last executing test programs: 5.343661255s ago: executing program 0 (id=4509): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r4], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000940)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYRES16=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) 3.633596063s ago: executing program 4 (id=4516): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xa, &(0x7f00000000c0)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4, 0x0, 0x0, 0xffffffff}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x55}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000004c0)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="01000000feffff7f640000f9ffffffffffffff00000000000000000000000000000000000000000000000000000000000200000001000000", 0x78}, {0x0}, {&(0x7f0000000840)="3c288d8b3b7d97f8c475ed07c88ca0836243c44dddf9e0f57bfa33a44b9d48f76902f42fc722f03e6dd8ce26c87191adc51558ec6f6c4d9098317c377d4fa22032bc971b1f810292053dcf6ac06c8903c5", 0x50}], 0x3}}], 0x2, 0x20004090) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110b00000000000720ac0ff0100000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 3.512169583s ago: executing program 1 (id=4518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, &(0x7f0000000300)="9d99f131ada90be3149add61f0ac661fee838f58baea80a98f1270afa736c8a218be0b8837d4a5f854eb4ec2713015a0902148551eaa1330dd8f469b662956bdd1b87be8b90088197f1524102cb63d272be3968ef0067e54d79b81da9d397b8f696f04bb3379be7f33626d4ac0ed9885f064357aa63d15f3fa3c3fb214c5b692b28ddfab135e38f0d8e5de5ee547b975ebd616aa4f7a15721da1a2bfa1f6d492807889b462bf47d90243d23d61ca885a1128fb6987247af98fb13e85dd79b05f49cf94577f3124e2f914ea", &(0x7f0000000400)=""/211}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x21}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.449573583s ago: executing program 0 (id=4519): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffeffff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000007c0), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5202) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xc}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400d8}, 0x4000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f0000000600)={0x11, 0x1a, r10, 0x1, 0xd8, 0x6, @local}, 0x14) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) sendto$packet(r11, &(0x7f0000000680)="f4efe0430444425a1a9942a2f606", 0xffffffffffffff5e, 0x0, &(0x7f00000006c0)={0x11, 0xf5, r10, 0x1, 0xff, 0x6, @broadcast}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r13, 0x0) recvmmsg(r13, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40018022, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x8000000000000000, 0x9) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local, 0x1}, 0x10) 3.397002856s ago: executing program 1 (id=4520): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000640)=""/33, &(0x7f0000000740)=0x21) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)={0x20c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x1b4, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @initial, @broadcast, @initial, {0xc, 0x95}, "", @void, @value=@ver_80211n={0x0, 0xf, 0x2, 0x0, 0x0, 0x3, 0x1}}, @a_msdu=[{@broadcast, @broadcast}, {@device_a, @device_b, 0x94, "f6a9c41b58bbf7d8a11f74c0df4d97738d1dbc20c65c4643450f56e0890858215f3d01668a974719abe79f784d80a2c1992ddc39e1a1b67a7762fa4e02869226dd45464247dd288066fe6ea6a0d6edb7320839a0d0e48b078e8e738fe22d7db70e315de51e681e7b439b2eabdf925c6ef0d1df6f31169ce853779a252d89e6be651c37aa8e4119be149d750762697696dec61e67"}, {@device_a, @broadcast}, {@device_a, @device_b, 0xc2, "ef0374b17bed350c48b941dfce7eafc74e69785264123d58dc5e837d10cd6c31e3b0294cd48cb3c616b3815d17769fa2cc229cc51498ceadc37d4b5ee954d24ad20cd3738cd16c5727e22dd318612dc7516b484dc8c0350621a5dda30f93bfbb51be401213780170c604d0fb2da421f6b55b45cb780c7deb06b00e33effc85dfd21c98766d37c3e4f2399c39d0fd3cda8e596f4d02625330d7d89be0991627c5e528fd8d26c395eb8edc02f76ac956c4bc5a77e87070cf191f9bdc886883a64cc9d4"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0xc080) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000c40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r5, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x7e}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x8080) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "13696f", 0xc, 0x2c, 0x1, @private1, @local, {[@routing={0x2b, 0x0, 0x0, 0x1}], "d62e06d7"}}}}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650007000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x118}], 0x1}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="4bcc41fe687a4e7c714c8425af3ee10000000000000000000000000000000000000040", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x1003, r9}, 0x38) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e00)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000f40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, r10, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x200040d1) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01020000000200000000010000000900010073797a300000000040000000160a010800000000000000000100000a0900010073797a30000000000900020073797a31000000001400038008000140000c00000800024000"], 0xf8}}, 0x4008004) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r7}) 3.219882718s ago: executing program 4 (id=4521): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x2a, &(0x7f0000000400), &(0x7f0000000440)=""/42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) epoll_create1(0x80000) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000940)={&(0x7f0000000000), 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0x100, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff9}, @NL80211_ATTR_VENDOR_DATA={0xc5, 0xc5, "37b2a7a2d24cef811dcea7a1434406c2e639e83f79595bd7641e9f8902ba8f111e0fb185a84c3927b3dc56b407ea444aa240e87d95d4fd6f055f8593a274ce8d756c019e0c274364a822c85bd3832b67aae34820eb88ecfd8a5f26183e9f75c914a0365352c481e77a9b42fc125f4e0a3d2d8b4b5b71bbb9ed8a52609e8e90ed3be4d1d2934434ec1a6d8e1ef9c2edfbcb690824ca8e5448ef65d1706aeb4f8d3271bfab921050637440d78e92613985de6128c61cfcfdf2fdc16438961b1f2037"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x100}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$sock(r1, &(0x7f00000006c0)={&(0x7f0000000700)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff28bd7000fadbdf250000e000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c00128009000100766c616e00000000170002800600050081000000"], 0x3c}, 0x1, 0x0, 0x0, 0x88840}, 0x20040001) 3.116806729s ago: executing program 2 (id=4522): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa000008000300010000000800010008"], 0x50}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xb, 0xfff2}, {0xe, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000840)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0xfffffffffffffd78, 0x1, {0x7, 0x108b51, 0x4392610, 0x2, 0x0, 0xa, 0x2}}, @TCA_RED_STAB={0x104, 0x2, "0a0c00000046dac48f29d158dbe8cfb1979e12979688dc839b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f26aa8867406119c2a6f1f892e31dea982c5ab0348d56e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a8a84f1d4d132f5bb7edcf2d23642b625b2345db6b6cec3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d100"}]}}]}, 0x148}}, 0x4000010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000cc0)={'erspan0\x00', &(0x7f0000000b80)={'sit0\x00', 0x0, 0x40, 0x1, 0xa, 0xb, {{0x46, 0x4, 0x0, 0x5, 0x118, 0x67, 0x0, 0x79, 0x4, 0x0, @broadcast, @private=0xa010101, {[@generic={0x86, 0x5, "bbb3bc"}, @lsrr={0x83, 0x7, 0xd0, [@remote]}, @cipso={0x86, 0x2f, 0x2, [{0x6, 0xa, "8e14086dfc551fdf"}, {0x7, 0x4, "a7be"}, {0x1, 0x6, "f167d6dd"}, {0x1, 0xf, "d246651a8fcc454bbdaf89720c"}, {0x1, 0x6, "16315d3e"}]}, @generic={0x83, 0x6, "75707416"}, @timestamp={0x44, 0xc, 0x45, 0x0, 0x8, [0x7, 0x3]}, @timestamp_addr={0x44, 0x4c, 0x60, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4}, {@broadcast, 0x66}, {@multicast1, 0xae5}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4}, {@empty, 0x5}, {@multicast2, 0x9}]}, @end, @lsrr={0x83, 0x27, 0x85, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @rand_addr=0x64010102, @broadcast, @private=0xa010101, @loopback, @local, @private=0xa010101]}, @timestamp_prespec={0x44, 0x2c, 0xc5, 0x3, 0x1, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x80000001}, {@local, 0x7}, {@rand_addr=0x64010102}, {@remote, 0x809}]}, @timestamp={0x44, 0x14, 0x5d, 0x0, 0x0, [0x7, 0xff, 0x4, 0x3]}]}}}}}) r14 = socket$unix(0x1, 0x1, 0x0) r15 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000d00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r15, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r16, {0x5, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0xc, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4f}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000f40)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_STAB={0x4}]}, 0x30}}, 0x4000010) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001380)={0x174, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x44048045}, 0xc0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x0) 2.926373236s ago: executing program 4 (id=4523): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000001680)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = epoll_create(0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x1, &(0x7f0000000180)=@raw=[@ldst={0x0, 0x0, 0x4, 0x2, 0x5, 0x50}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000200)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r2, &(0x7f00000002c0)="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", 0xb90, 0x4, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000e80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0xa) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000ec0)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x8}}, {{0xa, 0x4e08, 0xffff8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000001000)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000001140)={0x4, {{0xa, 0x4e20, 0x38, @mcast1, 0xfffff511}}, {{0xa, 0x4e21, 0xcd7, @ipv4={'\x00', '\xff\xff', @remote}, 0x2e}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000001280)) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000001380), 0xca}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000013c0)={0xffffffffffffffff, &(0x7f0000001400), &(0x7f0000001440)=""/53}, 0x20) connect$inet6(r5, &(0x7f0000001480)={0xa, 0x4e38, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000014c0)='wg0\x00', 0x4) sendmmsg$inet6(r5, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001540), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c099}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r6, &(0x7f0000001780), 0x40000000000009f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001800)={0x80000014}) sendto$inet6(r0, &(0x7f0000001840)="8b", 0x34000, 0x0, &(0x7f0000001880)={0xa, 0x0, 0x0, @private1}, 0x1c) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001d14ffff"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 2.487980921s ago: executing program 0 (id=4524): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, 0x0, &(0x7f0000000300)) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff5667f, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0x3}, {0x0, 0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000892) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14000080}, 0x40000) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000db0f0000008e98f55785c605d71f69a5fcd08be9e96513b1c30100132a2c"], &(0x7f0000000080)='GPL\x00', 0x10009, 0x0, 0x0, 0x41000, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x1, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x35, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x4381d2cb}, 0x94) 2.397835466s ago: executing program 3 (id=4525): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000001c0)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02fa0000000000000000000000000014000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001c000f8008000340000000060800024000000001080001"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x58) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)=ANY=[@ANYBLOB="a8020000100001000200"/20, @ANYRESHEX=r11, @ANYBLOB="eddfa43b11000000880216808001018068000c", @ANYRESHEX=r8, @ANYRES16=r10, @ANYRES16=r12, @ANYRES16=r5, @ANYRESDEC=r4], 0x2a8}}, 0x0) 2.371612979s ago: executing program 1 (id=4526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0x12, &(0x7f0000001e40)=ANY=[@ANYBLOB="18080000d0ff000000000000fe000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000ffe800006608000000000000180000000000000000000000000000019500000000000000180100002020682500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff3702010008000000b50afdff00000000850000000600000095"], &(0x7f0000001f00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 2.268161877s ago: executing program 2 (id=4527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x14}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 2.002420396s ago: executing program 3 (id=4528): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000540)={0xa, 0x4e1e, 0x6, @mcast1, 0xf9af}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000000b80)="357cba1b73403d364d8c987ce1258be7dd6b6b7a38a8cb1a6b0ddd6a5082a5eb838a272355b5c6b6f7a64be3789c7d93aef05c0273a688931199b79bf2379d029099c60c7a7c80148faccb937faf9a985c093c87e9b9a173e9742b485bfb61d06f79c0b67608ef3d0951a2b3e15bab754804c991fb833e02c57e574cfbebced6d48cdfb0f907f176fab9f45b5d2da07f908070d3c7a596fb9e6f92ba9ed1739fe5b928ecea3ea51d55a4515958160b385b5f1e796dcdf0fdd84c3e4af3db0fefaef8384341b187dc3ac835a948ba1cabd3aa75d31f8e510517dc87cafe9e816d9ac2bab2ccd8bfe9a0c87ded931676eeb18e284d03eabc66c32a567603f2e3da1089d3c4071c87e1fc4c1d05f2c452e4e0f97a8d8bce6b22a8f771296c1f8dff6a65dff4a863f766ad5005ac62131d392350b8d0a6924820b2c0f6f58f98f42a2283cc683c1959a6e707610a103df6b6088e86d7bd9ab4835ab0715d3b1054a03d95d3d5ffd9730a2e9740809e9725e27c0a03f6a655d508b23d9925ad74e1db61be9c08dab790b71ec0deafef2068e28081000000cd45af8ccf516fe04c806bcae0ca63f662876b9a0182713c00019e16390b197bc5a21b319ae511a7fc9b6d71ca4e0a8b67ec6e12a73079e321e2a378193257f6d792f57b1879d47ff13b8e4f523b8386d4a1f38f531a33dda0dc73", 0x1f0}, {&(0x7f0000000840)="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", 0x2cc}, {&(0x7f0000000d80)="05c1659cd8384bed1952f87aee436499fa0988d324c820131dfc09a5525084c54c80daafb19e01c19d382f1eaddce35b6a9fdb7e6eafbbc70a63541d0614a6ce1d804b478885b6b06b515e2a1e34f46534a959f4bd4148489ccf9178681545dba6b6b23cd387a97ef472c216ef8ecf8c1c00a0c683ba65b38a7a451e4235a3b229f8ae247b05d38543adb135638f133433181b6e02f745d3dbed925f00b6c487aa4711f4cf0d6bc756af24a96f1daf08c1ae0b3acaad862f695d72c9a861df857fe8014d1d4c7d5781f98922ce6745828ab7255069af9fee4da66c049588beadc29dae82da3dd3b07bbc181220", 0xed}], 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000002900000036003a0045000000000000001400000000000000290000003e00000001"], 0x30}}], 0x1, 0x0) 1.932632075s ago: executing program 3 (id=4529): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0xffa9) sendmmsg$inet(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_buf(r0, 0x0, 0x27, 0x0, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 1.779881038s ago: executing program 1 (id=4530): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e24, @loopback}, 0x10) connect$inet(r0, &(0x7f0000001040)={0x2, 0x4e23, @multicast2}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x19) close(r3) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xe9, 0x4) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0x50) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 1.778636716s ago: executing program 3 (id=4531): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x3) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) syz_emit_ethernet(0x1d, &(0x7f0000000100)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@llc={0x4, {@snap={0xab, 0xaa, "eaff", "9a823f", 0x8914, ';\x00'}}}}}, 0x0) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}]]}, 0x30}}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) shutdown(0xffffffffffffffff, 0x1) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, r6, 0x8c24381a3d4a0b6f, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) close(0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.771698705s ago: executing program 4 (id=4532): r0 = socket(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}, 0x10000}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="540065efe505d190b93f0000000000000400ffff0c00078005001500080000000500010006000000050005000a00000005000400000000000d000300686173683a6e6574000000000900020073797a3000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001780)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf251700100054000680140003002d3973353a5f2d5d382ee5364c4323843c00040067636d286165732900e8feffff0000000000000000000000000000000000000014"], 0x68}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x38, 0x1412, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x6d}, 0x1, 0x0, 0x0, 0x80}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x25a5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000000000000c00024000000000000000010900010073797a300000000020000000030a01020000000000000000020000020900030073797a320000000018000000120a010100000000000000000000000904000480140000001100010000000000000000000000000a206d33384503d78b8014ed424d8c3ba87790eafd522dceb2be52f225bdf0da089dd428242e8d119e30bc3e9a32024ec363756d5799b55c5162e956b53d2cb7ee84c833f1e74c3c97f8af82ec5217b3618ee8a51c413ff923a50473bcc1d65f33a3dcd80bbfdf1bc0e7b55e2889bcf8ee"], 0x8c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x64}}, 0x20000000) socket$inet6(0xa, 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc20001180"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019008400"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000440)={0x2, @in6={{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff00}}}, 0x84) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000500)=ANY=[], 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.673291371s ago: executing program 2 (id=4533): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x2a, &(0x7f0000000400), &(0x7f0000000440)=""/42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) epoll_create1(0x80000) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000940)={&(0x7f0000000000), 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0x100, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff9}, @NL80211_ATTR_VENDOR_DATA={0xc5, 0xc5, "37b2a7a2d24cef811dcea7a1434406c2e639e83f79595bd7641e9f8902ba8f111e0fb185a84c3927b3dc56b407ea444aa240e87d95d4fd6f055f8593a274ce8d756c019e0c274364a822c85bd3832b67aae34820eb88ecfd8a5f26183e9f75c914a0365352c481e77a9b42fc125f4e0a3d2d8b4b5b71bbb9ed8a52609e8e90ed3be4d1d2934434ec1a6d8e1ef9c2edfbcb690824ca8e5448ef65d1706aeb4f8d3271bfab921050637440d78e92613985de6128c61cfcfdf2fdc16438961b1f2037"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x100}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$sock(r1, &(0x7f00000006c0)={&(0x7f0000000700)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff28bd7000fadbdf250000e000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c00128009000100766c616e00000000170002800600050081000000"], 0x3c}, 0x1, 0x0, 0x0, 0x88840}, 0x20040001) 1.607871582s ago: executing program 0 (id=4534): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x24020400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001940)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @empty}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000008c0), 0x35c, 0x0) preadv(r9, &(0x7f0000000900)=[{&(0x7f0000000940)=""/4096, 0x5}], 0x3f, 0x0, 0x0) ioctl(r8, 0x8916, &(0x7f0000000700)="76657468303a30000000000000000000020000000a") bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff0d00b702000008020000b70300000000000085"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl(r8, 0x8914, &(0x7f0000000880)='veth0:0') sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtclass={0x60, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}, {0xfff2}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x7f, 0x1, 0x3, 0xa, 0x800, 0xdc0d}, {0x3, 0x0, 0xfeb, 0x10, 0x2}, 0x5, 0xf712, 0x3, 0x6, 0x7}}]}}]}, 0x60}}, 0x448c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0b9547ed387dbe9abbb9b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, "d9298498abdba7feffffffa34c226af5160e961711a03760760beeab91e8ff00550cfb38474b63a70e3bd43a847a1597c8ef03da5be4220000003aa900", 0x23}, 0x60) listen(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) 1.430097189s ago: executing program 2 (id=4535): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1, 0x1, 0x3ff, 0xffff, 0x80000001, 0xfffff000}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000140)=""/143, 0x8f}, {&(0x7f0000000200)=""/223, 0xdf}], 0x2, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x140) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, r6, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x890}, 0x800) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r4) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r7, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4010) r8 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d5e3efefb136dd8}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000740)={0x1, 0x2, 0x19}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) bind$nfc_llcp(r2, &(0x7f0000000880)={0x27, 0x0, 0x0, 0x7, 0x5b, 0x5f, "c0cefcf1563ea0688c6bfe477c0b4e45a86986500280518f793a8d89beddae9240d4442dcb9b2d79a8fe15a4137006b25401f38c5db6cf6f824f4a10f03012", 0x25}, 0x60) sendmmsg$inet(r1, &(0x7f0000003a00)=[{{&(0x7f0000000900)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000940)="fae49e6c865f74d4142c43f4a20a52be157a710410e47b245022359f32787ee06cbd8c5386200e569aaa6163039e010993796602fa6683fc0ae767c13db3c3362985e3c7ecd15d2759012406fd0ed41c68e116fc7e6273cb959705ef90209187b0d675aa98121df47ea73c9eb9282899679fb5bed6778bc35e045bb7c62e03df77c8623b0c447e588916a5af3e8f51bd6f371e0817dde9b0622ac1f9e391c6edbb5e2fd540fdba952939f11591cca71b7f4dcf733e0b446fb403f3faa04f7f617ad0dd8b77108935e01fe78ad6c0cd592d533e27d49b64545159ad8fe69da4c52bb6e98ddc5334d2094694d0e9f83e4afb0569d5bb68501363", 0xf9}, {&(0x7f0000000a40)="bc36912b3a98779f0409c622ddb0877f8e1a37536977047a4c4c709497df79a88f8ef92528bbc4548b3dd4d0011014a5e12b3fb7a111a6f593f72679be4b02d303ca08746be97ae1494525e516068b83f13c26753eef496710886855597c0f5a869256c085487834f4b90b3c87fcc73d1f06d52275f16f2eb9a8a8b00f576ab3", 0x80}, {&(0x7f0000000ac0)="c15601fdf0c6aefa90ef622ed975e7ba6a7d7ba4ee6df82e668c5a4eec696d84cddffa384d06e3c99bc4b95a", 0x2c}, {&(0x7f0000000b00)="b235e69875b56977805bf38e0edfb435949860d9a5c5206b214562a5802e02b04c869628edafb57c845fbb0a03bd9c1dd920480035cc4d3dc14e222ee8a4345dd6da58aa4cfb8fea22f4a00537eb0e8961cbb6fa4ce5e00aadf97de946", 0x5d}], 0x4, &(0x7f0000000bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14}}], 0x30}}, {{&(0x7f0000000c00)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000c40)="fe7b7573cbb5849d6153124519f3a505df3c4f956a26232a0c5ae11c0889e9799a46ecab4954b8d2605834d7b781c399352059dc5bcfc6855c7c819c70b264d8506b3af74d89196fde5c5fbd9cfab59ee741e00245f54fc7ff435a70ba6e51", 0x5f}], 0x1, &(0x7f0000000d00)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x60, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x16, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x32}, @loopback]}, @generic={0x89, 0x9, "a9ea4fbde4630c"}, @end, @timestamp_prespec={0x44, 0x14, 0xe1, 0x3, 0x5, [{@local, 0x321}, {@remote, 0x2}]}, @end, @cipso={0x86, 0x1b, 0x3, [{0x6, 0x2}, {0x7, 0x6, "084daa37"}, {0x7, 0x6, "fb4a9238"}, {0x1, 0x5, "2d921b"}, {0x7, 0x2}]}]}}}], 0x90}}, {{&(0x7f0000000dc0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000e00)="52994605e87c25dfabb413e714c13390a6f0b34fa6501e43195274032429315e01a808b9706b99a71503ebe450db41b86a268e743e6f4f1e9dc4bf7ba4d4df644a4d5e", 0x43}], 0x1, &(0x7f0000000ec0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}], 0x68}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000f40)="bd8e5c44be38598702a8b59e4d3d7b2fc10b04db15a9b3ae5cd339c95219281f7904770ae7dd51fe0e35272aea70bbb6355bfa06c8f124e05a557c8afcb670367b", 0x41}, {&(0x7f0000000fc0)="3e54349f26fe35065e2b363d1ee37897d12e18700d3ef2e7d1f2229a6168c44e24aed1bbba4490b40e3074d2b2ddd4125429e831312bae3ee90479a672db3c72cfff4c4f05babf4a8ef61269dd067c9ee696db060568caf20715cb65a387299c47d2ed085dc1685df42e749dc87f06e74eaf4bdd7dd37d5a90922bae1170d192248c4daf07d58d9e4b303b6dbb59955d9ed285870a9b019ac700fa85ec5fe70f710130d93f1eb47542fa1bfbaf7ec9d1a45e3fd873ecf2b4d07628415224876708840431a51dbead1b03f9cf22d996e62d37d2a074adf10a56209dd46399c3859eafded408392e088fd876a5a11674296ec02ebc380583b1435a4e1715f3f8f4bc67d866c05c9a71d9c4b5b391ec11db3451ebf3dae2022d5ca8d73cb57607e4240b4dfc606f8184a89b12aa0311ca10496238be6ab03a476588dfd3057b87bf62110e4b3e8c6ebc066f6f78a9a208037aadcf49871c513b873b2593b49b62c3fcec269f54feccc4e63cebd9db05416be835ad375fc4cab6072b1c9817aca8d31c4afade1505530a53da1177dca48c9b49db312dc88c42178f6fab9d692b3d7bec1e41c5634ded9ae1cde876abcb0b9c235915f10dd0c5a52991a06b19f2971b46a783680ad2ed9abd89e793dbf93a8a53ecd4e0725d88e43c9041691e40765ba6a9dca67fd8f83e68d515dcdd1ff00922999c7e6c6691d625c6f16a029c5b736accbfa7e337515c78329a2d8489567619b1bc61ba4754725e4e067342ee30cf138ed9ed9b8f81506ad8d79847ba511c8ed8b9aacf9938d49dd1bb8cae7a1cb2ee9a6047f492db25b7213e152eff8250b087f168a1ba176b7376a6ebcf17854757af4cf547bc22b067be7844762c3234f2145c34dd47e69db708d64c42a053661abaf0687bf079d9e67bfece76ebbffcfc057b2b09c4433c0ecd81845218165b9b952a37e787d7d10da1d988a3e6ca2311c825472e2d3ff5b0ad338cfdd468536f106273b3752db9d49d2f69ea20d9e5cb9184003b882c7d2ce837f804ad8b5f16a09cdcb5fffbd31577fdfdc2b39e142e2b30e6418072bf3e625a023cc52f620a5273db9d21dcd3d140c2a0e8cb6d00d2a9a53393d5eb21d2a173ec520cf05efa1ee3627f78f57075571e284cd8d45e07e62e4d9b8d99d77008ac3a320a3ff0cc6dacc2e3fea2c8ac14765ca223a48b731c57994d77441f800638530827f33fb789edb2c53b2cf130292a37d7e0f2ba9843a227d849e97f583efa2eba7d11573f3f10bca45fcb8e38cab2da5e0db09dc852785b18b637de62c54f034afeaa210e0b51b9b8788149ac7e462a275b1b91096adeb15339c35f0c33358d2306aac60f38677946faf226319b860e913f3f51881c48c2377d2b35e5f036461693f3f630c66f9a058f9380583e60139d9048d53a48ce6469f8178b43c1156728ff2f8b3370f193332f1b548d27d805ce476252bc204380ac62c6056572abdc937fe7b4a85511b005806fa8aaba344fe68d96444bcffe55c0085d3100b7c13c69c3347a08e38cad2693cb01ad86e48a5a2213628a68eb192975d5c78e9d7e79f8fe960e5832c33ad09ed3bc511a34bddc5e9d0df174eaa7fa19ad8a40369d6c2508b0064872303eb6599954582fd742e80c9a9f2ff9e9df56dc33695ff45661547ac09f3729996ceef4dcefffa0da7e02cd4e5ba8ff73f273d0e4f4c0536a1541ada273405560266e76e92a1e8577abba563b9cda6b6d45c12d98aa2e08e8c9afe5a55a0b7985c3b2b15712b1e4bfad32d58ff0fcabf1795f48cba14dd9c3b32bb4ece36a657fb5ec40c9242c1d49b84ef322415358b81fc17325cc01c0b3d6da369bd1631e93f6f6d91c9ba394db96fd6d65b2452d554d3932fe9c91e1b339fc72ecace4e8abb455bcdb73a9feb483f008d763a638cace2e99530a63078820508a841eb4fe44883a0648a607513e664566ff69b7fd65570fbcbfa65dc50686c9cdbd972cd4d66a20ef8923e25e5fe945fa67b7ec76bfcbcb5031095c046a094c28fd660cdcbccddef8a4e07dd650f984f80633bb8ec2e6e332135cf538f4e2a5f60c05e495b2392d9fc1141eea8b42f634673bb6e37c386f58f5416819b33129ccae7adceb2811a48cbbd174e1e246d760826eac83d59e79e990b9d800e70aabdcf69dfb4d64aaf1e092781f9303ea0e4745f54e4917d2efafa0d65761ab6dbff8b93179bbd2fe1ab39a566888cf4515198824eeabe0ca74220f028bdadbf229f1649578b5c75bddccb256dbf1f550ca454727f4b24d14ac6c471f34be65dc821f930bd498ccfefe4aede0323c0d5668b2dc413ef77ff0eb010cae18b32dd1e62c1aa7bec9ad6bd77f656a609214ed13601109672b2a96727d2189daa39bc8ac7a746f9b7924e65f9752de90418fc52c608a87cff8f5e542b3c0337efb5049f71b075e657fc99285b6ef647629f6d0414203fe79cf3dac52db2a014bbb56b14aa63bafade721339209ac4d71405b9b3ec36bde74c5cb7eeed8f51bc5ca4337c097ffba9746efc39256d88f5ab37ee9d7f9389f9d6f40d87bd5d552cb89a84597b1ba864bae708549d8dabe5bcf0d65c4fa95949de700932bb25ec85f50517e2abb73939e736e927bcb35c0e64b870dc8b9e160416a2e26a3a86d00309ea42004b629b28d746839557690733c7e77b4cfa560e7638cb88d722317eea0e512e78d04843f5fd1ed75ca079caf42f4492a3f4bdf60d41417e79dd61bf64b14cc115f000cf5f112df7f524ef1ca888e278bd084dd1ba86548537fb2a2b6e61862e04fb17e3e8613812fec8b5ac784bc6195b0f684bf5bcbd6d84f445c4d297dafc09efeda30d34f3a5e9cdcff0d60aaa59cabb25d27266db3ec83c3120952db4aa7c43b2a78ba3093a97693b972f215c4c730c7caba49592dd3f6a5b2cec84e9623e0e4ff1d354fa86e783ceaf33c56cc9e79ffec7169c8e7dfde3e1a43d70f0136317274717fc5f9a51fe784d2aa419729dead2920167311e87c0c850dc0cd5533eabe57ddaea515200735208d933488b2674aac78fca44757e9f64de8d5e7eb36ac89d7daa2368ad2410c7a80766f2b2801152872ea409c6198d90a28891ee7731ba3e158169c6ff4b3502cf6e740649657a62801a83e278ceb996e2589ed6baaab6490b1b37464469e6c92d4f2f36fca922bf2bc3605036c31f839737ab18e48c1cb9e43880936ae57b4aebde03e6ac320af07415bfde6acdbbd66d9b0fb7352162022f9a14a531284d6a2a34ae2a176084ec3f970af16d55d36c6376e425fbbe33725303912ecb289e50929f7bf1fd766e3e378ec72fbfb4aa23e36af93071645b4ae99588bfb79e88a8c8b8332ab3ffa9d50e9364a43e77e1402499ded7958c0dd67c0670637a33e559cdfc03fb72d2d225ef44dee7e90f6dc87ec173c79206322d0f7276c2a902fc3b4a9b8e34db030411e74c2a2c9b6859fd5d9d1c8ee56e374a8c6e559d3182dcd9af073112baf2dfd0322c245c3139d21515d948c61694d8159b57610787d027c0daba300a23b4f0c4bf33e6b02d669b65b33ba05dafccf166b528e237bce74cda87b67c4dccd93a02c7258a0f0d48473aafad1ac4fcac42da5f8543b7c39fbcc88ee68d88744d7f33bca5ee99ed3c4268c88bbadc2f027868d4a0df1df0360b7fe4bf4d0d70fb268f781fb10ea3bf7e63233a6a780bdd54013b6c826d097d749af9fe0552fb2c9a2dcd5070c777f3cfb94df66cdda6f7b25150b1ac9f4ba7b3787f55f61b5a91f8b98b11994d92d49f123642e576297112c3f9344f65df6cde1d0c442e3dbf31f50933abf0e4b08ce4a078cb8b9197e22a5b29d39bb47e89d0a727f1b68f1cc030c95bf39f7424f24b3da5abdc945166d84dab2c8d866ca48beaee4911d3fc8b3faf95559bd6861735065e3928f374ec526e6ed29c83e44e3e336d1a3e52ddb11f78956922a8513a77ef5329a4e38f77075f8420ec794a425b169923b3643a671ec2f4d377bc767d269f211dcd38232a867a5ef3ec32f3c4057fb7f7b2a78551c1a43c34f115e10fb992a79fd821898db51ab7f8a32bf42efa6a41271116ba16ddd826fb3afd3ac553d23609a54a745d2eb9b7e205a1efc55df9edfc10744e2be3f1f86ba319f51f0416ef537be1d99e144bbd2c305476312531a1a244e2ec87bf4a42c0540f1a7990c177f5749fa20a8ceeaecc5bb8734935bd58abf64f9141c738ee9e87da3c6fda0530f6d94c0b1aa6bccfcc6709a81a4c0939b9a75f67238cc7927a147695ca6d0aac6200b3da3eb84f120c1834d982528f91dc6e03f6790e39aa890f37fc4e4b8bd079a913b1150babe6eb06542b3e0416e6944c5fd66f47498bb88d2da32c5760efe1f9ca09128caa1a55eaff8cae3e01496127e0fd23ef35be35b419a99f29b8ab6845626476b876cd1e7cadfd2dda415923ed950ac3907c303207b0643b59aa076bfc1dc2fcf12d5d6aa2fe8ce79dd2c8b3822987e390eb5fa67be2ee323e1675a8c84f86b694b892c789a34ff09ef8d63c50eced001d8c5b7e2ae403e4a4586c1c2a40c04098faa6d53d6d8c9f049acf8d587fcc3c385a3f1f83d3ac42f273a3b589ad3743a327ea8b3dd371efd8595b270233edf3d421ce691a09ee373c825c1f2fc0c079e785fbe1efe3d373e7695ecaafbfe5cf37ebfb12e0d8b1ce22cb4b2d6e05f620c4381d464d8db1cce5638d86f8b5e3f1de679f766f2b56666bb9c2c3289dc6bebcf266193ee9c23f0745aa01b5e65548b211ffa63c6116c1a48c3a72649cdd4f825e184ac9a857d7d296d2e9bb231383ef5defefb6cde8651d3d6afe176d1c021324ad2cbb41f2cf51f2cdcad03684d1bfe600c527297bb376cef085fbb5440e6dffdf4bd97fb6e3b1e60e38405d91486ad0ed83dd7aa2f9933688ae5dea7a921ad5850e9a1f030e4ee58f8d32d4579e18cfe5e1c26832d0714a9464c7ccdceaf5e03c34b17398fa3ce07fc439c7d91b459b839d9522f28606c7bcc718ebc2023f914dfecd803b1378de3491021c588fc43a565ff10a6d74455f6ed36a51ca72add6b846cb6411e78b7b77416cff57bd59a2c6951079ed9bd2265a66c303d08aaeae3406800745a27f95736a228fb143765f7c7a8fd4b43f49a3a7bab590150d87d41e17eb15e369413668a8766b15db793cd71772b5e69353a3007c0d7c382f2fc648e643e20bfc8c03c1a75deddc635baedd2a4a6e6e5a2041e4c784d949017bca4bebc4b3c7b9b4b0302866e8d933341c359355730ee0ac6d4e539ab4c459cf27ef5a31da988d4afc6a663368ae1b1e4b078cbf0e5a6ca856518b9af5c158cb762a98e05f5fd0b339fe268e4fb07dd64596a827afb5c710b2893803c08e7dd3d8631d30e523817edcf40db405ebdf9e9b0f78e2d174ef6bd4fa5ee1c25cf17a7b1f83bd7d99620f04ecb743269df2ccece64c1a77a7146b2f3100fe9442fad5443df4788259b5f52d5d6c9ab0f7a4bc6d174e007e4e7224cbb4a33af30998d972315c6e53489b98987e577aab5f5cf972f70ef09ce416349c53c6ae6c8bda03868314953482dbf6e12a0931e17e1686cf4ca8119a5867a64ed6fa4514ac8955b1b81c040cad759fda539aadea120b137b70885cdb756c45ff2294c534386b814c56ff3bad5ae1778f470976be48b3a7af17a6281a3fb5caa5fa71d35f6ac13fbb67c2deb1ddbc6f761121b21fc7813edc3b51b25c02c69fb3cff9dbd24e1e6db5817027ee8367bd2eead9959508e94eb16c4087d3deb6c7f77b51f82e97f6a51399a", 0x1000}, {&(0x7f0000001fc0)="fc3d4fb522d33496065b1505cd1fbf05e1aac9369a484201183e2f921a7cfb371e404dae37ac8c7bf988668d1d3276b18608da1f466485cb33735fa6bd4de3b81c750595cb6bf8372ddd32fc22256cbc78dfb076bd8a9352e0d23b1c9b", 0x5d}], 0x3, &(0x7f0000002080)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x83}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}], 0xa8}}, {{&(0x7f0000002140)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000002280)=[{&(0x7f0000002180)="1935b9e4034b6a2aea7a8ffdb1fa1985863d9b52240be84880b4485bedd6889e0955b982406cbb98c5d486fafb2c6601cd5b2214d0c0dfe443da5fb0b11434b8ac800157a15c786cfec26d2a505822a9348e6f326cf3fd50b72759e59eed8112e1bae1b206129b3226dbeba9649b631bca058b7e252781a2676ed1304922bdbebe94d314bc11144aac9f7e4349de7c979a14947858a82969e12e73b57458360e97602b84aec873d81bfa86c243c51d245634ea6431afd9c5ab84e790c74ed48e2a38faff03dc682d7cebeff3727eaea19fde43a2a26ff9eb2bcdc5518e10f29cace9425f838c5825fbde2bdf4c72879dc08c64", 0xf3}], 0x1, &(0x7f00000022c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd6}}, @ip_retopts={{0x54, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x13, 0xca, [@loopback, @local, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x2b, 0x9b, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}, @multicast2, @local, @rand_addr=0x64010102, @multicast1, @private=0xa010101, @multicast1, @loopback]}, @noop]}}}, @ip_retopts={{0x10}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x4f, 0x0, 0xa, [0x6a, 0x9, 0x80000000]}, @noop, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x7, 0x4, "738d"}, {0x5, 0x12, "d94410e25577961a98f8f1a859eb1fe3"}, {0x0, 0x10, "5d0f8173d9ba9341260c5049495d"}, {0x1, 0xc, "927daed37a17167a88c3"}]}, @generic={0x82, 0xe, "701b48eb8d3a7d7042ae1756"}, @cipso={0x86, 0x24, 0x3, [{0x6, 0x7, "2364da5c4a"}, {0x2, 0x5, "c42df1"}, {0x6, 0x7, "7ac0e3bca8"}, {0x7, 0xb, "7fb9de60f4e58c6777"}]}, @end, @timestamp_addr={0x44, 0xc, 0x1f, 0x1, 0x3, [{@multicast2, 0xce}]}]}}}], 0x118}}, {{&(0x7f0000002400)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000003900)=[{&(0x7f0000002440)="688b3967ce1e83530b73b5c3f6141ed53bf1b7bfe8d0088e7ab8e5fa2008a2efdb3381e32b898e6c379f098d53f0", 0x2e}, {&(0x7f0000002480)="029a1fab5dbe37d5b099e77b6e5665217a1651041890a6e52648c7abca8ef326b47a6c4fc9cceba609aa8013f97771c946c67df169fb82cf603f0c0ebb786476ba0cc268", 0x44}, {&(0x7f0000002500)="bd153241e1dd15bc0174315bf0ba930a13b774adfb47d9ee631fcfff71ac24323f6f6026b1c51b2607b352e57b0b4d6ec679e3e10ca5c9e15c496ed86fe21165feb8af01a055e1236e2f5fb411f5f8523f450777cf8848495550943222ea4c9ed796", 0x62}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="f4a49db32ef8526f4a843591324998f45085e3c95c7fc184b3d56b894911397041854067f54a5dfe6d5a9da37ca26cbf469373a8cfa4ff91693d8cdf5c7666ef439e3c8b6ed737ffb9305ea51949ab52ef1097c91fba8ed434c08a0f62338ae93af3cd774e4524319918164cb6750e28c532d755a34baa5009bef934650606b2dd06b61604625f7fc8365726dd5ce26de15d7a1ac1f27237aab820fb8b165e8b285ac4bc00039064ab5eb38289d511d97aefe802a10f5a0502fab106b17aab8f02d71d83cd8a8dca33d0d0c806d97ad1ab2bfc27035ddc72", 0xd8}, {&(0x7f0000003680)="e9a5537992dbca3d0da55bdbcdd01ea30fefc0ed4c3db86d054032fc40349e9d40cfaca52924be45af19747c0af2db1d21d85223fa1d0116d86d5d0634bcea399f94a962dfaf773a35b7e877efe209ec9bd5475ba1dfe6294755004fcd0916381f26ffe20687575a15c31b1b31fc9656a13b86d961", 0x75}, {&(0x7f0000003700)="ffc4bb853a435c87be0f9d7c5f05e98113254ae666e76030e1fbb782bb42c33e181e7618b93093a77a6914a956aad231826dcc4d978757077afd87978987142a6d5b74232cda8330b12112ffdcab0c2ed44e3954654075f6f8a046c451d303cb16c994f0e710b5a74c14685e910a517f9c21b1b2e4955b623e8cf9df6282e5a33654de126cfb6cbf6511", 0x8a}, {&(0x7f00000037c0)="5d8ad95d212e6d08fe26d01631c805b5e8b477cbe08bbce97acfc73fac4e04058acbaa52c32e638b8f190b5583486e8959f86c735c00daa8cb1f5c0d3aa3eb3c0108a0eb7ad9757a46501ceb3436bd1f0b4b095a0a606e806486ab4db537ee0ea7a383215f66b54cf35f2fd510c578b2df8f2bcecbbd65a8fa", 0x79}, {&(0x7f0000003840)="c1795fce0694d4b8f7162ad0bf78eeba07a791cce5e8b2de93e6ce993b53ea7af33527c441822b34", 0x28}, {&(0x7f0000003880)="8513ce37231dd5d4efe91e7b01276c5eb6d5133663f06377da28c4a098459274dd5c39294afacc65efec43d64d8fdd0d8825ca85582b2b30ff44a17a1a5beec5890026015ec2229023c3e1a723e7cc01bba28e90c84593acbc6838fca898b45ddba352929cc1f30351d7d8a59a50946517c11f215b", 0x75}], 0xa, &(0x7f00000039c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3d5}}], 0x18}}], 0x6, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000003b80)=0x2) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000003bc0)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x1, 0x2}}, 0x10, &(0x7f0000004280)=[{&(0x7f0000003c00)="832cc615a8c3535ca7eaea91a0fe81b5ee9d71243e444348c8578318fdba7be4737dcf1c6d4115fe4ae7baf91883636a8741441f1e6ac60ad5b1a328efbfc14fd707aa6aca8134b2497f9c4ced5e23ffdb5b4743343e1c439e5b4c2cb472eacac56efcb3c36454cacdb839e3f738e7762c6bd86e56fb987543f5e856ac800faee672c382b9999074a7f61da7a16a726c793bf6f56414ef34638812aa088d50dc1c33", 0xa2}, {&(0x7f0000003cc0)="571dbce0385fd403b4afc1cfaf5d05adf4d3a4f9a58db817c1a2f1e02730dbc3390dbf58001def7a65b9724f32d1750eeffc1401c9c1e980acb6af90595604add0171056c57a3802f9f9572ed222405b52d2b5604a2b74d26a8a4463b04d6114383b72cfa90d674742e913a80df870676bf2b6e83604f5e72346f03e4896dd979b441ef09376e025375d672074866f08e71b8b799137d6e44db92189928c4d7929ca358b3a", 0xa5}, {&(0x7f0000003d80)="a5f6b05d7eaa2e8b29e7e9fe3ddecb21fd239cb1bbea721200fb81eb98372f5575eb4998cc02d06cbb7a7f9a8d30289dffe0794311538a4de9e2670f7f48d3d09fb6377227f5eeb71c1505fabbc454cbbe40475c625a71f68c804eeb389b490df9f1c8b745f8702bebea92993c71881efd8115b0bcf2", 0x76}, {&(0x7f0000003e00)="d1e12d1f70121043edd2f124c8aaf61f28d34959261f4e3d88499612147898f5bbfdcfa45851b2c53f636bf89153ad458475ecfa180dd5c3ecfda805", 0x3c}, {&(0x7f0000003e40)="abe638cd21694cd0fefade71735dbddae3a92bda17d75eb75c0011929e7fc5bbca89261c6f7824b2b8521e619fbe131696840f2c69305e440cebd2fe8772b614503f66901d4d719923fc82ba73dbe5fd2e0ff9732a43cdea844879dd239353f1df868ed4e8cf7fcaa3b3123a23e028b65648c4d96fb034e9d0595ec767e8701282b9c466558649ab016967ba873072f514f3b818b3a7389291ee8d3e1d92bf6febcf5e849607b1b3efbe1ca2a3a68eb012cf1ea938654fbcf8c4b736b3f8bbd57fb5b74ad31f69c00674ae80882b492febb115d616751c9320f1d4", 0xdb}, {&(0x7f0000003f40)="82448694d0c96600c789c1a901858c08798d882a1f85e24e60df02a25c973c8b37aaca0164ad4bce1bc28585bcad060a57bbaf50e0dd5ad9810e72f0da06a24f21f7e7a3022bf80752c471cf504463138eb5b7de8af0de58f8d16968e277b8a36ce42ea6dbd5a7a132583e6319a421c8cd09e6069fb1bb9120dc2367603307d5ef1d38a1dea381918b10d497f087d594fbbfe4966ec5d8deb6a31093f15ad10078c3fb74385850", 0xa7}, {&(0x7f0000004000)="473779d34dd7f0572d0d32569e2c6b966422f3fa47d4aa9bc0497ff24f021ddd88424c0be94b1ee957d5cd9b636129afd78c6fd78c15b98eac94bbb7e167bac5a7425c83398464774ffe4f457afbbc69a07fb8bfd41378321152c0941fe945bc495864fb3aa35e9f598c8e8b", 0x6c}, {&(0x7f0000004080)="86ca080564dffefe050dd71658212c5c5ad1ca5aa18fadb622945c9ba11fd3ed19439a35789f3a5d938d907dff4d6deac4fb45e1ffcf4d45411fbaec5b5217568f4dba666358dcac8470b5ae2e48300abe11cdd4db090b50b169a392d6edb476f6443b0c1f4fe8a479ef1ed4c01a08611ed602d9d391c5afd3c7637cf67ae049e711e52a8e079b50c5480bb2dd3efd916ff52ef59019e4170e480aa1a188af94e2571936014503eb4197949d50a310c58e92e7dd66d62cd2d8aab9bda9351deda225021f709f3d3dfd6fe6a9", 0xcc}, {&(0x7f0000004180)="2ccc62eac693b8b5cc0fd7706e2b6815518b1f0609c46ca996e6301465a4cbc4a6bed2083a3ff047088c26c96a733b577bd7aad797818efa124a6eb81124933f6ebc44e6aaa80a6eae11d52c814fbd71e8541e88010e9a4b8236d84ca76ec08893f38ef21bbea4e8694944a26793746a000bb6cf8a96a75291ccd5ef83525c19a117384e40f26bd16934af903b917ca90f0c606d64106641b61bb3ce51dea50876fb7c01e81229a6a454cacffc2e9a9c16d40fb1097b23b2bc9777ca8e74fecda5bab7612a8ea2955008a4d2fb903536cefbd7d8a6ae3485c845b424e04842bb07d246", 0xe3}], 0x9, &(0x7f0000004340)="130cd248364559e2c3ece8f6f31be53bc64a0a7a895c3e3bc12ec239168af4049bfc2294deab829421863c60544597933079c8840fc8bf7b3e8298c399da569b5d01c3f4636a04d0375a0be1c50382149ae3c8d6a6bcba7659340419f6e281cdade46a203c547586bdef4548b4be37bec3fc5ba691e462b7773690967b0c3b92fec2d235279221697df1347346b2f0d21c1b7b9c0536867db9264a631acbc53906f2eb59637b110d29a06b203eb31ff169d7770bc5e85cbdd804e0d7ba0ff4be1d634a784e6f70b19221", 0xca}, 0x24044065) syz_genetlink_get_family_id$tipc(&(0x7f0000004480), r3) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000044c0)={'veth1_to_hsr\x00', {0x2, 0x4e24, @multicast2}}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000004600)={r8, &(0x7f0000004500)='\x00', 0x8280, &(0x7f0000004540)={@align=0x6, {0xff, 0x0, 0xfffff2b1, 0x9}}, 0x6, &(0x7f0000004580), &(0x7f00000045c0)=0x1}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000004640)={'pimreg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000004680)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000046c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r10, 0x107, 0x2, &(0x7f0000004700)={r11, 0x1, 0x6, @local}, 0x10) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000004740)={0x1, 0xffffffff, 0xe0, 0x9, 0x7}) ioctl$NILFS_IOCTL_GET_SUINFO(r4, 0x80186e84, &(0x7f0000004800)={&(0x7f0000004780)=[{0x1, 0xffffff17, 0x2}, {0x7, 0x7, 0x2}, {0x4, 0xd28}, {0xffffffff80000000, 0x9}, {0x5, 0xffffffff, 0x1}, {0x200, 0x7fff}], 0x6, 0x10, 0x3, 0x20}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000003, 0x13, r12, 0x514be000) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004880), r0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000004b40)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004b00)={&(0x7f00000048c0)={0x23c, r13, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xba, 0x3, "b67d65545d9641a31a58186d9831152dea1509c2bd9e1c76d93be1806aacbfc4f2b9dc7f92d4bf634b04c7fc4ddab4c36a8ca7ba4e53390c5fe498b7f1115c45ce991622bdc07e005a85eee6cbad725b5b408bd32285e528257c94e54349acd453c08a904f62767f446b0b5fb3335b2f0fdbb61ade81b1a8261338f49954c76d04e22f873b74b2f9063a8eb738c05592f03de087ef2f545ec636fbd567d4205acc62ddeef9848ef5f92530872737e8afb7a67c02d91c"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "8ead08efcd07290cb07eeaf9b3573840917feb58bab163a1"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x761cb19f1153befc}, 0x40014) 1.293136199s ago: executing program 1 (id=4536): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000001380)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000001400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000001480)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000940)={'syzkaller1\x00', 0x1}) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000980)={'syzkaller1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0019000180ffffffffffff1663e4e4f2000000"], 0x7c}}, 0xc000) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtfilter={0x71, 0x2c, 0x601, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0x5, 0xffff}, {0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x46c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x31}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_POLICE={0x43c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x6, 0x2, 0x9, 0xfe, 0xffffffff, 0x7, 0x0, 0x7, 0x1ff, 0xea, 0x2, 0x94e6, 0x5, 0x1, 0x6, 0xfffffffa, 0xfffffeff, 0xa, 0x10001, 0x6a79, 0x0, 0x9, 0x4aa7, 0x7, 0xffff7fff, 0x6, 0x1, 0x34b8, 0xff, 0xfffffffc, 0x5, 0x66e, 0x200, 0x4, 0x7, 0x80000201, 0xb4c1, 0x1, 0x2b, 0x3ff, 0x6, 0x5, 0x1000, 0x80, 0x5, 0x40, 0x5, 0xfff, 0x10001, 0x6, 0x6, 0x9, 0x8000, 0x5, 0x2, 0x9, 0x7, 0x100, 0x5, 0x8, 0x800, 0xfff, 0x36, 0x6, 0x40, 0xff, 0x101, 0xc, 0x40, 0x1, 0x6, 0xa, 0x60ba, 0x0, 0xd, 0x7, 0x3, 0x4, 0xa, 0x9, 0x1, 0x0, 0x4, 0xd, 0x2, 0x9, 0x0, 0x92f9, 0x8, 0x7f, 0x6, 0xc3, 0x0, 0x3, 0x2, 0x9, 0xa8f, 0xffff, 0x8, 0x1, 0x101, 0x0, 0x400006, 0x5, 0xd4, 0x14, 0x60000000, 0xc, 0x1, 0x0, 0x0, 0x9, 0xe, 0xbb9, 0x8, 0x5, 0x0, 0x10001, 0x3, 0xfff, 0x8, 0xfffffff8, 0xfffffffd, 0x10001, 0x4f4e, 0x4, 0x44af6f98, 0xffff833a, 0x6d, 0x7f91, 0x8a, 0x7c1, 0x10, 0x3, 0x6, 0xe1, 0x7, 0x3, 0x9, 0xeb10, 0xea70, 0x4932, 0x33df, 0xfc, 0x2, 0x9, 0x400, 0xe68, 0x7, 0x800, 0xcc90, 0x3ff, 0x3, 0x5, 0x4, 0xffff, 0x1000, 0x5, 0x8, 0x9, 0x2, 0x9, 0x4, 0x2, 0x5, 0x4, 0x7fff, 0x4, 0x641a, 0x2, 0x3, 0x6, 0x100, 0xa, 0x2, 0x9, 0xab3e, 0x3, 0x1, 0x7, 0xc, 0x7, 0x7f, 0x40000, 0x8, 0xe, 0x6, 0x4000000, 0xffff, 0x2, 0x200, 0xa, 0xfffffff6, 0x0, 0x100, 0x9, 0x2, 0x23, 0x5, 0x1, 0x3791, 0x8, 0x5, 0x3, 0x1, 0xd309, 0x6, 0x1001, 0x6, 0x1, 0x7, 0x7fffffff, 0x4, 0x5, 0xfffffffa, 0x800, 0x0, 0x611e, 0x8, 0xfffffff1, 0x2, 0xffff, 0xfffffffb, 0x1, 0x1000, 0x4, 0xd, 0xb, 0xffffffff, 0x4, 0x3, 0x6, 0x4, 0x1, 0x9, 0x0, 0x10000, 0x4, 0x4, 0xd, 0x8, 0x6, 0xf, 0x5, 0x5, 0x6, 0xffffffff, 0x7f, 0x9, 0x4, 0x10000, 0x6, 0xfffffff9, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x19}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x70}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xa}}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x0) sendto(r0, &(0x7f0000000380)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008e40300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001200)={&(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x5}, 0x1) sendmsg$nl_route(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c0000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200811a0500140003006e657464657673696d3000000000000014001680100001800c0009"], 0x5c}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) r10 = socket(0x11, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000af8feffff1100010000000000000000000000000ac97f212d8bd13c811216454a189686a2daf342b0090df8c7bb0b2a6e02de314867277fdf0a6f55b0c42ac4929b2807af7c7ebfc90b218b2a788102d2fec42743d26f3168d969e5209b952ead35d7e9e85828f90a357b1386e6e92f7a625b32cef84a013f50fa3040a119bb56f103d7a669ff81b2ede493f7ca8d50e01f004eb45c553c993c2eb832004b6a987d0f1739d78a433e1b90ab3894ac6c422461c5404f586bc64e8d041b7fd06d05f5848e320b8acf9c1b"], 0x28}}, 0x4000040) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000600feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 1.115886106s ago: executing program 2 (id=4537): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) r4 = getuid() sendmsg$nl_xfrm(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@getpolicy={0x150, 0x15, 0x8, 0x70bd2d, 0x25dfdbfe, {{@in6=@empty, @in=@broadcast, 0x4e20, 0xe, 0x4e20, 0x1, 0x2, 0xa0, 0x80, 0x3b, r3, r4}, 0x6e6bbf, 0x2}, [@srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x32}}, @sa_dir={0x5, 0x21, 0x3}, @etimer_thresh={0x8, 0xc, 0x8}, @sec_ctx={0xda, 0x8, {0xd6, 0x8, 0x0, 0x81, 0xce, "dacf7fbdc3cd25f797b0df8a886c6d9d45bdd76d00a6564e8c7637bf99baa89cf052b3643214c273e2e9de5bc266a1e5338ab926ccaeb9f19f3012afb19d6275817c9bc066767ddcfebdffefed61f538bdf46e852ec08c5b861f6034a5e6965b57b0e7a3f48274ab5341cca069644d9a39d5394e4a4f99bcec09d3d5d5b499ad1cde6761830957209ec4ab501cb21ad566d747a259f80c555700a890eec27424ad2a773c3a3e67588ab89a1874c05bc1d8c67a0793025dabe415f48cbb195e44f63df6face09fbe80c2529e4afca"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x24000011}, 0x20010001) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000ffff00000000000000008500000041000000850000001100000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000640), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 1.115295823s ago: executing program 3 (id=4538): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x2000002, 0x3a, 0x0, &(0x7f0000000800)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f00000003c0), &(0x7f0000000400)=@udp=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1], 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50) 755.980176ms ago: executing program 0 (id=4539): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="f9c09f8fc29af4d895940531b86d616e676c650000000000000000000100000001000000"], &(0x7f0000000040)=0x24) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x6c, r4}, 0x38) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x1, 0x56d, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0xfffffffb, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), 0x1000, r5}, 0x38) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={0x0, 0x0, 0x18}, 0x18) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[], 0x50) (rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0xffffffffffffff34, &(0x7f00000006c0)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000140)={@multicast2, @rand_addr=0x64010102, @broadcast}, 0xc) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000940)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r2, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) (async, rerun: 64) bind$inet(r0, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) (rerun: 64) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) 746.48033ms ago: executing program 2 (id=4540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x20a201, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@local, 0x9}]}, @ssrr={0x89, 0x7, 0x37, [@empty]}, @generic={0x7, 0x2}]}}, {{0x4, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaa0900000000000000bbbb86dd6a1b81000018110000000000000000000000000000000000ff0200000000000000000000000000014e254e20001890780a000000050000000900000000000000"], 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f00000001c0)={r6, &(0x7f0000000200)='\x00', 0x2000, &(0x7f0000000240)={@align=0x401, {0x7, 0x6, 0x9, 0x5a12}}, 0x7, &(0x7f0000000280), &(0x7f0000000300)=0xb9f6}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000540)={0x20, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r11) syz_emit_ethernet(0x2b, &(0x7f00000005c0)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1d, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @remote, '\x00'}}}}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x40, r12, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:modules_object_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10008001}, 0x400a0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r9, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000b00)={0x50, r12, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008090}, 0x40008000) read(r8, &(0x7f0000000b80)=""/128, 0x80) read(r8, &(0x7f0000000c00)=""/128, 0x80) write(r8, &(0x7f0000000c80)="3400f400070000000000000000", 0xd) syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x1a, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000800000080015ffffff85200000444903009500000000000000"], &(0x7f0000000e00)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 672.630415ms ago: executing program 4 (id=4541): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000001180)=""/4087, &(0x7f0000002180)=0xff7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000021c0)={0x0, 0xff, 0x9}, &(0x7f0000002200)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@nested={0x8, 0x1b, 0x0, 0x1, [@nested={0x4, 0x140}]}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x4000081) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000002240)={0x6, 0x201, 0xe80, 0x3, r4}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x1, 0x1, 0x5}}]}}]}, 0x44}}, 0x4084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48081}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec2}, 0x48) 669.505871ms ago: executing program 3 (id=4542): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000cc0)={{0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x20000, &(0x7f0000000180)={@_ha_fsid={[0x9, 0xfd]}, {0x10, 0x9, 0x7, 0x69e}}, 0x80000000, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0xfffff000}, 0x7, &(0x7f0000000bc0)=[{0x1, 0x5, &(0x7f0000000580)='\x00', &(0x7f00000005c0)="d732193e2903f9c7d6e7", 0xa, 0x30}, {0x1, 0x3ff, &(0x7f0000000600)='\x00', &(0x7f0000000640)="6f3a1e6b416e351b6e693ae65b5d0934986d283857670738c6e7563ccd8eedf68e12fe5ce7b277f3202da9c776844d71a637ce82c4090035bdb3cceb9bdf864b653f558e2e1c81bd191fec22fa1deca84832c27eb81d13c22461663ee5aa4419845e48bb211d0e6e209bc33b0a1175a7b4c3fe56a081388f87690fa30e4c9f4643c03fb5af5f7634411bed0e052de9a7e5f2ec1c885177e954015952fdfc", 0x9e, 0x20}, {0x3, 0x2, &(0x7f0000000700)='syzkaller\x00', &(0x7f0000000740)="b67596144ba198327a524d412e34ec471bed47177682cda42816e7ac28bcf2606f3c63225eec3fa7e2174514147ccbc2bd3d97fe0a14c9287a97f70b5da046deebbe3693ceee53f7e9b78e9bb7d1b36d5c47e77945ba35d54e460a4cc94c778eb2e216a7e829589e21bff6b7a4e4a007711f5f463674bf2adc7345cd1428717e61a1381ce668e67a7786b8835a2344f80c6d270bd4ea85097bb8f517e4c2c5", 0x9f, 0x2}, {0x3, 0x1000, &(0x7f0000000800)='\x00', &(0x7f0000000840)="84016ab502e1900025223a45fa327b3c188fcbef8ea11c024911a3210cd8c23c10fdb57a55cc74338099fc7d156d3bb64d8951041a7c149e134902873858f1c49d22cc227329fe973d9aad2767df0133790a161613ac9c3aa42e8ed9ebd8940ffff108d2f6c930739a3e151d64060a27944b04a5aa7da69433ef30055ce7c25c582fd1c0796388f3e6", 0x89, 0x18}, {0x3, 0x7, &(0x7f0000000900)='$:)\x00', &(0x7f0000000940)="2c111fada8f65b311cf9b6bb2e26c1b8acc3be82cdc4df47f06a8a113b075537728cb956243b01483e7d1fd7eb5a8abd8aa431e4bd5089ab9279e6f02cb1321025f62f2a82577a6ed7aafd88b9613470555a798f800e85c30e5a0fc427d33e0e72", 0x61, 0x2}, {0x3, 0x6, &(0x7f00000009c0)='}-\x00', &(0x7f0000000a00)="5f15c744a7440019fdea3709985fcf5f2047e355c2cae5690b0e1e3a6837993036abd06b1b707dba358e47d5903d7ce8dfc7acc528bd5597188436ae6fd845b5a4358eafd7eaaf812997595fd9d481e7dd5c602545bfd6f4c239e7c66ab49961d8d8eb4fd4dee4a9a6bb157abddaf1e2ee069c6e15a484a5e2df37a9b9444dd515a532f267aab3fb821a9af00917864d80a6129aa84387a27b4d1f7118c92273ae8e95fd1bce22abc274a7f78c057f06dcfdc493cf7196ce204cb5993f4adabf1dca4649f31e722037b43a413a2e", 0xce, 0x38}, {0x1, 0x101, &(0x7f0000000b00)='-\x00', &(0x7f0000000b40)="bac6fef3642f455e6db87655aa327fee2f04e1f6258f9174444dbe8db180369674ce3e9c125821346cb218eb9e0766f0feaf439224567ed28de314d88064e292eece5638d6", 0x45, 0x12}]}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000f00)={{r1, &(0x7f0000000000)='^}t[\xa1\x00', 0x400, &(0x7f0000000040)={@_ha_fsid={[0xf, 0x6]}, {0xa98f, 0xf, 0x0, 0x3}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000480)=0x7}, {[0x0, 0x6, 0x2, 0x7f]}, 0x9, 0xe1, &(0x7f0000000e00)=""/225}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb97}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xb6d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0xa0}}, 0x40080) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x4000000000001f2, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3000000013000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000cc0)={{0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x20000, &(0x7f0000000180)={@_ha_fsid={[0x9, 0xfd]}, {0x10, 0x9, 0x7, 0x69e}}, 0x80000000, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0xfffff000}, 0x7, &(0x7f0000000bc0)=[{0x1, 0x5, &(0x7f0000000580)='\x00', &(0x7f00000005c0)="d732193e2903f9c7d6e7", 0xa, 0x30}, {0x1, 0x3ff, &(0x7f0000000600)='\x00', &(0x7f0000000640)="6f3a1e6b416e351b6e693ae65b5d0934986d283857670738c6e7563ccd8eedf68e12fe5ce7b277f3202da9c776844d71a637ce82c4090035bdb3cceb9bdf864b653f558e2e1c81bd191fec22fa1deca84832c27eb81d13c22461663ee5aa4419845e48bb211d0e6e209bc33b0a1175a7b4c3fe56a081388f87690fa30e4c9f4643c03fb5af5f7634411bed0e052de9a7e5f2ec1c885177e954015952fdfc", 0x9e, 0x20}, {0x3, 0x2, &(0x7f0000000700)='syzkaller\x00', &(0x7f0000000740)="b67596144ba198327a524d412e34ec471bed47177682cda42816e7ac28bcf2606f3c63225eec3fa7e2174514147ccbc2bd3d97fe0a14c9287a97f70b5da046deebbe3693ceee53f7e9b78e9bb7d1b36d5c47e77945ba35d54e460a4cc94c778eb2e216a7e829589e21bff6b7a4e4a007711f5f463674bf2adc7345cd1428717e61a1381ce668e67a7786b8835a2344f80c6d270bd4ea85097bb8f517e4c2c5", 0x9f, 0x2}, {0x3, 0x1000, &(0x7f0000000800)='\x00', &(0x7f0000000840)="84016ab502e1900025223a45fa327b3c188fcbef8ea11c024911a3210cd8c23c10fdb57a55cc74338099fc7d156d3bb64d8951041a7c149e134902873858f1c49d22cc227329fe973d9aad2767df0133790a161613ac9c3aa42e8ed9ebd8940ffff108d2f6c930739a3e151d64060a27944b04a5aa7da69433ef30055ce7c25c582fd1c0796388f3e6", 0x89, 0x18}, {0x3, 0x7, &(0x7f0000000900)='$:)\x00', &(0x7f0000000940)="2c111fada8f65b311cf9b6bb2e26c1b8acc3be82cdc4df47f06a8a113b075537728cb956243b01483e7d1fd7eb5a8abd8aa431e4bd5089ab9279e6f02cb1321025f62f2a82577a6ed7aafd88b9613470555a798f800e85c30e5a0fc427d33e0e72", 0x61, 0x2}, {0x3, 0x6, &(0x7f00000009c0)='}-\x00', &(0x7f0000000a00)="5f15c744a7440019fdea3709985fcf5f2047e355c2cae5690b0e1e3a6837993036abd06b1b707dba358e47d5903d7ce8dfc7acc528bd5597188436ae6fd845b5a4358eafd7eaaf812997595fd9d481e7dd5c602545bfd6f4c239e7c66ab49961d8d8eb4fd4dee4a9a6bb157abddaf1e2ee069c6e15a484a5e2df37a9b9444dd515a532f267aab3fb821a9af00917864d80a6129aa84387a27b4d1f7118c92273ae8e95fd1bce22abc274a7f78c057f06dcfdc493cf7196ce204cb5993f4adabf1dca4649f31e722037b43a413a2e", 0xce, 0x38}, {0x1, 0x101, &(0x7f0000000b00)='-\x00', &(0x7f0000000b40)="bac6fef3642f455e6db87655aa327fee2f04e1f6258f9174444dbe8db180369674ce3e9c125821346cb218eb9e0766f0feaf439224567ed28de314d88064e292eece5638d6", 0x45, 0x12}]}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000f00)={{r1, &(0x7f0000000000)='^}t[\xa1\x00', 0x400, &(0x7f0000000040)={@_ha_fsid={[0xf, 0x6]}, {0xa98f, 0xf, 0x0, 0x3}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000480)=0x7}, {[0x0, 0x6, 0x2, 0x7f]}, 0x9, 0xe1, &(0x7f0000000e00)=""/225}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb97}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xb6d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000440)) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0xa0}}, 0x40080) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r4, &(0x7f0000000480), 0x4000000000001f2, 0x0) (async) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3000000013000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) (async) 585.313476ms ago: executing program 1 (id=4543): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0xb, 0x3, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x1, 0xb, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f00000000c0)=[0x1], &(0x7f0000000100)=[{0x5, 0x3, 0x9, 0x7}, {0x0, 0x1, 0x1, 0xb}, {0x0, 0x2, 0x0, 0x2}, {0x4, 0x1, 0xd, 0x5}, {0x4, 0x1, 0xb}, {0x3, 0x4, 0x1, 0x9}, {0x2, 0x5, 0x10}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0x89, 0x51, &(0x7f0000000240)="722452f1bb60bc89db1d38353ac2ae1d5c795f1fdfdbcc809cf5e7e8b2f1c9bb25e7c14ad16fa585ab39cceff46890eb18c0011c060a5101f7c403739de8ee16fb51e51720e3f7217be34503219689363da3a10c4f19c2641bba8b99fe8dae4bf5ca8191494d8d65c06cd91e740b60603c5f229784ef57def794afaefc1861d7cf9c893f4c42e3590b", &(0x7f0000000300)=""/81, 0x8, 0x0, 0x25, 0xc8, &(0x7f0000000380)="272df757c37b065479366e26507b97f916075408d6d6bf59270b24e1e7cddbd92516669b6c", &(0x7f00000003c0)="61d8b9a0e577cd06f5bccb0e8cb5efeb5619aba248ddfb84d2720b0d97a6b97f339a3295e22c4bdf2ff12484f5c79f59c74ecca30cde1e01b3fe75223d7cf2e6d945748d2cd626db83abc6946dff1ebfb2a918f78aaa514c09225a0af43b788d7ccf444cdbe72d21b5bcdd181e5552e4813a8ed8904961ec11f4180abb2eab50f0222cffa41daf5525b9d25292629e17217a9253e2c01b4441cbd523c73320d7ba5fbcc4d390cc6e1ccce40ddb6631ae2fb191fb5e3f4f53e0dcdd9103f91734d04783eaf5d5548d", 0x6, 0x0, 0x8}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={0xffffffffffffffff, r1}, 0xc) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00'}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup=r2, r0, 0x20, 0x13, r0, @void, @value=r3}, 0x20) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000780)={'veth0_to_team\x00', 0x4000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2b}}}}, [@NL80211_ATTR_SSID={0xf, 0x34, @random="06130c00a1875effe56b55"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r5) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}]}, 0x70}, 0x1, 0x0, 0x0, 0xe06321e47919ce9f}, 0x0) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x84, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xe5fb}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) (async) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x70}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) bind(r5, &(0x7f0000000d80)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x1, 0x4, 0x4, 0x4, {0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x80) (async) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xa0, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3446, 0x3a}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, [{0x48}, {0x60}, {0x0, 0x1}, {0x4}, {0x1}, {0x6, 0x1}, {0x2, 0x1}, {0xb}, {0x22, 0x1}, {0x60, 0x1}, {0xc}, {0x1b, 0x1}, {0x2}, {0x9}, {0x1, 0x1}, {0x9}, {0x6c, 0x1}, {0x16, 0x1}, {0x5, 0x1}, {0x1c}, {0x6c, 0x1}, {0x9}, {0x60}, {0x3, 0x1}, {0x60, 0x1}, {0x5, 0x1}, {0x5}, {0x1b}, {0xc, 0x1}, {0x18}, {0x2, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x2}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x9f}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}]}]}, 0xa0}}, 0x24040004) (async) ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000001200)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x1fc, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2430cbc637f7509151bcc1c56a11f26801a99f3703577fdb28693b38bf63193d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="10e91cf4c4326d4cc856d1cbd291db75"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cdf4ad2ee1b261820ad750761031210c2e55edacfacac9ed2e0297da741e0256"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="83da041edbe6a0ab44a3fd9458c7fc78399d2fdd3070ff27f5460a4b167735df"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b3dc852bb24c325d056261fc40a349e3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3bc7c32fb0d84f5662bcfb1b98c4770d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e72c75c82c786fe887d442ff247e75fc"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6691a1fab144d94858d7aa7a2a364e2c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="41cb3def19b124ff68edce5bf5ba3ef4"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "937772d3f9e4d487"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1f8d0639b185a6c0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7eb47fde699192b805e819aaa5d88689"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="44727164c871137ba37c7f73a07e8678"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cb3d0de50bb4f45768ca7c819a3b11e515638ecd21b3bb873ae52f011381483"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="365f445e584e140aea9e7d59237e76989968687da43fffe84c9979de6f28db18"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ada7f3ad73a8bf8e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="10622471b94ae111c6a7916da906caea"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "67ba8d0acf95a3a0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f2782e7a13d6cbdf5e73c2e6d0389c612e6cd28b18c1b1913fd38d9cd66fdac5"}]}]}, 0x1fc}}, 0x2004004) (async, rerun: 32) sendmsg$NL80211_CMD_SET_CHANNEL(r10, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x78, r7, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x68}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x158}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20004800) (rerun: 32) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x302) (async) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$SIOCGSTAMP(r11, 0x8906, &(0x7f0000001380)) (async) setsockopt$WPAN_WANTLQI(r9, 0x0, 0x3, &(0x7f00000013c0)=0x1, 0x4) (async, rerun: 32) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000001400)=0x32, 0x4) (async, rerun: 32) ioctl$sock_bt_hci(r9, 0x400448e3, &(0x7f0000001440)="9fef8e72bc48d1b29c80e6563f6b1c814866d02c56832e679d3791b6b927d454ed328d5e7e0b6ddd93fd52c5ef169af92c3a68e10e18962ff97e8c97c34db79f03426d51a174362a6331a9e088789f1c33f8ad07f6586ffec80925478981e2f22dc9a10bf561809a000efd2d6f52c6fe0b3fc5f831") socket$nl_route(0x10, 0x3, 0x0) 83.30144ms ago: executing program 4 (id=4544): syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0xe99, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)='\x00'/14, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000040900010073797a31000000002c0004802800018008000100666962001c000280080003400000002a080001400000000008000240000000020900020073797a3200000000140000001100010000000000000000000500000ab6645557919e5d764cdb19878f41caa184f14812a152ac4d02047c8501bd42a6acf9672c8932b02c76568d26e6590fecc2ad647321804068389d65387cb08ff54d8552bcafe8c127b9eda0"], 0x80}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000c00)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfe, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20000010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r11}, &(0x7f0000000e40), &(0x7f0000000e80)=r12}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000f40)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffe, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$unix(r2, &(0x7f0000000a40)="65be3ef703d522a9ef3c0842c828", 0xe, 0x44000, &(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e23}, 0x6e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r7) bind$rds(0xffffffffffffffff, &(0x7f0000000f80)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000104000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="0802000002000000280012800b000100627269646746000018d7f93fb1f38f3c740000000c002e000100000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000000) 0s ago: executing program 0 (id=4545): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x2a, &(0x7f0000000400), &(0x7f0000000440)=""/42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) epoll_create1(0x80000) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000940)={&(0x7f0000000000), 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0x100, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff9}, @NL80211_ATTR_VENDOR_DATA={0xc5, 0xc5, "37b2a7a2d24cef811dcea7a1434406c2e639e83f79595bd7641e9f8902ba8f111e0fb185a84c3927b3dc56b407ea444aa240e87d95d4fd6f055f8593a274ce8d756c019e0c274364a822c85bd3832b67aae34820eb88ecfd8a5f26183e9f75c914a0365352c481e77a9b42fc125f4e0a3d2d8b4b5b71bbb9ed8a52609e8e90ed3be4d1d2934434ec1a6d8e1ef9c2edfbcb690824ca8e5448ef65d1706aeb4f8d3271bfab921050637440d78e92613985de6128c61cfcfdf2fdc16438961b1f2037"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x100}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$sock(r1, &(0x7f00000006c0)={&(0x7f0000000700)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff28bd7000fadbdf250000e000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c00128009000100766c616e00000000170002800600050081000000"], 0x3c}, 0x1, 0x0, 0x0, 0x88840}, 0x20040001) kernel console output (not intermixed with test programs): ayer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.553421][T18576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.650809][T10714] IPVS: stop unused estimator thread 0... [ 644.890376][T18576] hsr_slave_0: entered promiscuous mode [ 644.898931][T18576] hsr_slave_1: entered promiscuous mode [ 644.902424][T18576] debugfs: 'hsr0' already exists in 'hsr' [ 644.902445][T18576] Cannot create hsr debugfs directory [ 645.724873][T19106] netlink: 'syz.3.3218': attribute type 1 has an invalid length. [ 645.965624][T18576] bond0: (slave netdevsim1): Releasing backup interface [ 646.148159][T18576] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 646.392687][T19111] syzkaller1: entered promiscuous mode [ 646.392713][T19111] syzkaller1: entered allmulticast mode [ 646.723617][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3219'. [ 646.777399][T19133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.845528][T14647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.845553][T14647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.202183][T19142] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3223'. [ 647.294717][T18576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 647.374235][T18576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 647.391086][T18576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 647.438150][T18576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 647.445002][T18576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 647.535185][T18576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 647.544214][T18576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 647.569223][T18576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 647.963722][T18576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.998927][T19170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3226'. [ 648.032578][T18576] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.068113][T14646] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.068245][T14646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.095903][T19173] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 648.118473][T19173] bond6: (slave lo): Enslaving as an active interface with an up link [ 648.120445][T19173] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 648.139309][T14646] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.139419][T14646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.508538][T18576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.691697][T18576] veth0_vlan: entered promiscuous mode [ 649.730142][T18576] veth1_vlan: entered promiscuous mode [ 649.831639][T18576] veth0_macvtap: entered promiscuous mode [ 649.845724][T18576] veth1_macvtap: entered promiscuous mode [ 649.916424][T18576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.940220][T18576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.097417][T14648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.101878][T14648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.101926][T14648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.105770][T14648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.698653][T19160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 651.020091][T14640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.020116][T14640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.192749][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'. [ 651.197854][T10714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.197874][T10714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.651962][T19257] block nbd0: shutting down sockets [ 651.675993][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3232'. [ 652.211523][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3234'. [ 652.337191][T19280] netlink: 'syz.1.3236': attribute type 3 has an invalid length. [ 652.337409][T19280] netlink: 'syz.1.3236': attribute type 3 has an invalid length. [ 652.467939][T19280] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3236'. [ 653.000058][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3238'. [ 653.108857][T11478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 653.113159][T11478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 653.114878][T11478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 653.144422][T11478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 653.145136][T11478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 653.878477][T19318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3241'. [ 653.941942][T19320] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3242'. [ 653.943037][T19320] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3242'. [ 653.965504][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3242'. [ 654.662354][T19288] openvswitch: netlink: Tunnel attr 103 out of range max 16 [ 655.025472][T19344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3245'. [ 655.046543][T19344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3245'. [ 655.046584][T19344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3245'. [ 655.070047][T19344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3245'. [ 655.070087][T19344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3245'. [ 655.187593][T19344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3245'. [ 655.238198][T11478] Bluetooth: hci0: command tx timeout [ 655.428429][T19344] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.429200][T19344] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.864152][T19344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.893022][T19344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.322479][T10721] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.322792][T14640] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.322843][T14640] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.322882][T14640] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.763392][T19392] netlink: 'syz.2.3252': attribute type 21 has an invalid length. [ 656.814147][T19392] netlink: 'syz.2.3252': attribute type 1 has an invalid length. [ 657.308697][T11478] Bluetooth: hci0: command tx timeout [ 657.543400][ T6462] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 657.561844][ T6462] bond7 (unregistering): (slave gre3): Releasing backup interface [ 657.561921][ T6462] gre3 (unregistering): left promiscuous mode [ 657.758260][ T6462] bond9 (unregistering): (slave geneve4): Releasing active interface [ 658.122464][T14639] smc: removing ib device syz0 [ 658.125341][ T6462] bond0 (unregistering): Released all slaves [ 658.147466][ T6462] bond1 (unregistering): Released all slaves [ 658.172139][ T6462] bond2 (unregistering): (slave bond3): Releasing backup interface [ 658.173943][ T6462] bond2 (unregistering): Released all slaves [ 658.213456][ T6462] bond3 (unregistering): Released all slaves [ 658.249204][ T6462] bond4 (unregistering): (slave veth3): Releasing backup interface [ 658.250217][ T6462] bond4 (unregistering): Released all slaves [ 658.284656][ T6462] bond5 (unregistering): (slave veth7): Releasing active interface [ 658.285596][ T6462] bond5 (unregistering): Released all slaves [ 658.328561][ T6462] bond6 (unregistering): (slave lo): Releasing backup interface [ 658.329107][ T6462] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 658.330937][ T6462] bond6 (unregistering): Released all slaves [ 658.379445][ T6462] bond7 (unregistering): Released all slaves [ 658.404402][ T6462] bond8 (unregistering): Released all slaves [ 658.433557][ T6462] bond9 (unregistering): Released all slaves [ 658.460102][ T6462] bond10 (unregistering): Released all slaves [ 658.474517][ T6462] bond11 (unregistering): Released all slaves [ 658.491667][ T6462] bond12 (unregistering): (slave veth13): Releasing active interface [ 658.492669][ T6462] bond12 (unregistering): Released all slaves [ 658.524624][ T6462] bond13 (unregistering): Released all slaves [ 658.540546][ T6462] bond14 (unregistering): Released all slaves [ 658.556300][ T6462] bond15 (unregistering): Released all slaves [ 658.783288][T19300] wg0 speed is unknown, defaulting to 1000 [ 658.997347][T14639] smbdirect: ib_dev[syz0] removed [ 659.393426][T10423] Bluetooth: hci0: command tx timeout [ 659.601427][T19446] tipc: Enabled bearer , priority 0 [ 659.602018][T19432] syzkaller0: entered promiscuous mode [ 659.602038][T19432] syzkaller0: entered allmulticast mode [ 660.254687][T19429] tipc: Resetting bearer [ 660.333699][T19429] tipc: Disabling bearer [ 660.365784][T19464] __nla_validate_parse: 136 callbacks suppressed [ 660.365809][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3260'. [ 660.546837][T19470] sctp: [Deprecated]: syz.0.3262 (pid 19470) Use of int in max_burst socket option. [ 660.546837][T19470] Use struct sctp_assoc_value instead [ 660.857907][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 660.942075][T19479] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 661.010228][T19483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 661.183277][T19300] virt_wifi0 speed is unknown, defaulting to 1000 [ 661.211548][T19300] wg2 speed is unknown, defaulting to 1000 [ 661.221210][T19300] rxe_eth0 speed is unknown, defaulting to 1000 [ 661.467187][T10423] Bluetooth: hci0: command tx timeout [ 662.096371][T19522] tipc: Can't bind to reserved service type 0 [ 662.258456][T19522] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 662.506663][T19529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3274'. [ 662.773915][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 663.730231][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'. [ 663.767419][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'. [ 663.934737][T14640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.934759][T14640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.840721][T19614] netlink: zone id is out of range [ 664.840741][T19614] netlink: zone id is out of range [ 665.052649][T19618] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3288'. [ 665.362392][T19626] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3291'. [ 665.362424][T19626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3291'. [ 665.586102][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 665.595116][ T6462] ovs-dp0: left promiscuous mode [ 665.825195][ T6462] tipc: Disabling bearer [ 665.836713][ T6462] tipc: Left network mode [ 666.540393][T19300] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.540688][T19300] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.540862][T19300] bridge_slave_0: entered allmulticast mode [ 666.577283][T19300] bridge_slave_0: entered promiscuous mode [ 666.593700][T19300] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.593885][T19300] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.594049][T19300] bridge_slave_1: entered allmulticast mode [ 666.622110][T19300] bridge_slave_1: entered promiscuous mode [ 666.735920][T19675] bridge_slave_0: left allmulticast mode [ 666.735949][T19675] bridge_slave_0: left promiscuous mode [ 666.736213][T19675] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.781534][T19675] bridge_slave_1: left allmulticast mode [ 666.781565][T19675] bridge_slave_1: left promiscuous mode [ 666.781802][T19675] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.810149][T19675] bond0: (slave bond_slave_0): Releasing backup interface [ 666.825732][T19675] bond0: (slave bond_slave_1): Releasing backup interface [ 666.855766][T19675] team0: Port device team_slave_0 removed [ 666.871222][T19675] team0: Port device team_slave_1 removed [ 666.875067][T19675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.894513][T19675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.991265][T19682] ip6t_rt: too many addresses specified [ 667.037463][T19679] team0: Port device xfrm0 added [ 667.043733][T19681] tipc: Enabled bearer , priority 0 [ 667.082890][T19300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.111472][T19300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.382506][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5 [ 667.431323][T19300] team0: Port device team_slave_0 added [ 667.464036][T19704] netlink: 'syz.3.3303': attribute type 83 has an invalid length. [ 667.499965][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3300'. [ 667.528898][T19300] team0: Port device team_slave_1 added [ 667.549346][T19706] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3304'. [ 667.651031][T19689] hsr_slave_0: left promiscuous mode [ 667.651934][T19689] hsr_slave_1: left promiscuous mode [ 667.718202][T19708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.722585][T19711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3305'. [ 667.722630][T19711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3305'. [ 667.722653][T19711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3305'. [ 667.722675][T19711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3305'. [ 667.722694][T19711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3305'. [ 667.722714][T19711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3305'. [ 667.722735][T19711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3305'. [ 667.722755][T19711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3305'. [ 667.925387][T10721] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 51910 - 0 [ 667.926639][T10721] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 51910 - 0 [ 667.926684][T10721] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 51910 - 0 [ 667.926723][T10721] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 51910 - 0 [ 667.933791][T19300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.933808][T19300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.933832][T19300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.960984][T19300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.961002][T19300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.961026][T19300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.111605][T19300] hsr_slave_0: entered promiscuous mode [ 668.113068][T19300] hsr_slave_1: entered promiscuous mode [ 668.113905][T19300] debugfs: 'hsr0' already exists in 'hsr' [ 668.113925][T19300] Cannot create hsr debugfs directory [ 668.187498][ T8891] tipc: Node number set to 2530687644 [ 668.258890][T19719] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 668.312063][T19719] batman_adv: batadv0: Adding interface: macvlan2 [ 668.312085][T19719] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.312120][T19719] batman_adv: batadv0: Interface activated: macvlan2 [ 668.338924][T19721] netlink: 'syz.2.3307': attribute type 4 has an invalid length. [ 668.593432][T14646] IPVS: starting estimator thread 0... [ 668.679354][T19730] IPVS: using max 24 ests per chain, 57600 per kthread [ 669.052186][T19744] netlink: 'syz.2.3314': attribute type 1 has an invalid length. [ 669.282819][T19744] bond1: entered promiscuous mode [ 669.283313][T19744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 669.332648][T19744] bond1: entered allmulticast mode [ 669.553102][T19754] bond1: (slave bridge1): making interface the new active one [ 669.553132][T19754] bridge1: entered promiscuous mode [ 669.553337][T19754] bridge1: entered allmulticast mode [ 669.555468][T19754] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 669.904380][T19778] Bluetooth: MGMT ver 1.23 [ 670.108040][T19792] gre1: entered promiscuous mode [ 670.342589][T14639] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 671.989206][ T6462] hsr_slave_0: left promiscuous mode [ 671.991245][ T6462] hsr_slave_1: left promiscuous mode [ 673.165621][T19807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.196611][T19300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 673.279687][T19300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 673.292010][T19300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 673.361390][T19300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.410861][T19300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 673.441751][T19300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.442737][T19300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 673.462164][ T6462] IPVS: stop unused estimator thread 0... [ 673.495591][T19300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.212458][T19300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.308425][T19300] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.332227][T10720] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.332351][T10720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.349325][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.349434][T10714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.912907][T19918] __nla_validate_parse: 155 callbacks suppressed [ 674.912930][T19918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3335'. [ 674.982224][T19922] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3336'. [ 674.983206][T19922] netlink: 'syz.3.3336': attribute type 8 has an invalid length. [ 674.983550][T19922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3336'. [ 675.799275][T19300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.491247][T19979] netlink: 'syz.1.3345': attribute type 16 has an invalid length. [ 676.491273][T19979] netlink: 'syz.1.3345': attribute type 17 has an invalid length. [ 676.594102][T19979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.604876][T19979] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.606103][T19979] dummy0: left promiscuous mode [ 676.623363][T19979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.701128][T19979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.704213][T19979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.729334][T19979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 676.729364][T19979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.736591][T19979] veth1_vlan: left promiscuous mode [ 676.752881][T19991] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 676.775291][T19979] veth0_vlan: left promiscuous mode [ 676.783623][T19979] veth0_vlan: entered promiscuous mode [ 676.793170][T19979] veth1_vlan: entered promiscuous mode [ 676.806363][T19979] veth1_macvtap: left promiscuous mode [ 676.814671][T19979] veth0_macvtap: left promiscuous mode [ 676.816185][T19979] veth0_macvtap: entered promiscuous mode [ 676.825313][T19989] netlink: 'syz.3.3346': attribute type 10 has an invalid length. [ 676.830282][T19979] veth1_macvtap: entered promiscuous mode [ 676.830548][T19979] macsec0: left promiscuous mode [ 676.853243][T19979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 676.855315][T19979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 676.856604][T19979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 676.877832][T19979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 676.886007][T19979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 676.915992][T19979] geneve2: left promiscuous mode [ 676.927824][T19979] gre1: left promiscuous mode [ 677.100065][T19989] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 677.189367][T10714] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.189407][T10714] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 39688 - 0 [ 677.211954][T10714] bond1: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 677.225958][T10714] bond1: (slave veth0_to_bond): making interface the new active one [ 677.303058][T10714] bond1: active interface up! [ 677.309922][T14650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.309958][T14650] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 39688 - 0 [ 677.310008][T14648] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.310036][T14648] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 39688 - 0 [ 677.440405][T19300] veth0_vlan: entered promiscuous mode [ 677.448583][T10714] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.448620][T10714] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 39688 - 0 [ 677.471866][T19300] veth1_vlan: entered promiscuous mode [ 677.518164][T20016] netlink: zone id is out of range [ 677.518183][T20016] netlink: del zone limit has 4 unknown bytes [ 677.553795][T19300] veth0_macvtap: entered promiscuous mode [ 677.564805][T19300] veth1_macvtap: entered promiscuous mode [ 677.642599][T19300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.714368][T19300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.790228][T14640] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.850092][T10720] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.852336][T14640] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.852379][T14640] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.633133][T19956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.918912][T10720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.918937][T10720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.111606][T10714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.111631][T10714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.248046][T20062] netlink: 'syz.1.3353': attribute type 49 has an invalid length. [ 679.248073][T20062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3353'. [ 679.722473][T20082] Bluetooth: MGMT ver 1.23 [ 679.733479][T20083] netlink: 'syz.4.3235': attribute type 5 has an invalid length. [ 681.327920][T20139] geneve1: entered promiscuous mode [ 681.332120][T20140] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3369'. [ 681.332338][T20140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3369'. [ 681.702024][T20154] nbd: socks must be embedded in a SOCK_ITEM attr [ 681.773590][T20155] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.3375'. [ 681.773704][T20155] 0猉功D龌: renamed from gretap0 (while UP) [ 681.814249][T20155] 0猉功D龌: entered allmulticast mode [ 681.832297][T20157] bridge_slave_0: left allmulticast mode [ 681.832327][T20157] bridge_slave_0: left promiscuous mode [ 681.832595][T20157] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.844431][T20157] bridge_slave_1: left allmulticast mode [ 681.844456][T20157] bridge_slave_1: left promiscuous mode [ 681.844681][T20157] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.885399][T20157] bond0: (slave bond_slave_0): Releasing backup interface [ 681.900559][T20157] bond0: (slave bond_slave_1): Releasing backup interface [ 681.929529][T20157] team0: Port device team_slave_0 removed [ 681.931610][T20157] team0: Port device team_slave_1 removed [ 681.931986][T20157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.933114][T20157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.933711][T20157] batman_adv: batadv0: Interface deactivated: macvlan2 [ 681.933722][T20157] batman_adv: batadv0: Removing interface: macvlan2 [ 682.006639][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3377'. [ 682.139621][T20170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3376'. [ 682.179991][T20170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3376'. [ 682.333969][T20174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3379'. [ 682.527640][T20189] vlan2: entered promiscuous mode [ 682.527664][T20189] macvlan0: entered promiscuous mode [ 682.722918][T20191] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.722960][T20191] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 39688 - 0 [ 682.874693][T20197] netlink: 'syz.3.3384': attribute type 1 has an invalid length. [ 682.876404][T20191] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.876439][T20191] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 39688 - 0 [ 683.011735][T20191] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.011776][T20191] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 39688 - 0 [ 683.175506][T20191] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.175545][T20191] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 39688 - 0 [ 683.238179][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'. [ 683.437743][T14648] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 39688 - 0 [ 683.437777][T14648] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 683.527265][T14648] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 39688 - 0 [ 683.527304][T14648] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 683.527357][T14648] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 39688 - 0 [ 683.527381][T14648] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 683.527424][T14648] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 39688 - 0 [ 683.527449][T14648] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 683.753340][T14647] tipc: Subscription rejected, illegal request [ 683.846492][T20222] block nbd0: Unsupported socket: should be TCP or UNIX. [ 683.913294][T20222] 0: reclassify loop, rule prio 0, protocol 03 [ 683.916543][T20224] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.3392'. [ 684.080938][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3395'. [ 684.363899][T20240] ipip0: entered promiscuous mode [ 684.363926][T20240] ipip0: entered allmulticast mode [ 684.394898][T20240] netlink: 'syz.0.3397': attribute type 1 has an invalid length. [ 684.558526][T20251] syz_tun: entered allmulticast mode [ 684.675184][T20244] syz_tun: left allmulticast mode [ 684.940743][T20269] syzkaller0: entered promiscuous mode [ 684.940770][T20269] syzkaller0: entered allmulticast mode [ 684.957348][T10720] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.957408][T10720] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.957439][T10720] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.957470][T10720] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.036369][T20274] syzkaller1: entered promiscuous mode [ 685.036395][T20274] syzkaller1: entered allmulticast mode [ 685.269035][T20279] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.269839][T20279] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.487931][T20279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.494729][T20279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.747610][T14647] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.747663][T14647] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.747699][T14647] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.747742][T14647] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.075177][T20315] ip_tables: iptables: counters copy to user failed while replacing table [ 686.727919][T20324] __nla_validate_parse: 153 callbacks suppressed [ 686.727937][T20324] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3418'. [ 687.063859][T20334] netlink: 'syz.0.3421': attribute type 1 has an invalid length. [ 687.672627][T20348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 687.717410][T10714] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.717476][T10714] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.717508][T10714] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.717541][T10714] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.769343][T20348] geneve1: entered promiscuous mode [ 687.769368][T20348] geneve1: entered allmulticast mode [ 687.801734][T20350] IPVS: Error connecting to the multicast addr [ 687.802548][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'. [ 687.988398][T20356] syzkaller1: entered promiscuous mode [ 687.988592][T20356] syzkaller1: entered allmulticast mode [ 688.109180][T20365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3432'. [ 688.362583][T20378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.543526][T20390] xt_hashlimit: size too large, truncated to 1048576 [ 689.940289][T20435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3447'. [ 690.014914][T20438] ip_tables: iptables: counters copy to user failed while replacing table [ 690.049684][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3449'. [ 690.049724][T20441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3449'. [ 690.147701][T10721] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.147767][T10721] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.147820][T10721] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.147851][T10721] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.163536][T20435] xt_IDLETIMER: timeout value is zero [ 690.165502][T20446] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3449'. [ 690.261917][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3451'. [ 690.402934][T20454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3451'. [ 690.529605][T20427] block device autoloading is deprecated and will be removed. [ 690.692477][T20467] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 690.850006][T20470] bridge0: entered promiscuous mode [ 690.850032][T20470] bridge0: entered allmulticast mode [ 690.862134][T20427] udevd[20427]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 690.894966][T20427] udevd[20427]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 690.926233][T20427] udevd[20427]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 690.935765][T20470] team0: Port device bridge0 added [ 691.076533][T20481] xt_limit: Overflow, try lower: 6/2147483648 [ 691.108687][T20481] sctp: [Deprecated]: syz.2.3460 (pid 20481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 691.108687][T20481] Use struct sctp_sack_info instead [ 691.589519][ T5819] rxe_eth0 speed is unknown, defaulting to 1000 [ 691.618214][T10423] Bluetooth: hci4: link tx timeout [ 691.618235][T10423] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 691.623021][T10423] Bluetooth: hci4: link tx timeout [ 691.623041][T10423] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 691.760401][T20512] __nla_validate_parse: 4 callbacks suppressed [ 691.760442][T20512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3471'. [ 691.760460][T20512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3471'. [ 691.766724][T20510] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3470'. [ 691.826546][T20510] netlink: 'syz.4.3470': attribute type 1 has an invalid length. [ 692.156267][T20506] gretap0: entered allmulticast mode [ 692.218765][T20506] bond1: (slave gretap0): making interface the new active one [ 692.219904][T20506] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 692.506259][T20544] syzkaller0: entered promiscuous mode [ 692.506286][T20544] syzkaller0: entered allmulticast mode [ 692.533329][T20541] netlink: 'syz.1.3477': attribute type 1 has an invalid length. [ 692.538532][T20544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3476'. [ 692.548825][T20546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3477'. [ 692.549054][T20542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3477'. [ 692.602419][T10423] Bluetooth: hci4: link tx timeout [ 692.602441][T10423] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 692.602459][T10423] Bluetooth: hci4: link tx timeout [ 692.602469][T10423] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 692.614089][T20546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 692.957238][T20565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3481'. [ 693.021633][T20574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3481'. [ 693.153483][T20575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.156129][T20575] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.162019][T20575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.259818][T20575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.266413][T20575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 693.266441][T20575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.273390][T20579] ip_tables: iptables: counters copy to user failed while replacing table [ 693.318313][T20575] veth1_vlan: left promiscuous mode [ 693.319665][T20575] veth0_vlan: left promiscuous mode [ 693.321391][T20575] veth0_vlan: entered promiscuous mode [ 693.323980][T20575] veth1_vlan: entered promiscuous mode [ 693.352417][T20575] veth1_macvtap: left promiscuous mode [ 693.353746][T20575] veth0_macvtap: left promiscuous mode [ 693.355030][T20575] veth0_macvtap: entered promiscuous mode [ 693.356323][T20575] veth1_macvtap: entered promiscuous mode [ 693.388073][T20575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 693.389362][T20575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.390489][T20575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 693.391657][T20575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 693.396127][T20575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 693.421873][T20582] netlink: 'syz.0.3483': attribute type 1 has an invalid length. [ 693.464710][T14648] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.464837][T14648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.480756][T14648] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.480865][T14648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.627186][T10423] Bluetooth: hci4: command 0x0406 tx timeout [ 693.648807][T20582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 693.803347][T20583] bond1: (slave geneve2): making interface the new active one [ 693.814450][T20594] netlink: 'syz.4.3485': attribute type 4 has an invalid length. [ 693.825723][T20583] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 693.828521][T10720] IPVS: starting estimator thread 0... [ 693.928426][T20595] IPVS: using max 24 ests per chain, 57600 per kthread [ 694.061007][T10718] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.063374][T14650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.075095][T14650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.080106][T14650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.080298][T14650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.080466][T14650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.140678][ T999] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.199165][T10718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.720125][T20633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3495'. [ 694.943603][T20633] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 694.972528][T20641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3496'. [ 695.708278][T18482] Bluetooth: hci4: command 0x0406 tx timeout [ 696.549055][T14644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.549078][T14644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.608875][T10718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.608901][T10718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.945899][T20706] __nla_validate_parse: 1 callbacks suppressed [ 696.945921][T20706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3507'. [ 697.016819][T20706] bridge4: entered promiscuous mode [ 697.022333][T20711] netlink: 'syz.2.3507': attribute type 10 has an invalid length. [ 697.148274][T20718] netlink: 'syz.3.3510': attribute type 16 has an invalid length. [ 697.148299][T20718] netlink: 'syz.3.3510': attribute type 17 has an invalid length. [ 697.931176][T20711] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.931939][T20711] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.953886][T20711] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.954140][T20711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.954515][T20711] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.954665][T20711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.973147][T20711] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 698.080267][T20718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.083144][T20718] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.104432][T20718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.263038][T20718] veth1_vlan: left promiscuous mode [ 698.274027][T20718] veth0_vlan: left promiscuous mode [ 698.286466][T20718] veth0_vlan: entered promiscuous mode [ 698.302768][T20718] veth1_vlan: entered promiscuous mode [ 698.376368][T20718] veth1_macvtap: left promiscuous mode [ 698.393385][T20718] veth0_macvtap: left promiscuous mode [ 698.403599][T20718] veth0_macvtap: entered promiscuous mode [ 698.643965][T20718] veth1_macvtap: entered promiscuous mode [ 698.686290][T20718] geneve1: left promiscuous mode [ 698.686314][T20718] geneve1: left allmulticast mode [ 698.714385][T20718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 698.726296][T20718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.735930][T20718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.747400][T20718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.832706][T20718] ip6tnl1: left promiscuous mode [ 699.320096][T20767] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3517'. [ 699.586824][T20765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3516'. [ 699.648957][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3520'. [ 699.666491][T20782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3521'. [ 700.114913][T20798] bond0: (slave batadv0): Releasing backup interface [ 700.149128][T20798] bond1: (slave veth0_to_bond): Releasing active interface [ 700.186574][T20798] bond0: (slave bond_slave_0): Releasing backup interface [ 700.235182][T20798] bond0: (slave bond_slave_1): Releasing backup interface [ 700.298034][T20798] team0: Port device team_slave_0 removed [ 700.323414][T20798] team0: Port device team_slave_1 removed [ 700.324412][T20798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.324434][T20798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.355957][T20798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.355984][T20798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.371846][T20798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 700.396790][T20800] syzkaller0: entered promiscuous mode [ 700.396815][T20800] syzkaller0: entered allmulticast mode [ 700.461082][T20806] team0: Device xfrm0 is of different type [ 700.515244][T20811] tipc: Enabled bearer , priority 0 [ 700.821469][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3529'. [ 700.868070][ T5643] dummy0: entered promiscuous mode [ 700.876656][T20828] macvlan2: entered allmulticast mode [ 700.876683][T20828] dummy0: entered allmulticast mode [ 701.115144][T20838] netlink: 5712 bytes leftover after parsing attributes in process `syz.3.3533'. [ 701.133301][T20839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3532'. [ 701.395099][T20854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3534'. [ 701.442219][T20861] pim6reg: entered allmulticast mode [ 701.451612][T20853] netlink: 'syz.2.3535': attribute type 1 has an invalid length. [ 701.509854][T20857] netlink: 'syz.1.3536': attribute type 10 has an invalid length. [ 701.782902][T20857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.799066][T20857] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 701.799170][T17549] tipc: Node number set to 1124328380 [ 702.776373][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3546'. [ 702.936514][T20906] macsec1: entered promiscuous mode [ 703.183963][T20916] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3549'. [ 703.231177][T20918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3548'. [ 703.267505][T20918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3548'. [ 703.269743][T20918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3548'. [ 703.272501][T20921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3550'. [ 703.314040][T20918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3548'. [ 703.316221][T20918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3548'. [ 703.371370][T20918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3548'. [ 703.406689][T20918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3548'. [ 703.636037][T20934] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20003 [ 704.569828][T20992] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 707.475451][T21086] netlink: 'syz.4.3573': attribute type 16 has an invalid length. [ 707.475478][T21086] netlink: 'syz.4.3573': attribute type 3 has an invalid length. [ 707.556521][T21087] tipc: Enabled bearer , priority 0 [ 707.664488][T21087] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 707.787294][T21094] netlink: 'syz.0.3576': attribute type 1 has an invalid length. [ 707.929200][T21094] bond2: entered promiscuous mode [ 707.934150][T21094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 707.961870][T21105] __nla_validate_parse: 30 callbacks suppressed [ 707.961894][T21105] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3578'. [ 708.018873][T21096] bond2: (slave bridge1): making interface the new active one [ 708.018900][T21096] bridge1: entered promiscuous mode [ 708.020266][T21096] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 708.094136][T21105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3578'. [ 708.607652][T21129] netlink: 'syz.4.3583': attribute type 1 has an invalid length. [ 708.716554][T21129] bond2: entered promiscuous mode [ 708.728721][T21129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 708.751869][T21130] vlan2: entered allmulticast mode [ 708.751890][T21130] bond2: entered allmulticast mode [ 708.813038][T21133] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 708.905837][T21139] : entered promiscuous mode [ 709.003657][T21144] tipc: Enabled bearer , priority 0 [ 709.008350][T21144] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 709.024344][T21144] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 709.068578][T21143] tipc: Disabling bearer [ 709.180383][T21155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3591'. [ 709.410667][T21167] v: renamed from vlan1 (while UP) [ 709.581356][T21170] netlink: 'syz.0.3598': attribute type 31 has an invalid length. [ 709.643502][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3598'. [ 709.643538][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3598'. [ 710.558131][T21218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3613'. [ 711.116591][T21241] syzkaller0: entered promiscuous mode [ 711.116617][T21241] syzkaller0: entered allmulticast mode [ 711.845680][T21276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3628'. [ 712.039785][T21281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3630'. [ 712.354966][T21293] syzkaller0: entered promiscuous mode [ 712.354992][T21293] syzkaller0: entered allmulticast mode [ 712.434502][T21293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3633'. [ 712.434554][T21293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3633'. [ 712.491896][T21301] netlink: 'syz.3.3636': attribute type 3 has an invalid length. [ 712.519191][T21290] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 712.934230][T21320] netlink: 'syz.4.3638': attribute type 12 has an invalid length. [ 713.129190][T21330] __nla_validate_parse: 3 callbacks suppressed [ 713.129211][T21330] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3641'. [ 713.131544][T21330] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3641'. [ 713.781354][T21342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3643'. [ 715.224355][T21290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 715.534496][T21360] IPVS: set_ctl: invalid protocol: 137 172.30.1.2:20265 [ 715.601589][T11478] Bluetooth: hci3: ACL packet for unknown connection handle 125 [ 715.731929][T21371] netlink: 'syz.0.3650': attribute type 1 has an invalid length. [ 715.798001][T21371] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 715.800754][T21371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3650'. [ 715.802551][T21371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 716.602350][T21413] netlink: 'syz.3.3662': attribute type 1 has an invalid length. [ 716.602376][T21413] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3662'. [ 716.664892][T21414] netlink: del zone limit has 4 unknown bytes [ 716.962949][T21389] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 716.962980][T21389] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 716.992768][T21389] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 716.992795][T21389] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 717.058351][T21389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 717.058379][T21389] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 717.089811][T21389] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 717.089838][T21389] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 717.102060][T21435] 8021q: VLANs not supported on vcan0 [ 717.425299][T21450] netlink: 'syz.3.3670': attribute type 1 has an invalid length. [ 717.425327][T21450] netlink: 'syz.3.3670': attribute type 2 has an invalid length. [ 717.450726][T21450] netlink: 'syz.3.3670': attribute type 1 has an invalid length. [ 717.617857][T21453] bond1: (slave veth0_to_bond): making interface the new active one [ 717.621471][T21453] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 717.870175][T21459] IPVS: set_ctl: invalid protocol: 51 172.20.20.38:20004 [ 718.421114][T21479] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 718.587957][T21486] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3678'. [ 718.724633][T21495] netlink: 'syz.1.3683': attribute type 10 has an invalid length. [ 718.724658][T21495] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3683'. [ 718.903545][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3686'. [ 719.039906][T21511] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 719.122759][T21515] tipc: Enabling of bearer rejected, failed to enable media [ 719.610503][T21539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3694'. [ 719.648778][T21539] bond4: entered promiscuous mode [ 719.649218][T21539] 8021q: adding VLAN 0 to HW filter on device bond4 [ 720.063094][T21556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3696'. [ 720.363715][T21568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3698'. [ 720.408705][T21560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3698'. [ 720.432747][T21573] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3700'. [ 720.448623][T21572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3700'. [ 720.501017][T21572] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 720.562390][T21572] bond3 (unregistering): Released all slaves [ 721.038045][T21599] syzkaller1: entered promiscuous mode [ 721.038072][T21599] syzkaller1: entered allmulticast mode [ 723.815213][T21617] tipc: Resetting bearer [ 723.925683][T21617] tipc: Resetting bearer [ 723.935141][T21620] tipc: Enabling of bearer rejected, failed to enable media [ 724.034241][T21628] netlink: 'syz.4.3717': attribute type 1 has an invalid length. [ 724.083073][T21632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3716'. [ 724.083247][T21632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3716'. [ 724.274314][T21645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3718'. [ 724.274347][T21645] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3718'. [ 724.309713][T21628] bond3: entered promiscuous mode [ 724.310128][T21628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 724.385064][T21635] 8021q: adding VLAN 0 to HW filter on device bond3 [ 724.386627][T21635] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 724.386650][T21635] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 724.421781][T21635] bond3: (slave xfrm1): making interface the new active one [ 724.421806][T21635] xfrm1: entered promiscuous mode [ 724.424469][T21635] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 724.456232][T21632] tipc: Enabling of bearer rejected, failed to enable media [ 724.868942][T21661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.904638][T21661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3720'. [ 724.914912][T21663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3720'. [ 725.094043][T21672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'. [ 725.223509][T21675] netlink: 'syz.4.3724': attribute type 3 has an invalid length. [ 726.190999][T21725] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3736'. [ 726.326402][T21729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3737'. [ 727.000646][T21754] Bluetooth: MGMT ver 1.23 [ 727.077064][T21760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3747'. [ 727.113294][T21760] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 727.115380][T21760] bond3 (unregistering): Released all slaves [ 728.102735][T21798] nbd: must specify a device to reconfigure [ 728.626256][T21828] netlink: 'syz.3.3768': attribute type 1 has an invalid length. [ 728.680715][T21828] batman_adv: batadv0: Adding interface: syzkaller0 [ 728.680735][T21828] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.680984][T21828] batman_adv: batadv0: Interface activated: syzkaller0 [ 728.933387][T21847] netlink: 'syz.1.3771': attribute type 21 has an invalid length. [ 728.945446][T21847] netlink: 'syz.1.3771': attribute type 1 has an invalid length. [ 728.975566][T21851] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 729.155564][T21856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.202339][T21856] __nla_validate_parse: 8 callbacks suppressed [ 729.202361][T21856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3774'. [ 729.392984][T21862] xt_l2tp: v2 doesn't support IP mode [ 729.764118][T21880] wlan1: mtu greater than device maximum [ 730.416774][T21908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3789'. [ 730.416801][T21908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3789'. [ 730.886802][T21923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3796'. [ 730.896010][T21921] bond2: Removing last arp target with arp_interval on [ 731.114972][T21935] tap0: tun_chr_ioctl cmd 2147767520 [ 731.116035][T21935] tap0: tun_chr_ioctl cmd 1074025675 [ 731.116053][T21935] tap0: persist disabled [ 731.158776][T21935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3800'. [ 731.314859][T21945] ip_tables: iptables: counters copy to user failed while replacing table [ 731.315304][T21945] ip_tables: iptables: counters copy to user failed while replacing table [ 731.447645][T21950] netlink: 566 bytes leftover after parsing attributes in process `syz.1.3805'. [ 731.703415][T21961] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3810'. [ 731.882623][T21971] netlink: 'syz.2.3812': attribute type 27 has an invalid length. [ 731.968968][T21979] syzkaller0: entered promiscuous mode [ 731.968994][T21979] syzkaller0: entered allmulticast mode [ 731.975218][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3815'. [ 732.232534][T21987] netlink: 'syz.1.3817': attribute type 4 has an invalid length. [ 732.301370][T14644] pim6reg: left allmulticast mode [ 732.625867][T14644] bond11 (unregistering): (slave xfrm1): Releasing backup interface [ 732.625896][T14644] xfrm1 (unregistering): left promiscuous mode [ 732.715843][T14644] erspan0 (unregistering): left promiscuous mode [ 732.786537][T14644] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 732.841827][T22014] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3821'. [ 732.841941][T22014] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3821'. [ 732.925998][T14644] bond4 (unregistering): (slave gretap2): Releasing active interface [ 733.060310][T14644] tipc: Disabling bearer [ 733.074406][T14644] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 733.101806][T14644] team0: Port device bridge5 removed [ 733.125313][T14644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.126501][T14644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.150150][T14644] bond0 (unregistering): Released all slaves [ 733.169526][T14644] bond1 (unregistering): (slave bond2): Releasing backup interface [ 733.170380][T14644] bond1 (unregistering): Released all slaves [ 733.203877][T14644] bond2 (unregistering): Released all slaves [ 733.221380][T14644] bond3 (unregistering): Released all slaves [ 733.235346][T14644] bond4 (unregistering): Released all slaves [ 733.250785][T14644] bond6 (unregistering): Released all slaves [ 733.264901][T14644] bond5 (unregistering): Released all slaves [ 733.275258][T14644] bond7 (unregistering): Released all slaves [ 733.286319][T14644] bond8 (unregistering): Released all slaves [ 733.309671][T14644] bond9 (unregistering): (slave bond10): Releasing backup interface [ 733.310202][T14644] bond9 (unregistering): Released all slaves [ 733.321537][T14644] bond10 (unregistering): Released all slaves [ 733.335317][T14644] bond11 (unregistering): Released all slaves [ 733.351207][T14644] bond12 (unregistering): Released all slaves [ 733.369319][T14644] bond13 (unregistering): Released all slaves [ 733.376560][T14644] bond14 (unregistering): Released all slaves [ 733.400783][T14644] bond15 (unregistering): Released all slaves [ 733.425212][T14644] bond16 (unregistering): Released all slaves [ 733.441476][T14644] bond17 (unregistering): (slave veth12): Releasing active interface [ 733.442810][T14644] bond17 (unregistering): (slave veth0_to_bond): Releasing active interface [ 733.443529][T14644] bond17 (unregistering): Released all slaves [ 733.465042][T14644] team0: Port device bond18 removed [ 733.465800][T14644] bond18 (unregistering): Released all slaves [ 733.490455][T14644] bond19 (unregistering): Released all slaves [ 733.838804][T14644] !: left promiscuous mode [ 733.952908][T22026] Bluetooth: hci0: unsupported parameter 5135 [ 733.952941][T22026] Bluetooth: hci0: unsupported parameter 8192 [ 733.952955][T22026] Bluetooth: hci0: unsupported parameter 5135 [ 733.952967][T22026] Bluetooth: hci0: unsupported parameter 8192 [ 733.983973][T22026] batadv_slave_0: entered promiscuous mode [ 733.985824][T14644] tipc: Disabling bearer [ 733.994119][T14644] tipc: Left network mode [ 734.040341][T22026] veth1_to_team: entered promiscuous mode [ 734.053216][T22026] veth1_to_team: left promiscuous mode [ 734.321514][T22025] batadv_slave_0: left promiscuous mode [ 734.563298][T22045] __nla_validate_parse: 2 callbacks suppressed [ 734.563321][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3829'. [ 734.814959][T22048] netlink: 'syz.2.3831': attribute type 1 has an invalid length. [ 735.072984][T22048] 8021q: adding VLAN 0 to HW filter on device bond3 [ 735.096238][T22069] netlink: 'syz.2.3831': attribute type 10 has an invalid length. [ 735.096261][T22069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3831'. [ 735.184144][T22070] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3835'. [ 735.232644][T22055] bond3: (slave veth7): Enslaving as an active interface with a down link [ 735.262986][T22063] bond3: (slave dummy0): making interface the new active one [ 735.265605][T22063] dummy0: entered promiscuous mode [ 735.274170][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3836'. [ 735.282221][T22063] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 735.340006][T22080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3836'. [ 735.403504][T22069] bond3: (slave dummy0): Releasing active interface [ 735.550931][T22083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3837'. [ 735.601936][T22083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3837'. [ 735.761589][T22085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3838'. [ 735.998439][T22096] syzkaller0: left promiscuous mode [ 735.998467][T22096] syzkaller0: left allmulticast mode [ 736.986449][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3848'. [ 736.986477][T22118] IPv6: NLM_F_CREATE should be specified when creating new route [ 737.055052][T14644] hsr_slave_0: left promiscuous mode [ 737.135374][T14644] hsr_slave_1: left promiscuous mode [ 737.153022][T14644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.232289][T22123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3851'. [ 737.799972][T22142] SET target dimension over the limit! [ 738.331152][T14645] smbdirect: ib_dev[�] removed [ 738.552065][T14644] team0 (unregistering): Port device team_slave_1 removed [ 738.572635][T14644] team0 (unregistering): Port device team_slave_0 removed [ 738.658133][T14648] smc: removing ib device syz1 [ 738.693580][T14648] smbdirect: ib_dev[syz1] removed [ 738.885590][T14644] team0 (unregistering): Port device dummy0 removed [ 739.072003][T22123] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 739.166057][T22125] bridge2: entered allmulticast mode [ 739.467627][ T999] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 740.192130][T22186] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3861'. [ 740.192190][T22186] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3861'. [ 740.225374][T22186] netlink: 'syz.4.3861': attribute type 1 has an invalid length. [ 740.454584][T22186] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3861'. [ 742.290732][T22252] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3871'. [ 742.311964][T22252] sctp: [Deprecated]: syz.2.3871 (pid 22252) Use of int in maxseg socket option. [ 742.311964][T22252] Use struct sctp_assoc_value instead [ 742.739214][ T30] audit: type=1804 audit(1793649820.162:13): pid=22267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3876" name="/newroot/100/cgroup.controllers" dev="tmpfs" ino=527 res=1 errno=0 [ 742.740424][ T30] audit: type=1800 audit(1793649820.162:14): pid=22267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3876" name="cgroup.controllers" dev="tmpfs" ino=527 res=0 errno=-22 [ 742.871334][T22271] netlink: 'syz.1.3877': attribute type 1 has an invalid length. [ 742.894520][T22272] netlink: 'syz.1.3877': attribute type 1 has an invalid length. [ 743.227079][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 743.263383][T22271] bond3: entered promiscuous mode [ 743.276673][T22271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 743.361888][T22278] 8021q: adding VLAN 0 to HW filter on device bond3 [ 743.362287][T22278] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 743.362306][T22278] bond3: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 743.395909][T22278] bond3: (slave gre2): Opening slave failed [ 743.493458][T22260] syzkaller1: entered promiscuous mode [ 743.493485][T22260] syzkaller1: entered allmulticast mode [ 743.905681][T22296] netlink: 'syz.4.3879': attribute type 1 has an invalid length. [ 744.073133][T22303] openvswitch: netlink: Message has 4613 unknown bytes. [ 744.093394][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3879'. [ 744.233200][T22306] netlink: 'syz.1.3880': attribute type 1 has an invalid length. [ 744.233227][T22306] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3880'. [ 744.350757][T22296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 744.470925][T22300] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 744.549014][T22303] bridge2: entered promiscuous mode [ 744.624250][T22303] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 744.670801][T22314] netlink: 'syz.3.3882': attribute type 1 has an invalid length. [ 744.716591][T22314] 8021q: adding VLAN 0 to HW filter on device bond3 [ 744.732034][T22314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3882'. [ 744.735786][T22314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3882'. [ 744.818428][T14652] IPVS: starting estimator thread 0... [ 744.848070][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3884'. [ 744.929751][T22323] IPVS: using max 62 ests per chain, 148800 per kthread [ 745.329606][T14644] IPVS: stop unused estimator thread 0... [ 745.719760][T22354] syzkaller0: entered promiscuous mode [ 745.719797][T22354] syzkaller0: entered allmulticast mode [ 745.743853][T22352] block nbd0: NBD_DISCONNECT [ 745.849038][T22365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3896'. [ 746.198793][T22387] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 746.264267][T22393] netlink: 'syz.2.3899': attribute type 6 has an invalid length. [ 746.310337][T22380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 746.582385][T22388] syzkaller1: entered promiscuous mode [ 746.582409][T22388] syzkaller1: entered allmulticast mode [ 747.208663][T22431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3906'. [ 747.705140][T22457] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 748.095116][T22465] syzkaller0: entered promiscuous mode [ 748.095143][T22465] syzkaller0: entered allmulticast mode [ 748.120297][T22465] tipc: Started in network mode [ 748.120333][T22465] tipc: Node identity 924eb03af94d, cluster identity 4711 [ 748.123708][T22465] tipc: Enabled bearer , priority 0 [ 748.248762][T22464] tipc: Resetting bearer [ 748.422644][T22464] tipc: Disabling bearer [ 748.514506][T22481] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 749.186334][T22516] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 749.526719][T22530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3925'. [ 750.181597][T22546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 750.514978][T22561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3932'. [ 750.706757][T22570] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3932'. [ 750.706785][T22570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3932'. [ 751.387069][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 751.748982][T22604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3939'. [ 751.857307][T22606] bond4: entered promiscuous mode [ 751.948885][T22617] bond5: entered allmulticast mode [ 751.949397][T22617] 8021q: adding VLAN 0 to HW filter on device bond5 [ 752.090104][T22617] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3944'. [ 752.134485][T22617] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 752.155537][T22617] bond0 (unregistering): Released all slaves [ 752.518975][T22632] veth4: entered allmulticast mode [ 752.695315][T22634] netlink: 8568 bytes leftover after parsing attributes in process `syz.4.3949'. [ 752.716723][T22634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3949'. [ 752.915220][T22644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3953'. [ 753.112530][T22653] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.112713][T22653] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.115012][T22653] bridge_slave_0: entered allmulticast mode [ 753.144147][T22653] bridge_slave_0: entered promiscuous mode [ 753.158533][T22653] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.158689][T22653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.168883][T22653] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3956'. [ 753.471152][T22668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3959'. [ 753.473493][T22668] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3959'. [ 753.479973][T22668] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3959'. [ 753.639507][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3961'. [ 753.946802][T22690] netlink: 'syz.4.3967': attribute type 4 has an invalid length. [ 753.964526][T22690] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 754.207859][T22701] netlink: ct family unspecified [ 754.825641][T22728] netlink: 'syz.2.3978': attribute type 1 has an invalid length. [ 755.965603][T22754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.358566][T22749] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 756.905312][T22773] __nla_validate_parse: 6 callbacks suppressed [ 756.905336][T22773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3989'. [ 756.905355][T22773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3989'. [ 756.995468][T22779] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 756.995468][T22779] Please contact the netfilter-devel mailing list or update your nftables rules. [ 757.089541][T22783] lo: entered promiscuous mode [ 757.089867][T22783] tunl0: entered promiscuous mode [ 757.107286][T22783] gre0: entered promiscuous mode [ 757.175404][T22783] gretap0: entered promiscuous mode [ 757.232175][T22787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3991'. [ 757.247727][T22783] erspan0: entered promiscuous mode [ 757.264531][T22783] ip_vti0: entered promiscuous mode [ 757.281812][T22783] ip6_vti0: entered promiscuous mode [ 757.302325][T22783] sit0: entered promiscuous mode [ 757.316291][T22783] ip6tnl0: entered promiscuous mode [ 757.330699][T22783] ip6gre0: entered promiscuous mode [ 757.342639][T22789] netlink: 'syz.0.3993': attribute type 1 has an invalid length. [ 757.354242][T22783] syz_tun: entered promiscuous mode [ 757.368581][T22783] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.368820][T22783] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.371179][T22783] bridge0: entered promiscuous mode [ 757.400045][T22783] bond0: entered promiscuous mode [ 757.400069][T22783] bond_slave_0: entered promiscuous mode [ 757.400306][T22783] bond_slave_1: entered promiscuous mode [ 757.429434][T22783] team0: entered promiscuous mode [ 757.429456][T22783] team_slave_0: entered promiscuous mode [ 757.431819][T22783] team_slave_1: entered promiscuous mode [ 757.445196][T22790] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 757.477031][T22783] nlmon0: entered promiscuous mode [ 757.486898][T22783] batadv0: entered promiscuous mode [ 757.501428][T22783] veth0: entered promiscuous mode [ 757.504438][T22783] veth1: entered promiscuous mode [ 757.524056][T22783] wg0: entered promiscuous mode [ 757.544662][T22783] wg1: entered promiscuous mode [ 757.554748][T22783] wg2: entered promiscuous mode [ 757.564745][T22783] veth0_to_bridge: entered promiscuous mode [ 757.594793][T22783] veth1_to_bridge: entered promiscuous mode [ 757.612596][T22783] veth0_to_bond: entered promiscuous mode [ 757.630211][T22783] veth1_to_bond: entered promiscuous mode [ 757.635101][T22783] veth0_to_team: entered promiscuous mode [ 757.653980][T22783] veth1_to_team: entered promiscuous mode [ 757.675597][T22783] veth0_to_batadv: entered promiscuous mode [ 757.689972][T22783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.690925][T22783] batadv_slave_0: entered promiscuous mode [ 757.712146][T22783] veth1_to_batadv: entered promiscuous mode [ 757.729571][T22783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.729639][T22783] batadv_slave_1: entered promiscuous mode [ 757.745777][T22783] xfrm0: entered promiscuous mode [ 757.764377][T22783] veth0_to_hsr: entered promiscuous mode [ 757.785511][T22783] veth1_to_hsr: entered promiscuous mode [ 757.827658][T22783] hsr0: entered promiscuous mode [ 757.840633][T22783] veth1_virt_wifi: entered promiscuous mode [ 757.849189][T22783] veth0_virt_wifi: entered promiscuous mode [ 757.854443][T22783] virt_wifi0: entered promiscuous mode [ 757.893740][T22783] vlan0: entered promiscuous mode [ 757.910943][T22783] vlan1: entered promiscuous mode [ 757.931894][T22783] macvlan0: entered promiscuous mode [ 757.942986][T22783] macvlan1: entered promiscuous mode [ 757.961411][T22783] ipvlan0: entered promiscuous mode [ 757.964964][T22783] ipvlan1: entered promiscuous mode [ 757.984295][T22783] macvtap0: entered promiscuous mode [ 757.993974][T22783] macsec0: entered promiscuous mode [ 758.006053][T22783] geneve0: entered promiscuous mode [ 758.015346][T22783] geneve1: entered promiscuous mode [ 758.032147][T22783] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 758.047847][T22783] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 758.052071][T22783] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 758.069194][T22783] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 758.075147][T22783] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 758.075331][T22783] syztnl1: entered promiscuous mode [ 758.075541][T22783] ipip0: entered promiscuous mode [ 758.101441][T22783] sit1: entered promiscuous mode [ 758.124980][T22783] geneve2: entered promiscuous mode [ 758.125189][T22783] mac80211_hwsim hwsim68 wlan2: entered promiscuous mode [ 758.125352][T22783] veth2: entered promiscuous mode [ 758.125548][T22783] veth3: entered promiscuous mode [ 758.125700][T22783] veth4: entered promiscuous mode [ 758.126232][T22783] veth5: entered promiscuous mode [ 758.165996][T22783] erspan1: entered promiscuous mode [ 758.177636][T22783] bridge2: entered promiscuous mode [ 758.180962][T22783] bridge3: entered promiscuous mode [ 758.187430][T22783] bridge4: entered promiscuous mode [ 758.190331][T22783] bond2: entered promiscuous mode [ 758.190608][T22783] syztnl0: entered promiscuous mode [ 758.190762][T22783] syztnl2: entered promiscuous mode [ 758.190877][T22783] mac80211_hwsim hwsim71 wlan3: entered promiscuous mode [ 758.231750][T22783] bond3: entered promiscuous mode [ 758.233661][T22783] veth6: entered promiscuous mode [ 758.235263][T22783] veth7: entered promiscuous mode [ 758.255158][T22789] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 758.404371][T22803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3997'. [ 758.433815][T14652] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.728575][T14652] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.738217][T22812] wg2 speed is unknown, defaulting to 1000 [ 758.744079][T22812] rxe_eth0 speed is unknown, defaulting to 1000 [ 758.748431][T10718] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.751232][ T5805] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.777315][T22822] tipc: Trying to set illegal importance in message [ 758.792942][T22822] netlink: 'syz.4.3999': attribute type 9 has an invalid length. [ 758.855954][T22827] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 760.193325][T22863] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4010'. [ 760.194750][T22863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4010'. [ 760.241847][T22864] openvswitch: netlink: Message has 20 unknown bytes. [ 760.449851][T22882] netlink: 'syz.0.4014': attribute type 1 has an invalid length. [ 760.449877][T22882] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4014'. [ 760.449919][T22882] netlink: 'syz.0.4014': attribute type 1 has an invalid length. [ 760.449932][T22882] netlink: 'syz.0.4014': attribute type 2 has an invalid length. [ 760.656194][T22893] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 760.668136][T22893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4018'. [ 760.668167][T22893] openvswitch: netlink: Key type 8710 is out of range max 32 [ 761.717601][T22927] tipc: Enabling of bearer rejected, failed to enable media [ 761.768682][T22930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4027'. [ 762.368380][T22952] ip_tables: iptables: counters copy to user failed while replacing table [ 762.469841][T22963] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4034'. [ 762.482322][T22963] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4034'. [ 763.232826][T23003] tipc: Enabling of bearer rejected, failed to enable media [ 763.799106][T23025] ip_tables: iptables: counters copy to user failed while replacing table [ 764.255170][T23047] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 764.391342][T23052] Bluetooth: hci0: unsupported parameter 5135 [ 764.391365][T23052] Bluetooth: hci0: unsupported parameter 8192 [ 764.391376][T23052] Bluetooth: hci0: unsupported parameter 5135 [ 764.391386][T23052] Bluetooth: hci0: unsupported parameter 8192 [ 764.493701][T23058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4056'. [ 764.521445][T23059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.649102][T23069] tipc: Started in network mode [ 764.649130][T23069] tipc: Node identity 32020af351cd, cluster identity 4711 [ 764.649274][T23069] tipc: Enabled bearer , priority 0 [ 764.649493][T23070] tipc: Enabling of bearer rejected, already enabled [ 764.656286][T23069] syzkaller0: entered promiscuous mode [ 764.656338][T23069] syzkaller0: entered allmulticast mode [ 764.717975][T23069] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 764.777984][T23069] tipc: Resetting bearer [ 764.789195][T23068] tipc: Resetting bearer [ 764.797581][T23074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4059'. [ 764.818991][T23068] tipc: Disabling bearer [ 764.824992][T23072] tipc: Enabling of bearer rejected, already enabled [ 764.825835][T23072] syzkaller0: entered promiscuous mode [ 764.825856][T23072] syzkaller0: entered allmulticast mode [ 764.855116][T23072] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 764.883339][T23072] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 764.900261][T23072] tipc: Resetting bearer [ 765.069036][T23078] hsr0: entered allmulticast mode [ 765.069062][T23078] hsr_slave_0: entered allmulticast mode [ 765.069081][T23078] hsr_slave_1: entered allmulticast mode [ 765.121620][T23085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4064'. [ 766.257312][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4074'. [ 766.257341][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4074'. [ 766.458594][T23113] bond3: (slave veth0_to_bond): Releasing active interface [ 766.761522][T23127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4076'. [ 767.387102][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 768.047870][T23113] bond1: (slave geneve2): Releasing active interface [ 768.074570][T23113] bond2: (slave bridge1): Releasing backup interface [ 768.074601][T23113] bridge1: left promiscuous mode [ 768.107616][T14648] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.108330][T14648] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.108408][T14648] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.108953][T14648] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.264746][T23137] netlink: 'syz.1.4077': attribute type 21 has an invalid length. [ 768.331156][T23142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4077'. [ 768.375423][T23125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4075'. [ 768.384395][T23077] hsr0: left allmulticast mode [ 768.384416][T23077] hsr_slave_0: left allmulticast mode [ 768.384431][T23077] hsr_slave_1: left allmulticast mode [ 768.824396][T23166] ip_tables: iptables: counters copy to user failed while replacing table [ 768.957354][T23178] ip_tables: iptables: counters copy to user failed while replacing table [ 769.000367][T11478] block nbd0: Receive control failed (result -32) [ 769.000389][T10423] block nbd0: Receive control failed (result -32) [ 769.000457][T11478] block nbd2: Receive control failed (result -32) [ 769.009334][T18482] block nbd2: Receive control failed (result -32) [ 769.277491][T23191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4094'. [ 769.279231][T23191] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 769.726743][T23220] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4102'. [ 769.740968][T23218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4101'. [ 769.760495][T23220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4102'. [ 769.782682][T23218] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4101'. [ 769.985439][T23235] vlan3: entered allmulticast mode [ 769.985466][T23235] veth0_to_bond: entered allmulticast mode [ 770.059108][T23239] macvtap1: entered allmulticast mode [ 770.059135][T23239] dummy0: entered allmulticast mode [ 770.075670][T23239] dummy0: left allmulticast mode [ 770.481857][T23257] xt_check_table_hooks: 56 callbacks suppressed [ 770.481882][T23257] x_tables: duplicate underflow at hook 2 [ 770.536338][T23259] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4112'. [ 770.546452][T23259] netlink: 'syz.1.4112': attribute type 1 has an invalid length. [ 770.700946][T23259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4112'. [ 770.780246][T23259] team0: Port device bridge0 removed [ 770.789832][T23268] netlink: 'syz.2.4114': attribute type 3 has an invalid length. [ 770.789955][T23268] netlink: 'syz.2.4114': attribute type 3 has an invalid length. [ 770.790066][T23268] netlink: 'syz.2.4114': attribute type 3 has an invalid length. [ 770.790169][T23268] netlink: 'syz.2.4114': attribute type 3 has an invalid length. [ 770.790272][T23268] netlink: 'syz.2.4114': attribute type 3 has an invalid length. [ 770.790374][T23268] netlink: 'syz.2.4114': attribute type 3 has an invalid length. [ 770.790477][T23268] netlink: 'syz.2.4114': attribute type 3 has an invalid length. [ 770.790595][T23268] netlink: 'syz.2.4114': attribute type 3 has an invalid length. [ 770.859204][T14648] tipc: Resetting bearer [ 771.032030][T23275] syzkaller0: entered promiscuous mode [ 771.032058][T23275] syzkaller0: entered allmulticast mode [ 771.134296][T23287] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 772.034606][T23324] bond5: entered allmulticast mode [ 772.035214][T23324] 8021q: adding VLAN 0 to HW filter on device bond5 [ 772.042142][T23324] syzkaller0: entered promiscuous mode [ 772.042165][T23324] syzkaller0: entered allmulticast mode [ 772.181672][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.181706][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.181732][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.181755][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.181779][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.181802][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.181841][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.181865][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.181889][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.181912][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.181935][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.181958][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.181981][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182004][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182027][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182050][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182073][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182096][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182120][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182143][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182166][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182189][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182212][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182235][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182259][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182282][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182305][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182329][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182352][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182375][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182398][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182421][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182444][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182467][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182488][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182510][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182532][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182565][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182588][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182611][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182634][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182657][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182679][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182702][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182725][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182748][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182770][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182793][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182829][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182852][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182874][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182897][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182920][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182943][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182966][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.182989][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.183011][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.183034][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.183056][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.183080][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.183102][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.183125][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.230357][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.230393][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.230414][T23347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 772.801330][T23358] ip_tables: iptables: counters copy to user failed while replacing table [ 772.891977][T23358] x_tables: duplicate underflow at hook 1 [ 773.035838][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 773.049915][T23367] bridge0: port 3(syz_tun) entered blocking state [ 773.050148][T23367] bridge0: port 3(syz_tun) entered disabled state [ 773.050313][T23367] syz_tun: entered allmulticast mode [ 773.052733][T23367] syz_tun: entered promiscuous mode [ 773.053671][T23367] bridge0: port 3(syz_tun) entered blocking state [ 773.053897][T23367] bridge0: port 3(syz_tun) entered listening state [ 773.204153][T23370] ip_tables: iptables: counters copy to user failed while replacing table [ 773.337749][T23369] __nla_validate_parse: 4 callbacks suppressed [ 773.337768][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 773.375753][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 773.395325][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 773.421250][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 773.440347][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 773.462532][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 773.485107][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 773.510493][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 773.545992][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 773.579368][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 773.788917][T23403] x_tables: duplicate underflow at hook 1 [ 774.189705][T23407] ipip0: left allmulticast mode [ 774.376187][T23422] x_tables: duplicate underflow at hook 1 [ 774.564604][T23428] ip_tables: iptables: counters copy to user failed while replacing table [ 774.593644][T23427] ip_tables: iptables: counters copy to user failed while replacing table [ 775.144465][T23462] atomic_op ffff88802b93d1e0 conn xmit_atomic 0000000000000000 [ 775.464460][T23473] NFSD: Failed to start, no listeners configured. [ 775.948950][T10718] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.949003][T10718] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.949039][T10718] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.949075][T10718] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.110199][T23484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 776.110219][T23484] IPv6: NLM_F_CREATE should be set when creating new route [ 776.110264][T23484] IPv6: NLM_F_CREATE should be set when creating new route [ 776.110291][T23484] IPv6: NLM_F_CREATE should be set when creating new route [ 776.182471][T23489] validate_nla: 57 callbacks suppressed [ 776.182511][T23489] netlink: 'syz.1.4177': attribute type 2 has an invalid length. [ 776.182523][T23489] netlink: 'syz.1.4177': attribute type 11 has an invalid length. [ 776.549005][T23503] tc_dump_action: action bad kind [ 776.752701][T23519] lo: entered promiscuous mode [ 776.753019][T23519] tunl0: entered promiscuous mode [ 776.774901][T23519] gre0: entered promiscuous mode [ 776.814423][T23519] 0猉功D龌: entered promiscuous mode [ 776.824412][T23519] erspan0: entered promiscuous mode [ 776.836097][T23519] ip_vti0: entered promiscuous mode [ 776.845806][T23519] ip6_vti0: entered promiscuous mode [ 776.856629][T23519] sit0: entered promiscuous mode [ 776.869020][T23519] ip6tnl0: entered promiscuous mode [ 776.874028][T23519] ip6gre0: entered promiscuous mode [ 776.874927][T23527] ip_tables: iptables: counters copy to user failed while replacing table [ 776.908050][T23519] bridge0: port 3(syz_tun) entered disabled state [ 776.913686][T23519] ip6gretap0: entered promiscuous mode [ 776.920825][T23519] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.922797][T23519] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.932252][T23519] bridge0: entered promiscuous mode [ 776.950795][T23519] vcan0: entered promiscuous mode [ 776.962939][T23519] bond0: entered promiscuous mode [ 776.962963][T23519] bond_slave_0: entered promiscuous mode [ 776.963195][T23519] bond_slave_1: entered promiscuous mode [ 776.974371][T23519] team0: entered promiscuous mode [ 776.974392][T23519] team_slave_0: entered promiscuous mode [ 776.974611][T23519] team_slave_1: entered promiscuous mode [ 776.992252][T23519] dummy0: entered promiscuous mode [ 777.006727][T23519] nlmon0: entered promiscuous mode [ 777.012695][T23519] batadv0: entered promiscuous mode [ 777.022026][T23519] vxcan0: entered promiscuous mode [ 777.031134][T23519] vxcan1: entered promiscuous mode [ 777.035527][T23519] veth0: entered promiscuous mode [ 777.051305][T23519] veth1: entered promiscuous mode [ 777.065390][T23519] wg0: entered promiscuous mode [ 777.085400][T23519] wg1: entered promiscuous mode [ 777.095161][T23519] wg2: entered promiscuous mode [ 777.101210][T23519] veth0_to_bridge: entered promiscuous mode [ 777.113483][T23519] veth1_to_bridge: entered promiscuous mode [ 777.134604][T23519] veth0_to_bond: entered promiscuous mode [ 777.155939][T23519] veth1_to_bond: entered promiscuous mode [ 777.174270][T23519] veth0_to_team: entered promiscuous mode [ 777.204523][T23519] veth1_to_team: entered promiscuous mode [ 777.236697][T23519] veth1_to_batadv: entered promiscuous mode [ 777.253853][T23519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.253915][T23519] batadv_slave_1: entered promiscuous mode [ 777.279131][T23519] xfrm0: entered promiscuous mode [ 777.310617][T23519] veth0_to_hsr: entered promiscuous mode [ 777.356270][T23519] veth1_to_hsr: entered promiscuous mode [ 777.382104][T23519] hsr0: entered promiscuous mode [ 777.391659][T23519] veth1_virt_wifi: entered promiscuous mode [ 777.396228][T23519] veth0_virt_wifi: entered promiscuous mode [ 777.405670][T23519] virt_wifi0: entered promiscuous mode [ 777.440102][T23519] vlan0: entered promiscuous mode [ 777.485539][T23519] vlan1: entered promiscuous mode [ 777.515129][T23519] macvlan0: entered promiscuous mode [ 777.529325][T23519] macvlan1: entered promiscuous mode [ 777.533034][T23519] ipvlan0: entered promiscuous mode [ 777.581411][T23519] ipvlan1: entered promiscuous mode [ 777.623357][T23519] macvtap0: entered promiscuous mode [ 777.634846][T23519] macsec0: entered promiscuous mode [ 777.643082][T23519] geneve0: entered promiscuous mode [ 777.651232][T23545] netlink: 'syz.1.4191': attribute type 4 has an invalid length. [ 777.666257][T23519] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 777.681353][T23519] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 777.682719][T23519] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 777.684049][T23519] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 777.685005][T23519] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 777.685192][T23519] mac80211_hwsim hwsim70 wlan1: entered promiscuous mode [ 777.685939][T23519] bond1: entered promiscuous mode [ 777.685957][T23519] gretap0: entered promiscuous mode [ 777.750167][T23519] vlan2: entered promiscuous mode [ 777.763053][T23519] bridge1: entered promiscuous mode [ 777.766222][T23519] bond4: entered promiscuous mode [ 777.786621][T23519] vxcan2: entered promiscuous mode [ 777.793205][T23519] vxcan3: entered promiscuous mode [ 777.793482][T23519] nr0: entered promiscuous mode [ 777.793621][T23519] vlan3: entered promiscuous mode [ 777.796048][T23519] bond5: entered promiscuous mode [ 777.819475][T23519] bridge3: entered promiscuous mode [ 777.819650][T23519] bridge4: entered promiscuous mode [ 777.819792][T23519] bridge5: entered promiscuous mode [ 777.819935][T23519] bridge6: entered promiscuous mode [ 777.820080][T23519] bridge7: entered promiscuous mode [ 777.839621][T23519] bridge8: entered promiscuous mode [ 777.839758][T23519] bridge9: entered promiscuous mode [ 777.839908][T23519] bridge10: entered promiscuous mode [ 777.840029][T23519] bridge11: entered promiscuous mode [ 777.840148][T23519] bridge12: entered promiscuous mode [ 777.840264][T23519] bridge13: entered promiscuous mode [ 777.840440][T23519] bridge14: entered promiscuous mode [ 777.840567][T23519] bridge15: entered promiscuous mode [ 777.840723][T23519] bridge16: entered promiscuous mode [ 777.840844][T23519] bridge17: entered promiscuous mode [ 777.853907][T23519] bridge18: entered promiscuous mode [ 777.854059][T23519] bridge19: entered promiscuous mode [ 777.854180][T23519] bridge20: entered promiscuous mode [ 777.854329][T23519] bridge21: entered promiscuous mode [ 777.854477][T23519] bridge22: entered promiscuous mode [ 777.854603][T23519] bridge23: entered promiscuous mode [ 777.855034][T23519] : entered promiscuous mode [ 777.989312][T14650] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.989349][T14650] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.989391][T14650] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.989415][T14650] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.989450][T14650] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.989475][T14650] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.989511][T14650] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.989535][T14650] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.223079][T23555] tipc: Enabling of bearer rejected, already enabled [ 778.328306][T23564] sctp: [Deprecated]: syz.4.4196 (pid 23564) Use of int in max_burst socket option. [ 778.328306][T23564] Use struct sctp_assoc_value instead [ 778.471775][T23574] __nla_validate_parse: 25 callbacks suppressed [ 778.471798][T23574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4200'. [ 778.474086][T23574] netlink: 428 bytes leftover after parsing attributes in process `syz.2.4200'. [ 778.629579][T23581] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4201'. [ 778.991601][T23596] netlink: 'syz.1.4205': attribute type 10 has an invalid length. [ 779.023907][T23596] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 779.061394][T23597] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4206'. [ 779.461607][T23610] ipt_REJECT: ECHOREPLY no longer supported. [ 779.495040][T23612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4211'. [ 779.872382][T23620] nbd: socks must be embedded in a SOCK_ITEM attr [ 780.239018][T23622] udevd[23622]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 780.423293][T23612] infiniband syz0: set down [ 780.424933][T23612] infiniband syz0: added bond0 [ 780.438862][T23612] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 780.444536][T23612] infiniband syz0: Couldn't open port 1 [ 780.444825][T23612] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 780.444861][T23612] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 780.444902][T23612] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 780.577087][T23612] RDS/IB: syz0: added [ 780.577156][T23612] smc: adding ib device syz0 with port count 1 [ 780.577179][T23612] smc: ib device syz0 port 1 has no pnetid [ 780.902174][T23644] tipc: New replicast peer: 172.20.20.187 [ 780.927008][T23644] tipc: Enabled bearer , priority 10 [ 781.060810][T23648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'. [ 781.150416][T23651] erspan0: entered promiscuous mode [ 781.150594][T23651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'. [ 781.730199][T23670] ip6tnl3: entered allmulticast mode [ 781.741469][ T999] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 781.741706][ T999] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 781.761552][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4227'. [ 781.770698][ T5827] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 781.808199][ T5827] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 782.212183][T23687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4229'. [ 782.212223][T23687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4229'. [ 782.389010][T23692] syzkaller0: left promiscuous mode [ 782.389036][T23692] syzkaller0: left allmulticast mode [ 782.428311][ T5827] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 782.984208][ T30] audit: type=1800 audit(1793649860.402:15): pid=23720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4237" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1595 res=0 errno=-22 [ 783.132608][T23721] SET target dimension over the limit! [ 783.354963][T23729] pim6reg: entered allmulticast mode [ 783.786744][T23746] __nla_validate_parse: 2 callbacks suppressed [ 783.786766][T23746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4243'. [ 783.871891][T23746] netlink: 'syz.1.4243': attribute type 1 has an invalid length. [ 783.871916][T23746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4243'. [ 783.992627][T23752] syzkaller0: entered promiscuous mode [ 783.992654][T23752] syzkaller0: entered allmulticast mode [ 785.363826][T23796] netlink: 'syz.1.4253': attribute type 5 has an invalid length. [ 785.467479][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 785.685718][T23802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4256'. [ 785.753947][T23802] syzkaller0: entered promiscuous mode [ 785.753973][T23802] syzkaller0: entered allmulticast mode [ 785.784334][T23802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4256'. [ 786.238207][T23812] tipc: Enabling of bearer rejected, already enabled [ 786.242850][T23815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4260'. [ 786.252646][T23817] netlink: 'syz.1.4259': attribute type 21 has an invalid length. [ 786.293196][T23818] sctp: [Deprecated]: syz.2.4262 (pid 23818) Use of int in maxseg socket option. [ 786.293196][T23818] Use struct sctp_assoc_value instead [ 786.324565][T23820] x_tables: duplicate underflow at hook 1 [ 786.434628][T23830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4260'. [ 786.963068][T23851] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4269'. [ 787.085659][T23847] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 788.297021][T23905] netlink: 356 bytes leftover after parsing attributes in process `syz.2.4286'. [ 788.845536][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4284'. [ 788.932040][T23896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 789.226575][T23922] netlink: 'syz.2.4291': attribute type 3 has an invalid length. [ 789.547522][T23940] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.4294'. [ 789.831474][T23940] 0猉功D龌: renamed from gretap0 (while UP) [ 789.903311][T23940] 0猉功D龌: entered allmulticast mode [ 790.099533][T23956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4299'. [ 790.099574][T23956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4299'. [ 790.366476][T23970] xt_hashlimit: size too large, truncated to 1048576 [ 790.391324][T23973] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4305'. [ 790.394211][T23969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4301'. [ 790.425206][T23977] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.4303'. [ 790.425336][T23977] 0猉功D龌: renamed from gretap0 [ 790.432628][T23977] 0猉功D龌: left promiscuous mode [ 790.432652][T23977] 0猉功D龌: entered allmulticast mode [ 790.471679][T23978] syzkaller1: entered promiscuous mode [ 790.471708][T23978] syzkaller1: entered allmulticast mode [ 790.745071][T23987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4308'. [ 790.780709][T23985] ip_tables: iptables: counters copy to user failed while replacing table [ 790.806166][T23986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4308'. [ 790.806212][T23986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4308'. [ 791.283642][T10423] block nbd4: Receive control failed (result -32) [ 791.425778][T24004] tc_dump_action: action bad kind [ 791.583561][T24027] sctp: [Deprecated]: syz.3.4316 (pid 24027) Use of int in max_burst socket option deprecated. [ 791.583561][T24027] Use struct sctp_assoc_value instead [ 791.634304][T24027] netlink: 'syz.3.4316': attribute type 8 has an invalid length. [ 791.969282][T24045] netlink: ct family unspecified [ 792.360210][T24062] tipc: Enabling of bearer rejected, failed to enable media [ 792.505027][T24074] netlink: 'syz.0.4331': attribute type 2 has an invalid length. [ 792.630021][T24078] lo: entered promiscuous mode [ 792.630234][T24078] tunl0: entered promiscuous mode [ 792.630419][T24078] gre0: entered promiscuous mode [ 792.630555][T24078] gretap0: entered promiscuous mode [ 792.630693][T24078] ip_vti0: entered promiscuous mode [ 792.634865][T24078] ip6_vti0: entered promiscuous mode [ 792.635009][T24078] sit0: entered promiscuous mode [ 792.635146][T24078] ip6tnl0: entered promiscuous mode [ 792.643023][T24078] ip6gre0: entered promiscuous mode [ 792.643165][T24078] syz_tun: entered promiscuous mode [ 792.643316][T24078] ip6gretap0: entered promiscuous mode [ 792.643446][T24078] bridge0: entered promiscuous mode [ 792.643574][T24078] vcan0: entered promiscuous mode [ 792.643726][T24078] bond0: entered promiscuous mode [ 792.643869][T24078] team0: entered promiscuous mode [ 792.644072][T24078] dummy0: entered promiscuous mode [ 792.644248][T24078] nlmon0: entered promiscuous mode [ 792.644422][T24078] batadv0: entered promiscuous mode [ 792.644592][T24078] vxcan0: entered promiscuous mode [ 792.651984][T24078] veth0: entered promiscuous mode [ 792.652160][T24078] veth1: entered promiscuous mode [ 792.652307][T24078] wg0: entered promiscuous mode [ 792.652462][T24078] wg1: entered promiscuous mode [ 792.653728][T24078] wg2: entered promiscuous mode [ 792.653878][T24078] veth0_to_bridge: entered promiscuous mode [ 792.654026][T24078] bridge_slave_0: entered promiscuous mode [ 792.654178][T24078] veth1_to_bridge: entered promiscuous mode [ 792.654343][T24078] bridge_slave_1: entered promiscuous mode [ 792.654499][T24078] veth0_to_bond: entered promiscuous mode [ 792.660762][T24078] bond_slave_0: entered promiscuous mode [ 792.660918][T24078] veth1_to_bond: entered promiscuous mode [ 792.661083][T24078] bond_slave_1: entered promiscuous mode [ 792.661242][T24078] veth0_to_team: entered promiscuous mode [ 792.661400][T24078] team_slave_0: entered promiscuous mode [ 792.661547][T24078] veth1_to_team: entered promiscuous mode [ 792.665067][T24078] team_slave_1: entered promiscuous mode [ 792.665230][T24078] veth0_to_batadv: entered promiscuous mode [ 792.665385][T24078] batadv_slave_0: entered promiscuous mode [ 792.671993][T24078] veth1_to_batadv: entered promiscuous mode [ 792.672152][T24078] batadv_slave_1: entered promiscuous mode [ 792.672306][T24078] xfrm0: entered promiscuous mode [ 792.672562][T24078] veth0_to_hsr: entered promiscuous mode [ 792.672714][T24078] hsr_slave_0: entered promiscuous mode [ 792.672864][T24078] veth1_to_hsr: entered promiscuous mode [ 792.673012][T24078] hsr_slave_1: entered promiscuous mode [ 792.673163][T24078] veth1_virt_wifi: entered promiscuous mode [ 792.673308][T24078] veth0_virt_wifi: entered promiscuous mode [ 792.682893][T24078] virt_wifi0: entered promiscuous mode [ 792.683383][T24078] vlan0: entered promiscuous mode [ 792.683688][T24078] vlan1: entered promiscuous mode [ 792.684008][T24078] macvlan0: entered promiscuous mode [ 792.684157][T24078] macvlan1: entered promiscuous mode [ 792.684304][T24078] ipvlan0: entered promiscuous mode [ 792.703643][T24078] ipvlan1: entered promiscuous mode [ 792.704136][T24078] macvtap0: entered promiscuous mode [ 792.704289][T24078] macsec0: entered promiscuous mode [ 792.704408][T24078] geneve0: entered promiscuous mode [ 792.704559][T24078] geneve1: entered promiscuous mode [ 792.704715][T24078] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 792.704891][T24078] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 792.719874][T24078] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 792.720013][T24078] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 792.720272][T24078] macvlan2: entered promiscuous mode [ 792.720431][T24078] veth2: entered promiscuous mode [ 792.720634][T24078] veth3: entered promiscuous mode [ 792.726369][T24078] veth4: entered promiscuous mode [ 792.729642][T24078] veth5: entered promiscuous mode [ 792.738523][T24078] gre1: entered promiscuous mode [ 792.738703][T24078] bond1: entered promiscuous mode [ 792.738840][T24078] geneve2: entered promiscuous mode [ 792.738997][T24078] syztnl2: entered promiscuous mode [ 792.739121][T24078] bridge1: entered promiscuous mode [ 792.739275][T24078] geneve3: entered promiscuous mode [ 792.739423][T24078] bond3: entered promiscuous mode [ 792.747542][T24078] ip6erspan0: entered promiscuous mode [ 792.747674][T24078] ip6tnl1: entered promiscuous mode [ 792.759149][T24078] ip6tnl2: entered promiscuous mode [ 792.759380][T24078] ip6tnl3: entered promiscuous mode [ 792.808591][T24078] veth6: entered promiscuous mode [ 792.808793][T24078] veth7: entered promiscuous mode [ 792.808943][T24078] syztnl1: entered promiscuous mode [ 792.809153][T24078] gtp0: entered promiscuous mode [ 794.286735][T24146] netlink: 'syz.2.4348': attribute type 4 has an invalid length. [ 794.286758][T24146] __nla_validate_parse: 20 callbacks suppressed [ 794.286769][T24146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4348'. [ 794.375907][T24101] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4339'. [ 794.375934][T24101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4339'. [ 794.375954][T24101] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4339'. [ 798.612473][T24205] netlink: 'syz.4.4366': attribute type 5 has an invalid length. [ 798.656545][T24200] netlink: 'syz.2.4364': attribute type 1 has an invalid length. [ 798.656573][T24200] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4364'. [ 798.724140][T24217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4362'. [ 798.772620][T24211] pimreg1: tun_chr_ioctl cmd 1074025677 [ 798.772736][T24211] pimreg1: linktype set to 825 [ 798.795267][T24219] tipc: Enabling of bearer rejected, failed to enable media [ 799.255146][T24233] macvlan0: entered promiscuous mode [ 799.274073][T24235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4368'. [ 799.582887][T24243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4370'. [ 799.585816][T24243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4370'. [ 802.825803][T24287] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4378'. [ 803.040813][T24303] tipc: Resetting bearer [ 803.374971][T24320] netlink: 'syz.1.4385': attribute type 33 has an invalid length. [ 803.391642][T24321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4385'. [ 803.391671][T24321] block nbd5: Unsupported socket: should be TCP or UNIX. [ 803.432996][T24329] netlink: 'syz.3.4387': attribute type 5 has an invalid length. [ 803.542886][T24335] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 803.585572][T24335] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 803.885522][T24340] TC_ACT_REPEAT abuse ? [ 804.091060][T24351] netlink: 'syz.0.4395': attribute type 1 has an invalid length. [ 804.163953][T24351] 8021q: adding VLAN 0 to HW filter on device bond5 [ 804.185183][T24351] sctp: [Deprecated]: syz.0.4395 (pid 24351) Use of int in max_burst socket option. [ 804.185183][T24351] Use struct sctp_assoc_value instead [ 804.275114][T24351] bond5: (slave bridge2): making interface the new active one [ 804.292161][T24351] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 804.531253][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4399'. [ 804.840951][T24380] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4403'. [ 804.840982][T24380] nbd: must specify a device to reconfigure [ 805.021374][T24372] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 805.830867][T24411] wg2 speed is unknown, defaulting to 1000 [ 805.847748][T24411] rxe_eth0 speed is unknown, defaulting to 1000 [ 806.210972][T24432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4419'. [ 806.291733][T24431] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 806.320357][T24434] smc: net device lo applied user defined pnetid SYZ2 [ 806.334757][T24431] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 806.335451][T24434] smc: net device lo erased user defined pnetid SYZ2 [ 807.250646][T24462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4428'. [ 807.447246][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4428'. [ 807.535707][T24468] netlink: 'syz.2.4429': attribute type 1 has an invalid length. [ 807.692670][T24468] 8021q: adding VLAN 0 to HW filter on device bond5 [ 807.718170][T24474] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4430'. [ 807.905035][T24481] sctp: [Deprecated]: syz.4.4430 (pid 24481) Use of int in max_burst socket option. [ 807.905035][T24481] Use struct sctp_assoc_value instead [ 807.928217][T24468] macvlan2: entered promiscuous mode [ 807.928243][T24468] macvlan2: entered allmulticast mode [ 807.931942][T24468] bond5: entered allmulticast mode [ 807.932017][T24468] bond5: entered promiscuous mode [ 807.935013][T24468] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 807.970903][T24468] team0: Port device macvlan2 added [ 808.162608][T24475] bond5: (slave ip6gretap0): making interface the new active one [ 808.162637][T24475] ip6gretap0: entered promiscuous mode [ 808.162827][T24475] ip6gretap0: entered allmulticast mode [ 808.192415][T24475] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 808.836409][T24499] sctp: [Deprecated]: syz.3.4438 (pid 24499) Use of int in max_burst socket option. [ 808.836409][T24499] Use struct sctp_assoc_value instead [ 809.016113][T24511] netlink: 'syz.2.4440': attribute type 8 has an invalid length. [ 809.774350][T24519] s: renamed from gre1 [ 811.140060][T24551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4449'. [ 815.062417][T24568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4452'. [ 815.900810][T10718] bond11 (unregistering): (slave gretap0): Releasing active interface [ 816.016404][T24584] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4454'. [ 816.036078][T10718] bond2 (unregistering): (slave geneve3): Releasing active interface [ 816.336025][T10718] bond8 (unregistering): (slave bond0): Releasing backup interface [ 816.340352][T10718] bond0 (unregistering): Released all slaves [ 816.348525][T10718] bond1 (unregistering): Released all slaves [ 816.384197][T10718] bond2 (unregistering): Released all slaves [ 816.424700][T10718] bond3 (unregistering): Released all slaves [ 816.473061][T10718] bond4 (unregistering): Released all slaves [ 816.510597][T10718] bond5 (unregistering): Released all slaves [ 816.544339][T10718] bond6 (unregistering): Released all slaves [ 816.574887][T10718] bond7 (unregistering): Released all slaves [ 816.616508][T10718] bond8 (unregistering): Released all slaves [ 816.677844][T10718] bond9 (unregistering): Released all slaves [ 816.714265][T10718] bond10 (unregistering): Released all slaves [ 816.743514][T10718] bond11 (unregistering): Released all slaves [ 816.806610][T24569] team_slave_0: entered allmulticast mode [ 816.840605][T24574] macsec1: entered promiscuous mode [ 817.097412][T10718] ovs-dp0: left promiscuous mode [ 817.232051][T10718] tipc: Left network mode [ 817.414554][T24594] vlan2: entered allmulticast mode [ 817.414579][T24594] veth0_to_bond: entered allmulticast mode [ 817.516067][T24601] netlink: 'syz.3.4458': attribute type 1 has an invalid length. [ 817.516090][T24601] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4458'. [ 817.938786][T24610] netlink: 'syz.4.4461': attribute type 4 has an invalid length. [ 818.045700][T10718] IPVS: stopping master sync thread 14147 ... [ 818.319736][T10713] IPVS: starting estimator thread 0... [ 818.336249][T24630] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 818.409341][T24631] IPVS: using max 25 ests per chain, 60000 per kthread [ 818.689634][T24616] syzkaller1: entered promiscuous mode [ 818.689658][T24616] syzkaller1: entered allmulticast mode [ 818.695149][T24638] netlink: 'syz.2.4469': attribute type 1 has an invalid length. [ 819.122639][T24646] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 819.493828][T24659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4475'. [ 820.052784][T24666] netlink: 'syz.2.4476': attribute type 1 has an invalid length. [ 820.363809][T24666] 8021q: adding VLAN 0 to HW filter on device bond7 [ 820.646553][T24670] bond7: (slave geneve3): making interface the new active one [ 820.653343][T24683] ip_tables: iptables: counters copy to user failed while replacing table [ 820.668555][T24670] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 820.850017][T10713] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.857008][T10713] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.937978][T14645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.138941][T24704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 821.166578][T24698] can: request_module (can-proto-0) failed. [ 821.180190][T24696] bond6: option all_slaves_active: invalid value (255) [ 821.199177][T24696] bond6 (unregistering): Released all slaves [ 821.302267][T24699] can: request_module (can-proto-0) failed. [ 821.439808][T24710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4488'. [ 821.567576][T24716] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 821.582435][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.819306][T24724] sctp: [Deprecated]: syz.0.4492 (pid 24724) Use of int in maxseg socket option. [ 821.819306][T24724] Use struct sctp_assoc_value instead [ 822.140568][T24733] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4495'. [ 822.140593][T24733] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4495'. [ 822.151455][T24733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4495'. [ 822.554612][T24741] bond0: left promiscuous mode [ 822.900135][T10718] hsr_slave_0: left promiscuous mode [ 822.919848][T10718] hsr_slave_1: left promiscuous mode [ 822.925635][T10718] vlan1: left allmulticast mode [ 822.925659][T10718] veth0_vlan: left allmulticast mode [ 823.871306][T24779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4509'. [ 823.966627][T24781] netlink: 'syz.0.4509': attribute type 1 has an invalid length. [ 824.062396][T24786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4509'. [ 824.062433][T24786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4509'. [ 824.186012][T24791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4509'. [ 824.676073][T14645] smbdirect: ib_dev[syz2] removed [ 825.272312][T24781] bond6: entered promiscuous mode [ 825.276009][T24781] 8021q: adding VLAN 0 to HW filter on device bond6 [ 825.277225][T24771] syzkaller1: entered promiscuous mode [ 825.277244][T24771] syzkaller1: entered allmulticast mode [ 825.460337][T24789] bond6: (slave bridge3): making interface the new active one [ 825.460366][T24789] bridge3: entered promiscuous mode [ 825.483282][T24789] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 825.485292][T24791] bond6: entered allmulticast mode [ 825.485313][T24791] bridge3: entered allmulticast mode [ 825.843771][T24806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4517'. [ 825.843802][T24806] nbd: must specify an index to disconnect [ 825.972350][T24817] syzkaller0: entered promiscuous mode [ 825.972385][T24817] syzkaller0: entered allmulticast mode [ 826.029158][T24822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4522'. [ 826.106298][T24822] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4522'. [ 826.129427][T24813] tipc: Started in network mode [ 826.129463][T24813] tipc: Node identity f2602daf07b8, cluster identity 4711 [ 826.129661][T24813] tipc: Enabled bearer , priority 0 [ 826.174832][T24806] xt_LOG: prefix is not null-terminated [ 826.224802][T24812] tipc: Resetting bearer [ 826.295598][T24827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4523'. [ 826.322063][T24812] tipc: Disabling bearer [ 826.599126][T10718] IPVS: stop unused estimator thread 0... [ 826.883937][T24836] block nbd0: reconnected socket [ 826.884552][T18482] block nbd0: Receive control failed (result -107) [ 826.909779][T24836] block nbd0: reconnected socket [ 826.911500][T24836] netlink: 648 bytes leftover after parsing attributes in process `syz.3.4525'. [ 826.936530][T10423] block nbd0: Receive control failed (result -32) [ 827.940043][T24875] netlink: zone id is out of range [ 827.940063][T24875] netlink: zone id is out of range [ 827.940071][T24875] netlink: zone id is out of range [ 827.940080][T24875] netlink: zone id is out of range [ 827.940088][T24875] netlink: zone id is out of range [ 827.940389][T24875] netlink: zone id is out of range [ 827.940400][T24875] netlink: zone id is out of range [ 827.984776][T24870] netlink: 69 bytes leftover after parsing attributes in process `syz.1.4536'. [ 828.077246][T24870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 828.466692][T24891] openvswitch: netlink: IP tunnel dst address not specified [ 829.118691][T24896] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 829.145699][T24896] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 829.161819][T24896] [ 829.164194][T24896] ====================================================== [ 829.171235][T24896] WARNING: possible circular locking dependency detected [ 829.178276][T24896] syzkaller #0 Not tainted [ 829.182718][T24896] ------------------------------------------------------ [ 829.189760][T24896] syz.3.4542/24896 is trying to acquire lock: [ 829.195851][T24896] ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510 [ 829.205319][T24896] [ 829.205319][T24896] but task is already holding lock: [ 829.212707][T24896] ffffffff90a1a600 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 829.221719][T24896] [ 829.221719][T24896] which lock already depends on the new lock. [ 829.221719][T24896] [ 829.232150][T24896] [ 829.232150][T24896] the existing dependency chain (in reverse order) is: [ 829.241197][T24896] [ 829.241197][T24896] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 829.248361][T24896] __mutex_lock+0x197/0x15a0 [ 829.253663][T24896] get_device_parent+0x16f/0x3a0 [ 829.259156][T24896] device_add+0x2d4/0xb80 [ 829.264039][T24896] device_create+0x269/0x300 [ 829.269231][T24896] msr_device_create+0x33/0x50 [ 829.274584][T24896] cpuhp_invoke_callback+0x434/0x810 [ 829.280440][T24896] cpuhp_thread_fun+0x362/0x780 [ 829.285848][T24896] smpboot_thread_fn+0x5f8/0xb30 [ 829.291342][T24896] kthread+0x38b/0x480 [ 829.295959][T24896] ret_from_fork+0x514/0xb70 [ 829.301136][T24896] ret_from_fork_asm+0x1a/0x30 [ 829.306457][T24896] [ 829.306457][T24896] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 829.314052][T24896] cpuhp_thread_fun+0x127/0x780 [ 829.319462][T24896] smpboot_thread_fn+0x5f8/0xb30 [ 829.324949][T24896] kthread+0x38b/0x480 [ 829.329558][T24896] ret_from_fork+0x514/0xb70 [ 829.334713][T24896] ret_from_fork_asm+0x1a/0x30 [ 829.340032][T24896] [ 829.340032][T24896] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 829.347796][T24896] cpus_read_lock+0x3d/0x160 [ 829.352939][T24896] static_key_slow_inc+0x12/0x30 [ 829.358467][T24896] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 829.364854][T24896] nbd_genl_foreach_sock+0x265/0x450 [ 829.370779][T24896] nbd_genl_reconfigure+0xbbb/0x1040 [ 829.376683][T24896] genl_family_rcv_msg_doit+0x233/0x340 [ 829.382854][T24896] genl_rcv_msg+0x614/0x7a0 [ 829.387941][T24896] netlink_rcv_skb+0x226/0x4a0 [ 829.393260][T24896] genl_rcv+0x28/0x40 [ 829.397792][T24896] netlink_unicast+0x8ef/0xa80 [ 829.403304][T24896] netlink_sendmsg+0x7f0/0xb20 [ 829.408634][T24896] sock_sendmsg_nosec+0x14e/0x190 [ 829.414205][T24896] ____sys_sendmsg+0x54e/0x850 [ 829.419519][T24896] ___sys_sendmsg+0x2a5/0x360 [ 829.424746][T24896] __x64_sys_sendmsg+0x1b1/0x290 [ 829.430235][T24896] do_syscall_64+0x166/0x520 [ 829.435394][T24896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.441839][T24896] [ 829.441839][T24896] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 829.449516][T24896] __mutex_lock+0x197/0x15a0 [ 829.454650][T24896] nbd_queue_rq+0x373/0xff0 [ 829.459705][T24896] blk_mq_dispatch_rq_list+0x499/0x1990 [ 829.465837][T24896] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 829.472977][T24896] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 829.479504][T24896] blk_mq_run_work_fn+0x167/0x2f0 [ 829.485337][T24896] process_scheduled_works+0xc3d/0x1630 [ 829.491457][T24896] worker_thread+0xa47/0xfb0 [ 829.496606][T24896] kthread+0x38b/0x480 [ 829.501227][T24896] ret_from_fork+0x514/0xb70 [ 829.506352][T24896] ret_from_fork_asm+0x1a/0x30 [ 829.511655][T24896] [ 829.511655][T24896] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 829.518879][T24896] __mutex_lock+0x197/0x15a0 [ 829.524024][T24896] nbd_queue_rq+0xc1/0xff0 [ 829.528989][T24896] blk_mq_dispatch_rq_list+0x499/0x1990 [ 829.535093][T24896] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 829.541965][T24896] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 829.548491][T24896] blk_mq_run_work_fn+0x167/0x2f0 [ 829.554073][T24896] process_scheduled_works+0xc3d/0x1630 [ 829.560183][T24896] worker_thread+0xa47/0xfb0 [ 829.565333][T24896] kthread+0x38b/0x480 [ 829.569950][T24896] ret_from_fork+0x514/0xb70 [ 829.575086][T24896] ret_from_fork_asm+0x1a/0x30 [ 829.580399][T24896] [ 829.580399][T24896] -> #4 (set->srcu){.+.+}-{0:0}: [ 829.587548][T24896] __synchronize_srcu+0xca/0x2f0 [ 829.593048][T24896] elevator_switch+0x1e8/0x7b0 [ 829.598412][T24896] elevator_change+0x2fa/0x480 [ 829.603724][T24896] elevator_set_default+0x375/0x440 [ 829.609475][T24896] blk_register_queue+0x404/0x4f0 [ 829.615097][T24896] __add_disk+0x6b8/0xdb0 [ 829.619970][T24896] add_disk_fwnode+0x100/0x3a0 [ 829.625265][T24896] nbd_dev_add+0x733/0xb60 [ 829.630216][T24896] nbd_init+0x168/0x1f0 [ 829.635026][T24896] do_one_initcall+0x250/0x870 [ 829.640334][T24896] do_initcall_level+0x10a/0x1a0 [ 829.645900][T24896] do_initcalls+0x59/0xa0 [ 829.650764][T24896] kernel_init_freeable+0x29d/0x3e0 [ 829.656497][T24896] kernel_init+0x22/0x1d0 [ 829.661385][T24896] ret_from_fork+0x514/0xb70 [ 829.666530][T24896] ret_from_fork_asm+0x1a/0x30 [ 829.671840][T24896] [ 829.671840][T24896] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 829.679689][T24896] __mutex_lock+0x197/0x15a0 [ 829.684833][T24896] elevator_change+0x1af/0x480 [ 829.690153][T24896] elevator_set_none+0xb5/0x140 [ 829.695736][T24896] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 829.702077][T24896] nbd_start_device+0x189/0xb30 [ 829.707459][T24896] nbd_genl_connect+0x167d/0x1cd0 [ 829.713029][T24896] genl_family_rcv_msg_doit+0x233/0x340 [ 829.719121][T24896] genl_rcv_msg+0x614/0x7a0 [ 829.724173][T24896] netlink_rcv_skb+0x226/0x4a0 [ 829.729492][T24896] genl_rcv+0x28/0x40 [ 829.734020][T24896] netlink_unicast+0x8ef/0xa80 [ 829.739334][T24896] netlink_sendmsg+0x7f0/0xb20 [ 829.744640][T24896] sock_sendmsg_nosec+0x14e/0x190 [ 829.750209][T24896] ____sys_sendmsg+0x54e/0x850 [ 829.755510][T24896] ___sys_sendmsg+0x2a5/0x360 [ 829.760736][T24896] __x64_sys_sendmsg+0x1b1/0x290 [ 829.766232][T24896] do_syscall_64+0x166/0x520 [ 829.771396][T24896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.777858][T24896] [ 829.777858][T24896] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 829.786505][T24896] blk_alloc_queue+0x544/0x690 [ 829.791814][T24896] __blk_mq_alloc_disk+0x194/0x390 [ 829.797471][T24896] nbd_dev_add+0x494/0xb60 [ 829.802417][T24896] nbd_init+0x168/0x1f0 [ 829.807106][T24896] do_one_initcall+0x250/0x870 [ 829.812413][T24896] do_initcall_level+0x10a/0x1a0 [ 829.817901][T24896] do_initcalls+0x59/0xa0 [ 829.822769][T24896] kernel_init_freeable+0x29d/0x3e0 [ 829.828516][T24896] kernel_init+0x22/0x1d0 [ 829.833402][T24896] ret_from_fork+0x514/0xb70 [ 829.838539][T24896] ret_from_fork_asm+0x1a/0x30 [ 829.843835][T24896] [ 829.843835][T24896] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 829.851059][T24896] fs_reclaim_acquire+0x71/0x100 [ 829.856656][T24896] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 829.862907][T24896] alloc_inode+0xb8/0x1b0 [ 829.867828][T24896] iget_locked+0x12c/0x690 [ 829.872798][T24896] kernfs_get_inode+0x4f/0x770 [ 829.878166][T24896] kernfs_get_tree+0x5cd/0x980 [ 829.883483][T24896] vfs_get_tree+0x92/0x2a0 [ 829.888447][T24896] do_new_mount+0x325/0xb00 [ 829.893561][T24896] __se_sys_mount+0x31d/0x420 [ 829.898783][T24896] do_syscall_64+0x166/0x520 [ 829.903911][T24896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.910338][T24896] [ 829.910338][T24896] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 829.918366][T24896] __lock_acquire+0x164c/0x2de0 [ 829.923769][T24896] lock_acquire+0x115/0x350 [ 829.928816][T24896] down_write+0x91/0x200 [ 829.933650][T24896] kernfs_add_one+0x41/0x510 [ 829.938781][T24896] kernfs_create_dir_ns+0x18c/0x220 [ 829.944525][T24896] sysfs_create_dir_ns+0x12f/0x2a0 [ 829.950190][T24896] kobject_add_internal+0x622/0xcd0 [ 829.956002][T24896] kobject_add+0x163/0x240 [ 829.960975][T24896] get_device_parent+0x316/0x3a0 [ 829.966458][T24896] device_add+0x2d4/0xb80 [ 829.971326][T24896] __add_disk+0x517/0xdb0 [ 829.976198][T24896] add_disk_fwnode+0x100/0x3a0 [ 829.981507][T24896] virtblk_probe+0x1c1b/0x2350 [ 829.986815][T24896] virtio_dev_probe+0xdec/0x10b0 [ 829.992403][T24896] really_probe+0x254/0xae0 [ 829.997450][T24896] __driver_probe_device+0x1e8/0x360 [ 830.003278][T24896] driver_probe_device+0x4f/0x240 [ 830.008851][T24896] __device_attach_driver+0x270/0x410 [ 830.014949][T24896] bus_for_each_drv+0x258/0x2f0 [ 830.020351][T24896] __device_attach+0x2bd/0x430 [ 830.025660][T24896] device_initial_probe+0x9c/0x100 [ 830.031322][T24896] __bus_probe_device+0x126/0x220 [ 830.036895][T24896] device_add+0x7d7/0xb80 [ 830.041776][T24896] register_virtio_device+0x50f/0x710 [ 830.047800][T24896] virtio_vdpa_probe+0x27c/0x330 [ 830.053362][T24896] really_probe+0x254/0xae0 [ 830.058408][T24896] __driver_probe_device+0x1e8/0x360 [ 830.064243][T24896] driver_probe_device+0x4f/0x240 [ 830.069817][T24896] __device_attach_driver+0x270/0x410 [ 830.075737][T24896] bus_for_each_drv+0x258/0x2f0 [ 830.081130][T24896] __device_attach+0x2bd/0x430 [ 830.086441][T24896] device_initial_probe+0x9c/0x100 [ 830.092084][T24896] __bus_probe_device+0x126/0x220 [ 830.097652][T24896] device_add+0x7d7/0xb80 [ 830.102506][T24896] vdpasim_blk_dev_add+0x1df/0x2a0 [ 830.108199][T24896] vdpa_nl_cmd_dev_add_set_doit+0xa8b/0xbd0 [ 830.114681][T24896] genl_family_rcv_msg_doit+0x233/0x340 [ 830.120789][T24896] genl_rcv_msg+0x614/0x7a0 [ 830.125840][T24896] netlink_rcv_skb+0x226/0x4a0 [ 830.131163][T24896] genl_rcv+0x28/0x40 [ 830.135689][T24896] netlink_unicast+0x8ef/0xa80 [ 830.141002][T24896] netlink_sendmsg+0x7f0/0xb20 [ 830.146323][T24896] sock_sendmsg_nosec+0x14e/0x190 [ 830.151895][T24896] ____sys_sendmsg+0x54e/0x850 [ 830.157214][T24896] ___sys_sendmsg+0x2a5/0x360 [ 830.162419][T24896] __x64_sys_sendmsg+0x1b1/0x290 [ 830.167891][T24896] do_syscall_64+0x166/0x520 [ 830.173038][T24896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.179475][T24896] [ 830.179475][T24896] other info that might help us debug this: [ 830.179475][T24896] [ 830.189715][T24896] Chain exists of: [ 830.189715][T24896] &root->kernfs_rwsem --> cpuhp_state-up --> gdp_mutex [ 830.189715][T24896] [ 830.202526][T24896] Possible unsafe locking scenario: [ 830.202526][T24896] [ 830.210036][T24896] CPU0 CPU1 [ 830.215415][T24896] ---- ---- [ 830.220791][T24896] lock(gdp_mutex); [ 830.224711][T24896] lock(cpuhp_state-up); [ 830.231577][T24896] lock(gdp_mutex); [ 830.238025][T24896] lock(&root->kernfs_rwsem); [ 830.242815][T24896] [ 830.242815][T24896] *** DEADLOCK *** [ 830.242815][T24896] [ 830.250974][T24896] locks held by syz.3.4542/24896: 7, last CPU#0: [ 830.257321][T24896] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 830.265545][T24896] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 830.274555][T24896] #2: ffffffff9087f3e8 (vdpa_dev_lock){++++}-{4:4}, at: vdpa_nl_cmd_dev_add_set_doit+0x582/0xbd0 [ 830.285219][T24896] #3: ffff888083a86128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 830.294475][T24896] #4: ffff888081d781b0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 830.303747][T24896] #5: ffff888027293a10 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 830.314127][T24896] #6: ffffffff90a1a600 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 830.323482][T24896] [ 830.323482][T24896] stack backtrace: [ 830.329390][T24896] CPU: 0 UID: 0 PID: 24896 Comm: syz.3.4542 Not tainted syzkaller #0 PREEMPT(full) [ 830.338796][T24896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 830.348878][T24896] Call Trace: [ 830.352179][T24896] [ 830.355132][T24896] dump_stack_lvl+0xe8/0x150 [ 830.359749][T24896] print_circular_bug+0x2e2/0x300 [ 830.364810][T24896] check_noncircular+0x12f/0x150 [ 830.369786][T24896] __lock_acquire+0x164c/0x2de0 [ 830.374675][T24896] ? __lock_acquire+0x747/0x2de0 [ 830.379653][T24896] ? do_raw_spin_lock+0x12b/0x2f0 [ 830.384709][T24896] lock_acquire+0x115/0x350 [ 830.389239][T24896] ? kernfs_add_one+0x41/0x510 [ 830.394027][T24896] down_write+0x91/0x200 [ 830.398297][T24896] ? kernfs_add_one+0x41/0x510 [ 830.403078][T24896] ? __pfx_down_write+0x10/0x10 [ 830.407958][T24896] ? kernfs_root+0x1c/0x230 [ 830.412493][T24896] ? kernfs_root+0x1c/0x230 [ 830.417026][T24896] ? kernfs_root+0x1c/0x230 [ 830.421552][T24896] ? kernfs_root+0x1ea/0x230 [ 830.426167][T24896] kernfs_add_one+0x41/0x510 [ 830.430785][T24896] kernfs_create_dir_ns+0x18c/0x220 [ 830.436002][T24896] sysfs_create_dir_ns+0x12f/0x2a0 [ 830.441148][T24896] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 830.446817][T24896] ? do_raw_spin_unlock+0xf5/0x200 [ 830.451957][T24896] kobject_add_internal+0x622/0xcd0 [ 830.457182][T24896] kobject_add+0x163/0x240 [ 830.461629][T24896] ? rcu_is_watching+0x16/0xb0 [ 830.466417][T24896] ? __pfx_kobject_add+0x10/0x10 [ 830.471391][T24896] ? __kmalloc_cache_noprof+0x148/0x600 [ 830.476962][T24896] ? kobject_init+0x7f/0x1e0 [ 830.481578][T24896] get_device_parent+0x316/0x3a0 [ 830.486525][T24896] device_add+0x2d4/0xb80 [ 830.490872][T24896] __add_disk+0x517/0xdb0 [ 830.495233][T24896] add_disk_fwnode+0x100/0x3a0 [ 830.500010][T24896] virtblk_probe+0x1c1b/0x2350 [ 830.504786][T24896] ? __pfx_virtblk_probe+0x10/0x10 [ 830.509915][T24896] ? __pfx___mutex_trylock_common+0x10/0x10 [ 830.515849][T24896] ? rcu_is_watching+0x16/0xb0 [ 830.520636][T24896] ? trace_contention_end+0x3d/0x140 [ 830.525957][T24896] ? setup_vq+0xd1/0x2e0 [ 830.530226][T24896] ? __mutex_unlock_slowpath+0x731/0x900 [ 830.535897][T24896] ? up_write+0x19d/0x4a0 [ 830.540278][T24896] ? __pfx_virtio_vdpa_set_status+0x10/0x10 [ 830.546198][T24896] ? vdpasim_get_status+0x4b/0x70 [ 830.551254][T24896] ? virtio_features_ok+0x1eb/0x260 [ 830.556479][T24896] virtio_dev_probe+0xdec/0x10b0 [ 830.561450][T24896] ? __pfx_virtio_dev_probe+0x10/0x10 [ 830.566836][T24896] ? kernfs_create_link+0x1cd/0x240 [ 830.572068][T24896] ? sysfs_do_create_link_sd+0xe0/0x110 [ 830.577640][T24896] ? driver_sysfs_add+0x1fe/0x210 [ 830.582693][T24896] ? __pfx_virtio_dev_probe+0x10/0x10 [ 830.588088][T24896] really_probe+0x254/0xae0 [ 830.592629][T24896] __driver_probe_device+0x1e8/0x360 [ 830.597953][T24896] driver_probe_device+0x4f/0x240 [ 830.603004][T24896] __device_attach_driver+0x270/0x410 [ 830.608395][T24896] bus_for_each_drv+0x258/0x2f0 [ 830.613279][T24896] ? __pfx___device_attach_driver+0x10/0x10 [ 830.619191][T24896] ? __pfx_bus_for_each_drv+0x10/0x10 [ 830.624598][T24896] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 830.630419][T24896] __device_attach+0x2bd/0x430 [ 830.635206][T24896] ? __pfx___device_attach+0x10/0x10 [ 830.640515][T24896] ? do_raw_spin_unlock+0xf5/0x200 [ 830.645652][T24896] ? _raw_spin_unlock+0x28/0x50 [ 830.650531][T24896] device_initial_probe+0x9c/0x100 [ 830.655680][T24896] __bus_probe_device+0x126/0x220 [ 830.660741][T24896] ? bus_probe_device+0xd/0x20 [ 830.665535][T24896] device_add+0x7d7/0xb80 [ 830.669898][T24896] ? __pfx_virtio_vdpa_set_status+0x10/0x10 [ 830.675827][T24896] register_virtio_device+0x50f/0x710 [ 830.681236][T24896] ? __pfx_register_virtio_device+0x10/0x10 [ 830.687164][T24896] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 830.692757][T24896] ? init_srcu_struct_fields+0x8df/0xbd0 [ 830.698431][T24896] virtio_vdpa_probe+0x27c/0x330 [ 830.703411][T24896] ? __pfx_vdpa_dev_probe+0x10/0x10 [ 830.708643][T24896] really_probe+0x254/0xae0 [ 830.713182][T24896] __driver_probe_device+0x1e8/0x360 [ 830.718503][T24896] driver_probe_device+0x4f/0x240 [ 830.723557][T24896] __device_attach_driver+0x270/0x410 [ 830.728966][T24896] bus_for_each_drv+0x258/0x2f0 [ 830.733858][T24896] ? __pfx___device_attach_driver+0x10/0x10 [ 830.739771][T24896] ? __pfx_bus_for_each_drv+0x10/0x10 [ 830.745270][T24896] __device_attach+0x2bd/0x430 [ 830.750060][T24896] ? __pfx___device_attach+0x10/0x10 [ 830.755364][T24896] ? do_raw_spin_unlock+0xf5/0x200 [ 830.760496][T24896] ? _raw_spin_unlock+0x28/0x50 [ 830.765375][T24896] device_initial_probe+0x9c/0x100 [ 830.770520][T24896] __bus_probe_device+0x126/0x220 [ 830.775584][T24896] ? bus_probe_device+0xd/0x20 [ 830.780371][T24896] device_add+0x7d7/0xb80 [ 830.784733][T24896] vdpasim_blk_dev_add+0x1df/0x2a0 [ 830.789871][T24896] ? __pfx_vdpasim_blk_dev_add+0x10/0x10 [ 830.795525][T24896] ? __pfx_vdpasim_blk_work+0x10/0x10 [ 830.800909][T24896] ? __pfx_vdpasim_blk_get_config+0x10/0x10 [ 830.806825][T24896] ? __pfx_vdpasim_blk_free+0x10/0x10 [ 830.812229][T24896] ? vdpa_mgmtdev_get_from_attr+0x26c/0x280 [ 830.818169][T24896] vdpa_nl_cmd_dev_add_set_doit+0xa8b/0xbd0 [ 830.824110][T24896] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 830.830559][T24896] ? __nla_parse+0x40/0x60 [ 830.835010][T24896] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 830.841369][T24896] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 830.847727][T24896] genl_family_rcv_msg_doit+0x233/0x340 [ 830.853315][T24896] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 830.859409][T24896] ? bpf_lsm_capable+0x9/0x20 [ 830.864114][T24896] ? security_capable+0x7e/0x2c0 [ 830.869203][T24896] genl_rcv_msg+0x614/0x7a0 [ 830.873741][T24896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 830.878789][T24896] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 830.885236][T24896] netlink_rcv_skb+0x226/0x4a0 [ 830.890037][T24896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 830.895096][T24896] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 830.900430][T24896] ? down_read+0x2b9/0x320 [ 830.904884][T24896] genl_rcv+0x28/0x40 [ 830.908891][T24896] netlink_unicast+0x8ef/0xa80 [ 830.913714][T24896] netlink_sendmsg+0x7f0/0xb20 [ 830.918531][T24896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.923845][T24896] ? aa_sock_msg_perm+0x144/0x210 [ 830.928881][T24896] ? apparmor_socket_sendmsg+0x98/0x360 [ 830.934449][T24896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.939749][T24896] sock_sendmsg_nosec+0x14e/0x190 [ 830.944788][T24896] ____sys_sendmsg+0x54e/0x850 [ 830.949558][T24896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.954856][T24896] ? import_iovec+0x73/0xa0 [ 830.959381][T24896] ___sys_sendmsg+0x2a5/0x360 [ 830.964090][T24896] ? __lock_acquire+0x747/0x2de0 [ 830.969036][T24896] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.974247][T24896] ? futex_wait+0x2a2/0x390 [ 830.978811][T24896] ? __fget_files+0x3a2/0x420 [ 830.983505][T24896] ? __fget_files+0x2a/0x420 [ 830.988114][T24896] __x64_sys_sendmsg+0x1b1/0x290 [ 830.993058][T24896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 830.998529][T24896] do_syscall_64+0x166/0x520 [ 831.003130][T24896] ? trace_irq_disable+0x3b/0x140 [ 831.008167][T24896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.014236][T24896] ? clear_bhb_loop+0x70/0xc0 [ 831.018916][T24896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.024810][T24896] RIP: 0033:0x7f847759fb19 [ 831.029224][T24896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.048916][T24896] RSP: 002b:00007f84784b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.057332][T24896] RAX: ffffffffffffffda RBX: 00007f8477825fa0 RCX: 00007f847759fb19 [ 831.065306][T24896] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 831.073277][T24896] RBP: 00007f8477637b70 R08: 0000000000000000 R09: 0000000000000000 [ 831.081251][T24896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.089219][T24896] R13: 00007f8477826038 R14: 00007f8477825fa0 R15: 00007ffd8c797b28 [ 831.097202][T24896] [ 831.170625][T24896] vda: unable to read partition table