, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4b2b, 0x8, 0x8, 0x3, 0x1, 0x5, 0x5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x48, 0x60, 0x9, 0x5, 0x6, 0x5, 0x60, 0xab4ea965c1b04428, 0x1c, 0x36, 0x3, 0x4, 0x0, 0x36, 0x5, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x10}, 0x800) 2.243007058s ago: executing program 3 (id=10103): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000040)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0xa5d9}, 0x8) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r3, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) accept4(r3, 0x0, 0x0, 0x80800) r6 = socket$pppoe(0x18, 0x1, 0x0) getpeername(r6, 0x0, &(0x7f0000004b40)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000009480)={0x0, 0x0, &(0x7f0000009440)={&(0x7f00000090c0)={0x11c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@measure_req={0x26, 0x100, {0x7f, 0x81, 0x8, "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"}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100029bd7000fedbdf252c00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900046e9f4a410be9ad2e1400000068000000d31b6c6373167139d66fdd7de535bbf9770be6c8148ffdcd5e3ef464319f81d8a0a0e052d68a65ad0aec8104cb4ae5cf069edf9be4d7bbe8714644d83b8c14385485b9eea4a3f0320763797c1adee9c0ba3846ac638ab522f2efb02d7ad2d0b209f44de8dcebb4dacd60d3297137d5c6830de203e0c56e13fd863212460ed35fad2968233a25afc4bed03f463f8cb2526d5353b54c7595663cf7501bd52217a7e89131b0be541a6153fe9deaef7b9727a6a3bb5df83f658c5485965bfd1ef29effcfa8738b8bb5b41ec22df4c544005bdda94da9af038239a6ba15"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r0, 0x84, 0x82, &(0x7f0000000040)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0xa5d9}, 0x8) (async) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) (async) listen(r3, 0x5) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r4, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) (async) accept4(r3, 0x0, 0x0, 0x80800) (async) socket$pppoe(0x18, 0x1, 0x0) (async) getpeername(r6, 0x0, &(0x7f0000004b40)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000009080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000009480)={0x0, 0x0, &(0x7f0000009440)={&(0x7f00000090c0)={0x11c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@measure_req={0x26, 0x100, {0x7f, 0x81, 0x8, "1077b9f75026fd410dbae0c7f05525d518e4d20e6ecd352b56f52146f20ebd338e1d3c49b12abc21b1c07899001e2836a47d2ea4cb2aa0a5a8993f3fcadf8ea1ddede34b72b20b3625394473bbe49822eb16e612816cfc651ea140ed3c4b8039b21a61149ef060a333f93cb2d0d3f87f9b107a1ccb0e3b0c9dfc39d0e779efd0fbf98b6275b1b6228620845eb452500bbaaae3b41c766e393396cfa8ee13d1bb05529a82d440f8d60ad88a095c52a9c412d338eae1a5aeba2e7f540489db61940b3d25c3acaa7ea9175ecfbf03a8af6da5c0290bdfbdc01f45a0230cf67fa188f613bb4cf71b5a41af5517446a6c654ccb73d5cad198ccdf1d43c54acc"}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100029bd7000fedbdf252c00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900046e9f4a410be9ad2e1400000068000000d31b6c6373167139d66fdd7de535bbf9770be6c8148ffdcd5e3ef464319f81d8a0a0e052d68a65ad0aec8104cb4ae5cf069edf9be4d7bbe8714644d83b8c14385485b9eea4a3f0320763797c1adee9c0ba3846ac638ab522f2efb02d7ad2d0b209f44de8dcebb4dacd60d3297137d5c6830de203e0c56e13fd863212460ed35fad2968233a25afc4bed03f463f8cb2526d5353b54c7595663cf7501bd52217a7e89131b0be541a6153fe9deaef7b9727a6a3bb5df83f658c5485965bfd1ef29effcfa8738b8bb5b41ec22df4c544005bdda94da9af038239a6ba15"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) 2.238871826s ago: executing program 1 (id=10104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0xa}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20045090}, 0x20000880) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x25dfdbff, {0x2, 0x80, 0x80, 0x1, 0xfd, 0x1, 0xc8, 0xb, 0x600}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000380)={0x48, 0x2d, 0x2, 0xa, 0x3fffff, 0x2c}, 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x3a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xc) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r10, @ANYBLOB="010002fffffffdffffff1d08000008000300", @ANYRES32=r4, @ANYBLOB="dc002f800c000200000000000000000008000100"], 0xf8}}, 0x0) 2.104931103s ago: executing program 4 (id=10105): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x1, 0x100, 0x100, 0x6, 0x0, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000780)={0x50, 0x12, 0x10, 0x70bd27, 0x25dfdbff, {0x1e, 0x50, 0x1, 0x1, {0x4e24, 0x4e24, [0x7ff, 0x101, 0x80000001, 0x8], [0x1, 0x6, 0x400, 0x9], 0x0, [0x2, 0x10]}, 0x6, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x0, 0x1}, 0x20) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000340)=0x96, &(0x7f0000000380)=0x1) sendmsg$inet6(r6, &(0x7f0000002a80)={&(0x7f0000000040)={0xa, 0x4e21, 0x1000, @mcast2, 0x9}, 0x1c, 0x0}, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x800000003, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000000000e5ffffff00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) 1.955767931s ago: executing program 5 (id=10106): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xed}, [@ringbuf_query, @ringbuf_query, @ldst={0x1, 0x0, 0x4, 0x3, 0x3, 0x6, 0x8}, @call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0xea, &(0x7f00000001c0)=""/234, 0x41100, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xd, 0x40, 0xffff}, 0x10, 0x3037d, 0xffffffffffffffff, 0x7, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x4, 0xd, 0x5}, {0x1, 0x3, 0x7, 0x2}, {0x2, 0x5, 0x200, 0x2}, {0x0, 0x4, 0x7, 0xc}, {0x5, 0x5, 0x7, 0x9}, {0x5, 0x1, 0x7, 0x4}, {0x5, 0x3, 0xe, 0x4}], 0x10, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'vlan0\x00'}) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'vlan0\x00'}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x4044010}, 0x4000000) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) write$cgroup_int(r3, 0x0, 0x0) (async) write$cgroup_int(r3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x9c, &(0x7f0000000940)=[{}, {}], 0x10, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b80)={r2, r3, 0x17, 0x0, @val=@target_btf_id=r4}, 0x14) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) (async) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x1, 0x4, 0x53290, r0, 0x3, '\x00', 0x0, r5, 0x1, 0x5, 0x2, 0x800000007, @void, @value, @value=r1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 1.887153017s ago: executing program 3 (id=10107): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000210001002dbd700000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000040000000000002000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e800110000000000000000000000000000000000ffffffff000000000000000000000000ff010000000000000000000000000001fe800000000000000000000000000020000000000000000000000a0000000000000000000000000000000000ffffffff0000000000000000000000007f00000100000000000000000000ac14141a00000000000000000000000000000000000000000a0000"], 0x138}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0xf9}, 0x92f5e}, 0x6d) (async, rerun: 32) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe8b}, {0x2, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) 1.605114907s ago: executing program 4 (id=10108): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)=""/251, 0xfb}], 0x1}, 0x1f00) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.523869762s ago: executing program 5 (id=10109): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x2164, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000020000000000000000000000850000008700000018deffff1f20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000fbf7551e4569cf370aa611a39338b61a66521a9ef1b6ec84fa57ec23db35d3e5"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0], 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) epoll_pwait(r4, &(0x7f0000001800)=[{}], 0x1, 0xa52, 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000040)=0xfffffffe) (async, rerun: 32) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xfff4, 0x50}, {0x2, 0xffff}}, [@TCA_RATE={0xfffffffffffffeca, 0x5, {0xc, 0x3}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0xffffffa6, 0x1, {0xf, 0x2, 0x7, 0x4, 0x0, 0x1ff, 0x49b8}}, {0x4}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback=r4, 0x9, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r6, r8, 0x25, 0x10, @val=@netkit={@void, @value, @void, @void, r9}}, 0x1c) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) (async, rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r11, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x3}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYBLOB="0f0000002c20000000000000", @ANYRES8=r6, @ANYRESHEX=r3, @ANYRES32=r6], 0x20) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.508542331s ago: executing program 3 (id=10110): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='A', 0x1}], 0x1}}], 0x1, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000440)="d700a8a9fff647b6d350018d435800454bdd0958a6bb260f186f53f041e2f8c8076ed13bbed92211a219916a", 0x2c}], 0x1) shutdown(r3, 0x1) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuacct.usage_user\x00', 0x7a05, 0x1700) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaadad1e048716e08004500001c030000000011907800002000089078747887715f5a170000d5ae0ffdd88d873f3f189a86f3ab513d811789e5e44d91f4499013f9786b06c127fab39b7215fe76a33b49f6b15411563a2189d21a942fb72f328215b399e2563b0c33f29c7e2a067ee952e4639ff585adda53d27fc7778fc1b5f01c9d392e3111a1464db2338543abd1000000000000000000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000"], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0067ee56dcd65f9941000000", @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="080005000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022bbd7000fbdbdf255c00000008000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008040) 1.031069498s ago: executing program 5 (id=10111): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4101, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x10000000}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000100000000000"], 0x48}}, 0x410) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x1, 0x0, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x3, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x20000090) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000a0000040900010073797a310000000038000480340001800c0001007061796c6f616400240002804f080004400000003708000240000000020900020073797a3200000000070007400b8f6300140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000180001002abd7000fcdbdf250a800000ff02fd", @ANYRES32=r10], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c6bb69a510}, 0x4000) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f00000002c0)=r11, 0x4) 937.977567ms ago: executing program 1 (id=10112): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000400), &(0x7f0000000300)=r6}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x25, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x8, 0x1, 0x0, 0x7e0, 0xffffffff}, @jmp={0x5, 0x1, 0xc, 0xb, 0x7, 0x6, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @exit, @jmp={0x5, 0x1, 0xc, 0x8, 0xa, 0xfffffffffffffff8, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x38, &(0x7f00000002c0)=""/56, 0x41100, 0x8, '\x00', r0, 0x0, r7, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0x28a, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[r2, r1, r2, r2, r2, 0x1, r1, r2], &(0x7f0000000400)=[{0x0, 0x5, 0x5, 0x2}, {0x1, 0x1, 0xc, 0x5}, {0x1, 0x3, 0xf, 0xa}, {0x1, 0x2, 0xd, 0xa}, {0x4, 0x5, 0x9, 0x5}], 0x10, 0x3}, 0x94) 623.327654ms ago: executing program 5 (id=10113): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r2, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="230000000800000002000000ffff000001"], 0x48) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100017"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20048850) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001900010000000002000000008010"], 0x48}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000100)={0x0, 0xfffffffffffffd0a, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r6, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x8c, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000061e8a556c6d59ca56a3ab6411914d30b6652", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4) 567.625474ms ago: executing program 1 (id=10114): ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f00000010c0)=0x7) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e25, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013", @ANYRES32=r1], 0xc8}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x9, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000001040)) connect$rxrpc(r0, &(0x7f0000001100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xaa4f, @empty, 0x80000}}, 0x24) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001180)=@generic={&(0x7f0000001140)='./file0\x00', 0x0, 0x8}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0xfffffffd, 0xd, 0x0, 0x4}, 0x10, 0x0, r3}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(r7, &(0x7f00000051c0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000050c0)=[{&(0x7f0000000340)="67d628c20f6a631cc7", 0x9}], 0x1}}], 0x1, 0x4000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff6, 0xfff1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x34008098) connect$can_j1939(0xffffffffffffffff, &(0x7f0000001000)={0x1d, r9, 0x0, {0x2, 0xf0, 0x4}, 0xfd}, 0x18) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000380)="b9ff03310644268cb89614e886dd6f8ec0a5fa7a80339e916b28fea3fc5c6afe0189acc82c8112eb153b3415124ef9ab1d0dd98b72de", 0x0, 0xfffbffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 420.112108ms ago: executing program 3 (id=10115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x800}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf9, 0x2, 0xa, 0x1000, 0xff, 0x4}, {0x5, 0x1, 0x2, 0x1, 0x101}, 0xffff, 0x3, 0x11fb}}, @TCA_TBF_BURST={0x8, 0x6, 0xfffffffc}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x80800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010df2500000000", @ANYRES32=0x0, @ANYBLOB="17200000d4110000240012800e000100697036677265746170000000100002800400120008000d0009000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000001000100811208000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 279.436093ms ago: executing program 4 (id=10116): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x20, 0x41, 0x107, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x2d}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00800018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa10000000000000701000000fefdffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)={@remote, @broadcast, 0x0}, &(0x7f0000000080)=0xc) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='}/#\x00', 0x400800, &(0x7f0000000100)={@align=0xfffffffffffffeff, {0xf, 0x149, 0x4, 0x3d1a}}, 0x80000001, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xe9f}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x1fc, 0xaf0, 0x3, 0x8080, 0x1, 0x3, '\x00', r2, r3, 0x4, 0x2, 0x2, 0x0, @value=r4}, 0x50) 270.407976ms ago: executing program 1 (id=10117): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r1, @ANYRESHEX], 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x40800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000001280)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x108, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4d73}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000240), &(0x7f0000000300)=@udp6=r5, 0x1}, 0x20) socketpair$unix(0x1, 0x3853bb4259650239, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r6, &(0x7f0000000280), &(0x7f0000000200)=0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x670, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x31}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = accept4(r0, 0x0, 0x0, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=@newqdisc={0x48, 0x24, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xfff0, 0x6}, {0x8, 0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff81, 0xb, 0x4}}}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) 188.270642ms ago: executing program 0 (id=10118): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getgid() getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0xfffffffffffffc68) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendmmsg$inet(r3, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x281}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0xc}], 0x4, &(0x7f0000000080), &(0x7f00000000c0)={[0x7a]}, 0xfffffffffffffdf1) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "50b82a61641e535b", "c358af365ff0b4eada5e3b2588d8319d", "02b12d1b", "b9e36b52a0b097d0"}, 0x28) sendto$inet6(r2, &(0x7f0000000000)="00002259aa70e3f459a647900192f61eec8cabe9972203985cb1fbf899b26e5e81d7b100dabc6a374362f15986269f341d18a95b48d1af2d15e77e30", 0x3c, 0x4884, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 0s ago: executing program 4 (id=10119): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xb}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x4, 0x100}}}}}}}}, 0x3a) kernel console output (not intermixed with test programs): unknown flags 1D [ 1226.606429][ T8115] tipc: Enabling of bearer rejected, failed to enable media [ 1226.680352][ T8116] syzkaller1: entered promiscuous mode [ 1226.699822][ T8116] syzkaller1: entered allmulticast mode [ 1226.741406][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8493'. [ 1228.397941][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8498'. [ 1228.454162][ T8140] tc_dump_action: action bad kind [ 1228.700610][ T8170] bond2: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 1228.737014][ T8170] bond2: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 1228.770632][ T8170] bond2: entered allmulticast mode [ 1228.781954][ T8170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1228.859202][ T8171] lo speed is unknown, defaulting to 1000 [ 1228.963302][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8508'. [ 1228.973550][ T8191] openvswitch: netlink: Flow actions attr not present in new flow. [ 1229.386813][ T8171] wlan0 speed is unknown, defaulting to 1000 [ 1229.403846][ T8171] lo speed is unknown, defaulting to 1000 [ 1232.646477][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8517'. [ 1232.794560][ T8232] netlink: 'syz.3.8518': attribute type 4 has an invalid length. [ 1232.819427][ T8232] netlink: 'syz.3.8518': attribute type 4 has an invalid length. [ 1232.863194][ T8236] xfrm1: entered allmulticast mode [ 1232.928827][ T8238] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8521'. [ 1232.941468][ T8238] netlink: 'syz.4.8521': attribute type 9 has an invalid length. [ 1232.953891][ T8238] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.8521'. [ 1232.979954][ T8240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1233.377429][ T8258] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1233.398954][ T8257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8527'. [ 1233.406109][ T8258] vlan3: entered allmulticast mode [ 1233.414027][ T8258] gretap0: entered allmulticast mode [ 1233.428944][ T8259] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1233.556870][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8529'. [ 1233.577725][ T8263] xt_hashlimit: size too large, truncated to 1048576 [ 1233.668007][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8529'. [ 1233.684235][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8529'. [ 1233.731098][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8529'. [ 1233.757454][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8529'. [ 1233.871510][ T8282] syzkaller0: entered promiscuous mode [ 1233.893583][ T8282] syzkaller0: entered allmulticast mode [ 1234.023137][ T8292] __nla_validate_parse: 2 callbacks suppressed [ 1234.023158][ T8292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8536'. [ 1234.070689][ T8290] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8535'. [ 1234.499950][ T8316] lo speed is unknown, defaulting to 1000 [ 1235.328322][ T8316] wlan0 speed is unknown, defaulting to 1000 [ 1235.342194][ T8316] lo speed is unknown, defaulting to 1000 [ 1235.380327][ T8320] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8543'. [ 1235.484035][ T8316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1235.640749][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8550'. [ 1235.816932][ T8353] erspan0: entered allmulticast mode [ 1236.227330][ T8376] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8557'. [ 1236.651397][ T8395] netlink: 'syz.3.8564': attribute type 1 has an invalid length. [ 1236.712523][ T8395] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1236.747187][ T8402] block nbd13: Unsupported socket: should be TCP or UNIX. [ 1236.789856][ T8400] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1236.802625][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8564'. [ 1237.140940][ T8418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8569'. [ 1237.217413][ T8423] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.8572'. [ 1237.228669][ T8423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8572'. [ 1237.241264][ T8423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8572'. [ 1237.811451][ T8465] wlan0: mtu greater than device maximum [ 1238.108480][ T8480] netlink: 'syz.4.8588': attribute type 1 has an invalid length. [ 1238.483847][ T8499] geneve2: entered promiscuous mode [ 1238.721462][ T8509] tipc: Enabled bearer , priority 26 [ 1239.831805][T12784] tipc: Node number set to 4281663488 [ 1240.460844][ T8551] netlink: 'syz.3.8602': attribute type 11 has an invalid length. [ 1240.634658][ T8555] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1240.653477][ T8556] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 1240.672588][ T8555] veth0: entered promiscuous mode [ 1240.684802][ T8554] veth0: left promiscuous mode [ 1240.814815][ T8565] __nla_validate_parse: 40 callbacks suppressed [ 1240.814837][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8606'. [ 1240.845639][ T8570] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8606'. [ 1240.954603][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8611'. [ 1241.190455][ T8593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8615'. [ 1241.390680][ T8606] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8620'. [ 1241.526312][ T8606] netlink: 'syz.3.8620': attribute type 24 has an invalid length. [ 1241.658789][ T8618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8623'. [ 1241.692108][ T8618] dvmrp0: left allmulticast mode [ 1241.743757][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8624'. [ 1241.754025][ T8623] sctp: [Deprecated]: syz.3.8624 (pid 8623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1241.754025][ T8623] Use struct sctp_sack_info instead [ 1241.940547][ T8635] netlink: 'syz.1.8630': attribute type 29 has an invalid length. [ 1241.950956][ T8635] netlink: 'syz.1.8630': attribute type 13 has an invalid length. [ 1241.966006][ T8636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8628'. [ 1241.977785][ T8635] netlink: 'syz.1.8630': attribute type 17 has an invalid length. [ 1241.988430][ T8626] syzkaller0: entered promiscuous mode [ 1241.996408][ T8626] syzkaller0: entered allmulticast mode [ 1242.017239][ T8635] gretap0: entered promiscuous mode [ 1242.029024][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8630'. [ 1242.135855][ T8635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.136906][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8632'. [ 1242.157110][ T8635] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.178420][ T8635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.237841][ T8635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1242.250425][ T8635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1242.267576][ T8635] veth1_vlan: left promiscuous mode [ 1242.275506][ T8635] veth0_vlan: left promiscuous mode [ 1242.286066][ T8635] veth0_vlan: entered promiscuous mode [ 1242.297235][ T8635] veth1_vlan: entered promiscuous mode [ 1242.307930][ T8635] veth1_macvtap: left promiscuous mode [ 1242.316101][ T8635] veth0_macvtap: left promiscuous mode [ 1242.326038][ T8635] veth0_macvtap: entered promiscuous mode [ 1242.352702][ T8635] veth1_macvtap: entered promiscuous mode [ 1242.365876][ T8635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1242.384642][ T8635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1242.404577][ T8635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1242.423430][ T8635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1242.441090][ T8635] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1242.918177][ T8662] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1242.927955][ T8662] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1242.937870][ T8662] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1243.049606][T12771] lo speed is unknown, defaulting to 1000 [ 1243.260558][ T8684] tipc: Enabled bearer , priority 0 [ 1243.268802][ T8684] syzkaller0: entered promiscuous mode [ 1243.275023][ T8684] syzkaller0: entered allmulticast mode [ 1243.317167][ T8684] tipc: Resetting bearer [ 1243.338152][ T8683] tipc: Resetting bearer [ 1243.370963][ T8683] tipc: Disabling bearer [ 1243.560239][ T8686] erspan0: entered promiscuous mode [ 1243.566942][ T8686] gretap0: entered promiscuous mode [ 1243.573388][ T8686] debugfs: 'hsr1' already exists in 'hsr' [ 1243.579423][ T8686] Cannot create hsr debugfs directory [ 1243.585177][ T8686] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1243.595614][ T8686] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1243.869206][ T8700] netlink: 'syz.4.8648': attribute type 11 has an invalid length. [ 1243.938178][ T8700] veth7: entered promiscuous mode [ 1243.948093][ T8700] veth7: entered allmulticast mode [ 1243.957629][ T8700] team0: Port device veth7 added [ 1245.119404][ T8752] lo speed is unknown, defaulting to 1000 [ 1245.630831][ T8752] wlan0 speed is unknown, defaulting to 1000 [ 1245.641327][ T8752] lo speed is unknown, defaulting to 1000 [ 1245.937237][ T8783] __nla_validate_parse: 11 callbacks suppressed [ 1245.937259][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8669'. [ 1246.251279][ T8785] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1246.303243][ T8785] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1246.319973][ T8785] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1246.634256][ T8794] pim6reg: entered allmulticast mode [ 1246.641231][ T8797] netlink: 'syz.3.8675': attribute type 4 has an invalid length. [ 1246.668607][ T8792] pim6reg: left allmulticast mode [ 1246.668791][ T8797] xt_hashlimit: size too large, truncated to 1048576 [ 1246.756310][ T8803] syzkaller1: entered promiscuous mode [ 1246.768462][ T8803] syzkaller1: entered allmulticast mode [ 1246.886510][ T8807] syzkaller0: entered promiscuous mode [ 1246.893003][ T8807] syzkaller0: entered allmulticast mode [ 1247.026115][ T8810] tipc: Enabled bearer , priority 0 [ 1247.068084][ T8813] netlink: 'syz.1.8677': attribute type 1 has an invalid length. [ 1247.098455][ T8810] syzkaller0: entered promiscuous mode [ 1247.104444][ T8810] syzkaller0: entered allmulticast mode [ 1247.110754][ T8810] tipc: Resetting bearer [ 1247.209608][ T8813] bond8: entered promiscuous mode [ 1247.215369][ T8813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1247.226499][ T8809] tipc: Resetting bearer [ 1247.549755][ T8832] openvswitch: netlink: Missing valid actions attribute. [ 1247.561419][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1247.682201][ T8832] block nbd13: server does not support multiple connections per device. [ 1247.704471][ T8832] block nbd13: shutting down sockets [ 1251.286775][ T8809] tipc: Disabling bearer [ 1251.490158][ T8842] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8683'. [ 1251.568213][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8687'. [ 1251.599401][ T8849] gretap1: entered allmulticast mode [ 1251.823538][ T8866] netlink: 'syz.0.8692': attribute type 1 has an invalid length. [ 1251.838921][ T8866] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8692'. [ 1251.937769][ T8872] sctp: [Deprecated]: syz.0.8694 (pid 8872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1251.937769][ T8872] Use struct sctp_sack_info instead [ 1251.962838][ T8876] sctp: [Deprecated]: syz.0.8694 (pid 8876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1251.962838][ T8876] Use struct sctp_sack_info instead [ 1252.323723][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8697'. [ 1252.985259][ T8895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8699'. [ 1253.087664][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8699'. [ 1253.179196][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8699'. [ 1253.192457][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8699'. [ 1253.202373][ T8891] netlink: 'syz.3.8699': attribute type 10 has an invalid length. [ 1253.215660][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8699'. [ 1253.282277][ T8891] geneve2: entered promiscuous mode [ 1253.300375][ T8891] geneve2: entered allmulticast mode [ 1253.357766][ T8906] syzkaller0: entered promiscuous mode [ 1253.377124][ T8906] syzkaller0: entered allmulticast mode [ 1253.609097][ T8925] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1253.645490][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8704'. [ 1253.690824][ T8928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1253.759636][ T8933] netlink: 'syz.2.8696': attribute type 49 has an invalid length. [ 1253.990959][ T8944] netlink: 'syz.1.8711': attribute type 21 has an invalid length. [ 1255.304142][ T8944] veth7: left allmulticast mode [ 1255.332922][ T8944] ip6tnl4: left allmulticast mode [ 1255.352959][ T8944] gretap0: left allmulticast mode [ 1255.364364][ T8944] macvlan4: left allmulticast mode [ 1255.390740][ T8944] macvtap1: left allmulticast mode [ 1255.417687][ T8944] geneve3: left promiscuous mode [ 1255.423795][ T8944] geneve3: left allmulticast mode [ 1255.436030][ T8944] xfrm1: left allmulticast mode [ 1255.460433][ T8944] bond8: left promiscuous mode [ 1255.484022][ T3898] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.506089][ T3898] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.627902][ T3898] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.650354][ T3898] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.376383][ T9014] netlink: 'syz.3.8727': attribute type 1 has an invalid length. [ 1256.417845][ T9014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1256.444359][ T9017] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 1256.556875][ T9026] __nla_validate_parse: 9 callbacks suppressed [ 1256.556896][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8729'. [ 1256.711424][ T9032] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8731'. [ 1256.790198][ T9038] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8731'. [ 1256.810339][ T9034] syzkaller0: entered promiscuous mode [ 1256.819453][ T9034] syzkaller0: entered allmulticast mode [ 1257.727103][ T9084] pim6reg1: entered promiscuous mode [ 1257.749343][ T9084] pim6reg1: entered allmulticast mode [ 1257.884188][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8741'. [ 1257.899980][ T9092] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1257.998218][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8741'. [ 1258.015358][ T9097] erspan0: left allmulticast mode [ 1258.044907][ T9097] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1258.062344][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8748'. [ 1258.118791][ T9097] veth7: left promiscuous mode [ 1258.135737][ T9097] veth7: left allmulticast mode [ 1258.280856][ T9117] batadv_slave_0: entered promiscuous mode [ 1258.439552][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8754'. [ 1258.448980][ T9123] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8754'. [ 1258.480246][ T9125] veth1_to_bond: entered promiscuous mode [ 1258.521772][ T9115] batadv_slave_0: left promiscuous mode [ 1258.535036][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8755'. [ 1258.558045][ T9125] veth1_to_bond (unregistering): left promiscuous mode [ 1258.799079][ T9138] netlink: 'syz.4.8759': attribute type 1 has an invalid length. [ 1258.879788][ T9142] geneve1: entered promiscuous mode [ 1258.906284][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8761'. [ 1259.082276][ T9160] tipc: Enabled bearer , priority 0 [ 1259.090561][ T9160] +: renamed from syzkaller0 [ 1259.101197][ T9160] tipc: Disabling bearer [ 1259.283813][ T9167] netlink: 'syz.0.8768': attribute type 13 has an invalid length. [ 1259.283813][ T9168] netlink: 'syz.0.8768': attribute type 13 has an invalid length. [ 1259.283843][ T9167] netlink: 'syz.0.8768': attribute type 17 has an invalid length. [ 1259.308822][ T9168] netlink: 'syz.0.8768': attribute type 17 has an invalid length. [ 1259.394329][ T9167] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1259.436263][ T9168] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1259.560773][ T9177] nbd: must specify at least one socket [ 1260.096174][ T9195] netlink: 'syz.3.8776': attribute type 1 has an invalid length. [ 1260.309804][ T9196] bond0 (unregistering): Released all slaves [ 1260.365518][ T9206] lo speed is unknown, defaulting to 1000 [ 1260.960588][ T9206] wlan0 speed is unknown, defaulting to 1000 [ 1260.974956][ T9206] lo speed is unknown, defaulting to 1000 [ 1261.680142][ T29] audit: type=1800 audit(1783091505.441:25): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8788" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2924 res=0 errno=0 [ 1261.939217][ T9246] netlink: 'syz.0.8792': attribute type 5 has an invalid length. [ 1262.382051][ T9264] __nla_validate_parse: 8 callbacks suppressed [ 1262.382074][ T9264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8797'. [ 1262.445897][ T9259] geneve2: entered promiscuous mode [ 1262.630706][ T9273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8799'. [ 1262.864649][ T9285] xt_nat: multiple ranges no longer supported [ 1263.608929][ T9323] pimreg: entered allmulticast mode [ 1263.667698][ T9320] pimreg: left allmulticast mode [ 1264.029557][ T9330] netlink: 1200 bytes leftover after parsing attributes in process `syz.4.8810'. [ 1264.047878][ T9330] netlink: 1200 bytes leftover after parsing attributes in process `syz.4.8810'. [ 1264.121583][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8808'. [ 1264.190411][ T9332] bond0: entered promiscuous mode [ 1264.206434][ T9332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.480006][ T9346] syzkaller0: entered promiscuous mode [ 1264.495730][ T9346] syzkaller0: entered allmulticast mode [ 1264.529420][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8814'. [ 1265.306666][ T9365] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1265.316660][ T9365] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1265.475055][ T9367] netlink: 'syz.2.8819': attribute type 13 has an invalid length. [ 1265.483400][ T9367] netlink: 'syz.2.8819': attribute type 17 has an invalid length. [ 1266.856366][ T9390] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8823'. [ 1269.313336][ T9367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.373518][ T9367] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1269.561168][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8826'. [ 1269.653240][ T9406] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8826'. [ 1269.700316][ T9413] vlan2: entered promiscuous mode [ 1269.743228][ T9404] lo speed is unknown, defaulting to 1000 [ 1269.855145][ T9402] syzkaller0: entered promiscuous mode [ 1269.860885][ T9402] syzkaller0: entered allmulticast mode [ 1269.926733][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8827'. [ 1269.940563][ T9420] netlink: 212 bytes leftover after parsing attributes in process `syz.2.8827'. [ 1269.952005][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8827'. [ 1270.156982][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8834'. [ 1270.305020][ T9404] wlan0 speed is unknown, defaulting to 1000 [ 1270.313955][ T9404] lo speed is unknown, defaulting to 1000 [ 1270.652381][ T9445] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8838'. [ 1270.684842][ T9448] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8838'. [ 1270.864525][ T9452] lo speed is unknown, defaulting to 1000 [ 1271.682554][ T9472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8839'. [ 1275.418551][ T9468] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1275.437221][ T9452] wlan0 speed is unknown, defaulting to 1000 [ 1275.492388][ T9473] bond6: entered allmulticast mode [ 1275.502255][ T9473] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1275.777739][ T9472] ÿ: entered promiscuous mode [ 1275.784165][ T9472] ÿ: entered allmulticast mode [ 1275.827899][ T9452] lo speed is unknown, defaulting to 1000 [ 1275.999966][ T9504] syzkaller0: entered promiscuous mode [ 1276.017555][ T9504] syzkaller0: entered allmulticast mode [ 1280.046326][ T9531] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8854'. [ 1280.234203][ T9541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8855'. [ 1280.254879][ T9541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8855'. [ 1280.739071][ T9560] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1280.794016][ T3898] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.812258][ T3898] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.829523][ T3898] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.847060][ T3898] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1281.243215][ T9585] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8862'. [ 1281.437594][ T9590] openvswitch: netlink: Missing valid actions attribute. [ 1281.455037][ T9590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1281.818018][ T9585] lo speed is unknown, defaulting to 1000 [ 1282.325341][ T9630] IPv6: Can't replace route, no match found [ 1282.567347][ T9646] xt_hashlimit: size too large, truncated to 1048576 [ 1282.598835][ T9648] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8876'. [ 1282.608514][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8876'. [ 1282.617734][ T9648] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8876'. [ 1282.640067][ T9648] netlink: 'syz.1.8876': attribute type 2 has an invalid length. [ 1282.654127][ T9648] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8876'. [ 1282.664333][ T9649] netlink: 'syz.1.8876': attribute type 7 has an invalid length. [ 1282.969535][ T9626] lo speed is unknown, defaulting to 1000 [ 1283.110021][ T9660] xt_bpf: check failed: parse error [ 1283.225934][ T9585] wlan0 speed is unknown, defaulting to 1000 [ 1283.356801][ T9626] wlan0 speed is unknown, defaulting to 1000 [ 1283.372428][ T9626] lo speed is unknown, defaulting to 1000 [ 1283.392321][ T9670] syzkaller1: entered promiscuous mode [ 1283.398018][ T9670] syzkaller1: entered allmulticast mode [ 1283.427293][ T9585] lo speed is unknown, defaulting to 1000 [ 1283.452996][ T9672] netlink: 'syz.4.8884': attribute type 21 has an invalid length. [ 1283.557481][ T9676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8886'. [ 1283.613101][ T9678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8887'. [ 1283.648857][ T9680] netlink: 'syz.3.8888': attribute type 1 has an invalid length. [ 1283.912457][ T9680] bond6: entered promiscuous mode [ 1283.931883][ T9680] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1284.259203][ T9680] bridge3: entered promiscuous mode [ 1284.284610][ T9680] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 1284.370622][ T9708] tipc: New replicast peer: 255.255.255.255 [ 1284.383490][ T9708] tipc: Enabled bearer , priority 26 [ 1284.589095][ T9718] netlink: 'syz.1.8893': attribute type 7 has an invalid length. [ 1284.853719][ T9737] netlink: 'syz.3.8897': attribute type 1 has an invalid length. [ 1284.884911][ T9737] netlink: 'syz.3.8897': attribute type 1 has an invalid length. [ 1284.948185][ T9737] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1285.106857][ T9737] veth9: entered allmulticast mode [ 1285.127757][ T9747] __nla_validate_parse: 3 callbacks suppressed [ 1285.127780][ T9747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8897'. [ 1285.166577][ T9751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8898'. [ 1285.178260][ T9737] bond7: (slave veth9): Enslaving as an active interface with a down link [ 1285.206508][ T9752] bond7: entered promiscuous mode [ 1285.218773][ T9752] bond7: entered allmulticast mode [ 1285.437776][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1285.458796][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1285.469001][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1285.477734][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1285.485945][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1285.567573][ T9760] netlink: 'syz.1.8902': attribute type 1 has an invalid length. [ 1285.599243][ T9760] netlink: 'syz.1.8902': attribute type 1 has an invalid length. [ 1285.742180][T12778] tipc: Node number set to 763660295 [ 1286.465527][ T9800] bridge10: entered promiscuous mode [ 1286.481095][ T9800] bridge10: entered allmulticast mode [ 1286.509202][ T9800] team0: Port device bridge10 added [ 1286.528314][ T9803] bridge0: port 1(team0) entered blocking state [ 1286.567030][ T9803] bridge0: port 1(team0) entered disabled state [ 1286.594808][ T9803] team0: entered allmulticast mode [ 1286.607942][ T9803] team0: entered promiscuous mode [ 1286.624576][ T9756] lo speed is unknown, defaulting to 1000 [ 1286.935561][ T9756] wlan0 speed is unknown, defaulting to 1000 [ 1286.944121][ T9756] lo speed is unknown, defaulting to 1000 [ 1287.277269][ T9756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.285252][ T9756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.292754][ T9756] bridge_slave_0: entered allmulticast mode [ 1287.300700][ T9756] bridge_slave_0: entered promiscuous mode [ 1287.311194][ T9756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.318740][ T9756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.328061][ T9756] bridge_slave_1: entered allmulticast mode [ 1287.336297][ T9756] bridge_slave_1: entered promiscuous mode [ 1287.368475][ T9756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.381126][ T9756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.415244][ T9756] team0: Port device team_slave_0 added [ 1287.424010][ T9756] team0: Port device team_slave_1 added [ 1287.455002][ T9756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.462132][ T9756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.488780][ T9756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.502174][ T9756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.509181][ T9756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.535477][ T5642] Bluetooth: hci0: command tx timeout [ 1287.541092][ T9756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.596396][ T9756] hsr_slave_0: entered promiscuous mode [ 1287.603679][ T9756] hsr_slave_1: entered promiscuous mode [ 1287.610064][ T9756] debugfs: 'hsr0' already exists in 'hsr' [ 1287.618399][ T9756] Cannot create hsr debugfs directory [ 1289.091099][ T9788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1289.164566][ T9756] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1289.214046][ T9756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1289.232705][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8918'. [ 1289.243136][ T9756] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1289.251080][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8918'. [ 1289.292557][ T9756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1289.301228][ T9756] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1289.354057][ T9756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1289.373171][ T9756] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1289.387880][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8920'. [ 1289.412636][ T9756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1289.437474][ T9850] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1289.479169][ T9858] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1289.605964][ T5642] Bluetooth: hci0: command tx timeout [ 1289.633281][ T9847] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1289.719291][ T9865] syzkaller1: entered promiscuous mode [ 1289.742282][ T9865] syzkaller1: entered allmulticast mode [ 1289.807147][ T9847] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1290.046586][ T9847] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1290.114326][ T9756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.143003][ T9756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.157883][T29869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.165139][T29869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.198623][T29869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.205885][T29869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.225050][ T9886] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8928'. [ 1290.241495][ T9886] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8928'. [ 1290.254686][ T9888] netlink: 'syz.0.8929': attribute type 3 has an invalid length. [ 1290.268752][ T9888] netlink: 'syz.0.8929': attribute type 1 has an invalid length. [ 1290.336046][ T9847] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1290.374105][ T9891] netlink: 'syz.0.8929': attribute type 1 has an invalid length. [ 1290.603017][T29889] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1290.690263][ T3885] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1290.770840][T29889] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1290.815521][T29889] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1290.907225][ T9914] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8935'. [ 1291.024521][ T9919] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8938'. [ 1291.270385][ T9927] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1291.314163][ T9927] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1291.364515][ T9756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1291.681805][ T5642] Bluetooth: hci0: command tx timeout [ 1291.897394][ T9756] veth0_vlan: entered promiscuous mode [ 1291.930837][ T9756] veth1_vlan: entered promiscuous mode [ 1291.975077][ T9756] veth0_macvtap: entered promiscuous mode [ 1292.007348][ T9756] veth1_macvtap: entered promiscuous mode [ 1292.074612][ T9756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1292.123783][ T9756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.147725][ T3898] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.170505][ T3898] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.189676][ T3898] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.233843][ T3898] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.555725][ T3898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.601379][ T3898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.950412][T29889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.982360][T29889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.658011][T10006] syzkaller0: entered promiscuous mode [ 1293.679144][T10006] syzkaller0: entered allmulticast mode [ 1293.762093][ T5642] Bluetooth: hci0: command tx timeout [ 1293.958245][T10016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1294.261408][T10030] netlink: 'syz.4.8957': attribute type 2 has an invalid length. [ 1294.310978][T10030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8957'. [ 1295.127735][T10054] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8964'. [ 1295.187601][T10032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1295.206997][T10057] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8966'. [ 1295.510767][T10071] sctp: [Deprecated]: syz.1.8970 (pid 10071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1295.510767][T10071] Use struct sctp_sack_info instead [ 1295.599081][T10071] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8970'. [ 1295.876909][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1295.894609][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1295.904650][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1295.916153][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1295.926103][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1296.327099][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8975'. [ 1296.379655][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8975'. [ 1297.241082][T10146] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1297.253546][T10082] lo speed is unknown, defaulting to 1000 [ 1297.306019][T10146] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1297.313061][T10146] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1297.320046][T10146] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1297.327166][T10146] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1297.334157][T10146] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1297.341426][T10146] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1297.348438][T10146] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1297.355430][T10146] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1297.447109][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8982'. [ 1297.479665][T10150] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1297.497122][T10156] netlink: 348 bytes leftover after parsing attributes in process `syz.3.8982'. [ 1297.507063][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8982'. [ 1297.542803][T10156] netlink: 348 bytes leftover after parsing attributes in process `syz.3.8982'. [ 1297.569416][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8982'. [ 1298.016501][ T5642] Bluetooth: hci2: command tx timeout [ 1298.206735][T10082] wlan0 speed is unknown, defaulting to 1000 [ 1298.236627][T10082] lo speed is unknown, defaulting to 1000 [ 1298.586341][T10185] nbd: must specify an index to disconnect [ 1298.770766][T10175] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.804303][T10187] syzkaller1: entered promiscuous mode [ 1298.810597][T10187] syzkaller1: entered allmulticast mode [ 1298.878681][T10191] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8989'. [ 1299.090976][T10175] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.110735][T10203] net_ratelimit: 1914 callbacks suppressed [ 1299.110759][T10203] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1299.125128][T10203] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1299.177486][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8993'. [ 1299.287194][T10203] hsr_slave_0: left promiscuous mode [ 1299.294798][T10203] hsr_slave_1: left promiscuous mode [ 1299.379309][T10175] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.529725][T10175] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.557985][T10226] netlink: 'syz.1.8995': attribute type 2 has an invalid length. [ 1299.594948][T10226] netlink: 'syz.1.8995': attribute type 2 has an invalid length. [ 1299.610614][T10218] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1299.682652][T10082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.690177][T10082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.698200][T10082] bridge_slave_0: entered allmulticast mode [ 1299.706912][T10082] bridge_slave_0: entered promiscuous mode [ 1299.721156][ T3891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.729902][T10082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.749413][ T3891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.757316][T10082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.769416][T10218] xt_CT: No such helper "netbios-ns" [ 1299.780787][T10082] bridge_slave_1: entered allmulticast mode [ 1299.789415][T10082] bridge_slave_1: entered promiscuous mode [ 1299.817627][T10198] lo speed is unknown, defaulting to 1000 [ 1299.887794][T10082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.956869][T10082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.053576][T10082] team0: Port device team_slave_0 added [ 1300.087698][ T5642] Bluetooth: hci2: command tx timeout [ 1300.095993][T10082] team0: Port device team_slave_1 added [ 1300.276124][T15473] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.288650][T10082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.296871][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.331449][T10082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.400454][T10082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.407646][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.438778][T10082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.450415][T29889] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.503476][T29869] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.678877][T29889] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.710008][T10082] hsr_slave_0: entered promiscuous mode [ 1300.729117][T10082] hsr_slave_1: entered promiscuous mode [ 1300.748124][T10082] debugfs: 'hsr0' already exists in 'hsr' [ 1300.776515][T10082] Cannot create hsr debugfs directory [ 1301.092977][T10261] __nla_validate_parse: 2 callbacks suppressed [ 1301.092998][T10261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9006'. [ 1301.177605][T10265] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9008'. [ 1301.256830][T10265] netlink: 'syz.1.9008': attribute type 4 has an invalid length. [ 1301.299111][T10082] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.309647][T10268] netlink: 'syz.1.9008': attribute type 4 has an invalid length. [ 1301.322915][T10082] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.348527][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9009'. [ 1301.463175][T10082] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.491958][T10082] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.590577][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9010'. [ 1301.612773][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9010'. [ 1301.660921][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9013'. [ 1301.670360][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9013'. [ 1301.818070][T10082] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.840222][T10082] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.966608][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9018'. [ 1302.030016][T10297] netlink: 'syz.4.9019': attribute type 1 has an invalid length. [ 1302.053078][T10082] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1302.076030][T10082] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.092176][T15473] wlan1: Trigger new scan to find an IBSS to join [ 1302.142532][T10303] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9021'. [ 1302.163633][ T5642] Bluetooth: hci2: command tx timeout [ 1302.172273][T10301] IPVS: Error connecting to the multicast addr [ 1302.183879][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9022'. [ 1302.274227][T10301] IPVS: Error connecting to the multicast addr [ 1302.630711][T10325] netlink: 'syz.3.9028': attribute type 9 has an invalid length. [ 1302.853956][T10329] Unsupported ieee802154 address type: 0 [ 1302.874476][T10334] Unsupported ieee802154 address type: 0 [ 1302.879822][T10082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1303.207202][T10082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1303.244676][T10341] netlink: 'syz.3.9033': attribute type 28 has an invalid length. [ 1303.254130][T10082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1303.375870][T10082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1303.384018][T10349] wg0: Caught tx_queue_len zero misconfig [ 1303.393135][T10082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1303.549743][T10082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1303.586194][T10082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1303.622751][T10082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1303.737089][T10358] geneve1: left promiscuous mode [ 1303.861388][ T3891] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.879186][ T3891] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.893260][ T3891] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.902155][ T3891] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.264433][ T5642] Bluetooth: hci2: command tx timeout [ 1304.369130][T10082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.410410][T10082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.465993][T10198] wlan0 speed is unknown, defaulting to 1000 [ 1304.670219][T10393] geneve2: entered promiscuous mode [ 1304.772353][T10395] syzkaller1: entered promiscuous mode [ 1304.778535][T10395] syzkaller1: entered allmulticast mode [ 1304.859665][T10198] lo speed is unknown, defaulting to 1000 [ 1304.919080][ T3891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.926423][ T3891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.937542][ T3891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.944807][ T3891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.037846][T10205] lo speed is unknown, defaulting to 1000 [ 1305.150808][T10082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1306.519269][T10422] tipc: Started in network mode [ 1306.526525][T10422] tipc: Node identity ac14140f, cluster identity 4711 [ 1306.536595][T10422] tipc: New replicast peer: 255.255.255.255 [ 1306.545122][T10422] tipc: Enabled bearer , priority 26 [ 1306.560370][T10425] 8021q: VLANs not supported on lo [ 1307.049205][T29869] wlan1: Trigger new scan to find an IBSS to join [ 1307.265681][T10448] __nla_validate_parse: 4 callbacks suppressed [ 1307.265705][T10448] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9050'. [ 1307.598625][T10205] wlan0 speed is unknown, defaulting to 1000 [ 1307.598644][T12776] tipc: Node number set to 2886997007 [ 1307.763127][T10205] lo speed is unknown, defaulting to 1000 [ 1307.804612][T10082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.888339][T10082] veth0_vlan: entered promiscuous mode [ 1307.920409][T10082] veth1_vlan: entered promiscuous mode [ 1307.986338][ T3885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.004747][T10082] veth0_macvtap: entered promiscuous mode [ 1308.030638][T10082] veth1_macvtap: entered promiscuous mode [ 1308.071272][T10082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.088406][T10082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1308.191406][ T3885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.204561][ T3885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.249518][ T3885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.281707][ T3885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.420626][T10465] openvswitch: netlink: Message has 8 unknown bytes. [ 1308.443364][T10465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1308.587740][T10370] Set syz1 is full, maxelem 65536 reached [ 1308.692305][T10472] xt_hashlimit: size too large, truncated to 1048576 [ 1308.717614][T10467] Bluetooth: MGMT ver 1.23 [ 1308.732971][T10472] xt_hashlimit: invalid interval [ 1308.778754][T10463] bond10: entered promiscuous mode [ 1308.787743][T10463] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1308.859221][T10467] syzkaller0: entered promiscuous mode [ 1308.859736][T29889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.873474][T29889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.895992][T10467] syzkaller0: entered allmulticast mode [ 1309.002623][ T3891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.010957][ T3891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.932342][T10493] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 1310.109227][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1310.126883][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1310.140998][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1310.149771][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1310.162734][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1310.594920][T10509] netlink: 'syz.4.9063': attribute type 8 has an invalid length. [ 1310.604266][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9063'. [ 1310.645527][T10509] bond0: entered promiscuous mode [ 1310.672321][T10509] bond_slave_0: entered promiscuous mode [ 1310.678438][T10509] bond_slave_1: entered promiscuous mode [ 1310.728053][T10509] gretap0: entered promiscuous mode [ 1310.738942][T10509] dummy0: entered promiscuous mode [ 1310.755579][T10509] debugfs: 'hsr1' already exists in 'hsr' [ 1310.761382][T10509] Cannot create hsr debugfs directory [ 1310.778189][T10509] hsr1: entered promiscuous mode [ 1311.096552][T10495] lo speed is unknown, defaulting to 1000 [ 1311.201235][T10529] macsec1: entered promiscuous mode [ 1311.319333][T10540] batadv_slave_1: entered promiscuous mode [ 1311.327923][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9071'. [ 1311.345667][T10540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.394701][T10540] batadv_slave_1 (unregistering): left promiscuous mode [ 1311.408829][T10540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.498039][T10542] netlink: 'syz.4.9072': attribute type 83 has an invalid length. [ 1311.662807][T10544] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.9072'. [ 1311.757172][T10542] netlink: 136 bytes leftover after parsing attributes in process `syz.4.9072'. [ 1311.774687][T10542] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1312.024820][T10495] wlan0 speed is unknown, defaulting to 1000 [ 1312.033829][T10495] lo speed is unknown, defaulting to 1000 [ 1312.242234][ T5642] Bluetooth: hci1: command tx timeout [ 1312.294581][T10562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1312.747939][T10495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.755496][T10495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.762932][T10495] bridge_slave_0: entered allmulticast mode [ 1312.770948][T10495] bridge_slave_0: entered promiscuous mode [ 1312.779989][T10495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.787878][T10495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.796318][T10495] bridge_slave_1: entered allmulticast mode [ 1312.804485][T10495] bridge_slave_1: entered promiscuous mode [ 1312.865351][T10495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.889449][T10495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.020606][T10495] team0: Port device team_slave_0 added [ 1313.026627][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9082'. [ 1313.026627][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9082'. [ 1313.049446][T10495] team0: Port device team_slave_1 added [ 1313.119891][T10495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.128269][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.159314][T10495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.184148][T10584] vlan0: entered allmulticast mode [ 1313.189442][T10584] bridge1: entered allmulticast mode [ 1313.196326][T10588] bridge1: port 1(erspan0) entered blocking state [ 1313.205063][T10588] bridge1: port 1(erspan0) entered disabled state [ 1313.213883][T10588] erspan0: entered allmulticast mode [ 1313.222753][T10588] erspan0: entered promiscuous mode [ 1313.229295][T10588] bridge1: port 1(erspan0) entered blocking state [ 1313.235930][T10588] bridge1: port 1(erspan0) entered forwarding state [ 1313.273928][T10495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.293252][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.349111][T10495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.431155][T10595] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9085'. [ 1313.493116][T10596] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1313.502226][T10596] bridge2: entered allmulticast mode [ 1313.534758][T10495] hsr_slave_0: entered promiscuous mode [ 1313.552410][T10495] hsr_slave_1: entered promiscuous mode [ 1313.564721][T10495] debugfs: 'hsr0' already exists in 'hsr' [ 1313.581968][T10495] Cannot create hsr debugfs directory [ 1313.655035][T10599] IPv6: addrconf: prefix option has invalid lifetime [ 1313.705971][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9084'. [ 1313.957146][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9088'. [ 1314.128643][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9091'. [ 1314.326675][ T5642] Bluetooth: hci1: command tx timeout [ 1314.501562][T10623] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9093'. [ 1314.634495][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9094'. [ 1314.648963][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1314.662884][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1314.678624][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1314.696875][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1314.704977][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1314.945427][T10639] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1314.948516][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9095'. [ 1315.137538][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9095'. [ 1315.156878][T29879] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1315.168783][T29879] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1315.193514][T29879] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1315.246470][ T3885] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.201310][T29869] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1316.226675][T29869] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.402920][ T50] Bluetooth: hci1: command tx timeout [ 1316.497878][ T5288] veth0_vlan: left promiscuous mode [ 1316.608094][T27307] veth0_vlan: entered promiscuous mode [ 1316.763508][T10631] lo speed is unknown, defaulting to 1000 [ 1316.802445][ T50] Bluetooth: hci4: command tx timeout [ 1317.001505][T10699] xt_bpf: check failed: parse error [ 1317.188491][T10631] wlan0 speed is unknown, defaulting to 1000 [ 1317.195926][T10631] lo speed is unknown, defaulting to 1000 [ 1317.583171][T10631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.590533][T10631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.598123][T10631] bridge_slave_0: entered allmulticast mode [ 1317.607626][T10631] bridge_slave_0: entered promiscuous mode [ 1317.617006][T10631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.624525][T10631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.632219][T10631] bridge_slave_1: entered allmulticast mode [ 1317.640496][T10631] bridge_slave_1: entered promiscuous mode [ 1317.685999][T10631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.699958][T10631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.744803][T10631] team0: Port device team_slave_0 added [ 1317.753361][T10631] team0: Port device team_slave_1 added [ 1317.791046][T10631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.798342][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.825385][T10631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.838615][T10631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.847601][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.875893][T10631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.974028][T10631] hsr_slave_0: entered promiscuous mode [ 1317.980813][T10631] hsr_slave_1: entered promiscuous mode [ 1317.988472][T10631] debugfs: 'hsr0' already exists in 'hsr' [ 1317.994880][T10631] Cannot create hsr debugfs directory [ 1318.058053][T10717] __nla_validate_parse: 5 callbacks suppressed [ 1318.058074][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9111'. [ 1318.128181][T10717] netlink: 'syz.3.9111': attribute type 32 has an invalid length. [ 1318.482809][ T50] Bluetooth: hci1: command tx timeout [ 1318.628161][T10724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.635783][T10724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.724512][T10724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.771112][T10724] veth0_vlan: left promiscuous mode [ 1318.882390][ T50] Bluetooth: hci4: command tx timeout [ 1318.919659][T15473] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.929926][T15473] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.939604][T15473] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.951352][T15473] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.968027][T15473] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.977570][T15473] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.585606][T10690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1319.637172][T10495] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1319.736014][T10495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1319.763125][T10495] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1319.817530][T10495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1319.832213][T10631] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1319.851199][T10631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1319.870650][T10495] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1319.897659][T10495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1319.908451][T10737] netlink: 'syz.4.9113': attribute type 4 has an invalid length. [ 1319.931463][T10631] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1319.964068][T10631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1319.982746][T10631] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1320.000867][T10631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1320.019976][T10495] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1320.046201][T10495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1320.066603][T10631] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1320.103145][T10631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1320.140311][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9115'. [ 1320.158765][T10746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1320.216397][T10746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1320.768646][T10495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.805359][T10631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.875194][T10495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.924663][T10631] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.955684][T29869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.962976][T29869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.971091][ T50] Bluetooth: hci4: command tx timeout [ 1321.005247][T29869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.012522][T29869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.061118][T29869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.068412][T29869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.100886][ T3891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.108187][ T3891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.151516][T10798] tipc: Started in network mode [ 1321.161876][T10798] tipc: Node identity b291c67a41a5, cluster identity 4711 [ 1321.175356][T10798] tipc: Enabled bearer , priority 0 [ 1321.179643][T10810] netlink: 277 bytes leftover after parsing attributes in process `syz.0.9124'. [ 1321.375561][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9126'. [ 1321.477328][T10813] lo speed is unknown, defaulting to 1000 [ 1321.718685][T10790] tipc: Disabling bearer [ 1323.043027][ T50] Bluetooth: hci4: command tx timeout [ 1323.199034][T10631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.248118][T10495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.257618][T10813] wlan0 speed is unknown, defaulting to 1000 [ 1323.305904][T10813] lo speed is unknown, defaulting to 1000 [ 1323.375808][T10495] veth0_vlan: entered promiscuous mode [ 1323.548503][T10495] veth1_vlan: entered promiscuous mode [ 1323.664333][T10495] veth0_macvtap: entered promiscuous mode [ 1323.691269][T10495] veth1_macvtap: entered promiscuous mode [ 1323.747467][T10495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.779469][T10495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.819438][T15473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.839940][T15473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.868646][T15473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.911883][T15473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.174150][T10876] pimreg: tun_chr_ioctl cmd 2147767520 [ 1324.210791][T10876] pimreg: tun_chr_ioctl cmd 1074025677 [ 1324.236531][T10876] pimreg: linktype set to 518 [ 1324.301359][T29889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.316045][T29889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.497458][T15462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.518746][T15462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.534884][T10631] veth0_vlan: entered promiscuous mode [ 1324.558946][T10631] veth1_vlan: entered promiscuous mode [ 1324.607477][T10889] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1324.656413][T10631] veth0_macvtap: entered promiscuous mode [ 1324.675064][T10631] veth1_macvtap: entered promiscuous mode [ 1324.740928][T10631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.794161][T10631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.825185][T29889] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.848506][T10895] netlink: 'syz.1.9058': attribute type 1 has an invalid length. [ 1324.852333][T29889] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.879656][T10895] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9058'. [ 1324.910249][T29889] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.954071][T29889] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.981654][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9139'. [ 1325.317743][T15473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.356269][T15473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.472588][T29869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.497466][T29869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.589617][T10914] batadv_slave_0: entered promiscuous mode [ 1325.629825][T10914] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9142'. [ 1325.697026][T10923] syzkaller1: entered promiscuous mode [ 1325.720687][T10923] syzkaller1: entered allmulticast mode [ 1326.049209][T10913] batadv_slave_0: left promiscuous mode [ 1326.152905][T10931] xt_hashlimit: size too large, truncated to 1048576 [ 1326.406501][T10948] xt_l2tp: v2 sid > 0xffff: 262144 [ 1326.577452][T10953] sch_fq: defrate 4294967293 ignored. [ 1326.759027][T10956] sctp: [Deprecated]: syz.1.9154 (pid 10956) Use of int in max_burst socket option. [ 1326.759027][T10956] Use struct sctp_assoc_value instead [ 1326.862425][T10969] erspan0: entered promiscuous mode [ 1326.912865][T10972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1327.011889][T10977] xt_hashlimit: size too large, truncated to 1048576 [ 1327.069514][T10980] netlink: 'syz.4.9161': attribute type 13 has an invalid length. [ 1327.088069][T10982] netlink: 'syz.4.9161': attribute type 13 has an invalid length. [ 1327.093840][T10977] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1327.298099][T10991] IPv6: addrconf: prefix option has invalid lifetime [ 1327.373832][T10999] netlink: 'syz.4.9166': attribute type 1 has an invalid length. [ 1327.411967][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9165'. [ 1327.463768][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9165'. [ 1327.629164][T10962] erspan0: left promiscuous mode [ 1327.741561][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9171'. [ 1327.793819][T11015] netlink: 'syz.1.9172': attribute type 1 has an invalid length. [ 1327.970096][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9177'. [ 1327.980274][T11016] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1328.066099][T11016] bond2 (unregistering): Released all slaves [ 1328.222564][T11038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9178'. [ 1328.375072][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9178'. [ 1328.576296][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9183'. [ 1328.610742][T11061] sctp: [Deprecated]: syz.1.9185 (pid 11061) Use of int in max_burst socket option. [ 1328.610742][T11061] Use struct sctp_assoc_value instead [ 1328.739095][T11058] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1328.762133][T11058] bond1: option arp_ip_target: invalid value (0) [ 1329.247286][T11058] bond1 (unregistering): Released all slaves [ 1329.826730][T11089] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1329.920363][T11097] netlink: 'syz.1.9197': attribute type 1 has an invalid length. [ 1330.034269][T11102] __nla_validate_parse: 3 callbacks suppressed [ 1330.034289][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9198'. [ 1330.094903][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9198'. [ 1330.097930][T11108] netlink: 'syz.3.9195': attribute type 1 has an invalid length. [ 1330.164979][T11110] netlink: zone id is out of range [ 1330.170268][T11110] netlink: zone id is out of range [ 1330.177967][T11110] netlink: zone id is out of range [ 1330.187140][T11110] netlink: zone id is out of range [ 1330.193399][T11110] netlink: zone id is out of range [ 1330.198585][T11110] netlink: zone id is out of range [ 1330.205188][T11110] netlink: set zone limit has 8 unknown bytes [ 1330.366246][T11108] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1330.466139][T11116] bond8: (slave geneve3): making interface the new active one [ 1330.508924][T11116] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1330.560557][T11110] veth0: entered promiscuous mode [ 1330.650640][ T3891] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.707369][ T3891] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.745028][T11109] veth0: left promiscuous mode [ 1330.766479][ T3891] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.964679][T11128] lo speed is unknown, defaulting to 1000 [ 1331.493908][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9210'. [ 1331.732267][T11160] ip6erspan0: entered allmulticast mode [ 1331.938782][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9211'. [ 1332.191493][T11182] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9216'. [ 1332.257269][T11128] wlan0 speed is unknown, defaulting to 1000 [ 1332.266251][T11184] netlink: 'syz.0.9216': attribute type 1 has an invalid length. [ 1332.401123][T11128] lo speed is unknown, defaulting to 1000 [ 1332.414282][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9218'. [ 1332.528745][T11191] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9216'. [ 1332.575062][T11184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1332.615420][T11184] bond1: (slave bond2): making interface the new active one [ 1332.635556][T11184] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1332.645495][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9220'. [ 1333.488590][T11219] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9224'. [ 1333.527918][T11224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9225'. [ 1333.821343][T11228] tunl0: Caught tx_queue_len zero misconfig [ 1333.997772][T11227] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 1334.198129][T11227] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1334.228670][T11227] bond1 (unregistering): Released all slaves [ 1334.539618][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.547409][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.909070][T11238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1334.934112][T11238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.720555][T11281] netlink: 'syz.5.9236': attribute type 1 has an invalid length. [ 1335.859340][T11287] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002 [ 1335.886704][T11290] netlink: 'syz.5.9236': attribute type 10 has an invalid length. [ 1335.899747][ T3891] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.915662][T11290] __nla_validate_parse: 3 callbacks suppressed [ 1335.915683][T11290] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9236'. [ 1335.917017][T11287] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20003 [ 1335.954972][ T3891] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.016635][T11290] dummy0: entered promiscuous mode [ 1336.030596][ T3891] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.059094][ T3891] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.399444][T11309] vlan0: entered promiscuous mode [ 1336.413593][T11299] block nbd13: server does not support multiple connections per device. [ 1336.429462][T11312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9242'. [ 1336.545006][T11299] block nbd13: shutting down sockets [ 1337.041365][T11308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1337.061879][T11308] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1337.088180][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9248'. [ 1337.097537][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9248'. [ 1337.132555][T11337] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1337.300996][T11308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1337.341946][T11308] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1337.544061][T11349] bond1: option min_links: invalid value (18446744073709551612) [ 1337.567301][T11349] bond1: option min_links: allowed values 0 - 2147483647 [ 1337.587777][T11349] bond1 (unregistering): Released all slaves [ 1337.824973][T11308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1337.859869][T11308] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1338.028173][T11308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1338.049084][T11308] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1338.126592][T11308] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1338.137822][T11308] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1338.384815][T11132] Set syz1 is full, maxelem 65536 reached [ 1338.530499][T11379] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.9253'. [ 1338.647838][T11129] Set syz1 is full, maxelem 65536 reached [ 1338.703660][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9253'. [ 1338.789178][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9256'. [ 1338.928168][T11404] bridge0: port 3(syz_tun) entered blocking state [ 1338.937009][T11404] bridge0: port 3(syz_tun) entered disabled state [ 1338.944481][T11404] syz_tun: entered allmulticast mode [ 1338.967856][T11404] syz_tun: entered promiscuous mode [ 1338.989086][T11404] bridge0: port 3(syz_tun) entered blocking state [ 1338.995868][T11404] bridge0: port 3(syz_tun) entered forwarding state [ 1340.042181][T11437] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9264'. [ 1340.060435][T11437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9264'. [ 1340.080542][T11437] syzkaller0: entered allmulticast mode [ 1340.109962][T11437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9264'. [ 1340.486985][T11453] xt_hashlimit: size too large, truncated to 1048576 [ 1340.626665][T11458] netlink: 'syz.3.9268': attribute type 4 has an invalid length. [ 1340.639441][T11462] xt_hashlimit: size too large, truncated to 1048576 [ 1340.697445][T11458] pim6reg1: tun_chr_ioctl cmd 21731 [ 1341.263212][T11481] __nla_validate_parse: 1 callbacks suppressed [ 1341.263234][T11481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9272'. [ 1341.362209][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1341.411497][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9272'. [ 1341.477722][ T8964] bridge0: entered promiscuous mode [ 1341.518792][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9274'. [ 1341.531217][T11493] netlink: 'syz.5.9274': attribute type 10 has an invalid length. [ 1341.540214][T11493] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9274'. [ 1342.127456][T11518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1342.299007][T11526] mac80211_hwsim hwsim78 syzkaller0: entered promiscuous mode [ 1342.322046][T11526] mac80211_hwsim hwsim78 syzkaller0: entered allmulticast mode [ 1342.359577][T11526] tipc: Enabled bearer , priority 0 [ 1342.950791][T11551] bond1: Unable to set up delay as MII monitoring is disabled [ 1342.968031][T11551] bond1 (unregistering): Released all slaves [ 1343.017172][T11554] netlink: 'syz.3.9292': attribute type 1 has an invalid length. [ 1343.242752][T11567] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000 [ 1343.271926][T11571] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9296'. [ 1343.307907][T11573] TC_ACT_REPEAT abuse ? [ 1343.440350][T11582] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9300'. [ 1343.450780][T11582] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9300'. [ 1343.580732][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9302'. [ 1343.594196][T11585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1343.663307][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9301'. [ 1343.876044][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9305'. [ 1344.123197][T11609] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1344.334341][T11617] netlink: 'syz.5.9310': attribute type 30 has an invalid length. [ 1344.348816][T11618] netlink: 'syz.4.9311': attribute type 10 has an invalid length. [ 1344.379680][T29930] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.391027][T11617] netlink: 'syz.5.9310': attribute type 30 has an invalid length. [ 1344.419382][T29930] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.466430][T11618] geneve3: entered promiscuous mode [ 1344.473950][T29930] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.500887][T29930] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.577128][T11622] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1344.626906][T11622] bond1 (unregistering): Released all slaves [ 1345.106382][T11644] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1345.424850][T11658] netlink: 'syz.5.9323': attribute type 3 has an invalid length. [ 1345.494029][T11664] syzkaller1: entered allmulticast mode [ 1345.519697][T11655] geneve0: Caught tx_queue_len zero misconfig [ 1346.004056][T11687] nbd: nbd3 already in use [ 1346.618825][T11717] netlink: 'syz.3.9337': attribute type 29 has an invalid length. [ 1346.940936][T11729] __nla_validate_parse: 10 callbacks suppressed [ 1346.940961][T11729] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9340'. [ 1346.966120][T11715] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.118856][T11726] bond10: option lp_interval: invalid value (0) [ 1347.135664][T11726] bond10: option lp_interval: allowed values 1 - 2147483647 [ 1347.180097][T11726] bond10 (unregistering): Released all slaves [ 1347.312959][T11737] netlink: 'syz.0.9342': attribute type 13 has an invalid length. [ 1347.320891][T11737] netlink: 'syz.0.9342': attribute type 17 has an invalid length. [ 1347.446600][T11715] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.465172][T11748] netlink: 'syz.3.9344': attribute type 1 has an invalid length. [ 1347.574900][T11753] netlink: 'syz.3.9346': attribute type 32 has an invalid length. [ 1347.580476][T11737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.627662][T11737] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1347.866649][T11715] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.991524][T11759] sch_fq: defrate 0 ignored. [ 1348.184063][T11715] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.765729][T29869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.849149][ T3898] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.914870][ T3898] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.984078][T29869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.161484][T11791] netlink: 'syz.1.9358': attribute type 25 has an invalid length. [ 1349.301238][T11794] No such timeout policy "syz0" [ 1349.345784][T11794] syzkaller0: entered promiscuous mode [ 1349.362162][T11794] syzkaller0: entered allmulticast mode [ 1349.433210][T11794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9359'. [ 1349.491364][T11794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9359'. [ 1349.537592][T11795] lo speed is unknown, defaulting to 1000 [ 1349.545674][T11803] netlink: 'syz.5.9362': attribute type 12 has an invalid length. [ 1350.125174][T11814] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1350.404131][T11795] wlan0 speed is unknown, defaulting to 1000 [ 1350.454170][T11795] lo speed is unknown, defaulting to 1000 [ 1352.525266][T11871] sctp: [Deprecated]: syz.5.9377 (pid 11871) Use of int in maxseg socket option. [ 1352.525266][T11871] Use struct sctp_assoc_value instead [ 1352.871032][T11872] tipc: Started in network mode [ 1352.921958][T11872] tipc: Node identity 7e2db17b2bfc, cluster identity 4711 [ 1352.966468][T11872] tipc: Enabled bearer , priority 0 [ 1353.222539][T11897] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1353.319155][T11889] netlink: 'syz.4.9380': attribute type 4 has an invalid length. [ 1353.371893][T11889] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9380'. [ 1353.452681][T11867] tipc: Resetting bearer [ 1353.480941][T11874] syzkaller0: entered promiscuous mode [ 1353.492139][T11874] syzkaller0: entered allmulticast mode [ 1353.504361][T11864] tipc: Resetting bearer [ 1353.557744][T11903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9382'. [ 1353.584038][T11864] tipc: Disabling bearer [ 1353.596015][T11903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9382'. [ 1353.644681][T11889] .`: renamed from bond0 (while UP) [ 1354.317107][T11922] syzkaller1: entered promiscuous mode [ 1354.332329][T11922] syzkaller1: entered allmulticast mode [ 1354.583019][T11905] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 1354.602145][T11905] netlink: 'syz.3.9383': attribute type 1 has an invalid length. [ 1354.616081][T11905] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9383'. [ 1355.463253][T11952] netlink: 'syz.3.9396': attribute type 1 has an invalid length. [ 1355.489335][T11952] netlink: 'syz.3.9396': attribute type 1 has an invalid length. [ 1355.726351][T11952] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1355.912923][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9398'. [ 1356.203570][T11965] openvswitch: netlink: Message has 8 unknown bytes. [ 1356.254234][T11965] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9402'. [ 1356.273597][T11965] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9402'. [ 1356.308369][T11965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1356.451544][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9401'. [ 1356.857606][T11991] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.9407'. [ 1356.920958][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9407'. [ 1356.929909][T11974] bond3: entered promiscuous mode [ 1356.933016][T11974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1357.277722][T12000] netlink: 'syz.0.9409': attribute type 10 has an invalid length. [ 1357.337606][T11998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1357.696549][T12014] netlink: 'syz.4.9412': attribute type 1 has an invalid length. [ 1358.158305][T12030] lo speed is unknown, defaulting to 1000 [ 1358.337442][T12035] syzkaller0: entered promiscuous mode [ 1358.364263][T12035] syzkaller0: entered allmulticast mode [ 1358.841534][T12050] netlink: 'syz.5.9421': attribute type 1 has an invalid length. [ 1358.844212][T12052] __nla_validate_parse: 1 callbacks suppressed [ 1358.844274][T12052] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9423'. [ 1358.978741][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9423'. [ 1359.000333][T12062] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9424'. [ 1359.596466][T12079] C: renamed from veth1_to_team [ 1359.643111][T12079] netlink: 'syz.5.9428': attribute type 2 has an invalid length. [ 1359.664989][T12079] netlink: 116 bytes leftover after parsing attributes in process `syz.5.9428'. [ 1359.719393][T12079] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1359.759439][T12030] wlan0 speed is unknown, defaulting to 1000 [ 1359.772548][T12030] lo speed is unknown, defaulting to 1000 [ 1361.277525][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9436'. [ 1361.713075][T12116] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9439'. [ 1361.754240][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9440'. [ 1361.767939][T12119] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9440'. [ 1362.160965][T12776] IPVS: starting estimator thread 0... [ 1362.264170][T12134] IPVS: using max 29 ests per chain, 69600 per kthread [ 1363.150793][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9454'. [ 1363.551964][T12181] x_tables: duplicate underflow at hook 3 [ 1363.737682][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9463'. [ 1364.096971][T12204] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9467'. [ 1364.395460][T12197] bridge0: port 3(syz_tun) entered disabled state [ 1364.463119][T12220] netlink: 'syz.0.9468': attribute type 1 has an invalid length. [ 1364.491484][T12220] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9468'. [ 1364.493065][T12197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.510489][T12197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.699454][T12225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9470'. [ 1364.834033][T12197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.849932][T12197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.105363][T12202] syzkaller1: entered promiscuous mode [ 1365.111403][T12202] syzkaller1: entered allmulticast mode [ 1365.144652][ T3898] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.178308][ T3898] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.210028][ T3898] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.293963][ T3898] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.534767][T12240] netlink: 112 bytes leftover after parsing attributes in process `syz.3.9474'. [ 1365.572593][T12240] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9474'. [ 1365.608927][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9476'. [ 1365.652603][T12246] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1365.675771][T12247] syzkaller1: entered promiscuous mode [ 1365.694169][T12247] syzkaller1: entered allmulticast mode [ 1365.727772][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9476'. [ 1365.891206][T12244] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1367.152533][T12258] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1367.364406][T12244] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1367.619952][T12244] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1367.698215][T12280] netlink: 'syz.0.9485': attribute type 1 has an invalid length. [ 1367.796846][T12280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1367.900319][ T8964] IPVS: starting estimator thread 0... [ 1367.961271][T12244] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.012404][T12294] IPVS: using max 27 ests per chain, 64800 per kthread [ 1368.070568][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9487'. [ 1368.305752][T12307] netlink: 'syz.1.9491': attribute type 2 has an invalid length. [ 1368.591297][T12314] netlink: 1028 bytes leftover after parsing attributes in process `syz.4.9494'. [ 1368.623111][T12314] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1368.687027][ T3891] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1368.774919][ T3891] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1368.918973][ T3891] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1369.067149][T29930] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1369.724612][T12348] netlink: 'syz.0.9502': attribute type 11 has an invalid length. [ 1369.898095][T12353] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9503'. [ 1370.422334][T12377] tipc: Enabling of bearer rejected, failed to enable media [ 1370.856110][T12397] bond1: left promiscuous mode [ 1370.880770][T12397] bond2: left allmulticast mode [ 1370.924384][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9516'. [ 1370.951005][T12397] gretap1: left allmulticast mode [ 1370.997070][T12397] geneve2: left promiscuous mode [ 1371.026332][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9519'. [ 1371.037293][T12397] bond6: left promiscuous mode [ 1371.058064][T12397] bridge3: left promiscuous mode [ 1371.065282][T12402] netlink: 356 bytes leftover after parsing attributes in process `syz.5.9519'. [ 1371.085301][T12397] bond7: left promiscuous mode [ 1371.095032][T12397] bond7: left allmulticast mode [ 1371.102917][T12397] veth9: left allmulticast mode [ 1371.195521][T29930] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.236639][T29930] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.277901][T29930] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.580974][T12421] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1371.619053][T12425] netlink: 'syz.1.9522': attribute type 11 has an invalid length. [ 1371.639109][T12425] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9522'. [ 1371.658874][T12421] netlink: 'syz.1.9522': attribute type 10 has an invalid length. [ 1371.726652][T12431] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not 'saw' [ 1371.958937][T12436] netlink: 'syz.4.9528': attribute type 3 has an invalid length. [ 1371.975169][T12436] netlink: 'syz.4.9528': attribute type 1 has an invalid length. [ 1371.995227][T12436] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9528'. [ 1372.041401][T12436] NCSI netlink: No device for ifindex 4294967295 [ 1372.209663][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9533'. [ 1372.309889][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9533'. [ 1372.346035][T12461] IPv6: NLM_F_CREATE should be specified when creating new route [ 1372.380338][T12462] tipc: Enabling of bearer rejected, failed to enable media [ 1372.419717][T12461] tipc: Enabling of bearer rejected, failed to enable media [ 1372.631336][T12465] netlink: 'syz.5.9536': attribute type 9 has an invalid length. [ 1372.661092][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9536'. [ 1372.703156][T12465] macvlan2: entered promiscuous mode [ 1372.730152][T12465] gretap0: entered promiscuous mode [ 1372.749755][T12465] macvlan2: entered allmulticast mode [ 1372.774781][T12465] gretap0: entered allmulticast mode [ 1373.057278][T12486] IPVS: set_ctl: invalid protocol: 2 172.20.20.61:20002 [ 1373.168138][T12493] netlink: 'syz.3.9540': attribute type 2 has an invalid length. [ 1373.743144][T12499] xt_policy: output policy not valid in PREROUTING and INPUT [ 1373.834207][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9544'. [ 1373.855410][T12506] netlink: 'syz.4.9546': attribute type 3 has an invalid length. [ 1374.141518][T12519] team0 (unregistering): Port device team_slave_0 removed [ 1374.158983][T12519] team0 (unregistering): Port device team_slave_1 removed [ 1374.500350][T12526] lo speed is unknown, defaulting to 1000 [ 1374.923506][T12616] IPVS: starting estimator thread 0... [ 1374.931020][T12532] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20001 [ 1374.952314][T12530] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1374.996592][T12526] wlan0 speed is unknown, defaulting to 1000 [ 1375.006776][T12526] lo speed is unknown, defaulting to 1000 [ 1375.031864][T12533] IPVS: using max 27 ests per chain, 64800 per kthread [ 1375.432940][T12546] __nla_validate_parse: 3 callbacks suppressed [ 1375.432961][T12546] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9556'. [ 1375.885055][T12478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1376.218213][T12552] netlink: 'syz.1.9557': attribute type 4 has an invalid length. [ 1376.237379][T12557] netlink: 'syz.4.9560': attribute type 1 has an invalid length. [ 1376.532340][T12556] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1377.028171][T12577] bond2: option arp_interval: invalid value (18446744073709551615) [ 1377.045697][T12577] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1377.069550][T12577] bond2 (unregistering): Released all slaves [ 1377.665663][T12601] bridge0: entered allmulticast mode [ 1377.786044][T12611] erspan0: entered promiscuous mode [ 1377.812552][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9572'. [ 1378.185259][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9574'. [ 1378.233108][T12626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9576'. [ 1378.563027][T12626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1378.714393][T12626] tipc: Resetting bearer [ 1378.817305][T12640] mac80211_hwsim hwsim78 syzkaller0: left promiscuous mode [ 1378.840549][T12640] mac80211_hwsim hwsim78 syzkaller0: left allmulticast mode [ 1379.010421][T12626] bond1: (slave batadv1): Opening slave failed [ 1379.246292][T12651] netlink: 200 bytes leftover after parsing attributes in process `syz.3.9581'. [ 1379.343125][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9581'. [ 1380.249422][T12666] x_tables: duplicate underflow at hook 3 [ 1381.444800][T12684] netlink: 'syz.1.9589': attribute type 9 has an invalid length. [ 1381.897807][T12706] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9593'. [ 1381.991169][T12706] mac80211_hwsim hwsim78 syzkaller0: entered promiscuous mode [ 1382.029408][T12706] mac80211_hwsim hwsim78 syzkaller0: entered allmulticast mode [ 1382.386599][T12722] tipc: Enabled bearer , priority 0 [ 1382.437347][T12722] +: renamed from syzkaller0 [ 1382.469586][T12722] tipc: Disabling bearer [ 1382.621880][T12737] sctp: [Deprecated]: syz.0.9603 (pid 12737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1382.621880][T12737] Use struct sctp_sack_info instead [ 1382.677348][T12738] sctp: [Deprecated]: syz.0.9603 (pid 12738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1382.677348][T12738] Use struct sctp_sack_info instead [ 1383.247948][T12745] netlink: 732 bytes leftover after parsing attributes in process `syz.3.9602'. [ 1383.275061][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9609'. [ 1383.299688][T12745] netlink: 732 bytes leftover after parsing attributes in process `syz.3.9602'. [ 1383.389089][T12754] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9607'. [ 1384.018183][T12774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9614'. [ 1384.497821][T12792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9618'. [ 1384.734655][T12793] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9618'. [ 1384.786653][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9620'. [ 1384.955269][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9620'. [ 1384.971591][ T3898] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1385.017869][ T3898] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1385.045525][T29917] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1385.092017][T29917] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1385.470640][T12818] netlink: get zone limit has 8 unknown bytes [ 1385.530825][T12820] batman_adv: batadv0: Adding interface: dummy0 [ 1385.577600][T12820] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.700089][T12820] batman_adv: batadv0: Interface activated: dummy0 [ 1386.308628][T12846] nbd: nbd3 already in use [ 1387.315652][T12881] __nla_validate_parse: 2 callbacks suppressed [ 1387.315680][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9640'. [ 1387.488608][T12881] lo speed is unknown, defaulting to 1000 [ 1388.216211][T12881] wlan0 speed is unknown, defaulting to 1000 [ 1388.225412][T12881] lo speed is unknown, defaulting to 1000 [ 1388.624294][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9645'. [ 1388.852018][T12907] batadv_slave_0: entered promiscuous mode [ 1388.912641][T12900] batadv_slave_0: left promiscuous mode [ 1389.354848][T12922] ip6erspan0: entered allmulticast mode [ 1389.559320][T12923] syzkaller1: entered promiscuous mode [ 1389.579636][T12923] syzkaller1: entered allmulticast mode [ 1390.137917][T12948] ipip0: entered promiscuous mode [ 1390.152270][T12948] ipip0: entered allmulticast mode [ 1390.360562][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9662'. [ 1390.371717][T12960] netlink: 59 bytes leftover after parsing attributes in process `syz.5.9662'. [ 1390.430897][T12957] geneve0: entered promiscuous mode [ 1390.444044][T12957] macvlan0: entered promiscuous mode [ 1391.077580][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9668'. [ 1391.132137][T12979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9668'. [ 1391.267311][T12979] geneve2: entered promiscuous mode [ 1391.300793][T12979] geneve2: entered allmulticast mode [ 1391.578160][T12990] lo speed is unknown, defaulting to 1000 [ 1392.118720][T13015] geneve1: Caught tx_queue_len zero misconfig [ 1392.826278][T13038] netlink: 'syz.0.9676': attribute type 58 has an invalid length. [ 1393.353753][T12990] wlan0 speed is unknown, defaulting to 1000 [ 1393.415426][T12990] lo speed is unknown, defaulting to 1000 [ 1393.455721][T13052] netlink: 47 bytes leftover after parsing attributes in process `syz.1.9683'. [ 1393.550290][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9682'. [ 1393.591879][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9682'. [ 1393.606063][T13054] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1393.636537][T13054] bond5 (unregistering): Released all slaves [ 1394.117002][T13072] netlink: 240 bytes leftover after parsing attributes in process `syz.5.9685'. [ 1394.268151][T13079] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9688'. [ 1394.477256][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9688'. [ 1394.532989][T13089] netlink: 136 bytes leftover after parsing attributes in process `syz.5.9691'. [ 1394.542785][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9691'. [ 1394.554023][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9691'. [ 1394.789973][T13096] netlink: 84 bytes leftover after parsing attributes in process `syz.5.9692'. [ 1394.993612][T13099] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 1395.576215][T13111] lo speed is unknown, defaulting to 1000 [ 1396.207983][T13118] syzkaller1: entered promiscuous mode [ 1396.245641][T13118] syzkaller1: entered allmulticast mode [ 1396.598686][T13114] lo speed is unknown, defaulting to 1000 [ 1396.607110][T13111] wlan0 speed is unknown, defaulting to 1000 [ 1396.645001][T13111] lo speed is unknown, defaulting to 1000 [ 1397.528817][T13114] wlan0 speed is unknown, defaulting to 1000 [ 1397.569126][T13114] lo speed is unknown, defaulting to 1000 [ 1399.085802][T13186] syzkaller1: entered promiscuous mode [ 1399.100302][T13186] syzkaller1: entered allmulticast mode [ 1399.248846][T13197] __nla_validate_parse: 2 callbacks suppressed [ 1399.248869][T13197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9714'. [ 1399.356260][T13199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9714'. [ 1399.804753][T13213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9717'. [ 1399.897053][T13208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9717'. [ 1400.541507][T13244] gre1: entered allmulticast mode [ 1400.768160][T13227] syzkaller1: entered promiscuous mode [ 1400.788995][T13227] syzkaller1: entered allmulticast mode [ 1400.900158][T13251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.188959][T13258] can: request_module (can-proto-0) failed. [ 1401.354580][T13267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9725'. [ 1401.375198][T13272] lo: Caught tx_queue_len zero misconfig [ 1401.401339][T13271] sctp: [Deprecated]: syz.4.9728 (pid 13271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1401.401339][T13271] Use struct sctp_sack_info instead [ 1401.482909][T13275] xt_policy: output policy not valid in PREROUTING and INPUT [ 1401.628158][T13283] ipt_rpfilter: unknown options [ 1401.791937][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9734'. [ 1403.071095][T13329] lo speed is unknown, defaulting to 1000 [ 1403.303510][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9748'. [ 1404.141210][T13329] wlan0 speed is unknown, defaulting to 1000 [ 1404.161146][T13329] lo speed is unknown, defaulting to 1000 [ 1404.580616][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9757'. [ 1404.829049][T13383] netlink: 'syz.0.9758': attribute type 1 has an invalid length. [ 1405.145908][T13383] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1405.373863][T13391] bond5: (slave geneve3): making interface the new active one [ 1405.517665][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9761'. [ 1405.530875][T13391] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1405.545528][T13394] veth1_macvtap: left promiscuous mode [ 1405.575545][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9761'. [ 1405.615959][T13394] veth1_macvtap: entered promiscuous mode [ 1406.174830][T13410] can: request_module (can-proto-3) failed. [ 1406.300448][T13419] netlink: 'syz.1.9765': attribute type 1 has an invalid length. [ 1406.460698][T13426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9767'. [ 1407.203712][T13419] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1407.206282][T13420] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1407.295470][T13420] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1407.314364][T13420] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1407.534835][T13437] tipc: Enabled bearer , priority 26 [ 1407.629234][T13443] netlink: 'syz.0.9772': attribute type 1 has an invalid length. [ 1408.009452][T13443] bond6: entered promiscuous mode [ 1408.031153][T13443] bond6: entered allmulticast mode [ 1408.058102][T13443] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1408.102891][T13450] dummy0: mtu less than device minimum [ 1408.137242][T13457] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1408.184290][T13457] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1408.231780][T13457] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1408.398686][T13468] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9773'. [ 1408.447742][T13473] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9773'. [ 1408.500903][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9773'. [ 1408.585157][T13474] netlink: 'syz.0.9776': attribute type 4 has an invalid length. [ 1408.659541][T13477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9777'. [ 1409.301210][T13496] netlink: 'syz.5.9783': attribute type 11 has an invalid length. [ 1409.338716][T13499] xt_addrtype: ipv6 does not support BROADCAST matching [ 1409.360188][T13500] veth0: entered promiscuous mode [ 1409.634872][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9787'. [ 1409.727297][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9787'. [ 1410.113937][T13512] veth5: entered promiscuous mode [ 1410.169433][T13498] veth0: left promiscuous mode [ 1410.697646][T13542] netlink: 'syz.1.9793': attribute type 12 has an invalid length. [ 1410.728431][T13542] netlink: 'syz.1.9793': attribute type 7 has an invalid length. [ 1411.050958][T13554] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9793'. [ 1413.060391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1417.053002][T13564] erspan0: left promiscuous mode [ 1417.068462][T13564] geneve0: left promiscuous mode [ 1417.079351][T13566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9799'. [ 1417.093167][T13564] macvlan0: left promiscuous mode [ 1417.111246][T13564] gre1: left allmulticast mode [ 1417.119198][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9796'. [ 1417.145453][T13562] C: renamed from veth1_to_team (while UP) [ 1417.196434][T13562] netlink: 'syz.0.9796': attribute type 1 has an invalid length. [ 1417.214676][T13562] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9796'. [ 1417.244506][T13562] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1417.322791][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9796'. [ 1417.594635][ T29] audit: type=1804 audit(1783091661.381:26): pid=13566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9799" name="/newroot/123/cgroup.controllers" dev="tmpfs" ino=641 res=1 errno=0 [ 1417.633738][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9799'. [ 1417.769085][ T29] audit: type=1800 audit(1783091661.381:27): pid=13566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9799" name="cgroup.controllers" dev="tmpfs" ino=641 res=0 errno=0 [ 1418.199569][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9803'. [ 1418.269312][T13609] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 1419.222548][T13630] vlan2: entered promiscuous mode [ 1419.239603][T13630] bridge0: entered promiscuous mode [ 1419.547792][T13639] Bluetooth: MGMT ver 1.23 [ 1419.598360][T13639] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1419.987961][T13650] syzkaller0: entered promiscuous mode [ 1419.999837][T13650] syzkaller0: entered allmulticast mode [ 1420.098572][T13649] gretap0: left allmulticast mode [ 1420.118265][T13649] gretap0: left promiscuous mode [ 1420.232491][ T3891] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.270176][ T3891] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.404954][ T3891] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.424690][T13672] netlink: 'syz.3.9821': attribute type 2 has an invalid length. [ 1420.442314][ T3891] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.458965][T13672] netlink: 'syz.3.9821': attribute type 8 has an invalid length. [ 1420.531940][T13672] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9821'. [ 1420.664229][T13665] netlink: 'syz.3.9821': attribute type 2 has an invalid length. [ 1420.693535][T13665] netlink: 'syz.3.9821': attribute type 8 has an invalid length. [ 1420.702240][T13665] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9821'. [ 1420.997265][T13679] žÿ: renamed from team_slave_1 (while UP) [ 1421.210504][T13696] xt_hashlimit: size too large, truncated to 1048576 [ 1421.247440][T13696] xt_hashlimit: max too large, truncated to 1048576 [ 1421.819110][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9836'. [ 1422.329805][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9839'. [ 1422.346391][T13742] xt_TCPMSS: Only works on TCP SYN packets [ 1422.563001][T13750] netpci0: tun_chr_ioctl cmd 1074025678 [ 1422.570367][T13750] netpci0: group set to 0 [ 1422.740261][T13763] netlink: 'syz.5.9844': attribute type 29 has an invalid length. [ 1422.798213][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9844'. [ 1422.853541][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9844'. [ 1423.269505][T13775] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9846'. [ 1423.714050][T13795] netlink: 'syz.0.9851': attribute type 1 has an invalid length. [ 1423.774163][T13795] bond7 (unregistering): Released all slaves [ 1423.819754][T13801] netlink: zone id is out of range [ 1423.826657][T13801] netlink: zone id is out of range [ 1423.833020][T13801] netlink: zone id is out of range [ 1423.838812][T13801] netlink: zone id is out of range [ 1423.846926][T13801] netlink: zone id is out of range [ 1423.853872][T13801] netlink: zone id is out of range [ 1423.859150][T13801] netlink: zone id is out of range [ 1423.866964][T13801] netlink: zone id is out of range [ 1423.873122][T13801] netlink: zone id is out of range [ 1423.882383][T13801] netlink: zone id is out of range [ 1423.888446][T13804] netlink: 'syz.1.9853': attribute type 39 has an invalid length. [ 1423.987434][T13798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1424.008905][T13795] netlink: 'syz.0.9851': attribute type 1 has an invalid length. [ 1424.149654][T13795] bond7: entered promiscuous mode [ 1424.157845][T13795] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1424.318597][T13799] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1424.325904][T13799] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 1424.377751][T13799] bond7: (slave sit1): Setting fail_over_mac to active for active-backup mode [ 1424.409208][T13799] bond7: (slave sit1): making interface the new active one [ 1424.420843][T13799] sit1: entered promiscuous mode [ 1424.427986][T13799] bond7: (slave sit1): Enslaving as an active interface with an up link [ 1424.544025][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9856'. [ 1424.616115][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9856'. [ 1424.679818][T13819] netlink: 'syz.3.9858': attribute type 1 has an invalid length. [ 1424.706580][T13815] netlink: 'syz.1.9856': attribute type 18 has an invalid length. [ 1424.784898][T13819] bond11: entered promiscuous mode [ 1424.790744][T13819] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1424.819238][T27301] IPVS: starting estimator thread 0... [ 1424.885688][T13825] ip6tnl1: entered allmulticast mode [ 1424.943850][T13827] IPVS: using max 26 ests per chain, 62400 per kthread [ 1424.975203][T13820] bond11: (slave bridge5): making interface the new active one [ 1424.989636][T13820] bridge5: entered promiscuous mode [ 1425.003900][T13820] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 1425.089416][T13819] bond11: (slave bridge6): Enslaving as a backup interface with an up link [ 1425.409639][T13843] xt_connbytes: Forcing CT accounting to be enabled [ 1425.509726][T13832] syzkaller0: entered promiscuous mode [ 1425.516590][T13832] syzkaller0: entered allmulticast mode [ 1426.574878][T13866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1432.319659][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9867'. [ 1432.390390][T13870] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9866'. [ 1432.413193][T13870] net_ratelimit: 718 callbacks suppressed [ 1432.413216][T13870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1432.780021][T13882] netlink: 'syz.4.9872': attribute type 11 has an invalid length. [ 1433.013375][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9873'. [ 1433.078101][T13888] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1433.241368][T13888] lo speed is unknown, defaulting to 1000 [ 1433.319606][T13901] sock: sock_timestamping_bind_phc: sock not bind to device [ 1434.115709][T13921] vlan1: entered promiscuous mode [ 1434.143357][T13921] bridge0: entered promiscuous mode [ 1434.573769][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9881'. [ 1434.759302][T13888] wlan0 speed is unknown, defaulting to 1000 [ 1434.797687][T13888] lo speed is unknown, defaulting to 1000 [ 1435.239349][T13953] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9885'. [ 1435.290400][T13953] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9885'. [ 1435.347362][T13953] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9885'. [ 1435.427687][T13947] tipc: Started in network mode [ 1435.444460][T13947] tipc: Node identity , cluster identity 4711 [ 1435.466425][T13947] tipc: Failed to obtain node identity [ 1435.489262][T13947] tipc: Enabling of bearer rejected, failed to enable media [ 1436.301192][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9891'. [ 1437.213581][T14017] netlink: 'syz.1.9899': attribute type 12 has an invalid length. [ 1438.696447][T15462] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.740411][T15462] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.794263][T15462] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.916028][T14074] lo speed is unknown, defaulting to 1000 [ 1440.221146][T14111] sit0: Caught tx_queue_len zero misconfig [ 1440.230877][T14111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9922'. [ 1440.265896][T14074] wlan0 speed is unknown, defaulting to 1000 [ 1440.274099][T14111] syzkaller0: entered promiscuous mode [ 1440.280902][T14111] syzkaller0: entered allmulticast mode [ 1440.293771][T14074] lo speed is unknown, defaulting to 1000 [ 1441.010002][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9927'. [ 1441.170347][T14135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9929'. [ 1441.324988][T14135] netlink: 172 bytes leftover after parsing attributes in process `syz.0.9929'. [ 1441.588704][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9933'. [ 1442.008172][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9937'. [ 1442.086200][T14169] ip6tnl4: entered allmulticast mode [ 1442.108977][T29879] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1442.513102][T14181] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1442.556401][T14186] syzkaller0: entered promiscuous mode [ 1442.577369][T14186] syzkaller0: entered allmulticast mode [ 1442.628654][T14193] netlink: 'syz.3.9944': attribute type 3 has an invalid length. [ 1442.640578][T14194] netlink: 'syz.3.9944': attribute type 3 has an invalid length. [ 1442.911162][T14201] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9946'. [ 1443.244611][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9949'. [ 1443.515112][T14220] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9950'. [ 1443.558347][T14220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9950'. [ 1443.660342][T14225] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1443.849671][T14232] veth0: entered promiscuous mode [ 1444.058728][T14235] veth0: left promiscuous mode [ 1445.310911][T14278] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1445.385675][T14262] bond12: entered promiscuous mode [ 1445.434970][T14262] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1445.464028][T14287] openvswitch: netlink: Message has 4 unknown bytes. [ 1445.510962][T14287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1445.609235][T14287] syzkaller1: entered promiscuous mode [ 1445.636583][T14287] syzkaller1: entered allmulticast mode [ 1445.695409][T14290] __nla_validate_parse: 3 callbacks suppressed [ 1445.695428][T14290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9970'. [ 1445.830740][T14297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1446.239210][T14310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9975'. [ 1446.283340][T14310] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9975'. [ 1446.364843][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9965'. [ 1446.561988][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1446.574529][T14308] bond3: entered promiscuous mode [ 1446.605533][T14308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1447.456189][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9982'. [ 1447.493380][T14340] netlink: 580 bytes leftover after parsing attributes in process `syz.5.9982'. [ 1449.060878][ T3891] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.118366][ T3891] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.173561][ T3891] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.384630][T14409] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10001'. [ 1449.554742][T14414] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10001'. [ 1449.773793][T14418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10005'. [ 1449.924662][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10005'. [ 1450.777851][T14452] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1450.793447][T14460] netlink: 'syz.3.10017': attribute type 13 has an invalid length. [ 1450.847089][T14460] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10017'. [ 1450.955614][T14456] bridge4: entered promiscuous mode [ 1450.961137][T14456] bridge4: entered allmulticast mode [ 1451.003001][T14456] team0: Port device bridge4 added [ 1451.016210][T14458] bridge0: port 3(team0) entered blocking state [ 1451.025927][T14458] bridge0: port 3(team0) entered disabled state [ 1451.036682][T14458] team0: entered allmulticast mode [ 1451.044526][T14458] team_slave_0: entered allmulticast mode [ 1451.050502][T14458] žÿ: entered allmulticast mode [ 1451.058990][T14458] team0: entered promiscuous mode [ 1451.068405][T14458] team_slave_0: entered promiscuous mode [ 1451.074842][T14458] žÿ: entered promiscuous mode [ 1451.081112][T14458] bridge0: port 3(team0) entered blocking state [ 1451.087713][T14458] bridge0: port 3(team0) entered forwarding state [ 1451.373886][T14474] 8021q: VLANs not supported on gre0 [ 1451.490374][T14474] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1451.507977][T14474] syzkaller1: linktype set to 0 [ 1451.538314][T14474] netlink: 'syz.4.10022': attribute type 13 has an invalid length. [ 1451.622594][T14479] netlink: 'syz.0.10024': attribute type 1 has an invalid length. [ 1451.675709][T14474] gretap0: refused to change device tx_queue_len [ 1451.720345][T14474] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1452.128819][T14500] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 1453.119516][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10039'. [ 1453.565161][T14546] tipc: Started in network mode [ 1453.572853][T14546] tipc: Node identity ac14140f, cluster identity 4711 [ 1453.598244][T14546] tipc: New replicast peer: 255.255.255.255 [ 1453.616802][T14546] tipc: Enabled bearer , priority 26 [ 1453.709045][T14546] nbd: nbd0 already in use [ 1453.722125][T14546] block nbd0: NBD_DISCONNECT [ 1453.729522][T14546] block nbd0: Send disconnect failed -104 [ 1453.737259][T14546] block nbd0: shutting down sockets [ 1454.169542][T14567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1454.236768][T14568] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1454.405266][T14568] netlink: 'syz.0.10045': attribute type 2 has an invalid length. [ 1454.776489][T14568] : entered promiscuous mode [ 1454.789398][ T5865] tipc: Node number set to 2886997007 [ 1454.908009][T14581] netlink: 'syz.1.10049': attribute type 2 has an invalid length. [ 1454.949849][T14581] netlink: 'syz.1.10049': attribute type 1 has an invalid length. [ 1454.980699][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10049'. [ 1455.019117][T14581] nbd: illegal input index -120127480 [ 1455.282245][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1455.392768][T14604] syzkaller0: entered promiscuous mode [ 1455.418689][T14604] syzkaller0: entered allmulticast mode [ 1455.446675][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10055'. [ 1455.457313][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10055'. [ 1455.470818][T14602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1455.608234][T14605] lo speed is unknown, defaulting to 1000 [ 1456.325886][T14613] netlink: 'syz.5.10057': attribute type 3 has an invalid length. [ 1456.648542][T14605] wlan0 speed is unknown, defaulting to 1000 [ 1456.660665][T14618] netlink: 148 bytes leftover after parsing attributes in process `syz.5.10057'. [ 1456.672531][T14605] lo speed is unknown, defaulting to 1000 [ 1457.213264][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10063'. [ 1457.619456][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10066'. [ 1458.335656][T14662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1459.011205][T14687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10077'. [ 1459.056732][T14688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10078'. [ 1459.372993][T14695] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.10079'. [ 1459.701484][T14704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1459.750184][T14706] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1459.939738][T14715] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1459.976691][T14715] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1460.037690][T14715] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1460.058025][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10088'. [ 1460.132087][T14730] Cannot find del_set index 2 as target [ 1460.725102][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10090'. [ 1460.766819][T14741] lo speed is unknown, defaulting to 1000 [ 1460.877742][T14755] xt_TCPMSS: Only works on TCP SYN packets [ 1461.333905][T14772] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1461.636572][T14779] netlink: 4424 bytes leftover after parsing attributes in process `syz.3.10099'. [ 1461.700378][T14780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10099'. [ 1462.254667][T14741] wlan0 speed is unknown, defaulting to 1000 [ 1462.264670][T14741] lo speed is unknown, defaulting to 1000 [ 1463.186478][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10110'. [ 1463.867985][T14846] openvswitch: netlink: Message has 4 unknown bytes. [ 1463.886085][T14846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1463.929182][T14848] x_tables: duplicate entry at hook 3 [ 1463.963758][T14848] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1464.085287][T14852] tipc: Enabling of bearer rejected, failed to enable media [ 1464.115970][T14854] openvswitch: netlink: Key type 31 is not supported [ 1464.551918][T29930] [ 1464.554325][T29930] ====================================================== [ 1464.561373][T29930] WARNING: possible circular locking dependency detected [ 1464.568432][T29930] syzkaller #0 Not tainted [ 1464.572879][T29930] ------------------------------------------------------ [ 1464.579928][T29930] kworker/u8:49/29930 is trying to acquire lock: [ 1464.586287][T29930] ffffffff8ec5eb20 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 1464.595988][T29930] [ 1464.595988][T29930] but task is already holding lock: [ 1464.603387][T29930] ffffffff8e9f6cc0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 1464.612819][T29930] [ 1464.612819][T29930] which lock already depends on the new lock. [ 1464.612819][T29930] [ 1464.623260][T29930] [ 1464.623260][T29930] the existing dependency chain (in reverse order) is: [ 1464.632391][T29930] [ 1464.632391][T29930] -> #10 (wq_pool_mutex){+.+.}-{4:4}: [ 1464.640270][T29930] __mutex_lock+0x19d/0x1550 [ 1464.645435][T29930] __alloc_workqueue+0xa9c/0x2060 [ 1464.651037][T29930] alloc_workqueue_noprof+0xe3/0x210 [ 1464.656889][T29930] padata_alloc+0xbe/0x360 [ 1464.661904][T29930] pcrypt_init_padata+0x27/0x100 [ 1464.667593][T29930] pcrypt_init+0x60/0xc0 [ 1464.672505][T29930] do_one_initcall+0x250/0x870 [ 1464.677860][T29930] do_initcall_level+0x10a/0x1a0 [ 1464.683531][T29930] do_initcalls+0x59/0xa0 [ 1464.688426][T29930] kernel_init_freeable+0x29d/0x3e0 [ 1464.694200][T29930] kernel_init+0x1d/0x1d0 [ 1464.699878][T29930] ret_from_fork+0x514/0xb70 [ 1464.705066][T29930] ret_from_fork_asm+0x1a/0x30 [ 1464.710497][T29930] [ 1464.710497][T29930] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 1464.718287][T29930] cpus_read_lock+0x42/0x160 [ 1464.723546][T29930] static_key_slow_inc+0x12/0x30 [ 1464.729102][T29930] setup_udp_tunnel_sock+0x2df/0x4f0 [ 1464.735051][T29930] l2tp_tunnel_register+0xe77/0x1570 [ 1464.740979][T29930] pppol2tp_connect+0x8e3/0x18b0 [ 1464.746526][T29930] __sys_connect+0x323/0x460 [ 1464.751690][T29930] __x64_sys_connect+0x7a/0x90 [ 1464.757018][T29930] do_syscall_64+0x174/0x580 [ 1464.762177][T29930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.768899][T29930] [ 1464.768899][T29930] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1464.776702][T29930] lock_sock_nested+0x41/0x100 [ 1464.782044][T29930] tls_sw_sendmsg+0x161/0x2860 [ 1464.787553][T29930] sock_sendmsg_nosec+0x90/0x180 [ 1464.793158][T29930] __sys_sendto+0x408/0x5a0 [ 1464.798405][T29930] __x64_sys_sendto+0xde/0x100 [ 1464.803829][T29930] do_syscall_64+0x174/0x580 [ 1464.809077][T29930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.815668][T29930] [ 1464.815668][T29930] -> #7 (&ctx->tx_lock){+.+.}-{4:4}: [ 1464.823289][T29930] __mutex_lock+0x19d/0x1550 [ 1464.828539][T29930] tls_sw_sendmsg+0x13c/0x2860 [ 1464.833890][T29930] sock_sendmsg_nosec+0x90/0x180 [ 1464.839409][T29930] sock_sendmsg+0x1ca/0x2d0 [ 1464.844616][T29930] __sock_xmit+0x245/0x4f0 [ 1464.849818][T29930] nbd_disconnect+0x3ad/0x560 [ 1464.855088][T29930] nbd_disconnect_and_put+0x32/0x280 [ 1464.860934][T29930] nbd_genl_disconnect+0x4af/0x590 [ 1464.866614][T29930] genl_family_rcv_msg_doit+0x233/0x340 [ 1464.872733][T29930] genl_rcv_msg+0x614/0x7a0 [ 1464.877818][T29930] netlink_rcv_skb+0x226/0x4a0 [ 1464.883145][T29930] genl_rcv+0x28/0x40 [ 1464.887867][T29930] netlink_unicast+0x7bb/0x940 [ 1464.893200][T29930] netlink_sendmsg+0x813/0xb40 [ 1464.898530][T29930] sock_sendmsg_nosec+0x13a/0x180 [ 1464.904135][T29930] ____sys_sendmsg+0x54e/0x850 [ 1464.909466][T29930] ___sys_sendmsg+0x2a5/0x360 [ 1464.914802][T29930] __x64_sys_sendmsg+0x1b1/0x290 [ 1464.920319][T29930] do_syscall_64+0x174/0x580 [ 1464.925476][T29930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.932201][T29930] [ 1464.932201][T29930] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1464.940165][T29930] __mutex_lock+0x19d/0x1550 [ 1464.945330][T29930] nbd_queue_rq+0x373/0x1150 [ 1464.950653][T29930] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1464.956853][T29930] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1464.963872][T29930] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1464.970529][T29930] blk_mq_run_work_fn+0x16c/0x300 [ 1464.976216][T29930] process_scheduled_works+0xa8e/0x14e0 [ 1464.982528][T29930] worker_thread+0xa47/0xfb0 [ 1464.987695][T29930] kthread+0x388/0x470 [ 1464.992426][T29930] ret_from_fork+0x514/0xb70 [ 1464.997607][T29930] ret_from_fork_asm+0x1a/0x30 [ 1465.003124][T29930] [ 1465.003124][T29930] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1465.010393][T29930] __mutex_lock+0x19d/0x1550 [ 1465.015644][T29930] nbd_queue_rq+0xc1/0x1150 [ 1465.020811][T29930] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1465.026927][T29930] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1465.033998][T29930] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1465.040553][T29930] blk_mq_run_work_fn+0x16c/0x300 [ 1465.046153][T29930] process_scheduled_works+0xa8e/0x14e0 [ 1465.052270][T29930] worker_thread+0xa47/0xfb0 [ 1465.057425][T29930] kthread+0x388/0x470 [ 1465.062067][T29930] ret_from_fork+0x514/0xb70 [ 1465.067485][T29930] ret_from_fork_asm+0x1a/0x30 [ 1465.072830][T29930] [ 1465.072830][T29930] -> #4 (set->srcu){.+.+}-{0:0}: [ 1465.080027][T29930] __synchronize_srcu+0xc9/0x2f0 [ 1465.085539][T29930] elevator_switch+0x1e8/0x7b0 [ 1465.090949][T29930] elevator_change+0x2fa/0x480 [ 1465.096282][T29930] elevator_set_default+0x375/0x440 [ 1465.102082][T29930] blk_register_queue+0x3f3/0x4e0 [ 1465.107760][T29930] __add_disk+0x6cb/0xe30 [ 1465.112687][T29930] add_disk_fwnode+0xfb/0x4b0 [ 1465.117942][T29930] nbd_dev_add+0x733/0xb60 [ 1465.122940][T29930] nbd_init+0x15f/0x1e0 [ 1465.127745][T29930] do_one_initcall+0x250/0x870 [ 1465.133078][T29930] do_initcall_level+0x10a/0x1a0 [ 1465.138577][T29930] do_initcalls+0x59/0xa0 [ 1465.143472][T29930] kernel_init_freeable+0x29d/0x3e0 [ 1465.149244][T29930] kernel_init+0x1d/0x1d0 [ 1465.154144][T29930] ret_from_fork+0x514/0xb70 [ 1465.159394][T29930] ret_from_fork_asm+0x1a/0x30 [ 1465.164723][T29930] [ 1465.164723][T29930] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1465.172598][T29930] __mutex_lock+0x19d/0x1550 [ 1465.177752][T29930] elevator_change+0x1af/0x480 [ 1465.183078][T29930] elevator_set_none+0xb5/0x140 [ 1465.188493][T29930] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1465.194870][T29930] nbd_start_device+0x189/0xb30 [ 1465.200292][T29930] nbd_genl_connect+0x1597/0x1c10 [ 1465.205874][T29930] genl_family_rcv_msg_doit+0x233/0x340 [ 1465.212014][T29930] genl_rcv_msg+0x614/0x7a0 [ 1465.217077][T29930] netlink_rcv_skb+0x226/0x4a0 [ 1465.222393][T29930] genl_rcv+0x28/0x40 [ 1465.227010][T29930] netlink_unicast+0x7bb/0x940 [ 1465.232321][T29930] netlink_sendmsg+0x813/0xb40 [ 1465.237639][T29930] sock_sendmsg_nosec+0x13a/0x180 [ 1465.243305][T29930] ____sys_sendmsg+0x54e/0x850 [ 1465.249079][T29930] ___sys_sendmsg+0x2a5/0x360 [ 1465.254596][T29930] __x64_sys_sendmsg+0x1b1/0x290 [ 1465.260083][T29930] do_syscall_64+0x174/0x580 [ 1465.265221][T29930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.271660][T29930] [ 1465.271660][T29930] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1465.280307][T29930] blk_alloc_queue+0x544/0x690 [ 1465.285624][T29930] __blk_mq_alloc_disk+0x194/0x390 [ 1465.291319][T29930] nbd_dev_add+0x494/0xb60 [ 1465.296282][T29930] nbd_init+0x15f/0x1e0 [ 1465.301017][T29930] do_one_initcall+0x250/0x870 [ 1465.306327][T29930] do_initcall_level+0x10a/0x1a0 [ 1465.311809][T29930] do_initcalls+0x59/0xa0 [ 1465.316695][T29930] kernel_init_freeable+0x29d/0x3e0 [ 1465.322435][T29930] kernel_init+0x1d/0x1d0 [ 1465.327325][T29930] ret_from_fork+0x514/0xb70 [ 1465.332464][T29930] ret_from_fork_asm+0x1a/0x30 [ 1465.338080][T29930] [ 1465.338080][T29930] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1465.345314][T29930] fs_reclaim_acquire+0x71/0x100 [ 1465.350800][T29930] prepare_alloc_pages+0x15b/0x650 [ 1465.356453][T29930] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1465.362809][T29930] __alloc_pages_noprof+0x10/0x100 [ 1465.368477][T29930] pcpu_populate_chunk+0x181/0xb30 [ 1465.374138][T29930] pcpu_alloc_noprof+0xbca/0x1900 [ 1465.379709][T29930] xt_percpu_counter_alloc+0x145/0x1e0 [ 1465.385784][T29930] translate_table+0x1311/0x2040 [ 1465.391434][T29930] ip6t_register_table+0x112/0x320 [ 1465.397150][T29930] ip6table_nat_table_init+0x42/0x300 [ 1465.403072][T29930] xt_find_table_lock+0x311/0x400 [ 1465.408643][T29930] xt_request_find_table_lock+0x26/0x100 [ 1465.414818][T29930] do_ip6t_get_ctl+0x77b/0x12f0 [ 1465.420216][T29930] nf_getsockopt+0x26e/0x290 [ 1465.425345][T29930] ipv6_getsockopt+0x213/0x2c0 [ 1465.430799][T29930] do_sock_getsockopt+0x51d/0x7e0 [ 1465.436366][T29930] __x64_sys_getsockopt+0x1a4/0x240 [ 1465.442109][T29930] do_syscall_64+0x174/0x580 [ 1465.447359][T29930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.453890][T29930] [ 1465.453890][T29930] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1465.461646][T29930] __lock_acquire+0x1520/0x2cf0 [ 1465.467607][T29930] lock_acquire+0x106/0x350 [ 1465.472673][T29930] __mutex_lock+0x19d/0x1550 [ 1465.478177][T29930] pcpu_alloc_noprof+0x231/0x1900 [ 1465.483756][T29930] __alloc_workqueue+0xb2c/0x2060 [ 1465.489355][T29930] alloc_workqueue_noprof+0xe3/0x210 [ 1465.495198][T29930] __rds_conn_create+0x130d/0x2250 [ 1465.501005][T29930] rds_conn_create+0x43/0x60 [ 1465.506234][T29930] rds_tcp_accept_one+0x44f/0xd40 [ 1465.511979][T29930] rds_tcp_accept_worker+0x1d/0x70 [ 1465.517644][T29930] process_scheduled_works+0xa8e/0x14e0 [ 1465.523738][T29930] worker_thread+0xa47/0xfb0 [ 1465.529147][T29930] kthread+0x388/0x470 [ 1465.533775][T29930] ret_from_fork+0x514/0xb70 [ 1465.538916][T29930] ret_from_fork_asm+0x1a/0x30 [ 1465.544224][T29930] [ 1465.544224][T29930] other info that might help us debug this: [ 1465.544224][T29930] [ 1465.554554][T29930] Chain exists of: [ 1465.554554][T29930] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 1465.554554][T29930] [ 1465.567876][T29930] Possible unsafe locking scenario: [ 1465.567876][T29930] [ 1465.575339][T29930] CPU0 CPU1 [ 1465.580716][T29930] ---- ---- [ 1465.586107][T29930] lock(wq_pool_mutex); [ 1465.590374][T29930] lock(cpu_hotplug_lock); [ 1465.597507][T29930] lock(wq_pool_mutex); [ 1465.604293][T29930] lock(pcpu_alloc_mutex); [ 1465.608830][T29930] [ 1465.608830][T29930] *** DEADLOCK *** [ 1465.608830][T29930] [ 1465.616987][T29930] 4 locks held by kworker/u8:49/29930: [ 1465.622461][T29930] #0: ffff88803307b140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1465.633399][T29930] #1: ffffc9000da8fc40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1465.646224][T29930] #2: ffff888036092460 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xb3/0xd40 [ 1465.656967][T29930] #3: ffffffff8e9f6cc0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 1465.673287][T29930] [ 1465.673287][T29930] stack backtrace: [ 1465.679267][T29930] CPU: 1 UID: 0 PID: 29930 Comm: kworker/u8:49 Not tainted syzkaller #0 PREEMPT(full) [ 1465.679293][T29930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1465.679308][T29930] Workqueue: krdsd rds_tcp_accept_worker [ 1465.679343][T29930] Call Trace: [ 1465.679353][T29930] [ 1465.679364][T29930] dump_stack_lvl+0xe8/0x150 [ 1465.679395][T29930] print_circular_bug+0x2e1/0x300 [ 1465.679418][T29930] check_noncircular+0x12e/0x150 [ 1465.679453][T29930] __lock_acquire+0x1520/0x2cf0 [ 1465.679492][T29930] ? pcpu_alloc_noprof+0x231/0x1900 [ 1465.679522][T29930] lock_acquire+0x106/0x350 [ 1465.679547][T29930] ? pcpu_alloc_noprof+0x231/0x1900 [ 1465.679577][T29930] __mutex_lock+0x19d/0x1550 [ 1465.679599][T29930] ? pcpu_alloc_noprof+0x231/0x1900 [ 1465.679621][T29930] ? preempt_schedule_thunk+0x16/0x40 [ 1465.679644][T29930] ? preempt_schedule_common+0x82/0xd0 [ 1465.679663][T29930] ? preempt_schedule_thunk+0x16/0x40 [ 1465.679685][T29930] ? pcpu_alloc_noprof+0x231/0x1900 [ 1465.679710][T29930] ? __pfx___mutex_lock+0x10/0x10 [ 1465.679729][T29930] ? __mutex_lock+0x321/0x1550 [ 1465.679758][T29930] ? __pfx___mutex_lock+0x10/0x10 [ 1465.679779][T29930] pcpu_alloc_noprof+0x231/0x1900 [ 1465.679802][T29930] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 1465.679836][T29930] __alloc_workqueue+0xb2c/0x2060 [ 1465.679873][T29930] alloc_workqueue_noprof+0xe3/0x210 [ 1465.679904][T29930] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1465.679936][T29930] ? mutex_init_lockdep+0xdf/0x110 [ 1465.679968][T29930] __rds_conn_create+0x130d/0x2250 [ 1465.679994][T29930] ? __rds_conn_create+0x2d2/0x2250 [ 1465.680029][T29930] ? __pfx___rds_conn_create+0x10/0x10 [ 1465.680062][T29930] rds_conn_create+0x43/0x60 [ 1465.680089][T29930] rds_tcp_accept_one+0x44f/0xd40 [ 1465.680120][T29930] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 1465.680150][T29930] ? rcu_is_watching+0x15/0xb0 [ 1465.680180][T29930] ? process_scheduled_works+0xa20/0x14e0 [ 1465.680201][T29930] rds_tcp_accept_worker+0x1d/0x70 [ 1465.680228][T29930] process_scheduled_works+0xa8e/0x14e0 [ 1465.680263][T29930] ? __pfx_process_scheduled_works+0x10/0x10 [ 1465.680288][T29930] ? assign_work+0x3cf/0x5d0 [ 1465.680311][T29930] worker_thread+0xa47/0xfb0 [ 1465.680347][T29930] kthread+0x388/0x470 [ 1465.680374][T29930] ? __pfx_worker_thread+0x10/0x10 [ 1465.680394][T29930] ? __pfx_kthread+0x10/0x10 [ 1465.680422][T29930] ret_from_fork+0x514/0xb70 [ 1465.680452][T29930] ? __pfx_ret_from_fork+0x10/0x10 [ 1465.680479][T29930] ? __switch_to+0xc89/0x1420 [ 1465.680503][T29930] ? __pfx_kthread+0x10/0x10 [ 1465.680537][T29930] ret_from_fork_asm+0x1a/0x30 [ 1465.680564][T29930] [ 1472.571880][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!