last executing test programs: 23.650028414s ago: executing program 1 (id=3426): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x24, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x61}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0xfd, &(0x7f00000001c0)=""/253, 0x41100, 0x5, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xe6, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000300)=[{0x5, 0x3, 0xf, 0x6}, {0x5, 0x5, 0xb, 0xb}, {0x5, 0x4, 0x1, 0xa}, {0x0, 0x2, 0x9, 0x8}], 0x10, 0x9}, 0x94) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000400)={0xa0002008}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', 0x0, r0, 0x5, 0x1, 0x1}, 0x50) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000004c0)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000500)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', r3, r0, 0x1, 0x2, 0x4}, 0x50) sendto$inet6(r0, &(0x7f00000005c0)="89f85fe8c33b73c1eaa64079b0c1ee1ef37159be913fdf2babd4ccb1aba2bbbb877c66d47500d1f93dd2113dd7d8613d3daf9eb4aef1cf70a2a801242200f874edfae42eb153421cf6ffc0bef767d86f44a72f372e397ff9080d3af45c863b8470bee6e3e37b4c2d6123048edeb3099b9d6274f413638c202bffb1e432f9e017b28d33af3514a66234175897a30af6336306b1a7b79c484c268abed50f9e60f29e77a98f99685699596ca25d0fcbdb69abd5714d22220fef64c1d535b11847d17258617cb376ffbcf3ae45ecffd606ef51d9a9d1ef58b365636757cc5bbe50e8935d4d4a4323", 0xe6, 0x4800, &(0x7f00000006c0)={0xa, 0x4e23, 0x9, @local, 0xc19b}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000700), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @rand_addr=0x64010102, 0x2}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x31}, @multicast1, 0xff, 0xff000000, 0xc, 0x6, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x8783, 0xfff3, 0x87e7, 0x5, 'batadv_slave_1\x00', 'wlan0\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @multicast2, @loopback, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @rand_addr=0x64010101, @multicast1, 0x2, 0x7fffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x210, 0x120, 0xffffffff, 0x120, 0x120, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, &(0x7f0000000c00), {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x1, 0x0, 0x4}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv4=@remote, @ipv6=@mcast1, @gre_key=0x7, @port=0x4e24}}}, {{@ipv6={@private2, @private0, [0xff000000, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff, 0xffffff00], 'ipvlan1\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x2b, 0x42, 0x2, 0x31}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv4=@empty, @ipv6=@loopback, @port=0x4e20, @port=0x4e23}}}, {{@ipv6={@mcast1, @private2, [0xff000000, 0xffffff00, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'team_slave_0\x00', 'ipvlan0\x00', {}, {0xff}, 0x3b, 0xd, 0x5, 0x3}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x18, @ipv4=@remote, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e21}}}, {{@ipv6={@loopback, @mcast1, [0xff, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff], 'veth0_to_bond\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x87, 0xf0, 0x2, 0x21}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x6}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv6=@mcast1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x65, @gre_key=0xc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001700)={{r4, &(0x7f0000001200)='syzkaller\x00', 0x0, &(0x7f0000001240)={@_ha_fsid={[0x61d, 0x4]}, {0x7, 0x40, 0x7f, 0x6}}, 0x80, &(0x7f0000001280), &(0x7f00000012c0)=0x80000001}, 0x4, &(0x7f0000001680)=[{0x2, 0x30, &(0x7f0000001300)='ah\x00', &(0x7f0000001340)="9395ab6142d3b755b175820830c2910b03d1505b695ce5a2823751812002a42254ce9f4e94600c01", 0x28, 0x10}, {0x3, 0x2f175ec0, &(0x7f0000001380)=')\x00', &(0x7f00000013c0)="c70bebe81cf7d149414699ff1e554086e240f29c27f458dc016b2ae9f247d03ef3e47d3a0941bd1419737798ab20c3e1bef0c730eeaacadcbbda1c8df7bba473046007bf30e24ee7e08c8f36c84b726bc5fc521ac67953cd528c492722b97e0e58a2acee5c6f2c25b6dcd96680d1ee57f3fc46787b194d47688d23a206db31c1500c643f07986ae4d212ed81b2ce10487d6bf36dfcf60b89770462e23bfe66608224848499", 0xa5, 0x20}, {0x1, 0x2, &(0x7f0000001480)='.]\x00', &(0x7f00000014c0)="e3a763f98e80ec070f0688ea214b546923f6f5cfb210035a55d4de816a5068358039a6603e599e8c697cb7ef63668cc32c79f7f887e4ceae26d686be4020cf56a9969970723ea55220d4772da7fcd7c594ed7fce8799428439c942f0927c175eb9192561faa0feb2d589c75a407d1b27639a0b38fed3f2c9df86fbcd9ecb646bc485e3feac4e47ee697f0ae42597898b2a75a4fe540579c3783a1efedf51c6543d11580bef267ece8bb0356f46aaaa88e2fce50512b91cd4007c401f778fcec9cbaf00643e90289572a92ac91d04759011dc1d2be6ad3c2d1d7cd3ce8ba5b65779a3145c4e9fd0683d8ddb02c64749473ef662", 0xf3, 0x32}, {0x1, 0x0, &(0x7f00000015c0)='ipvlan0\x00', &(0x7f0000001600)="887987d1322f775d37dd07edaaa8b328e38731f9d84c88fcb5cc111ef55f89668acf5fbf24fb18ea06885ca670d0b5072d7c2e2c742bc37773d648c0088d4d5e9e9ad8d3c9f0aeb2512d670d6074209ec61811246a5b3f4ec2a13fef", 0x5c, 0x8}]}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)={0x1b, 0x0, 0x0, 0x7, 0x0, r6, 0xf93, '\x00', r3, r0, 0x2, 0x4}, 0x50) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001800)) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000001840), &(0x7f0000001880)=0x8) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000018c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r3}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000001900)={0xe6da, {{0xa, 0x4e21, 0x1, @empty}}}, 0x88) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f00000019c0)=0x9, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x50, r8, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xab}, @NL80211_ATTR_IE={0x19, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @ssid={0x0, 0x10, @random="166e4ee9a7cce9edfa6f8567bafb09bf"}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8006}, 0x40000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000001bc0)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000001c00)=0xc) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) bind$inet(r6, &(0x7f0000001cc0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{&(0x7f0000001d00)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000001d40)="839f1074df11ab6a6fb312bdd4624951bb1c9179ac3526438ff33045b75ad95410b5529b1be73ea58335be2c53d46a09e644c80f5f4eb25345611022b2a0e107a95932fb2ecd8b8547c0c418d08fe091f10a45c7d05e06db12f19af9ce2f610b", 0x60}, {&(0x7f0000001dc0)="55203fdcf20f8ecd3d6005cf929d7a5ed3906160d1b845704748685e314d2b6eb94898425040974f0cc31561099a4ffbe520ee726148191eeff1e6c35d37bc30", 0x40}], 0x2, &(0x7f0000001e40)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x18}}, {{&(0x7f0000001e80)={0xa, 0x4e22, 0x46cf, @loopback, 0x5}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001ec0)="d091997f406653abcb6d2b92d0db1038fb0226b0e8c146ebfae65cd3814f8d67f1a7a9ca8e31f0cc599ac14d39baa59edcc7c3a3839e43bb96d7ba71ab0c7f4545e45848cba0a929557543b8148a1d359580ff3f27bbddc54da4ac4554b74c9c9c58a91766d6d180023e127da832b4f7ed6a070c80ec904f7c409e75455ad8dadf1645ddc857f6200b870d5c267bb28f026be719539296a546cbf1146791c44e28a3191b19d15cf8ce16f8a8c5d35dae6714348100fdb205d136555e67d19bbf92710d42b3a0d68ae63019e2de0df0d9146aafb4b609ced573", 0xd9}, {&(0x7f0000001fc0)="5c362fef4606e25ee6c62e22877a90c48462d449779d99d923572dd9a72ee74cce44526df80ea50670de4a0a7462ca0e52d54a5663c0293cf6dc57dcd55bf70c33819c1a6225f85dc4386b59201041bdf481d2d9529771992a00194caacdfb16620cc885d40fac9e036986d23fb3662e893994cb5c2100fcba48b2530734152c48bc9eaf5ffa5a07055bb7c67a194cda817001db2a903c", 0x97}, {&(0x7f0000002080)="d73150d6b0f641e4cf5fbfb7058c6083ca455a5c402154c20a90f7346fb802aa5656a4aa98823c37261cfeb67da4edb5dbe760625c6ac09cb707de1bd45fd374aab109836894c3ad1103329dd261d4d468bbec15fe65beb583ef04f48230f45482de3440631510ac997620d52fc78545ea60c77ebbdc67ba3c0a0137a0dc2d162839bd0abbe6e5c33ec659056bd6392927c077218dbbdc2fa424253e7eed4ed83c7b57a0d08357eb179b97fa0f35ff0b3e60762457dc2c22f4fd637c43e74eaafcc991dd40cd278a10130680be27b19559", 0xd1}, {&(0x7f0000002180)="b2526e5f806f71df75cb51988543d3b31f4b540813655cf5a140630ef37dc032c7e60858f59ab186aa42", 0x2a}], 0x4}}], 0x2, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = accept4$inet6(r0, &(0x7f0000002300), &(0x7f0000002340)=0x1c, 0x80800) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000002380)={0x0, 0x9, 0x7, 0x0, 0x0, [{{}, 0xd320}, {{r7}, 0x8}, {{r11}, 0x6}, {{r13}, 0x8}, {{r0}, 0xa}, {{r1}, 0x8}, {{r1}, 0x7fff}]}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r12, 0x80286722, &(0x7f00000024c0)={&(0x7f0000002480)=""/37, 0x25, 0x5, 0x80}) getpeername$inet6(r13, &(0x7f0000002500)={0xa, 0x0, 0x0, @private2}, &(0x7f0000002540)=0x1c) 23.360523338s ago: executing program 1 (id=3431): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x8, @remote, 0x5}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001a00010000000600000000075ef49fea768b0ba87000fbdbdf0010fffd01fe0400060000080010000200000008001900", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000003f40)={0x1f, 0xffff, 0x3}, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003f80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003fc0)={0x1, 0xf, &(0x7f0000004080)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000004100)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000004140)=r5, 0x4) write(r3, &(0x7f0000004180)="060000000300000000", 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x3f6, 0x2, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x8810) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000041c0), r7) write(0xca, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000004280)={0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000004300)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004480)={&(0x7f00000044c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000280)=0xf3f, 0x4) sendto$packet(r10, &(0x7f00000002c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000340)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 23.014099481s ago: executing program 1 (id=3434): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080001fe8000000000000000000000000000120000000000000000000000000000000132000604"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0xe7) write(0xca, 0x0, 0x0) write(0xca, &(0x7f0000000200)="040e2301402020fb005036", 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000f777000000002000000000ffffffeb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 22.631792546s ago: executing program 1 (id=3436): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x8, 0x1ff, 0x8, 0x2, 0x5, 0x7c099268, 0x80000000, 0x3bb}}}}]}, 0x96}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x20000040) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000500)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000580)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f00000005c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010090fabf96fa4229bd7200000000003900000008000300", @ANYRES32=r8, @ANYBLOB="24005a8014000180050007000100000005000600010000000c000180040006003c000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x5, 0x2, 0xfb, 0xa4, 0xfd, 0x0, 0x0, 0x1, 0x28, 0x0, 0x0, 0x7, 0xf7}, 0xe) 21.605682535s ago: executing program 1 (id=3443): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x800) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x28, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {}, {}, [@printk={@lu}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @alu={0x4, 0x0, 0x0, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x9cbb, 0xb4, &(0x7f0000000340)=""/180, 0x41000, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xa, 0x8, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1}, 0x94) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001d00)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000001e00)=0xe8) r8 = getgid() (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001e40)=0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001e80)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@private1}}, &(0x7f0000001f80)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002040)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000002140)=0xe8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002180)=0x0) (async) r14 = getuid() r15 = getgid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000021c0)=0x0) r17 = syz_open_procfs$namespace(0x0, &(0x7f00000049c0)='ns/net\x00') (async) r18 = socket$nl_route(0x10, 0x3, 0x0) (async) r19 = accept4$tipc(0xffffffffffffffff, &(0x7f0000004a00)=@id, &(0x7f0000004a40)=0x10, 0x0) (async) r20 = socket$l2tp6(0xa, 0x2, 0x73) (async) r21 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r22 = openat$tun(0xffffffffffffff9c, &(0x7f0000004a80), 0x4002, 0x0) (async) r23 = epoll_create1(0x80000) r24 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000004b00)=@o_path={&(0x7f0000004ac0)='./file0\x00', 0x0, 0x4008}, 0x18) r25 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r26 = socket$tipc(0x1e, 0x2, 0x0) (async) r27 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r28 = accept$unix(0xffffffffffffffff, &(0x7f0000004b40), &(0x7f0000004bc0)=0x6e) sendmmsg$unix(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="e35eb2fa1d5c013a923b1571acd2106214f98dde7ef521c7a3e4f50b372e041de2df11e383a0902db11b033dd1ed3b7e461aea6a4ce0128e45ac3bdb7ea8cfb7098b459d0361fd34246235d48b7d0a9ea10d", 0x52}], 0x1, &(0x7f0000000580)=[@rights={{0x20, 0x1, 0x1, [r1, r2, r3, r4]}}], 0x20, 0x40}}, {{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="59fc6dafeeddb6b9f9c028a96d490c4f1502c1d34d279e80a21e6988fa5451bb9e6511c832a6faf2ba655770d6e4878d46cf0006db819472278465246771abe84599ae8e9bbdb1a28f61592c8589fcffa8f2a8b55924d587ef44e6fb0d1a91bc715e5a04", 0x64}, {&(0x7f00000006c0)="da9f772c76de4464d1866f2518be11641b5ee4573d2e8a4f80f2035837adf517369ab2c476f3ab5561070ef3a7016e960f1730488d5aac8107f5a9816316c324ac943ed16ec1d6d23da6196b3f2266b74d3151f90a3f3fe756b72c4562b644", 0x5f}], 0x2, 0x0, 0x0, 0x8800}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000800)="3da99a98e837106a999346719a3daf1dba1db7a3610351de7162d22beeb00e", 0x1f}, {&(0x7f0000000840)="6a327f19f8f8c2232b84592446380e51338e6de36a15c3667b5b858a962fec2c202e3a2dc54e5a4406a32409c529aaafcb93a42e161c9b2cfc54ef262e5363bb6ed09d2c8118518a038efa45d830e85f04ede658b26d6f32f556343ff37cfa8e14773fcd2d14a80019967bfe4cb287edd558603b357e05c2e19906ea31ca9e56de5b9126bb90f9944ca628596d767d5719e96d2147a871c12123e84e8125e730b11cdc71515402a1e7a5b059ad4c44c7d5e41e888449959a54100e14aae7d2f04c754ccc2f199b2078a0e4777550e1bab5703e83fa95", 0xd6}, {&(0x7f0000000940)="c9e2b9a27311f0e5681622653eee632b5bf5ef1d4917559cc1c73f4a8b6053ce7f7a59cc59a6336dec666578bd3d39", 0x2f}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="246fedda789b8664c79a6dcf8035a3660085e80db49f20a305087579c2b13df5c17a5b5778cf192b0fcd95b7df118ed1c9bcced53cbd894a0ef5d8770f3792ab2872c5110cb2a5009e5572029a72088f9b34db7f8693511c42c002d01b6e31910b222fbaae", 0x65}, {&(0x7f0000001a00)="b16550a00a659d4b2dbadf4c568218113e87970db7e463852e53ac7fab7065b3b7724bac69d783e5d1df87bd8ecebe9468629664709818cce4d04ff632ba8fc8676b8c56bf28e7cac51981c1a543b30ba83cf62a2383c841fa35ad899979674d46bf2abb27001af5ab858562276773a8b1a80b267c22436ce3548e10a421c588fbc35d2745e691a6e2e78b19a6ff8322632ab8a97a0047b0bbfd1afa8414fbe622df5a6d92f85c04cfb3d37f7ad221b5dba4c2d06d60968040af84dc41ee925fac37c6ff82e306968dc37b5ef2a5cd61f68b265eafb07d10d1d5daf67255168994", 0xe1}, {&(0x7f0000001b00)="2fa519b7be7aba8a3d1dda4a7b81412b0ba019c1bc32550265fe25091d75c97744e63bb39aad85f9a441b48fc8f9dcec3018b933a05a936ad7c04758bf75bd944427fcd4df6d3d9e11f024f373cd40fb97287bf629bff54900f6880e6a9d3eeacaa131a340de3d85e30b99cf7f", 0x6d}, {0x0}, {&(0x7f0000001b80)="06322cafe7525d03f8963e0288236c7050fa376134c5bb929691f2819ce201e0b73a0aeceb61cd47d80ea9e5537d3cbee45545ceb44e7e06d7fb9179827c82ac9e63c4322aa2cbc41dbdf67ba2dda5eada6ffdc67c43ebcc85a9e12947bc2686d7369ac7c936a5d8d0ca4dca3a2958dafeb9b6a989db67844876bd7bfa78e01ce9b629646e5cb3b0149d2319214647f727152379d32d68d3d91de1740a91ce8b", 0xa0}], 0x9, &(0x7f0000002200)=[@rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r16, 0xee01}}}], 0xc0, 0x20004810}}, {{&(0x7f00000022c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000002340)="bc1f2af19d1881817259f1b64b9c46e20d45ba2dfc2d0d443a1ba33f5f71c3cb9eb57d145b36d277c8dbc39b468fa8e2133e74574264b9fbfc3ce19c892b8fdbf1fa2ccf05477a5d46a7b9be22f72f47c9cb8181f734e54e62d891726f2f1869c0a954f6a3951f644f83bd606d7bd0bc58c964a2253fea9f4e12051b73e48e919e012e", 0x83}], 0x1, 0x0, 0x0, 0x10}}, {{&(0x7f0000002440)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004940)=[{&(0x7f00000024c0)="3f95aeceea4a683d2d763ab54411bb511b5c168c8e8077d4fe1cced3acdc6a546604a4d5ec8b83f2d15a14b91b4539c52e357cf0480fdcab6fb99946deae2a146547f8cca66219a9f2a2dd4ec0605c15e1ab9ca313639751d3de150ec882101236b0696337d9700ba853e40c4d05eee64f757b8770a781f73875262a67c6d72d752ff18bb1c2943934d3299ebdbc9725ecfed487fdc85749d979f4c9f36ab8698521ffa5a98f816024c80e9a2543f8072361", 0xb2}, {&(0x7f0000002580)="bb30d1a8d511c72880d1119821b0e5f153a6e90540aba3ca5c51728e58e642ce2f0508a7b733427d70ca05579491f3362cf7cd75ff5ccc1459a3d3a67e23b53ef3345480e8cde754964d728a82a1a8188989a9291c2d6dc131230e331b92dcc4ef4831fb9a3a9713f5ceb91006e005fabe50a0350a731c6b98aa352b3928ec796bd4d4aac11d5d9feb1fa765e54ca6f5878bb9fd828467b34b08840f9885be3b3f4e", 0xa2}, {&(0x7f0000002640)="ed111ee062fff8cedf89b010a16cc6e71534e4d9c217e22c2eb64718baa62deea0e94b7a0ba76c16fe95191a20b18214b6976ab189ed8201f7172076a99e47031390bc8dfd3c8f636251ccf1993dc8a93fefb6993018d7b1f6a450faa53eb33e9477a60ab2b5489fe41d49ccacceea2956842119371caedf03bd2bac80a2161385e5be6d9cb0e4522384f74b44613e7a2ffb1e400c1194ff77a431aa843a312efa5808f5f52dfe365a14af6ac2399bfa46148f0d556f69b9ca6b739a0a81de0f6a8f4653a3923e4c85538518e6ecc71bfe8a1bd0553b34e1c239cf5e6075df", 0xdf}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000003740)="0d41c2925e79939ac874a13527f72b10fd46f3941d8fbb964f4a0e3477113f8f4ef3702b604cdafaca91521e1711e3e00e2a43", 0x33}, {&(0x7f0000003780)="3a0628ea66ea0616809e5c4dbfe9ea763ab3583e6e7687924cf8980553f408d8055b5e12f7eab60cbb3247fcf83a12a948e66a3870ac6ef3d69c5938a85a64b7915fab42ece83d17484920378c36cc6d50f47a6fd4cbb0cef02d13687c52b44d87be778dab0d98d6ecc090884066baa56fc1e9fb3a735b81fba712896eea569affb906de267aaea2a5f8abf3231f4fd2d708baf14cc94f3602cec5beb0fa16c97ae0ec69b562eda66a505499a6d742b2f81f9fdbe7af1b8c16a77b74d00b1fd04793239d01224d", 0xc7}, {&(0x7f0000003880)="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", 0x1000}, {&(0x7f0000004880)="af7978d873ff0c3ff2487ed0b632a1fd671ad631abfc60741febcc7cbd674bfc39f43cf50354fe27cc9ee287e82c4432932e4453bbd270d1d746878e552a9db274c45ba244e4a3c314a5a631cac6875eac87b5f1f14cb17950b533ed0cc1ef0f0adb9790bf50caa6e1cc3cfbc22406e128b2f3f50793429227722adbf896bf29327eb4cd44f0383224a8c641f795592b4bea3903ad228354", 0x98}], 0x8, &(0x7f0000004f40)=[@rights={{0x20, 0x1, 0x1, [r17, r18, r19, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r20, r21, r22, r23, r24, r25, r26, r27]}}, @rights={{0x20, 0x1, 0x1, [r28, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70, 0x4000800}}], 0x5, 0x4048000) 21.399143959s ago: executing program 1 (id=3445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES64, @ANYBLOB="a913ca84ab392b2bb8e07c65bcc382ef29ce640dc2e619c3be01c9e48ec318d57f3716ab1b267a7f16091a60900971a13d52891bfc8d8d2691c984a519b60ec2e6567bef8466346e61b7069a8fcf6d7b26799ccd8e99db7fee872ff4e1a8ab94cbc43fd2f8eb57af68780b", @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000017000000000000000064000100080026006c09000008000c006400000008000d0000000000050091006e000000"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x80000001}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x2, 0x7, 0x7fff}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xf565668f9c435a84}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r7) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd29, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x8, 0xfc, 0x4, 0x0, 0xc, 0x2200}, [@RTA_DST={0x8, 0x1, @remote}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x11b90d835fe1c228, 0xfb}}, @RTA_SPORT={0x6, 0x1c, 0x4e21}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r11 = socket(0x10, 0x803, 0x0) bind$netlink(r11, &(0x7f0000000680)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r12, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r13 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000800)={'bond0\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000880)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000c80)={0x3c, r15, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x10000}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000c0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newlink={0x4c, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x4008010) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 17.803837903s ago: executing program 2 (id=3470): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f00000000c0), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x40}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={0x2, 0x8001, 0x98, "7b2f5231e43fcdeccca72d552d112fe2355f97ddccb12611278d068f8aaa68c0ea62f7d22ed1f42015a86101a42e6e7508c55cbdee7a88b92cb6e2215c6ab6d0c9d171cd8fb80f7c3b79478e0dc524e6ca73cd9aab548e130b22769bd46bd52bafe6d3c6c7e1a82e83f7e9c52c21dc5e4abc9a211d4d38bb481ad5b20c7dca282f8d3eaec8192dc4db4d5cd81e64cf81e396af6225634864"}, 0xa0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_REUSE_PORT(r0, 0x84, 0x24, &(0x7f0000000080)=0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000041000901fefffffffddbdf25017c0000040042800c00018006000600800a00000400028008000a00", @ANYRES64=r2], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000080) 17.198783683s ago: executing program 2 (id=3474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f00000002c0)=0x6, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40600, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000440)=0xf3f, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f050000000100220005000000fbff00"/56], 0x0, 0x3a}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=r1], 0xcc}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x4076cbba9945d516, &(0x7f0000000780)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r4, &(0x7f0000000900)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000940)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) listen(r9, 0x0) 17.0166598s ago: executing program 4 (id=3476): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, &(0x7f00000009c0)=0x20000, &(0x7f0000000a00)=r6}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xced, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r8, 0xffffffffffffffff}, &(0x7f0000000a80)=0x2000000, &(0x7f0000000ac0)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b00)={r7, &(0x7f0000000b40)}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="46000000a5e20000000000000000d55f9e07f9bacb2330efdc7bcbb8934876c82427b20e2af40490e4d5758c9a22c8481a7e7f60196a11159ce2de6fff193c0d8f1fa0657481525c201b862b3e31", @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="04005b000600650040000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x20, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r16, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r9, 0x800442d4, &(0x7f00000004c0)=0x3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095", @ANYRES32=0x0, @ANYRESHEX=r13, @ANYBLOB="9ee17d63d187ddba56b978facec044c23e8cf3521a4548c680cf2da5825737d8a2a4c1a6ccbd27f8d0", @ANYRESHEX=r11], &(0x7f0000000240)='GPL\x00', 0x8, 0x101, &(0x7f0000000ec0)=""/257, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r18 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r18, 0x0, 0x483, &(0x7f0000000b80)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x8c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe82}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x58}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6860}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x1) 16.130288769s ago: executing program 4 (id=3478): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000041000701feffffff00000000017c0000040042802400018010000400cab1893a20b8d2a93521800a10001c800c000100001a5d000000008004000280"], 0x40}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="24000000200081dc2bbd0004040000041300000008000e00080000000000000000000000e8dd2dbf01da560035535ee5eaa5bc8034c578a396b22c4f958436a218fc99b4f1facc0420208da34a52b666b100ecaeb6c637f068807d97dfe82c67b1b3eb27e4a09966c28042b6ac6879fbc02772c074cb30a10597c5bd4d5bd69dabab6ec270ac5778930380fee82dee860a2367ca9c8cd6fb3f9ea1bbdb557dcd9c5e326419dc"], 0x24}, 0x1, 0x0, 0x0, 0x4040081}, 0x4010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x44, r3, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2000067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x639, 0xffffffff, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000000640)=[{{&(0x7f0000000680)={0xa, 0x4e20, 0x2f9f, @local, 0x10}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0xffff}}], 0x18}}], 0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) accept(r8, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'macvlan1\x00', 0xc201}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x2) shutdown(r10, 0x0) connect$unix(r10, &(0x7f0000000580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r12 = accept(r11, 0x0, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={0x0, @in={0x2, 0x4e23, @broadcast}, @phonet={0x23, 0x0, 0x1, 0x5}, @in={0x2, 0x4e22, @private=0xa010100}, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffffffffffff, 0x9}) sendto$inet6(r12, &(0x7f0000000600)="1c", 0x1, 0x4c090, 0x0, 0x0) r13 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r14, {0xb, 0x7}, {0x0, 0xffff}, {0x300}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x27}]}}]}, 0x3c}}, 0x0) 10.230797477s ago: executing program 4 (id=3481): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@private2, 0x0, r3}) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e20, 0x9, @private1, 0x7ff}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r4) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000091) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x50, 0x40800}}], 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) gettid() socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r4], 0x3c}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) 9.987475129s ago: executing program 2 (id=3483): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080001fe8000000000000000000000000000120000000000000000000000000000000132000604"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0xe7) write(0xca, 0x0, 0x0) write(0xca, &(0x7f0000000200)="040e2301402020fb005036", 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000f777000000002000000000ffffffeb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 9.205197492s ago: executing program 4 (id=3485): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$rds(0x15, 0x5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) bind$rds(r0, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f0000000540)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000580)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf6c5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x200, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x1c, &(0x7f0000000a40)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b709000000000000739af1ff00000000ce09020000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYBLOB="0000000000000000b7050000080000004608f0ff7600"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$l2tp(0x2, 0x2, 0x73) accept4(r3, &(0x7f0000000b40)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000bc0)=0x80, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES8=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f00000002c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018070000", @ANYRES32, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) 9.000303976s ago: executing program 0 (id=3486): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xff7f}, 0x48) 8.997654347s ago: executing program 3 (id=3487): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, &(0x7f00000009c0)=0x20000, &(0x7f0000000a00)=r6}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xced, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r8, 0xffffffffffffffff}, &(0x7f0000000a80)=0x2000000, &(0x7f0000000ac0)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b00)={r7, &(0x7f0000000b40)}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="46000000a5e20000000000000000d55f9e07f9bacb2330efdc7bcbb8934876c82427b20e2af40490e4d5758c9a22c8481a7e7f60196a11159ce2de6fff193c0d8f1fa0657481525c201b862b3e31", @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="04005b000600650040000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x20, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r16, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r9, 0x800442d4, &(0x7f00000004c0)=0x3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095", @ANYRES32=0x0, @ANYRESHEX=r13, @ANYBLOB="9ee17d63d187ddba56b978facec044c23e8cf3521a4548c680cf2da5825737d8a2a4c1a6ccbd27f8d0", @ANYRESHEX=r11], &(0x7f0000000240)='GPL\x00', 0x8, 0x101, &(0x7f0000000ec0)=""/257, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r18 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r18, 0x0, 0x483, &(0x7f0000000b80)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x8c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe82}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x58}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6860}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x1) 8.847722289s ago: executing program 2 (id=3488): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, &(0x7f00000009c0)=0x20000, &(0x7f0000000a00)=r6}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xced, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r8, 0xffffffffffffffff}, &(0x7f0000000a80)=0x2000000, &(0x7f0000000ac0)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b00)={r7, &(0x7f0000000b40)}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="46000000a5e20000000000000000d55f9e07f9bacb2330efdc7bcbb8934876c82427b20e2af40490e4d5758c9a22c8481a7e7f60196a11159ce2de6fff193c0d8f1fa0657481525c201b862b3e31", @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="04005b000600650040000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x20, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r16, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r9, 0x800442d4, &(0x7f00000004c0)=0x3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095", @ANYRES32=0x0, @ANYRESHEX=r13, @ANYBLOB="9ee17d63d187ddba56b978facec044c23e8cf3521a4548c680cf2da5825737d8a2a4c1a6ccbd27f8d0", @ANYRESHEX=r11], &(0x7f0000000240)='GPL\x00', 0x8, 0x101, &(0x7f0000000ec0)=""/257, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000b40)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000b80)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x8c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe82}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x58}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6860}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x1) 8.719909532s ago: executing program 0 (id=3489): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016d00200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 8.589644222s ago: executing program 0 (id=3490): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010028bd7000fbdbdf2500000000", @ANYBLOB], 0x54}}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=@newqdisc={0xb0, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x5, 0x2}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x0, 0x1, 0x618000, 0x1, 0x7fffffff, 0x7, 0x5}}, {0xe, 0x2, [0xfffd, 0xa, 0xd8, 0x38e9, 0x1000]}}, {{0x1c, 0x1, {0x8, 0xa6, 0x8, 0x5, 0x1, 0x842, 0x6, 0x5}}, {0xe, 0x2, [0x2e, 0x4, 0x7, 0x2, 0x6]}}, {{0x1c, 0x1, {0x7, 0x16, 0x2, 0x6490, 0x0, 0x4, 0xd891}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xe000}, @TCA_INGRESS_BLOCK={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x20a201, 0x0) close(r7) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x20000000, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380), 0x8) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="b4ee0bdf4d836ded5ab409772a9a7a57707008c2c8", 0x15}, {&(0x7f00000001c0)="3ae2eb7ae74f7ffe1f120814caf89bb8bab8e5b6b4a8e131fab8f803e48fd5313f41745551974181a20ecd904ff1d2bfa6e84cc30bb7ad87", 0x38}], 0x2}}], 0x1, 0x200448c4) 8.498099254s ago: executing program 3 (id=3491): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newpolicy={0x1bc, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x8}, [@tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in=@loopback, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x6}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x5}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x6}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x3000000, 0x1, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 8.367660895s ago: executing program 3 (id=3492): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x10, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) r1 = socket$inet(0x2, 0x80000, 0x7) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000025c0)=ANY=[@ANYBLOB="640000000206050000000000000000000a000004120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001800bd98a29992d2a781f3e6d5a907800c0001800800014000001c02050003000300000005000500020000000500010006000000ba863d5c5a49efe218087c0182e761924e891c41f75b841c8b3e835f24b20b3ffc06016c5dfb97cb"], 0x64}, 0x1, 0x0, 0x0, 0x20000845}, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000001740)) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x62, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$nl_route_sched_retired(r2, &(0x7f0000001d80)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000002680)=@newtclass={0x1ac4, 0x28, 0x10, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x5, 0xfff2}, {0xfff1, 0xb}, {0xd, 0xfff1}}, [@c_cbq={{0x8}, {0x83c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xffff18e3, 0x9, 0x4, 0x7, 0xf, 0x9, 0x7, 0x9c, 0x896, 0x3, 0x7ff, 0x2, 0xa69, 0x10001, 0x77eb, 0x1ff, 0x8d5, 0x0, 0x9, 0x42, 0x10000, 0x45, 0x9, 0x1, 0xc, 0x0, 0xff800000, 0x4, 0x2, 0x7, 0x8, 0xf52, 0x1, 0x0, 0x4, 0x1, 0x40, 0x7, 0x1, 0x601, 0x9, 0x1, 0xfc, 0xba, 0x8001, 0x5, 0x40, 0x80000000, 0x1, 0x2, 0x8, 0x2fb, 0x4, 0xe5e2, 0x2, 0x1b7e, 0x5e14, 0xffff, 0x9, 0x3, 0x9, 0x4, 0x53, 0xffff, 0x10000, 0x5, 0x7, 0x54f6, 0x7, 0xd9c, 0xfffffffd, 0x7f9, 0xfffffcaa, 0xa5a, 0x8, 0x10001, 0x8, 0x6, 0xff, 0x80000001, 0x6, 0xe1b, 0x4, 0x5, 0x0, 0x4, 0x0, 0x358, 0x51b2, 0x9, 0x100, 0x8, 0x5, 0x2, 0x0, 0x8001, 0x7, 0x9, 0x3, 0x1bf, 0xffff0000, 0x1, 0x18, 0x54f, 0x7, 0xfe90, 0x1000, 0x956, 0x2, 0x1, 0x40, 0x1, 0x101, 0x4, 0x4, 0x2, 0x3, 0x0, 0x4, 0x40, 0x7, 0xffffffff, 0x240, 0x7, 0x7, 0x9, 0x7, 0xfffffff7, 0x101, 0x5, 0xd097, 0x5, 0x2, 0x80000001, 0x2, 0x3, 0x8, 0xf, 0x0, 0x5e, 0x8, 0x9, 0x8, 0x7, 0x7fffffff, 0x4, 0x5, 0x6, 0x1, 0x5, 0x8, 0x2, 0xae78, 0x6, 0x0, 0x1, 0x0, 0x8, 0xfffff000, 0x81, 0xa60, 0x25, 0x2, 0x2, 0x3, 0xfffffff4, 0x3, 0x101, 0x6, 0x0, 0x2, 0x80, 0x5, 0x0, 0xe, 0x3, 0x3, 0x5, 0x800, 0x7, 0x8, 0x9, 0x7fff, 0x2, 0x6, 0x4, 0xc13, 0x9, 0x2, 0x8, 0x316, 0x7, 0xb0, 0x0, 0x7, 0xa, 0x7a, 0xc73c, 0x9, 0x800, 0x2, 0xff, 0x0, 0x6, 0x10000, 0x5, 0x4, 0x4, 0x7fffffff, 0x7fff, 0x9, 0xf, 0x1, 0x1, 0xffffffff, 0x1, 0x1, 0x7, 0x5, 0xffff0000, 0xef, 0x1000, 0x5, 0x9, 0x8001, 0xb, 0x2, 0x10001, 0xc40, 0x5182, 0x1, 0x1, 0x6, 0xfffffffd, 0x8, 0xae, 0x8, 0x3, 0x4, 0x4, 0xa6c0, 0x32, 0x5, 0xffffffff, 0x5, 0x2, 0x0, 0x0, 0x40, 0x6, 0x7, 0xc00000, 0x3, 0x9, 0x49, 0x9]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x14cf, 0x2, 0x9, 0x0, 0x8000, 0x3, 0x48800, 0x8090, 0x40, 0xfffffff1, 0x3, 0x6, 0xc3, 0x7, 0x5, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0x6, 0x7, 0x1, 0x8, 0xb5, 0x1, 0x7, 0x3, 0xfffffffd, 0x400, 0xa, 0x8, 0x10000, 0xfffffffe, 0x9f, 0x7, 0xffffffff, 0x200, 0x1, 0x8, 0x3, 0x2, 0x1000, 0x2, 0x5, 0x9, 0x6, 0x1, 0x14ba, 0x9, 0xf, 0x9, 0x1, 0x4, 0xd, 0x7, 0x5, 0x10000, 0x400, 0x0, 0x3, 0x0, 0x400, 0xd5, 0x9, 0x1bb, 0x2d9, 0xc, 0x9d60, 0x3, 0x7fffffff, 0x4, 0x29a27a58, 0xe1, 0x6, 0xa, 0x9, 0x1, 0x4, 0x4, 0x1, 0x0, 0x5, 0x3ff, 0x44d, 0x0, 0x65, 0x5863, 0x0, 0x6, 0x8, 0x6, 0x10001, 0x3, 0x1, 0xffff0bd2, 0xd0, 0x2f6, 0x6, 0x0, 0x800, 0x49f4, 0x8, 0x8, 0xfffffffa, 0x6e5, 0x2, 0x3, 0x6, 0x50e2, 0x1, 0xfffffffc, 0x9, 0x0, 0x3, 0x3, 0x5f6a, 0x9, 0x8, 0x1ff, 0x0, 0x5d, 0x5, 0x7dd, 0x7fff, 0x80000001, 0x1, 0x7, 0x80, 0x7, 0x800, 0x1, 0x491, 0x5, 0x6, 0x7, 0x8, 0x287, 0x8, 0x6, 0x5, 0x800, 0x8, 0xd, 0x5d39, 0x2, 0x7, 0x6, 0x2, 0x5, 0x3b9, 0x7, 0x76b6615f, 0xc, 0xfe2c, 0x10001, 0x3, 0x4, 0x6, 0x9b, 0x2, 0x1, 0x0, 0x5, 0x2, 0x4, 0xfffff41a, 0x3, 0xffffffff, 0x31, 0xff, 0xd, 0x8, 0x8, 0xffffffff, 0x80000001, 0x6, 0xfffffffb, 0x5, 0x5, 0x3, 0x3, 0x1, 0x8c31, 0xffffffff, 0x0, 0x10000, 0x0, 0x3ff, 0x400, 0x1, 0xfffffffc, 0x1, 0x3b, 0x2f740, 0x2, 0x1, 0xffffffff, 0x4, 0x5, 0xff4, 0x5, 0x0, 0x401, 0x4f7, 0x7, 0x80000000, 0xb2c, 0x7ff, 0xe2c2d9b, 0x6, 0x76, 0x4, 0x6, 0xfffffff8, 0x7, 0xc89, 0x120000, 0x80000, 0x26, 0x5, 0x6, 0x2, 0xa, 0xd, 0x5, 0xe4, 0x8f, 0x9, 0xe4, 0x2, 0xffff795a, 0xfffffffc, 0xfff, 0x3, 0xcf00, 0x6, 0x0, 0x8, 0x30b, 0x9, 0x9, 0x7ff, 0x7f, 0x0, 0x19, 0x2, 0x7, 0x8, 0x6, 0x9, 0x7fffffff, 0x6, 0x6, 0x9, 0x3, 0x3]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x1, 0x6}, 0xbf, 0x3}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x6, 0x80, 0x9, 0x5, 0x10001}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x6, 0x6, 0xf, 0x99, 0xcc4}}]}}, @c_atm={{0x8}, {0x48, 0x2, [@TCA_ATM_HDR={0x44, 0x3, "929738fa2b8cfc69e75f5b95bc61d504f39767ed6cef56752ad924ff0ae2afa9108c3bfc7d4d9f56b048093d102ddde4b7e44492189384b81db8675a809e2d05"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x38}}}, @c_cbq={{0x8}, {0xc70, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x2c, 0x1, 0x2, 0xca, 0x0, 0x8, 0x3, 0x6}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x8, 0x6, 0x6, 0xef9, 0xff, 0x8, 0x400, 0x8, 0xee2, 0x40, 0xfa, 0x7, 0x0, 0x81, 0x6, 0xb, 0x7fff, 0x6, 0x4, 0x8, 0xb1, 0xfffffffc, 0xffff, 0x9, 0x9, 0x6, 0x6, 0x8, 0x2, 0x2, 0x8, 0x8f09, 0xd, 0x3, 0x7, 0xac, 0x800, 0xc, 0xa7, 0x3, 0x0, 0x7f, 0x2, 0x7de, 0xff, 0x5, 0x8001, 0x4, 0x8000, 0x7, 0xf2f7, 0xffffffff, 0x3, 0x2, 0x6, 0x0, 0x3, 0x6, 0x4, 0x4788, 0xffff, 0x8001, 0x6, 0x8, 0x4, 0x79a5, 0x5c50ba37, 0x5, 0x9, 0xfff, 0x6, 0x7fffffff, 0x718, 0x1, 0x7, 0x5, 0x80000000, 0x8001, 0x3ea, 0x12be231e, 0x5, 0x9, 0xb7, 0x1, 0x0, 0x18a8, 0x61f, 0x1, 0xb, 0x10001, 0x100, 0x3, 0x6, 0xffffffc0, 0x6, 0x9, 0x6, 0x5, 0x8, 0xb46, 0x3, 0xc0000000, 0x5, 0x1, 0x2, 0xcbb, 0xfffffffc, 0x8, 0x9, 0x7, 0x8, 0x401, 0x17ff922f, 0x1, 0x9, 0x1, 0xb016, 0xb7c, 0x2, 0x5e34, 0x4, 0x6, 0x5, 0x3, 0x6, 0x1, 0x7, 0x5b19, 0x3, 0x4, 0x8, 0x9, 0xff, 0x1a9, 0x3, 0x3e, 0x7ff, 0x0, 0x9, 0x9, 0x2, 0xd73, 0x80, 0x5, 0x4e, 0x9, 0x101, 0x8, 0x0, 0x6, 0xc, 0x10000, 0x5, 0xfffffffb, 0x3, 0x7fffffff, 0x80000000, 0x5, 0x4d89cc29, 0xfffffffd, 0x5, 0x2, 0x20, 0x6, 0xffff0000, 0x3, 0x0, 0x3, 0x3, 0x9, 0x1, 0x2dab, 0x5, 0x7, 0xa8, 0x5, 0x401, 0xffffff01, 0x1, 0x2, 0x1, 0x0, 0x9, 0x29334d25, 0x2, 0xa9, 0x6, 0x2d9, 0xaee, 0xf9, 0x3af, 0xb, 0x4, 0x8, 0xc, 0x3, 0x4, 0x2, 0x0, 0x5, 0x6, 0x4, 0x6, 0x80000001, 0x81, 0xfffffffd, 0x7, 0x7, 0x4, 0xfffffffc, 0x9, 0xfffffede, 0x6, 0x0, 0x8000, 0x3, 0x84, 0x1, 0x101, 0x16a, 0x7, 0x5, 0xd, 0x80000000, 0x0, 0xef32, 0x80, 0x5f, 0x80000000, 0x100, 0x6, 0x6, 0x3, 0x6, 0x800, 0x3, 0x4, 0x0, 0x5113, 0xf, 0x4, 0x7fff, 0x7, 0x4, 0x41e, 0x4, 0x6, 0x4, 0x1ff, 0x80, 0x2, 0x3d, 0x7, 0x2, 0xa66]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x400000, 0x2, 0x4, 0xff, 0x8001, 0x9, 0xbe14, 0x1ff, 0x0, 0x3, 0x4, 0x7, 0x6, 0x8, 0xd5, 0x7, 0x22, 0x8, 0x0, 0xfffffffa, 0x101, 0x7, 0x5f7, 0x0, 0x40, 0x8, 0x100, 0x93, 0x7, 0x1, 0x6, 0x8001, 0x6, 0x6, 0x5, 0x0, 0x0, 0x5, 0x7, 0xb, 0xa62b, 0x4, 0x9, 0xffffffff, 0x101, 0xa, 0x6, 0x81, 0xe, 0x0, 0x101, 0x4, 0x5, 0x5, 0x2, 0xcfaa, 0x4074c86b, 0x7ff, 0x6, 0x8, 0x80000000, 0x341170bd, 0x9, 0x6e, 0x8, 0x5, 0xfffffffe, 0x2, 0x80, 0x8, 0x4, 0x10, 0xce0000, 0xc498, 0xff, 0x5, 0x0, 0x9, 0x7, 0x5, 0xd, 0x8, 0x3, 0x5, 0x7, 0x2, 0x1, 0xfffffff7, 0xffffff61, 0x9, 0x8, 0x9b, 0xcf, 0x3, 0xffffff51, 0x1416, 0x8, 0x3ff, 0x5, 0x9, 0x8, 0x10, 0x2, 0xcb6, 0x0, 0x80000001, 0x7, 0xf256, 0x600, 0xe2, 0x2, 0x10, 0x0, 0x7f, 0x3, 0x2, 0x8001, 0x7e9, 0x4, 0x0, 0x9, 0x12fa, 0x6, 0x0, 0xffffffff, 0xb3e5, 0x4, 0x5, 0xd, 0x200, 0x10000, 0x7, 0x2, 0xe9e0, 0x1, 0x7, 0x7f, 0x2, 0x1000, 0x4, 0x5, 0x0, 0x7, 0x5, 0x5, 0xb31, 0x0, 0x9, 0x2, 0x2, 0xe5, 0x9, 0x8, 0x1, 0x8, 0xb, 0xfa20, 0x401, 0x7, 0x66de9161, 0x4, 0xfffffe01, 0x7f, 0x3, 0x560, 0x1ff, 0x8f, 0x0, 0xfffffb4c, 0x5c5e, 0x6, 0xffff, 0x37, 0x6, 0x5, 0x7, 0x2, 0x8000, 0x2, 0x9, 0x3cf650d2, 0x26e, 0x4, 0xc384, 0x2, 0x10000, 0x348, 0x4, 0x5, 0x0, 0x80000001, 0x5, 0x5, 0x7c957699, 0x3, 0x5, 0x8000, 0x7fffffff, 0x2c7dc305, 0x0, 0x30663798, 0xfffffff6, 0xffffafe9, 0x8, 0x10000, 0x5, 0x72, 0xfffff014, 0x8536, 0x5, 0x7, 0x1, 0x9, 0x7ff, 0xffff, 0xc, 0x4, 0xcd, 0x7, 0x5, 0x4, 0x40, 0x7, 0x6, 0x8, 0xbd7, 0x9, 0xfffffffa, 0x6, 0xfffff0f0, 0x21, 0x9, 0x10, 0x7fffffff, 0x7f, 0x5, 0x929, 0x401, 0xa9f, 0x81, 0x5, 0x8, 0x3, 0x1, 0x8001, 0x7f, 0x7, 0xd, 0x7fff, 0x42dd, 0x1, 0x80000, 0x1, 0x7, 0x1]}, @TCA_CBQ_RATE={0x10, 0x5, {0xa3, 0x1, 0x9, 0x1, 0x6afe, 0xba51}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x8, 0x0, 0x7, 0x80000000, 0x5b}}, @TCA_CBQ_RATE={0x10, 0x5, {0x52, 0x2, 0x4, 0x9, 0x6, 0x3}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x4e6fce67, 0x275, 0xfffff9bf, 0xf68, 0x6, 0x6, 0x8, 0x2, 0xf84c, 0x6, 0x6f, 0x8, 0x8, 0x0, 0x3, 0x5, 0x9, 0xcf81, 0x8, 0x7fff, 0x4, 0xffffffce, 0x5, 0x0, 0x7963, 0x8, 0xd4, 0x0, 0x9, 0x200, 0x68, 0x8, 0x3, 0x40000000, 0x9, 0x7, 0xd653, 0x4, 0x9, 0x1, 0x8, 0x6, 0x5b36, 0x6, 0x8, 0x4, 0x1000, 0x10001, 0x8, 0x5, 0xa, 0x3, 0x100, 0x2, 0x9, 0x7fff, 0x3, 0x2, 0x0, 0x9, 0x4, 0x2, 0x7ff, 0x3, 0x8, 0x80, 0x0, 0x800, 0x2, 0x10001, 0xffffffff, 0x3, 0x10000, 0x4, 0x9, 0x800, 0x6, 0x3, 0x2, 0xfffff000, 0x80000000, 0x7, 0x0, 0x6, 0x6, 0x100, 0x4, 0x6, 0x0, 0x4, 0x200, 0x9, 0x49, 0x8, 0x933, 0xfffffffe, 0xc4fb, 0xfff, 0x7, 0x4, 0x5, 0x0, 0xd6, 0xc, 0x0, 0xd6ac, 0x3, 0x7fffffff, 0x9, 0x7fff, 0x3, 0x6, 0x4, 0x74f2, 0x6, 0x9, 0x3, 0x3, 0x3a, 0x7fffffff, 0x0, 0x200, 0x1, 0xfffffffe, 0x8, 0xf, 0x2, 0x1, 0x2, 0x6e, 0xfffffffa, 0x6, 0x401, 0x7, 0xc, 0x1f1880, 0x5, 0x2, 0x9, 0x80000000, 0xffffff7f, 0x3, 0x9, 0x3, 0x6, 0xffffffff, 0x6, 0x20000000, 0x0, 0x0, 0x6f35, 0xa7, 0x80, 0x95, 0x6, 0x200, 0x9, 0x0, 0x1c0, 0xc, 0x9, 0x6, 0x3, 0x123, 0x8, 0x2, 0xffffffff, 0x5, 0x9, 0x80, 0xfffffffe, 0x3, 0x4, 0x82, 0x881, 0xce, 0x5, 0x0, 0x7, 0x4, 0xffffff25, 0x8, 0x18, 0x7f, 0xe, 0x6, 0x5, 0x200, 0x2, 0x7ff, 0x80, 0x8, 0x244, 0x101, 0x5, 0x5f, 0x5, 0x10001, 0x4, 0xa, 0xfff, 0x7f, 0x6, 0x0, 0x0, 0xffffffff, 0x1800000, 0x25, 0xfffffff8, 0x5, 0x9, 0xd7bf, 0x5, 0x0, 0x8, 0x2f2, 0xff, 0x9, 0x31810f23, 0x8, 0xfff, 0x385, 0x8, 0x3, 0x5, 0x40, 0xc0, 0x1, 0x4, 0x4, 0x7, 0x56c, 0x8, 0x7, 0x81, 0x553, 0x7, 0x4, 0x4, 0x8001, 0xffffffff, 0x8, 0x0, 0x3, 0x0, 0x80000001, 0x2, 0x1fa4, 0x1, 0x1000, 0xfff, 0x4, 0x21e2, 0x7, 0x3ff, 0x2]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1c, 0x2, 0x1e, 0x7, 0x79, 0x1, 0x6, 0x400}}]}}, @c_atm={{0x8}, {0xbc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x1d, 0x3, "931f66f3a1018247fe1d669df6a4b40f4deb5502efaec4409e"}, @TCA_ATM_HDR={0x3b, 0x3, "7a2bd9e82865aad2babd3779d9b598992105c449c1b991e95bfb1ad22ab2668f07ab40f644260d972580e1cc6cbf45880ab34bb6272c1c"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0xb}}, @TCA_ATM_HDR={0x44, 0x3, "ed7a42787057c00c7a622003d8e3ac079b776423d1f095de344f4448fa9f9d7343dd953c18b0acd9ac18d7cd37b43d2d6622231eabbe720d35cd22a495b8aae8"}, @TCA_ATM_FD={0x8, 0x1, r2}]}}, @c_cbq={{0x8}, {0x4b0, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x1, 0xe, 0x9, 0x6, 0x0, 0x2, 0x133d}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x2, 0x8000, 0x2, 0x28fa}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x23, 0x3, 0x2, 0x0, 0x0, 0x5, 0xe38, 0x1ff}}, @TCA_CBQ_RATE={0x10, 0x5, {0x50, 0x1, 0x70e, 0xb, 0x9, 0xffff}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xf, 0x3, 0x16, 0x9, 0x6, 0x96, 0x0, 0x251}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff3, 0x3}, 0x8, 0x28000}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0xffe0}, 0x8, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x2, 0x10, 0xc27f, 0x830e, 0x800}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x8, 0x9, 0x3, 0x5, 0x4}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x6, 0x8, 0x89, 0x2, 0x2, 0x4, 0x5, 0xa, 0x0, 0x168a, 0x10001, 0x0, 0x6, 0xf0, 0xc5a, 0x7, 0x2, 0x9, 0x0, 0xfffffffc, 0x180000, 0x3c0, 0x1, 0x2, 0xff, 0x800, 0x80000000, 0x0, 0xf7d, 0x6, 0xb4e, 0x0, 0x1, 0x100, 0x7ff, 0xfffffffb, 0x2, 0x7fffffff, 0x9, 0x2, 0x8, 0x7, 0x0, 0x3, 0xc, 0x80000000, 0x2, 0x7fffffff, 0x2, 0x80000001, 0x80000001, 0x80000001, 0x873c, 0xf1, 0x9, 0x10000, 0x1000, 0x924, 0x0, 0xa, 0xb3f, 0x3, 0x0, 0x8, 0xfffffffd, 0x5, 0x40, 0x0, 0x31e, 0x800, 0x101, 0x7, 0xd5dd, 0x7, 0x4, 0xff, 0x5, 0xffffffff, 0x80000000, 0x7, 0x6, 0x8, 0x3, 0x0, 0x5, 0x40, 0xffffffff, 0x81, 0x1, 0x4, 0x7, 0x50, 0x800, 0xbf1, 0x6, 0x8, 0x5ff10163, 0x3, 0xb, 0x7, 0x3ff, 0x6, 0x7, 0x101, 0x4, 0x7, 0xffc00000, 0x6, 0x2, 0x9, 0x5, 0x9, 0x6, 0x8699, 0xef, 0x7, 0x3ff, 0x5, 0x7, 0x400, 0x3, 0x0, 0x6, 0xfffffe01, 0x81, 0x6124, 0x10001, 0x2, 0x3, 0xff, 0xe28, 0x4, 0x1ff8, 0xfff, 0x0, 0x6, 0x400, 0x3, 0x4, 0x80000001, 0x7, 0x1, 0xffff, 0x101, 0xff, 0xfffffffd, 0x4, 0x80000001, 0x4, 0x9, 0x7, 0x3, 0x1c0, 0xe, 0x4, 0x3, 0xfffffff4, 0x5, 0x80000000, 0x2d, 0x2, 0x9, 0x9, 0xb, 0xe, 0x7, 0xff, 0x5, 0x3, 0x6, 0x3, 0x4, 0x5, 0x2e, 0x4, 0x77, 0x7, 0x800, 0x6, 0x5, 0x66, 0x81, 0x9, 0x1, 0x8c, 0x5, 0xfffffffc, 0x1, 0x2, 0x8000, 0x2, 0xd, 0x2, 0x9, 0x24, 0x5, 0x800, 0x0, 0x80, 0x4fca, 0x1ff, 0x5, 0xfffffffb, 0x8, 0x2, 0x6, 0x1, 0x80000001, 0x9, 0x18000000, 0x0, 0x3, 0xd, 0x200, 0x6, 0x763e, 0x18, 0x7, 0x8, 0x7, 0x6e9, 0xcaf, 0xdf62, 0xfffff46f, 0x6, 0x1, 0x48, 0x8, 0x432d, 0x274, 0xf2f, 0x5, 0x2b78, 0x7, 0x80, 0x6, 0x5, 0x8, 0x9, 0x1626, 0x401, 0x3, 0x8, 0x7fff, 0x4, 0xa63, 0x800, 0x7f, 0x1000, 0x401, 0x3aa5, 0x0, 0x400, 0x2, 0x7ff]}]}}]}, 0x1ac4}, 0x1, 0x0, 0x0, 0x800}, 0x24000001) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2800008, 0x4000010, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x4, 0x4) bind$alg(r5, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001c00)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r5, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000001e80)={0x10, 0x0, "b430fa8eb8de82eb5531b1483d217643"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000001e40)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001cc0)={0x1, 0x80000000}, 0x8) 8.275054088s ago: executing program 2 (id=3493): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x10, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) r1 = socket$inet(0x2, 0x80000, 0x7) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000025c0)=ANY=[@ANYBLOB="640000000206050000000000000000000a000004120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001800bd98a29992d2a781f3e6d5a907800c0001800800014000001c02050003000300000005000500020000000500010006000000ba863d5c5a49efe218087c0182e761924e891c41f75b841c8b3e835f24b20b3ffc06016c5dfb97cb"], 0x64}, 0x1, 0x0, 0x0, 0x20000845}, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000001740)) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x62, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$nl_route_sched_retired(r2, &(0x7f0000001d80)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000002680)=@newtclass={0x1ac4, 0x28, 0x10, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x5, 0xfff2}, {0xfff1, 0xb}, {0xd, 0xfff1}}, [@c_cbq={{0x8}, {0x83c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xffff18e3, 0x9, 0x4, 0x7, 0xf, 0x9, 0x7, 0x9c, 0x896, 0x3, 0x7ff, 0x2, 0xa69, 0x10001, 0x77eb, 0x1ff, 0x8d5, 0x0, 0x9, 0x42, 0x10000, 0x45, 0x9, 0x1, 0xc, 0x0, 0xff800000, 0x4, 0x2, 0x7, 0x8, 0xf52, 0x1, 0x0, 0x4, 0x1, 0x40, 0x7, 0x1, 0x601, 0x9, 0x1, 0xfc, 0xba, 0x8001, 0x5, 0x40, 0x80000000, 0x1, 0x2, 0x8, 0x2fb, 0x4, 0xe5e2, 0x2, 0x1b7e, 0x5e14, 0xffff, 0x9, 0x3, 0x9, 0x4, 0x53, 0xffff, 0x10000, 0x5, 0x7, 0x54f6, 0x7, 0xd9c, 0xfffffffd, 0x7f9, 0xfffffcaa, 0xa5a, 0x8, 0x10001, 0x8, 0x6, 0xff, 0x80000001, 0x6, 0xe1b, 0x4, 0x5, 0x0, 0x4, 0x0, 0x358, 0x51b2, 0x9, 0x100, 0x8, 0x5, 0x2, 0x0, 0x8001, 0x7, 0x9, 0x3, 0x1bf, 0xffff0000, 0x1, 0x18, 0x54f, 0x7, 0xfe90, 0x1000, 0x956, 0x2, 0x1, 0x40, 0x1, 0x101, 0x4, 0x4, 0x2, 0x3, 0x0, 0x4, 0x40, 0x7, 0xffffffff, 0x240, 0x7, 0x7, 0x9, 0x7, 0xfffffff7, 0x101, 0x5, 0xd097, 0x5, 0x2, 0x80000001, 0x2, 0x3, 0x8, 0xf, 0x0, 0x5e, 0x8, 0x9, 0x8, 0x7, 0x7fffffff, 0x4, 0x5, 0x6, 0x1, 0x5, 0x8, 0x2, 0xae78, 0x6, 0x0, 0x1, 0x0, 0x8, 0xfffff000, 0x81, 0xa60, 0x25, 0x2, 0x2, 0x3, 0xfffffff4, 0x3, 0x101, 0x6, 0x0, 0x2, 0x80, 0x5, 0x0, 0xe, 0x3, 0x3, 0x5, 0x800, 0x7, 0x8, 0x9, 0x7fff, 0x2, 0x6, 0x4, 0xc13, 0x9, 0x2, 0x8, 0x316, 0x7, 0xb0, 0x0, 0x7, 0xa, 0x7a, 0xc73c, 0x9, 0x800, 0x2, 0xff, 0x0, 0x6, 0x10000, 0x5, 0x4, 0x4, 0x7fffffff, 0x7fff, 0x9, 0xf, 0x1, 0x1, 0xffffffff, 0x1, 0x1, 0x7, 0x5, 0xffff0000, 0xef, 0x1000, 0x5, 0x9, 0x8001, 0xb, 0x2, 0x10001, 0xc40, 0x5182, 0x1, 0x1, 0x6, 0xfffffffd, 0x8, 0xae, 0x8, 0x3, 0x4, 0x4, 0xa6c0, 0x32, 0x5, 0xffffffff, 0x5, 0x2, 0x0, 0x0, 0x40, 0x6, 0x7, 0xc00000, 0x3, 0x9, 0x49, 0x9]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x14cf, 0x2, 0x9, 0x0, 0x8000, 0x3, 0x48800, 0x8090, 0x40, 0xfffffff1, 0x3, 0x6, 0xc3, 0x7, 0x5, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0x6, 0x7, 0x1, 0x8, 0xb5, 0x1, 0x7, 0x3, 0xfffffffd, 0x400, 0xa, 0x8, 0x10000, 0xfffffffe, 0x9f, 0x7, 0xffffffff, 0x200, 0x1, 0x8, 0x3, 0x2, 0x1000, 0x2, 0x5, 0x9, 0x6, 0x1, 0x14ba, 0x9, 0xf, 0x9, 0x1, 0x4, 0xd, 0x7, 0x5, 0x10000, 0x400, 0x0, 0x3, 0x0, 0x400, 0xd5, 0x9, 0x1bb, 0x2d9, 0xc, 0x9d60, 0x3, 0x7fffffff, 0x4, 0x29a27a58, 0xe1, 0x6, 0xa, 0x9, 0x1, 0x4, 0x4, 0x1, 0x0, 0x5, 0x3ff, 0x44d, 0x0, 0x65, 0x5863, 0x0, 0x6, 0x8, 0x6, 0x10001, 0x3, 0x1, 0xffff0bd2, 0xd0, 0x2f6, 0x6, 0x0, 0x800, 0x49f4, 0x8, 0x8, 0xfffffffa, 0x6e5, 0x2, 0x3, 0x6, 0x50e2, 0x1, 0xfffffffc, 0x9, 0x0, 0x3, 0x3, 0x5f6a, 0x9, 0x8, 0x1ff, 0x0, 0x5d, 0x5, 0x7dd, 0x7fff, 0x80000001, 0x1, 0x7, 0x80, 0x7, 0x800, 0x1, 0x491, 0x5, 0x6, 0x7, 0x8, 0x287, 0x8, 0x6, 0x5, 0x800, 0x8, 0xd, 0x5d39, 0x2, 0x7, 0x6, 0x2, 0x5, 0x3b9, 0x7, 0x76b6615f, 0xc, 0xfe2c, 0x10001, 0x3, 0x4, 0x6, 0x9b, 0x2, 0x1, 0x0, 0x5, 0x2, 0x4, 0xfffff41a, 0x3, 0xffffffff, 0x31, 0xff, 0xd, 0x8, 0x8, 0xffffffff, 0x80000001, 0x6, 0xfffffffb, 0x5, 0x5, 0x3, 0x3, 0x1, 0x8c31, 0xffffffff, 0x0, 0x10000, 0x0, 0x3ff, 0x400, 0x1, 0xfffffffc, 0x1, 0x3b, 0x2f740, 0x2, 0x1, 0xffffffff, 0x4, 0x5, 0xff4, 0x5, 0x0, 0x401, 0x4f7, 0x7, 0x80000000, 0xb2c, 0x7ff, 0xe2c2d9b, 0x6, 0x76, 0x4, 0x6, 0xfffffff8, 0x7, 0xc89, 0x120000, 0x80000, 0x26, 0x5, 0x6, 0x2, 0xa, 0xd, 0x5, 0xe4, 0x8f, 0x9, 0xe4, 0x2, 0xffff795a, 0xfffffffc, 0xfff, 0x3, 0xcf00, 0x6, 0x0, 0x8, 0x30b, 0x9, 0x9, 0x7ff, 0x7f, 0x0, 0x19, 0x2, 0x7, 0x8, 0x6, 0x9, 0x7fffffff, 0x6, 0x6, 0x9, 0x3, 0x3]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x1, 0x6}, 0xbf, 0x3}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x6, 0x80, 0x9, 0x5, 0x10001}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x6, 0x6, 0xf, 0x99, 0xcc4}}]}}, @c_atm={{0x8}, {0x48, 0x2, [@TCA_ATM_HDR={0x44, 0x3, "929738fa2b8cfc69e75f5b95bc61d504f39767ed6cef56752ad924ff0ae2afa9108c3bfc7d4d9f56b048093d102ddde4b7e44492189384b81db8675a809e2d05"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x38}}}, @c_cbq={{0x8}, {0xc70, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x2c, 0x1, 0x2, 0xca, 0x0, 0x8, 0x3, 0x6}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x8, 0x6, 0x6, 0xef9, 0xff, 0x8, 0x400, 0x8, 0xee2, 0x40, 0xfa, 0x7, 0x0, 0x81, 0x6, 0xb, 0x7fff, 0x6, 0x4, 0x8, 0xb1, 0xfffffffc, 0xffff, 0x9, 0x9, 0x6, 0x6, 0x8, 0x2, 0x2, 0x8, 0x8f09, 0xd, 0x3, 0x7, 0xac, 0x800, 0xc, 0xa7, 0x3, 0x0, 0x7f, 0x2, 0x7de, 0xff, 0x5, 0x8001, 0x4, 0x8000, 0x7, 0xf2f7, 0xffffffff, 0x3, 0x2, 0x6, 0x0, 0x3, 0x6, 0x4, 0x4788, 0xffff, 0x8001, 0x6, 0x8, 0x4, 0x79a5, 0x5c50ba37, 0x5, 0x9, 0xfff, 0x6, 0x7fffffff, 0x718, 0x1, 0x7, 0x5, 0x80000000, 0x8001, 0x3ea, 0x12be231e, 0x5, 0x9, 0xb7, 0x1, 0x0, 0x18a8, 0x61f, 0x1, 0xb, 0x10001, 0x100, 0x3, 0x6, 0xffffffc0, 0x6, 0x9, 0x6, 0x5, 0x8, 0xb46, 0x3, 0xc0000000, 0x5, 0x1, 0x2, 0xcbb, 0xfffffffc, 0x8, 0x9, 0x7, 0x8, 0x401, 0x17ff922f, 0x1, 0x9, 0x1, 0xb016, 0xb7c, 0x2, 0x5e34, 0x4, 0x6, 0x5, 0x3, 0x6, 0x1, 0x7, 0x5b19, 0x3, 0x4, 0x8, 0x9, 0xff, 0x1a9, 0x3, 0x3e, 0x7ff, 0x0, 0x9, 0x9, 0x2, 0xd73, 0x80, 0x5, 0x4e, 0x9, 0x101, 0x8, 0x0, 0x6, 0xc, 0x10000, 0x5, 0xfffffffb, 0x3, 0x7fffffff, 0x80000000, 0x5, 0x4d89cc29, 0xfffffffd, 0x5, 0x2, 0x20, 0x6, 0xffff0000, 0x3, 0x0, 0x3, 0x3, 0x9, 0x1, 0x2dab, 0x5, 0x7, 0xa8, 0x5, 0x401, 0xffffff01, 0x1, 0x2, 0x1, 0x0, 0x9, 0x29334d25, 0x2, 0xa9, 0x6, 0x2d9, 0xaee, 0xf9, 0x3af, 0xb, 0x4, 0x8, 0xc, 0x3, 0x4, 0x2, 0x0, 0x5, 0x6, 0x4, 0x6, 0x80000001, 0x81, 0xfffffffd, 0x7, 0x7, 0x4, 0xfffffffc, 0x9, 0xfffffede, 0x6, 0x0, 0x8000, 0x3, 0x84, 0x1, 0x101, 0x16a, 0x7, 0x5, 0xd, 0x80000000, 0x0, 0xef32, 0x80, 0x5f, 0x80000000, 0x100, 0x6, 0x6, 0x3, 0x6, 0x800, 0x3, 0x4, 0x0, 0x5113, 0xf, 0x4, 0x7fff, 0x7, 0x4, 0x41e, 0x4, 0x6, 0x4, 0x1ff, 0x80, 0x2, 0x3d, 0x7, 0x2, 0xa66]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x400000, 0x2, 0x4, 0xff, 0x8001, 0x9, 0xbe14, 0x1ff, 0x0, 0x3, 0x4, 0x7, 0x6, 0x8, 0xd5, 0x7, 0x22, 0x8, 0x0, 0xfffffffa, 0x101, 0x7, 0x5f7, 0x0, 0x40, 0x8, 0x100, 0x93, 0x7, 0x1, 0x6, 0x8001, 0x6, 0x6, 0x5, 0x0, 0x0, 0x5, 0x7, 0xb, 0xa62b, 0x4, 0x9, 0xffffffff, 0x101, 0xa, 0x6, 0x81, 0xe, 0x0, 0x101, 0x4, 0x5, 0x5, 0x2, 0xcfaa, 0x4074c86b, 0x7ff, 0x6, 0x8, 0x80000000, 0x341170bd, 0x9, 0x6e, 0x8, 0x5, 0xfffffffe, 0x2, 0x80, 0x8, 0x4, 0x10, 0xce0000, 0xc498, 0xff, 0x5, 0x0, 0x9, 0x7, 0x5, 0xd, 0x8, 0x3, 0x5, 0x7, 0x2, 0x1, 0xfffffff7, 0xffffff61, 0x9, 0x8, 0x9b, 0xcf, 0x3, 0xffffff51, 0x1416, 0x8, 0x3ff, 0x5, 0x9, 0x8, 0x10, 0x2, 0xcb6, 0x0, 0x80000001, 0x7, 0xf256, 0x600, 0xe2, 0x2, 0x10, 0x0, 0x7f, 0x3, 0x2, 0x8001, 0x7e9, 0x4, 0x0, 0x9, 0x12fa, 0x6, 0x0, 0xffffffff, 0xb3e5, 0x4, 0x5, 0xd, 0x200, 0x10000, 0x7, 0x2, 0xe9e0, 0x1, 0x7, 0x7f, 0x2, 0x1000, 0x4, 0x5, 0x0, 0x7, 0x5, 0x5, 0xb31, 0x0, 0x9, 0x2, 0x2, 0xe5, 0x9, 0x8, 0x1, 0x8, 0xb, 0xfa20, 0x401, 0x7, 0x66de9161, 0x4, 0xfffffe01, 0x7f, 0x3, 0x560, 0x1ff, 0x8f, 0x0, 0xfffffb4c, 0x5c5e, 0x6, 0xffff, 0x37, 0x6, 0x5, 0x7, 0x2, 0x8000, 0x2, 0x9, 0x3cf650d2, 0x26e, 0x4, 0xc384, 0x2, 0x10000, 0x348, 0x4, 0x5, 0x0, 0x80000001, 0x5, 0x5, 0x7c957699, 0x3, 0x5, 0x8000, 0x7fffffff, 0x2c7dc305, 0x0, 0x30663798, 0xfffffff6, 0xffffafe9, 0x8, 0x10000, 0x5, 0x72, 0xfffff014, 0x8536, 0x5, 0x7, 0x1, 0x9, 0x7ff, 0xffff, 0xc, 0x4, 0xcd, 0x7, 0x5, 0x4, 0x40, 0x7, 0x6, 0x8, 0xbd7, 0x9, 0xfffffffa, 0x6, 0xfffff0f0, 0x21, 0x9, 0x10, 0x7fffffff, 0x7f, 0x5, 0x929, 0x401, 0xa9f, 0x81, 0x5, 0x8, 0x3, 0x1, 0x8001, 0x7f, 0x7, 0xd, 0x7fff, 0x42dd, 0x1, 0x80000, 0x1, 0x7, 0x1]}, @TCA_CBQ_RATE={0x10, 0x5, {0xa3, 0x1, 0x9, 0x1, 0x6afe, 0xba51}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x8, 0x0, 0x7, 0x80000000, 0x5b}}, @TCA_CBQ_RATE={0x10, 0x5, {0x52, 0x2, 0x4, 0x9, 0x6, 0x3}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x4e6fce67, 0x275, 0xfffff9bf, 0xf68, 0x6, 0x6, 0x8, 0x2, 0xf84c, 0x6, 0x6f, 0x8, 0x8, 0x0, 0x3, 0x5, 0x9, 0xcf81, 0x8, 0x7fff, 0x4, 0xffffffce, 0x5, 0x0, 0x7963, 0x8, 0xd4, 0x0, 0x9, 0x200, 0x68, 0x8, 0x3, 0x40000000, 0x9, 0x7, 0xd653, 0x4, 0x9, 0x1, 0x8, 0x6, 0x5b36, 0x6, 0x8, 0x4, 0x1000, 0x10001, 0x8, 0x5, 0xa, 0x3, 0x100, 0x2, 0x9, 0x7fff, 0x3, 0x2, 0x0, 0x9, 0x4, 0x2, 0x7ff, 0x3, 0x8, 0x80, 0x0, 0x800, 0x2, 0x10001, 0xffffffff, 0x3, 0x10000, 0x4, 0x9, 0x800, 0x6, 0x3, 0x2, 0xfffff000, 0x80000000, 0x7, 0x0, 0x6, 0x6, 0x100, 0x4, 0x6, 0x0, 0x4, 0x200, 0x9, 0x49, 0x8, 0x933, 0xfffffffe, 0xc4fb, 0xfff, 0x7, 0x4, 0x5, 0x0, 0xd6, 0xc, 0x0, 0xd6ac, 0x3, 0x7fffffff, 0x9, 0x7fff, 0x3, 0x6, 0x4, 0x74f2, 0x6, 0x9, 0x3, 0x3, 0x3a, 0x7fffffff, 0x0, 0x200, 0x1, 0xfffffffe, 0x8, 0xf, 0x2, 0x1, 0x2, 0x6e, 0xfffffffa, 0x6, 0x401, 0x7, 0xc, 0x1f1880, 0x5, 0x2, 0x9, 0x80000000, 0xffffff7f, 0x3, 0x9, 0x3, 0x6, 0xffffffff, 0x6, 0x20000000, 0x0, 0x0, 0x6f35, 0xa7, 0x80, 0x95, 0x6, 0x200, 0x9, 0x0, 0x1c0, 0xc, 0x9, 0x6, 0x3, 0x123, 0x8, 0x2, 0xffffffff, 0x5, 0x9, 0x80, 0xfffffffe, 0x3, 0x4, 0x82, 0x881, 0xce, 0x5, 0x0, 0x7, 0x4, 0xffffff25, 0x8, 0x18, 0x7f, 0xe, 0x6, 0x5, 0x200, 0x2, 0x7ff, 0x80, 0x8, 0x244, 0x101, 0x5, 0x5f, 0x5, 0x10001, 0x4, 0xa, 0xfff, 0x7f, 0x6, 0x0, 0x0, 0xffffffff, 0x1800000, 0x25, 0xfffffff8, 0x5, 0x9, 0xd7bf, 0x5, 0x0, 0x8, 0x2f2, 0xff, 0x9, 0x31810f23, 0x8, 0xfff, 0x385, 0x8, 0x3, 0x5, 0x40, 0xc0, 0x1, 0x4, 0x4, 0x7, 0x56c, 0x8, 0x7, 0x81, 0x553, 0x7, 0x4, 0x4, 0x8001, 0xffffffff, 0x8, 0x0, 0x3, 0x0, 0x80000001, 0x2, 0x1fa4, 0x1, 0x1000, 0xfff, 0x4, 0x21e2, 0x7, 0x3ff, 0x2]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1c, 0x2, 0x1e, 0x7, 0x79, 0x1, 0x6, 0x400}}]}}, @c_atm={{0x8}, {0xbc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x1d, 0x3, "931f66f3a1018247fe1d669df6a4b40f4deb5502efaec4409e"}, @TCA_ATM_HDR={0x3b, 0x3, "7a2bd9e82865aad2babd3779d9b598992105c449c1b991e95bfb1ad22ab2668f07ab40f644260d972580e1cc6cbf45880ab34bb6272c1c"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0xb}}, @TCA_ATM_HDR={0x44, 0x3, "ed7a42787057c00c7a622003d8e3ac079b776423d1f095de344f4448fa9f9d7343dd953c18b0acd9ac18d7cd37b43d2d6622231eabbe720d35cd22a495b8aae8"}, @TCA_ATM_FD={0x8, 0x1, r2}]}}, @c_cbq={{0x8}, {0x4b0, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x1, 0xe, 0x9, 0x6, 0x0, 0x2, 0x133d}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x2, 0x8000, 0x2, 0x28fa}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x23, 0x3, 0x2, 0x0, 0x0, 0x5, 0xe38, 0x1ff}}, @TCA_CBQ_RATE={0x10, 0x5, {0x50, 0x1, 0x70e, 0xb, 0x9, 0xffff}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xf, 0x3, 0x16, 0x9, 0x6, 0x96, 0x0, 0x251}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff3, 0x3}, 0x8, 0x28000}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0xffe0}, 0x8, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x2, 0x10, 0xc27f, 0x830e, 0x800}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x8, 0x9, 0x3, 0x5, 0x4}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x6, 0x8, 0x89, 0x2, 0x2, 0x4, 0x5, 0xa, 0x0, 0x168a, 0x10001, 0x0, 0x6, 0xf0, 0xc5a, 0x7, 0x2, 0x9, 0x0, 0xfffffffc, 0x180000, 0x3c0, 0x1, 0x2, 0xff, 0x800, 0x80000000, 0x0, 0xf7d, 0x6, 0xb4e, 0x0, 0x1, 0x100, 0x7ff, 0xfffffffb, 0x2, 0x7fffffff, 0x9, 0x2, 0x8, 0x7, 0x0, 0x3, 0xc, 0x80000000, 0x2, 0x7fffffff, 0x2, 0x80000001, 0x80000001, 0x80000001, 0x873c, 0xf1, 0x9, 0x10000, 0x1000, 0x924, 0x0, 0xa, 0xb3f, 0x3, 0x0, 0x8, 0xfffffffd, 0x5, 0x40, 0x0, 0x31e, 0x800, 0x101, 0x7, 0xd5dd, 0x7, 0x4, 0xff, 0x5, 0xffffffff, 0x80000000, 0x7, 0x6, 0x8, 0x3, 0x0, 0x5, 0x40, 0xffffffff, 0x81, 0x1, 0x4, 0x7, 0x50, 0x800, 0xbf1, 0x6, 0x8, 0x5ff10163, 0x3, 0xb, 0x7, 0x3ff, 0x6, 0x7, 0x101, 0x4, 0x7, 0xffc00000, 0x6, 0x2, 0x9, 0x5, 0x9, 0x6, 0x8699, 0xef, 0x7, 0x3ff, 0x5, 0x7, 0x400, 0x3, 0x0, 0x6, 0xfffffe01, 0x81, 0x6124, 0x10001, 0x2, 0x3, 0xff, 0xe28, 0x4, 0x1ff8, 0xfff, 0x0, 0x6, 0x400, 0x3, 0x4, 0x80000001, 0x7, 0x1, 0xffff, 0x101, 0xff, 0xfffffffd, 0x4, 0x80000001, 0x4, 0x9, 0x7, 0x3, 0x1c0, 0xe, 0x4, 0x3, 0xfffffff4, 0x5, 0x80000000, 0x2d, 0x2, 0x9, 0x9, 0xb, 0xe, 0x7, 0xff, 0x5, 0x3, 0x6, 0x3, 0x4, 0x5, 0x2e, 0x4, 0x77, 0x7, 0x800, 0x6, 0x5, 0x66, 0x81, 0x9, 0x1, 0x8c, 0x5, 0xfffffffc, 0x1, 0x2, 0x8000, 0x2, 0xd, 0x2, 0x9, 0x24, 0x5, 0x800, 0x0, 0x80, 0x4fca, 0x1ff, 0x5, 0xfffffffb, 0x8, 0x2, 0x6, 0x1, 0x80000001, 0x9, 0x18000000, 0x0, 0x3, 0xd, 0x200, 0x6, 0x763e, 0x18, 0x7, 0x8, 0x7, 0x6e9, 0xcaf, 0xdf62, 0xfffff46f, 0x6, 0x1, 0x48, 0x8, 0x432d, 0x274, 0xf2f, 0x5, 0x2b78, 0x7, 0x80, 0x6, 0x5, 0x8, 0x9, 0x1626, 0x401, 0x3, 0x8, 0x7fff, 0x4, 0xa63, 0x800, 0x7f, 0x1000, 0x401, 0x3aa5, 0x0, 0x400, 0x2, 0x7ff]}]}}]}, 0x1ac4}, 0x1, 0x0, 0x0, 0x800}, 0x24000001) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2800008, 0x4000010, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x4, 0x4) bind$alg(r5, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001c00)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x18}], 0x30, 0x40001}], 0x1, 0x8004) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000001e80)={0x10, 0x0, "b430fa8eb8de82eb5531b1483d217643"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000001e40)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001cc0)={0x1, 0x80000000}, 0x8) 7.844433653s ago: executing program 4 (id=3494): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@private2, 0x0, r3}) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e20, 0x9, @private1, 0x7ff}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r4) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000091) connect$can_bcm(r5, &(0x7f0000000480), 0x10) connect(r5, &(0x7f00000004c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-arm64\x00'}, 0x80) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x50, 0x40800}}], 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) gettid() socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e6400000000", @ANYRES16=r4], 0x3c}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x839e46d2, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x8000) 5.572319978s ago: executing program 32 (id=3445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES64, @ANYBLOB="a913ca84ab392b2bb8e07c65bcc382ef29ce640dc2e619c3be01c9e48ec318d57f3716ab1b267a7f16091a60900971a13d52891bfc8d8d2691c984a519b60ec2e6567bef8466346e61b7069a8fcf6d7b26799ccd8e99db7fee872ff4e1a8ab94cbc43fd2f8eb57af68780b", @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000017000000000000000064000100080026006c09000008000c006400000008000d0000000000050091006e000000"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x80000001}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x2, 0x7, 0x7fff}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xf565668f9c435a84}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r7) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd29, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x8, 0xfc, 0x4, 0x0, 0xc, 0x2200}, [@RTA_DST={0x8, 0x1, @remote}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x11b90d835fe1c228, 0xfb}}, @RTA_SPORT={0x6, 0x1c, 0x4e21}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r11 = socket(0x10, 0x803, 0x0) bind$netlink(r11, &(0x7f0000000680)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r12, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r13 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000800)={'bond0\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000880)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000c80)={0x3c, r15, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x10000}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000c0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newlink={0x4c, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x4008010) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.367952787s ago: executing program 3 (id=3496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1d, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000000880)=""/4121, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x409}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000010a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) close(0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000600)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.282408512s ago: executing program 0 (id=3497): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000001a640)={'netdevsim0\x00', &(0x7f000001a680)=@ethtool_rxfh={0x26, 0x6, 0x3, 0x4, 0x4, "c26c6f", 0x8001}}) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f000001a6c0), 0x4) recvmmsg(r1, &(0x7f000001a700)=[{{0x0, 0x0, &(0x7f000001a740)=[{&(0x7f000001a780)=""/96, 0x60}], 0x1}, 0x9}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r1, &(0x7f000001a800)={&(0x7f000001a840)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) sendmsg$can_raw(r1, &(0x7f000001a240)={0x0, 0x0, &(0x7f000001a880)={0x0}, 0x2}, 0x4048004) r2 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f000001a600)) r3 = bpf$MAP_CREATE(0x0, &(0x7f000001a2c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f000001a300)={0x6, 0xc, &(0x7f000001a3c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f000001a440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f000001a480)={{r3}, &(0x7f000001a4c0), &(0x7f000001a500)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f000001a540)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f000001a580)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x30, &(0x7f000001a8c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004508002200bb8a4ced01212a37896400000132905eac1e0001ffffffff000004d400531a7aa50721e5a6bcae7f4557bafa89ba57d6e5ac653b83286074da4a56d4e3ce95f5158897a3d476043f26ad9d5059b6f521906f35bb5cd02cce550a84ca478070f485b9fdf77942193b26fc4f"], 0x0) getsockopt(r2, 0x200000000114, 0x8, &(0x7f0000001200)=""/102394, &(0x7f000001a200)=0x18ffa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000041100000013000000010000000000000017000000020000040811000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8, 0x8000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 1.111918892s ago: executing program 2 (id=3498): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x2, 0x8001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000300)="23a9", 0x2}], 0x2, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000540)=0x3, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, 0x0, 0x8001) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x20000880) close(0x3) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff000000001d000000080003", @ANYRES32], 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 511.407396ms ago: executing program 3 (id=3499): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x80ffff}, 0x48) 366.081175ms ago: executing program 3 (id=3500): socket$inet(0xa, 0x3, 0x84) syz_80211_inject_frame(0x0, 0x0, 0x31) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f0000000380)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @device_b, @from_mac, {0x1, 0x8}}, @a_msdu=[{@device_b, @broadcast, 0x5d, "3082abb20f7cf1d7f212724930e50803a6f8a23738a1f02318ff97e1e58f05a352f04c2258e4976ad44a8d30e6e9b2b69e78a4a5edf2f262e4457ea4235c400869fd8d501e00941140c5aa1d74255a972699fed4776fd6783bc0f3cadb"}, {@device_a, @device_a, 0xc9, "a4e346b7e38a2cb0e19fdaee0c8c6b614363772178db024de59b494269b54414fd394ec71a1d884ce2dd43b0af8851f48f20bb2a65359c1c3e22c913420eb7340abf452c37a78be28ca7673ca500c7767ee741149a0770ea300c088e8cbe9a9ea31cc794c5a92e33c67ee10d5d3be0815e4dabfdf3a01d2aceaa38012c6c46d008a130465258fcc02a281c8969f213c139a6f1c9823450ab113e423a482dc51afd41f77ccb530e662820b5ab968f5a9bf39b72250fb00b77c125f2fb0cb2942436e1a54b2d1731517a"}, {@device_a, @device_a, 0x67, "eddb8511e63655a75a0408ca5151c4673f2fd33888ecf86919fc61e5948efcd8fdd97ff69d6792cf1c8a12c0c0ae6ae7701a0085cac5f6e38dfcc63d66866913ae56b6ea3c161b4881f98b6fa3ced492203c776d8c97372931d288d7cb6d5c98462d314fb327a8"}]}, 0x1d4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000200)={&(0x7f0000000580)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)="8000e86503000013", 0x8}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r4], 0x30}, 0x4004000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x48, r6, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) 346.867273ms ago: executing program 4 (id=3501): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000)='bridge0\x00', 0xa01c0, &(0x7f0000000040)={@align=0x9, {0x8, 0x9, 0x7, 0x63}}, 0x81, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000140)=0x5}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0xe95}], 0x1, 0x8000, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x8001}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x90, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_U32_SEL={0x84, 0x5, {0xb, 0x1, 0x7, 0x0, 0x0, 0xcc, 0x4, 0x1, [{0x1, 0x0, 0xf82, 0x101}, {0x6, 0x1, 0x1, 0xc}, {0x4, 0xfffffffe, 0x2, 0x1}, {0x3, 0x5, 0x1, 0xfffffff1}, {0x9, 0x3, 0xfffffff9, 0x2}, {0xedf5, 0xc, 0x2, 0xffff}, {0x0, 0x0, 0x81, 0x8}]}}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc40a0}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f0000000640)="d5c8ff6eab89668b92560d36229649c66133239de53313bfc5ed95dcd40f00ee8e648a24ca30db88e5442f1ca0bca540a12a5cd0", &(0x7f0000000680)=""/6, &(0x7f00000006c0)="7dad71a64d21", &(0x7f0000000700)="c907213a362ee0294540bcc302921d86f67096fa4905044960345cf069935300ede302df0ad556c4e0e84acee9fca1a616995e8e9ca60b03f06b52f8b98bf45fa24c0c40e76d755c651b8a1a4a361d81decb1bd5ef02ef7f6dc5e3bdb3dc363b12537e971b0b3afd6bfb3d20f75f8ae7af7d9fb01e8ab3e12fdf3f5335195b66e2b9", 0x5, r0, 0x4}, 0x38) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 330.180888ms ago: executing program 0 (id=3502): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016f80200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 0s ago: executing program 0 (id=3503): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000000414cf0000008900000000000800010000000000"], 0x18}}, 0x0) kernel console output (not intermixed with test programs): 0000 R09: 0000000000000000 [ 414.684287][T15872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.684298][T15872] R13: 00007fc17ee26128 R14: 00007fc17ee26090 R15: 00007ffcd5ecd628 [ 414.684331][T15872] [ 414.767580][T15877] net_ratelimit: 4522 callbacks suppressed [ 414.767600][T15877] netlink: zone id is out of range [ 414.767609][T15877] netlink: zone id is out of range [ 414.767617][T15877] netlink: zone id is out of range [ 414.767624][T15877] netlink: zone id is out of range [ 414.767632][T15877] netlink: zone id is out of range [ 414.767640][T15877] netlink: zone id is out of range [ 414.767651][T15877] netlink: zone id is out of range [ 414.767659][T15877] netlink: zone id is out of range [ 414.767666][T15877] netlink: zone id is out of range [ 414.767674][T15877] netlink: zone id is out of range [ 415.067945][T15880] syzkaller1: entered promiscuous mode [ 415.067966][T15880] syzkaller1: entered allmulticast mode [ 415.192497][ T52] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 415.194457][ T52] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 415.355125][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2582'. [ 415.475315][T15898] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2584'. [ 415.553603][T15898] syzkaller0: entered promiscuous mode [ 415.553627][T15898] syzkaller0: entered allmulticast mode [ 415.692493][T15906] syzkaller0: entered promiscuous mode [ 415.692517][T15906] syzkaller0: entered allmulticast mode [ 415.964490][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2589'. [ 415.964847][T15913] 8021q: VLANs not supported on ip6gre0 [ 416.491233][ T52] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 416.492780][ T52] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 416.703431][T15950] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2599'. [ 416.731106][T15949] syzkaller0: entered promiscuous mode [ 416.731160][T15949] syzkaller0: entered allmulticast mode [ 416.739461][T15950] syzkaller0: entered promiscuous mode [ 416.739520][T15950] syzkaller0: entered allmulticast mode [ 418.057238][T15995] FAULT_INJECTION: forcing a failure. [ 418.057238][T15995] name failslab, interval 1, probability 0, space 0, times 0 [ 418.057309][T15995] CPU: 0 UID: 0 PID: 15995 Comm: syz.4.2612 Not tainted syzkaller #0 PREEMPT(full) [ 418.057331][T15995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 418.057342][T15995] Call Trace: [ 418.057350][T15995] [ 418.057358][T15995] dump_stack_lvl+0xe8/0x150 [ 418.057391][T15995] should_fail_ex+0x410/0x560 [ 418.057420][T15995] should_failslab+0xa8/0x100 [ 418.057445][T15995] ? dst_alloc+0x105/0x170 [ 418.057563][T15995] kmem_cache_alloc_noprof+0xa1/0x600 [ 418.057586][T15995] ? __pfx_find_exception+0x10/0x10 [ 418.057684][T15995] ? dst_alloc+0x105/0x170 [ 418.057704][T15995] ? fib_lookup+0x76/0x440 [ 418.057728][T15995] dst_alloc+0x105/0x170 [ 418.057751][T15995] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 418.057787][T15995] ? ip_route_output_key_hash+0xd8/0x2a0 [ 418.057810][T15995] ip_route_output_key_hash+0x18d/0x2a0 [ 418.057832][T15995] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 418.057863][T15995] ? call_rcu+0x64d/0x8b0 [ 418.057885][T15995] ? lockdep_hardirqs_on+0x7b/0x110 [ 418.057917][T15995] ip_route_output_flow+0x2a/0x150 [ 418.057939][T15995] ? security_sk_classify_flow+0x6d/0x150 [ 418.058020][T15995] tcp_v4_connect+0x93f/0x1b20 [ 418.058121][T15995] ? __pfx_tcp_v4_connect+0x10/0x10 [ 418.058146][T15995] ? __pfx_tcp_v6_connect+0x10/0x10 [ 418.058230][T15995] ? tcp_v6_connect+0x7cd/0x1e60 [ 418.058258][T15995] tcp_v6_connect+0xe10/0x1e60 [ 418.058293][T15995] ? __lock_acquire+0x747/0x2de0 [ 418.058322][T15995] ? __pfx_tcp_v6_connect+0x10/0x10 [ 418.058360][T15995] __inet_stream_connect+0x258/0xe00 [ 418.058417][T15995] ? do_raw_spin_lock+0x12b/0x2f0 [ 418.058447][T15995] ? __pfx___inet_stream_connect+0x10/0x10 [ 418.058476][T15995] ? inet_stream_connect+0x51/0xa0 [ 418.058503][T15995] ? __local_bh_enable_ip+0xd6/0x140 [ 418.058531][T15995] inet_stream_connect+0x66/0xa0 [ 418.058559][T15995] __sys_connect+0x316/0x450 [ 418.058586][T15995] ? __pfx___sys_connect+0x10/0x10 [ 418.058622][T15995] ? __pfx_ksys_write+0x10/0x10 [ 418.058649][T15995] __x64_sys_connect+0x7a/0x90 [ 418.058674][T15995] do_syscall_64+0x166/0x520 [ 418.058697][T15995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.058715][T15995] ? clear_bhb_loop+0x70/0xc0 [ 418.058737][T15995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.058755][T15995] RIP: 0033:0x7fc17eb9f559 [ 418.058774][T15995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.058787][T15995] RSP: 002b:00007fc17fa87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 418.058806][T15995] RAX: ffffffffffffffda RBX: 00007fc17ee25fa0 RCX: 00007fc17eb9f559 [ 418.058819][T15995] RDX: 000000000000001c RSI: 0000200000000840 RDI: 0000000000000003 [ 418.058830][T15995] RBP: 00007fc17fa87090 R08: 0000000000000000 R09: 0000000000000000 [ 418.058840][T15995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.058851][T15995] R13: 00007fc17ee26038 R14: 00007fc17ee25fa0 R15: 00007ffcd5ecd628 [ 418.058881][T15995] [ 418.675861][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 418.701198][ T8211] dummy0: left promiscuous mode [ 418.734374][T16005] syzkaller0: entered promiscuous mode [ 418.734397][T16005] syzkaller0: entered allmulticast mode [ 419.013566][T16014] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2619'. [ 419.030257][T16009] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input92 [ 419.133441][T16018] netlink: 'syz.1.2620': attribute type 1 has an invalid length. [ 419.177348][ T52] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 419.177563][ T52] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 419.208238][T16018] 8021q: adding VLAN 0 to HW filter on device bond15 [ 419.311290][T16018] bond15: (slave veth29): Enslaving as an active interface with a down link [ 419.357774][T16021] bond15: (slave dummy0): making interface the new active one [ 419.368317][T16021] dummy0: entered promiscuous mode [ 419.368886][T16021] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 419.555853][T16029] xt_CT: No such helper "netbios-ns" [ 420.156185][T16059] syzkaller0: entered promiscuous mode [ 420.156208][T16059] syzkaller0: entered allmulticast mode [ 420.255912][T16065] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2630'. [ 420.413753][T16069] net_ratelimit: 4523 callbacks suppressed [ 420.413807][T16069] netlink: zone id is out of range [ 420.413816][T16069] netlink: zone id is out of range [ 420.413841][T16069] netlink: zone id is out of range [ 420.413848][T16069] netlink: zone id is out of range [ 420.413872][T16069] netlink: zone id is out of range [ 420.413879][T16069] netlink: zone id is out of range [ 420.413907][T16069] netlink: zone id is out of range [ 420.413915][T16069] netlink: zone id is out of range [ 420.413938][T16069] netlink: zone id is out of range [ 420.413946][T16069] netlink: zone id is out of range [ 420.487181][T16069] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2633'. [ 420.544993][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2632'. [ 420.546406][T16073] syzkaller0: entered promiscuous mode [ 420.546432][T16073] syzkaller0: entered allmulticast mode [ 421.066578][T16077] 8021q: adding VLAN 0 to HW filter on device bond15 [ 421.312592][T16096] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2636'. [ 421.338975][T16079] bond15: (slave veth27): Enslaving as an active interface with an up link [ 421.696784][T16109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2641'. [ 422.128848][T16126] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2645'. [ 422.805879][T16147] 8021q: adding VLAN 0 to HW filter on device bond16 [ 422.847087][T16147] bond16: (slave veth31): Enslaving as an active interface with an up link [ 422.945397][T16147] bond15: (slave dummy0): Releasing active interface [ 422.945437][T16147] dummy0: left promiscuous mode [ 423.029403][T16159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2652'. [ 423.051926][T16147] bond16: (slave dummy0): Enslaving as an active interface with an up link [ 423.259780][T16170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2657'. [ 423.495649][T16170] bond16: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 423.498397][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2657'. [ 423.502352][T16170] bond16 (unregistering): Released all slaves [ 424.097463][T16197] netlink: 'syz.0.2660': attribute type 1 has an invalid length. [ 424.323806][T16197] 8021q: adding VLAN 0 to HW filter on device bond16 [ 424.414480][T16202] bond16: (slave veth25): Enslaving as an active interface with a down link [ 424.432870][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2666'. [ 424.438831][T16197] bond16: (slave dummy0): making interface the new active one [ 424.461963][T16197] dummy0: entered promiscuous mode [ 424.463236][T16197] bond16: (slave dummy0): Enslaving as an active interface with an up link [ 424.487303][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2666'. [ 424.887695][T16226] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input93 [ 425.427535][T16241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2675'. [ 425.505687][T16241] bond17: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 425.527147][T16241] bond17 (unregistering): Released all slaves [ 425.637631][T16249] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input94 [ 425.657251][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2679'. [ 425.697462][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2675'. [ 425.894302][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2681'. [ 425.931254][ T298] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.931598][ T298] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.931662][ T298] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.084086][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2681'. [ 426.227839][T16281] xt_recent: Unsupported userspace flags (000000c5) [ 426.324377][T16280] netlink: 'syz.2.2682': attribute type 1 has an invalid length. [ 426.377807][T16280] 8021q: adding VLAN 0 to HW filter on device bond16 [ 426.671136][T16280] bond16: (slave veth29): Enslaving as an active interface with a down link [ 426.992662][T16298] net_ratelimit: 2256 callbacks suppressed [ 426.992710][T16298] netlink: zone id is out of range [ 426.992720][T16298] netlink: zone id is out of range [ 426.992750][T16298] netlink: zone id is out of range [ 426.992775][T16298] netlink: zone id is out of range [ 426.992783][T16298] netlink: zone id is out of range [ 426.992808][T16298] netlink: zone id is out of range [ 426.992819][T16298] netlink: zone id is out of range [ 426.992845][T16298] netlink: zone id is out of range [ 426.992853][T16298] netlink: zone id is out of range [ 426.992877][T16298] netlink: zone id is out of range [ 426.998686][T16298] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2688'. [ 427.193481][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2693'. [ 427.261224][T16306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2691'. [ 427.348527][T16306] bond21: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 427.352390][T16306] bond21 (unregistering): Released all slaves [ 428.179342][T16339] netlink: 'syz.1.2700': attribute type 1 has an invalid length. [ 428.323953][T16339] 8021q: adding VLAN 0 to HW filter on device bond17 [ 428.480320][T16341] bond17: (slave veth33): Enslaving as an active interface with a down link [ 428.963844][T16339] bond16: (slave dummy0): Releasing backup interface [ 429.004537][T16339] bond17: (slave dummy0): making interface the new active one [ 429.009844][T16339] dummy0: entered promiscuous mode [ 429.035202][T16339] bond17: (slave dummy0): Enslaving as an active interface with an up link [ 429.309179][T16365] bond21: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 429.408251][T16365] bond21 (unregistering): Released all slaves [ 429.702577][T16373] ipvlan2: entered allmulticast mode [ 429.702601][T16373] virt_wifi0: entered allmulticast mode [ 429.704150][T16373] batman_adv: batadv0: Adding interface: ipvlan2 [ 429.732371][T16373] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.767850][T16373] batman_adv: batadv0: Interface activated: ipvlan2 [ 430.407519][T16415] __nla_validate_parse: 5 callbacks suppressed [ 430.407540][T16415] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2719'. [ 430.408364][T16411] bond0: (slave gretap0): Opening slave failed [ 430.528692][T16417] netlink: 'syz.0.2720': attribute type 1 has an invalid length. [ 430.578147][T16417] 8021q: adding VLAN 0 to HW filter on device bond17 [ 430.910120][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2724'. [ 430.916623][T16417] bond17: (slave veth27): Enslaving as an active interface with a down link [ 430.948903][T16424] bond16: (slave dummy0): Releasing active interface [ 430.948955][T16424] dummy0: left promiscuous mode [ 430.991535][T16424] bond17: (slave dummy0): making interface the new active one [ 430.996288][T16424] dummy0: entered promiscuous mode [ 430.996904][T16424] bond17: (slave dummy0): Enslaving as an active interface with an up link [ 431.152873][T16438] syzkaller0: entered promiscuous mode [ 431.152931][T16438] syzkaller0: entered allmulticast mode [ 431.252197][ T52] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 431.257857][ T52] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 431.564460][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2732'. [ 431.731936][T16469] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2734'. [ 431.903167][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 431.905096][T16477] syzkaller0: entered promiscuous mode [ 431.905115][T16477] syzkaller0: entered allmulticast mode [ 432.076647][T16486] netlink: 'syz.0.2743': attribute type 32 has an invalid length. [ 432.123017][T16489] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input95 [ 432.171895][T16490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2743'. [ 432.237990][T16495] netlink: 'syz.0.2743': attribute type 21 has an invalid length. [ 432.238047][T16495] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2743'. [ 432.298545][T16495] netlink: 'syz.0.2743': attribute type 4 has an invalid length. [ 432.298569][T16495] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2743'. [ 432.959890][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'. [ 433.207042][T16542] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2754'. [ 433.290551][T16546] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input96 [ 434.454869][T16579] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input97 [ 434.572110][T16566] net_ratelimit: 4522 callbacks suppressed [ 434.572131][T16566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.960967][T16592] netlink: 'syz.2.2769': attribute type 6 has an invalid length. [ 435.006124][T16592] bond17 (unregistering): Released all slaves [ 435.359339][T16614] netlink: 'syz.1.2775': attribute type 6 has an invalid length. [ 435.400425][T16614] bond18 (unregistering): Released all slaves [ 435.627074][T16614] bond17: (slave dummy0): Releasing active interface [ 435.627119][T16614] dummy0: left promiscuous mode [ 436.710134][T16643] syzkaller0: entered promiscuous mode [ 436.710159][T16643] syzkaller0: entered allmulticast mode [ 436.794070][T16649] netlink: 'syz.3.2784': attribute type 1 has an invalid length. [ 436.856953][T16649] 8021q: adding VLAN 0 to HW filter on device bond21 [ 436.920183][T16649] bond21: (slave veth49): Enslaving as an active interface with a down link [ 436.956783][T16649] bond20: (slave dummy0): Releasing active interface [ 437.023536][T16649] bond21: (slave dummy0): making interface the new active one [ 437.028381][T16649] dummy0: entered promiscuous mode [ 437.037503][T16649] bond21: (slave dummy0): Enslaving as an active interface with an up link [ 437.163824][T16667] __nla_validate_parse: 1 callbacks suppressed [ 437.163946][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'. [ 438.783321][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2798'. [ 440.318395][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.318447][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.649487][ T8222] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 441.630508][T16693] batadv0: left promiscuous mode [ 441.630856][T16693] bridge0: port 3(batadv0) entered disabled state [ 441.659290][T16693] bridge_slave_1: left allmulticast mode [ 441.659316][T16693] bridge_slave_1: left promiscuous mode [ 441.660579][T16693] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.744167][T16693] bridge_slave_0: left allmulticast mode [ 441.744211][T16693] bridge_slave_0: left promiscuous mode [ 441.744595][T16693] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.094117][T16697] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 442.212877][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2804'. [ 442.237465][ T283] dummy0: left promiscuous mode [ 442.289513][T16721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2805'. [ 442.310815][T16721] batadv_slave_1: entered promiscuous mode [ 442.448448][T16725] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input98 [ 442.692465][T16719] batadv_slave_1: left promiscuous mode [ 444.443381][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2819'. [ 444.811998][T16782] netlink: 'syz.3.2823': attribute type 1 has an invalid length. [ 444.977466][T16786] gretap0: entered allmulticast mode [ 445.003901][T16786] bond22: (slave gretap0): making interface the new active one [ 445.010258][T16786] bond22: (slave gretap0): Enslaving as an active interface with an up link [ 445.605345][ T52] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 445.605577][ T52] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 445.658481][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2836'. [ 445.675938][T16812] openvswitch: netlink: Invalid VLAN frame [ 446.082263][T16832] syz.0.2839 (16832) used obsolete PPPIOCDETACH ioctl [ 446.675900][T16848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2844'. [ 447.218069][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2850'. [ 447.230052][T16864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2848'. [ 447.692346][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'. [ 447.853901][T16885] netlink: 'syz.3.2856': attribute type 1 has an invalid length. [ 447.865501][T16888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2859'. [ 447.874435][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2859'. [ 448.066389][T16898] netlink: 'syz.2.2860': attribute type 1 has an invalid length. [ 448.139789][T16898] 8021q: adding VLAN 0 to HW filter on device bond17 [ 448.167577][T16902] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2861'. [ 448.203944][T16898] bond17: (slave veth31): Enslaving as an active interface with a down link [ 448.231649][ T8212] dummy0: left promiscuous mode [ 448.582117][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 449.391565][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.397567][T16946] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2870'. [ 449.402500][T16946] openvswitch: netlink: Unexpected mask (mask=200240, allowed=210048) [ 449.403913][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2870'. [ 450.377130][T16974] netlink: 'syz.0.2878': attribute type 1 has an invalid length. [ 450.443097][T16974] 8021q: adding VLAN 0 to HW filter on device bond18 [ 450.603863][T16974] bond18: (slave veth29): Enslaving as an active interface with a down link [ 450.618543][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2880'. [ 450.642095][T16985] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2882'. [ 450.687654][T16978] bond17: (slave dummy0): Releasing active interface [ 450.844076][T16978] bond18: (slave dummy0): making interface the new active one [ 450.854985][T16978] dummy0: entered promiscuous mode [ 450.871567][T16978] bond18: (slave dummy0): Enslaving as an active interface with an up link [ 451.140007][T17003] openvswitch: netlink: Actions may not be safe on all matching packets [ 452.555029][T17041] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input99 [ 452.925289][T17066] __nla_validate_parse: 1 callbacks suppressed [ 452.925346][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2898'. [ 453.094507][T17055] syzkaller0: entered promiscuous mode [ 453.094533][T17055] syzkaller0: entered allmulticast mode [ 453.473083][T17079] x_tables: duplicate underflow at hook 3 [ 456.598103][T17067] syzkaller0: entered promiscuous mode [ 456.598128][T17067] syzkaller0: entered allmulticast mode [ 457.149283][T17104] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input100 [ 457.532044][T17113] netlink: 'syz.4.2909': attribute type 16 has an invalid length. [ 457.532067][T17113] netlink: 'syz.4.2909': attribute type 17 has an invalid length. [ 457.748374][T17113] 8021q: adding VLAN 0 to HW filter on device .` [ 457.938287][T17129] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2913'. [ 458.067106][T17113] ip6gre1: left allmulticast mode [ 458.354616][T17113] ip6gre2: left promiscuous mode [ 458.354639][T17113] ip6gre2: left allmulticast mode [ 458.415887][T17113] 8021q: adding VLAN 0 to HW filter on device bond6 [ 458.425776][T17113] veth17: left allmulticast mode [ 458.502991][T17113] bond11: left promiscuous mode [ 458.503013][T17113] bridge0: left promiscuous mode [ 458.517440][T17113] vlan0: left allmulticast mode [ 458.517461][T17113] bond11: left allmulticast mode [ 458.517474][T17113] bridge0: left allmulticast mode [ 458.530516][T17113] bond12: left allmulticast mode [ 458.530536][T17113] bond13: left allmulticast mode [ 458.534044][T17113] 8021q: adding VLAN 0 to HW filter on device bond12 [ 458.672993][T17113] syzkaller0: left promiscuous mode [ 458.673015][T17113] syzkaller0: left allmulticast mode [ 458.936003][ T50] bond0: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 458.936562][ T50] bond0: (slave veth15): making interface the new active one [ 458.951405][ T50] bond0: active interface up! [ 459.125041][ T283] bond14: (slave veth27): link status definitely up, 10000 Mbps full duplex [ 459.126064][ T283] bond14: (slave veth27): making interface the new active one [ 459.141205][ T283] bond14: active interface up! [ 459.266693][T17138] syzkaller0: entered promiscuous mode [ 459.266721][T17138] syzkaller0: entered allmulticast mode [ 459.534208][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2916'. [ 459.744969][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 459.758270][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 459.767383][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 459.779398][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 459.794807][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.366169][T17174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2918'. [ 461.916246][ T52] Bluetooth: hci5: command tx timeout [ 463.308186][T17158] syzkaller0: entered promiscuous mode [ 463.308210][T17158] syzkaller0: entered allmulticast mode [ 463.497103][ T8212] bond10: (slave veth25): link status definitely up, 10000 Mbps full duplex [ 463.497369][ T8212] bond10: (slave veth25): making interface the new active one [ 463.541572][ T8212] bond10: active interface up! [ 463.772428][ T173] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 463.772652][ T173] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 463.783649][ T173] bond16: (slave veth31): link status definitely up, 10000 Mbps full duplex [ 463.790253][ T25] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 463.794580][T17191] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2922'. [ 463.803059][ T173] bond8: (slave veth21): link status definitely up, 10000 Mbps full duplex [ 463.826804][ T173] bond8: (slave veth21): making interface the new active one [ 463.890858][ T173] bond8: active interface up! [ 463.895376][T17193] veth1_to_bond: entered promiscuous mode [ 463.937659][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2921'. [ 463.989251][ T52] Bluetooth: hci5: command tx timeout [ 464.243762][T17210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2923'. [ 464.243797][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 464.278719][T17189] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2921'. [ 464.335947][T17193] veth1_to_bond (unregistering): left promiscuous mode [ 464.367278][T17193] bond0: (slave bond_slave_1): Releasing backup interface [ 464.389954][ T25] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 464.450208][T17203] syzkaller0: entered promiscuous mode [ 464.450331][T17203] syzkaller0: entered allmulticast mode [ 464.462065][ T25] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 464.524453][T17189] netlink: 'syz.1.2921': attribute type 1 has an invalid length. [ 464.524476][T17189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2921'. [ 464.571687][ T8214] bond7: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 464.571990][ T8214] bond7: (slave veth19): making interface the new active one [ 464.574449][ T8214] bond7: active interface up! [ 464.575517][ T8214] bond6: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 464.907044][T17220] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input101 [ 465.346168][T17227] netlink: 'syz.4.2927': attribute type 1 has an invalid length. [ 466.080786][ T52] Bluetooth: hci5: command tx timeout [ 467.828539][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 468.139245][ T52] Bluetooth: hci5: command tx timeout [ 468.294407][ T50] bond9: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 468.296963][ T50] bond9: (slave veth23): making interface the new active one [ 468.355654][ T50] bond9: active interface up! [ 468.372264][ T8220] bond15: (slave veth29): link status definitely up, 10000 Mbps full duplex [ 468.375477][ T8220] bond15: (slave veth29): making interface the new active one [ 468.406609][ T8220] bond15: active interface up! [ 468.571407][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2929'. [ 468.684650][T17240] netlink: 'syz.1.2930': attribute type 1 has an invalid length. [ 468.702999][T17160] rxe_eth0 speed is unknown, defaulting to 1000 [ 468.855272][T17240] 8021q: adding VLAN 0 to HW filter on device bond18 [ 469.137113][T17237] bond18: (slave veth35): Enslaving as an active interface with a down link [ 469.167322][T17251] bond18: (slave dummy0): making interface the new active one [ 469.183122][T17251] dummy0: entered promiscuous mode [ 469.185459][T17251] bond18: (slave dummy0): Enslaving as an active interface with an up link [ 469.203704][T17244] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2931'. [ 469.430217][T17160] lo speed is unknown, defaulting to 1000 [ 469.511942][ T50] dummy0: left promiscuous mode [ 469.847851][T17280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2936'. [ 469.935405][T17283] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2938'. [ 469.970247][T17271] netlink: 'syz.4.2936': attribute type 16 has an invalid length. [ 469.970303][T17271] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2936'. [ 470.581469][T17283] syzkaller0: entered promiscuous mode [ 470.581496][T17283] syzkaller0: entered allmulticast mode [ 470.915595][T17312] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input102 [ 470.947138][T17309] netlink: 'syz.4.2940': attribute type 1 has an invalid length. [ 471.604123][ T8222] bond22 (unregistering): (slave gretap0): Releasing active interface [ 471.674365][ T173] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.776242][ T8222] bond0 (unregistering): Released all slaves [ 471.790628][ T8222] bond1 (unregistering): (slave veth5): Releasing active interface [ 471.791596][ T8222] bond1 (unregistering): Released all slaves [ 471.822873][ T8222] bond2 (unregistering): (slave veth7): Releasing active interface [ 471.824367][ T8222] bond2 (unregistering): Released all slaves [ 471.861677][ T8222] bond3 (unregistering): (slave veth9): Releasing active interface [ 471.862564][ T8222] bond3 (unregistering): Released all slaves [ 471.887441][ T8222] bond4 (unregistering): (slave veth11): Releasing active interface [ 471.888411][ T8222] bond4 (unregistering): Released all slaves [ 471.913322][ T8222] bond5 (unregistering): (slave veth13): Releasing active interface [ 471.914183][ T8222] bond5 (unregistering): Released all slaves [ 471.939536][ T8222] bond6 (unregistering): (slave veth15): Releasing active interface [ 471.940422][ T8222] bond6 (unregistering): Released all slaves [ 471.968683][ T8222] bond7 (unregistering): (slave veth17): Releasing active interface [ 471.978624][ T8222] bond7 (unregistering): Released all slaves [ 472.003126][ T8222] bond8 (unregistering): (slave veth19): Releasing active interface [ 472.003943][ T8222] bond8 (unregistering): Released all slaves [ 472.028692][ T8222] bond9 (unregistering): (slave veth21): Releasing active interface [ 472.034654][ T8222] bond9 (unregistering): Released all slaves [ 472.052835][ T8222] bond10 (unregistering): (slave veth23): Releasing active interface [ 472.053614][ T8222] bond10 (unregistering): Released all slaves [ 472.066653][ T8222] bond11 (unregistering): Released all slaves [ 472.087035][ T8222] bond12 (unregistering): Released all slaves [ 472.122695][ T8222] bond13 (unregistering): (slave veth29): Releasing active interface [ 472.124457][ T8222] bond13 (unregistering): Released all slaves [ 472.152663][ T8222] bond14 (unregistering): (slave veth31): Releasing active interface [ 472.154435][ T8222] bond14 (unregistering): Released all slaves [ 472.176701][ T8222] bond15 (unregistering): (slave veth33): Releasing active interface [ 472.178391][ T8222] bond15 (unregistering): Released all slaves [ 472.197546][ T8222] bond16 (unregistering): (slave veth35): Releasing active interface [ 472.202579][ T8222] bond16 (unregistering): Released all slaves [ 472.216936][ T8222] bond17 (unregistering): (slave veth37): Releasing active interface [ 472.218086][ T8222] bond17 (unregistering): Released all slaves [ 472.237715][ T8222] bond18 (unregistering): (slave veth39): Releasing active interface [ 472.252486][ T8222] bond18 (unregistering): Released all slaves [ 472.272357][ T8222] bond19 (unregistering): (slave veth41): Releasing active interface [ 472.275295][ T8222] bond19 (unregistering): Released all slaves [ 472.297856][ T8222] bond20 (unregistering): (slave veth47): Releasing active interface [ 472.302407][ T8222] bond20 (unregistering): Released all slaves [ 472.317669][ T8222] bond21 (unregistering): (slave veth49): Releasing active interface [ 472.317698][ T8222] dummy0: entered promiscuous mode [ 472.336994][ T8222] bond21 (unregistering): (slave dummy0): Releasing active interface [ 472.337033][ T8222] dummy0: left promiscuous mode [ 472.365299][ T8222] bond21 (unregistering): Released all slaves [ 472.378322][ T8222] bond22 (unregistering): Released all slaves [ 475.907281][T17309] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 475.984345][T17319] bond16: (slave dummy0): Releasing active interface [ 476.011840][T17319] bond16: (slave veth31): making interface the new active one [ 476.025713][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 476.026036][ T8222] ovs-dp0: left promiscuous mode [ 476.140013][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 476.233296][ T8222] tipc: Disabling bearer [ 476.233589][ T8222] tipc: Left network mode [ 476.276329][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2943'. [ 477.082039][T17339] netlink: 964 bytes leftover after parsing attributes in process `syz.0.2945'. [ 477.082071][T17339] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 477.514455][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 477.637985][ T8221] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.638622][ T8221] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.638672][ T8221] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.693699][T17160] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.693869][T17160] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.693993][T17160] bridge_slave_0: entered allmulticast mode [ 477.697050][T17160] bridge_slave_0: entered promiscuous mode [ 477.728948][T17160] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.743456][T17160] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.743635][T17160] bridge_slave_1: entered allmulticast mode [ 477.763607][T17160] bridge_slave_1: entered promiscuous mode [ 477.764160][T17391] netlink: 'syz.0.2948': attribute type 1 has an invalid length. [ 477.887046][T17395] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2949'. [ 477.957418][T17398] openvswitch: netlink: IP tunnel dst address not specified [ 478.037880][T17391] 8021q: adding VLAN 0 to HW filter on device bond19 [ 478.077503][T17385] syzkaller0: entered promiscuous mode [ 478.077551][T17385] syzkaller0: entered allmulticast mode [ 478.202833][T17377] bond19: (slave veth31): Enslaving as an active interface with a down link [ 478.216865][T17397] bond18: (slave dummy0): Releasing active interface [ 478.272929][T17397] bond19: (slave dummy0): making interface the new active one [ 478.276254][T17397] dummy0: entered promiscuous mode [ 478.278144][T17397] bond19: (slave dummy0): Enslaving as an active interface with an up link [ 478.531411][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2952'. [ 478.631774][T17410] netlink: zone id is out of range [ 478.631791][T17410] netlink: zone id is out of range [ 478.631799][T17410] netlink: zone id is out of range [ 478.631807][T17410] netlink: zone id is out of range [ 478.631815][T17410] netlink: zone id is out of range [ 478.631823][T17410] netlink: zone id is out of range [ 478.631835][T17410] netlink: zone id is out of range [ 478.631843][T17410] netlink: zone id is out of range [ 478.674049][T17410] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2953'. [ 478.718121][T17382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.836619][T17160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.937711][T17408] 8021q: adding VLAN 0 to HW filter on device bond18 [ 479.058142][T17419] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2955'. [ 479.167181][T17412] bond18: (slave geneve3): Enslaving as an active interface with an up link [ 479.173939][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 479.295232][T17427] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input103 [ 479.361161][T17414] bond18 (unregistering): (slave geneve3): Releasing backup interface [ 479.394118][T17414] bond18 (unregistering): Released all slaves [ 479.450550][T17160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.524290][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'. [ 479.634054][T17382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.765114][ T8222] hsr_slave_0: left promiscuous mode [ 479.788010][ T8222] hsr_slave_1: left promiscuous mode [ 479.803263][ T8222] batman_adv: batadv0: Removing interface: veth3 [ 480.827617][T17160] team0: Port device team_slave_0 added [ 480.841563][T17160] team0: Port device team_slave_1 added [ 481.063545][T17382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.260810][T17455] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2960'. [ 481.314564][T17382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.361073][T17160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.361109][T17160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.361169][T17160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.464867][T17454] syzkaller0: entered promiscuous mode [ 481.464893][T17454] syzkaller0: entered allmulticast mode [ 481.467132][T17160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.467147][T17160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.467170][T17160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.594130][T17160] hsr_slave_0: entered promiscuous mode [ 481.595447][T17160] hsr_slave_1: entered promiscuous mode [ 481.596119][T17160] debugfs: 'hsr0' already exists in 'hsr' [ 481.596137][T17160] Cannot create hsr debugfs directory [ 481.647927][ T8222] IPVS: stop unused estimator thread 0... [ 481.681629][T17466] netlink: 'syz.2.2963': attribute type 32 has an invalid length. [ 481.681686][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2963'. [ 484.771617][T17466] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 484.836799][T17470] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 484.889843][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 485.056940][T17492] net_ratelimit: 2258 callbacks suppressed [ 485.056989][T17492] netlink: zone id is out of range [ 485.056999][T17492] netlink: zone id is out of range [ 485.057024][T17492] netlink: zone id is out of range [ 485.057032][T17492] netlink: zone id is out of range [ 485.057055][T17492] netlink: zone id is out of range [ 485.057064][T17492] netlink: zone id is out of range [ 485.057091][T17492] netlink: zone id is out of range [ 485.057100][T17492] netlink: zone id is out of range [ 485.057123][T17492] netlink: zone id is out of range [ 485.057131][T17492] netlink: zone id is out of range [ 485.080265][T17492] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2966'. [ 485.180496][T17498] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2969'. [ 485.382417][T17505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2971'. [ 485.920922][ T8212] dummy0: left promiscuous mode [ 485.953144][ T8221] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.953217][ T8221] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.982361][T17382] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.251859][T17382] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.284422][T17535] netlink: 'syz.4.2975': attribute type 1 has an invalid length. [ 486.762536][T17551] C: renamed from veth1_to_team (while UP) [ 486.823826][T17551] netlink: 'syz.2.2979': attribute type 1 has an invalid length. [ 486.823847][T17551] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2979'. [ 486.836455][T17552] netlink: 'syz.4.2980': attribute type 3 has an invalid length. [ 486.836509][T17552] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2980'. [ 487.072616][ T25] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 487.124459][T17563] syzkaller0: entered promiscuous mode [ 487.124495][T17563] syzkaller0: entered allmulticast mode [ 487.208436][T17563] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2981'. [ 487.313532][T17160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 487.332948][T17160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.333783][T17160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 487.368023][T17160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.368919][T17160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 487.436737][T17160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.449992][T17160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 487.497596][T17160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.828145][T17329] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 487.977325][T17592] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2983'. [ 488.037972][T17592] syzkaller0: entered promiscuous mode [ 488.037996][T17592] syzkaller0: entered allmulticast mode [ 488.216200][T17160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.311968][T17160] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.334474][ T8220] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.337203][ T8220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.436369][ T8220] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.436531][ T8220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.631463][T17646] netlink: 'syz.4.2994': attribute type 10 has an invalid length. [ 489.678777][T17646] team0 (unregistering): Port device team_slave_0 removed [ 489.714974][T17646] team0 (unregistering): Port device team_slave_1 removed [ 490.045466][ T173] dummy0: left promiscuous mode [ 490.238386][T17659] bond20: option miimon: invalid value (18446744073709551614) [ 490.238412][T17659] bond20: option miimon: allowed values 0 - 2147483647 [ 490.271072][T17659] bond20 (unregistering): Released all slaves [ 490.856842][T17683] syzkaller0: entered promiscuous mode [ 490.856865][T17683] syzkaller0: entered allmulticast mode [ 490.882940][T17683] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3002'. [ 490.927119][T17160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.263456][T17160] veth0_vlan: entered promiscuous mode [ 491.332124][T17160] veth1_vlan: entered promiscuous mode [ 491.374010][T17695] syzkaller0: entered promiscuous mode [ 491.374033][T17695] syzkaller0: entered allmulticast mode [ 491.486820][T17160] veth0_macvtap: entered promiscuous mode [ 491.524095][T17160] veth1_macvtap: entered promiscuous mode [ 491.561155][T17702] ip6gretap0: entered promiscuous mode [ 491.563803][T17702] batadv0: entered promiscuous mode [ 491.573253][T17702] debugfs: 'hsr1' already exists in 'hsr' [ 491.573278][T17702] Cannot create hsr debugfs directory [ 491.632199][T17705] netlink: 'syz.4.3006': attribute type 1 has an invalid length. [ 491.651314][T17705] net_ratelimit: 2257 callbacks suppressed [ 491.651335][T17705] openvswitch: netlink: Message has 8 unknown bytes. [ 491.685723][T17160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.718541][T17160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.745418][ T173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.745869][ T173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.852045][ T8222] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.852141][ T8222] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.139216][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 492.420987][ T8220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.421010][ T8220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.566155][T17736] ieee802154 phy0 wpan0: encryption failed: -22 [ 492.628492][ T8214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.628514][ T8214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.045529][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3013'. [ 493.116986][T17756] netlink: 'syz.4.3013': attribute type 1 has an invalid length. [ 493.117028][T17756] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3013'. [ 493.185596][T17761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3013'. [ 493.213871][T17763] netlink: 'syz.0.3014': attribute type 1 has an invalid length. [ 493.336343][T17772] netlink: 'syz.3.3017': attribute type 1 has an invalid length. [ 493.904961][T17763] 8021q: adding VLAN 0 to HW filter on device bond20 [ 494.057467][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 494.068681][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 494.076721][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 494.085604][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 494.088512][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.702767][T17767] bond20: (slave veth33): Enslaving as an active interface with a down link [ 494.826505][T17774] bond19: (slave dummy0): Releasing active interface [ 494.855630][T17774] bond20: (slave dummy0): making interface the new active one [ 494.856679][T17774] dummy0: entered promiscuous mode [ 494.857118][T17774] bond20: (slave dummy0): Enslaving as an active interface with an up link [ 495.222829][T17822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3023'. [ 495.246190][T17817] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input104 [ 496.140265][ T52] Bluetooth: hci3: command tx timeout [ 496.311765][T17793] rxe_eth0 speed is unknown, defaulting to 1000 [ 497.383058][T17866] bond17: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 497.424486][T17866] bond17 (unregistering): Released all slaves [ 497.543082][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3029'. [ 497.672563][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 497.672932][T17793] lo speed is unknown, defaulting to 1000 [ 497.998087][T17881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3031'. [ 498.171295][T17881] bond20: (slave dummy0): Releasing active interface [ 498.171333][T17881] dummy0: left promiscuous mode [ 498.219258][ T52] Bluetooth: hci3: command tx timeout [ 498.227577][T17885] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3032'. [ 498.815920][T17897] netlink: 'syz.0.3035': attribute type 1 has an invalid length. [ 498.846649][T17895] netlink: 'syz.3.3033': attribute type 1 has an invalid length. [ 498.920641][T17900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3035'. [ 499.284951][T17905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3036'. [ 499.840947][T17909] syzkaller0: entered promiscuous mode [ 499.840972][T17909] syzkaller0: entered allmulticast mode [ 499.841652][T17793] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.841827][T17793] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.841929][T17793] bridge_slave_0: entered allmulticast mode [ 499.844609][T17793] bridge_slave_0: entered promiscuous mode [ 499.853642][T17922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3040'. [ 499.906033][T17793] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.906252][T17793] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.906517][T17793] bridge_slave_1: entered allmulticast mode [ 499.908430][T17793] bridge_slave_1: entered promiscuous mode [ 499.982434][T17921] bond18: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 499.984811][T17921] bond18 (unregistering): Released all slaves [ 500.154232][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3041'. [ 500.274466][T17931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.276302][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3043'. [ 500.319491][ T52] Bluetooth: hci3: command tx timeout [ 501.741273][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.391663][ T52] Bluetooth: hci3: command tx timeout [ 502.610486][ T8220] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 504.577789][T17929] netlink: 'syz.3.3043': attribute type 12 has an invalid length. [ 504.751988][T17793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.781910][T17940] gre2: entered allmulticast mode [ 504.802175][T17793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.873447][T17793] team0: Port device team_slave_0 added [ 504.882504][T17944] x_tables: duplicate underflow at hook 1 [ 504.884394][T17793] team0: Port device team_slave_1 added [ 504.988830][T17793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.988852][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.988877][T17793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.998295][T17793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.998313][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.998337][T17793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.174808][T17793] hsr_slave_0: entered promiscuous mode [ 505.177985][T17793] hsr_slave_1: entered promiscuous mode [ 505.180725][T17793] debugfs: 'hsr0' already exists in 'hsr' [ 505.180784][T17793] Cannot create hsr debugfs directory [ 505.289434][T17950] netlink: 'syz.2.3048': attribute type 1 has an invalid length. [ 505.335831][ T52] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 505.338711][ T52] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 505.468732][T17950] 8021q: adding VLAN 0 to HW filter on device bond18 [ 505.660110][T17952] bond18: (slave veth33): Enslaving as an active interface with a down link [ 506.138446][T17970] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3052'. [ 506.744210][T17983] bond21: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 506.762277][T17983] bond21 (unregistering): Released all slaves [ 506.901464][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 507.137218][T17977] syzkaller0: entered promiscuous mode [ 507.137247][T17977] syzkaller0: entered allmulticast mode [ 507.340304][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'. [ 507.386838][T17992] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input105 [ 508.072819][T18004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 508.082586][T18004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3055'. [ 508.774634][T18013] netlink: 'syz.3.3059': attribute type 1 has an invalid length. [ 513.528279][T18021] netlink: 'syz.2.3061': attribute type 1 has an invalid length. [ 513.767404][T17329] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 514.087118][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3064'. [ 514.157991][T18025] bond19: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 514.161849][T18025] bond19 (unregistering): Released all slaves [ 514.199564][T17329] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 514.437636][T17793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 514.444715][T17793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.445664][T17793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 514.493001][T17793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.518096][T17793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 514.638131][T17793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.649818][T17793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 514.705346][T17793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.816974][T18044] netlink: 'syz.3.3065': attribute type 1 has an invalid length. [ 514.844874][T18042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3066'. [ 515.147069][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3069'. [ 515.244787][T18056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.591134][T18065] syzkaller0: entered promiscuous mode [ 515.591160][T18065] syzkaller0: entered allmulticast mode [ 515.618366][T18066] lo: entered allmulticast mode [ 515.671570][T17793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.687654][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3072'. [ 515.703272][T18065] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3070'. [ 515.884732][T17793] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.905080][T18063] lo: left allmulticast mode [ 516.001279][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.001482][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.130432][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.130619][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.326791][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3074'. [ 516.909388][T18090] bond17: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 516.918455][T18090] bond17 (unregistering): Released all slaves [ 517.143120][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 517.182712][ T52] block nbd1: Receive control failed (result -107) [ 517.256574][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3080'. [ 517.324780][T18106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3080'. [ 517.390225][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3081'. [ 517.586187][T18113] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 517.663781][T18035] udevd[18035]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 517.740093][T18120] netlink: zone id is out of range [ 517.740114][T18120] netlink: zone id is out of range [ 517.740121][T18120] netlink: zone id is out of range [ 517.740127][T18120] netlink: zone id is out of range [ 517.740134][T18120] netlink: zone id is out of range [ 517.740140][T18120] netlink: zone id is out of range [ 517.740151][T18120] netlink: zone id is out of range [ 517.740158][T18120] netlink: zone id is out of range [ 517.740166][T18120] netlink: zone id is out of range [ 518.405459][T18132] syzkaller0: entered promiscuous mode [ 518.406210][T18132] syzkaller0: entered allmulticast mode [ 518.798807][T17793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.157344][T17793] veth0_vlan: entered promiscuous mode [ 519.252556][T18153] __nla_validate_parse: 4 callbacks suppressed [ 519.252579][T18153] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3094'. [ 519.255874][T18148] bond21: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 519.263381][T18148] bond21 (unregistering): Released all slaves [ 519.431571][T18154] netlink: 'syz.3.3093': attribute type 1 has an invalid length. [ 519.461277][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'. [ 519.574594][T18154] bridge1: port 1(veth3) entered blocking state [ 519.576670][T18154] bridge1: port 1(veth3) entered disabled state [ 519.576898][T18154] veth3: entered allmulticast mode [ 519.611991][T18154] veth3: entered promiscuous mode [ 519.673052][T17793] veth1_vlan: entered promiscuous mode [ 519.740594][T18158] bridge1: port 2(dummy0) entered blocking state [ 519.741120][T18158] bridge1: port 2(dummy0) entered disabled state [ 519.741604][T18158] dummy0: entered allmulticast mode [ 519.778534][T18158] dummy0: entered promiscuous mode [ 520.162992][T18163] syzkaller0: entered promiscuous mode [ 520.163027][T18163] syzkaller0: entered allmulticast mode [ 521.117828][T18187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.864304][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 525.191976][T18220] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3101'. [ 525.773499][T18213] syzkaller0: entered promiscuous mode [ 525.773560][T18213] syzkaller0: entered allmulticast mode [ 525.977062][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3102'. [ 526.244904][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 530.817620][T18236] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 531.038681][T17793] veth0_macvtap: entered promiscuous mode [ 531.085226][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3106'. [ 531.116304][T17793] veth1_macvtap: entered promiscuous mode [ 531.121684][T18248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3107'. [ 531.121725][T18248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3107'. [ 531.238962][T17793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.257678][T18252] x_tables: duplicate underflow at hook 2 [ 531.414977][T17793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.507792][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3111'. [ 531.547190][ T173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.547236][ T173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.563483][ T8221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.565289][ T8220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.878290][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.878332][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.240751][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.240817][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.293164][T18277] syzkaller0: entered promiscuous mode [ 532.293204][T18277] syzkaller0: entered allmulticast mode [ 532.630716][T18295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3114'. [ 532.730258][T18299] netlink: 'syz.2.3116': attribute type 1 has an invalid length. [ 532.948686][T18304] netlink: 'syz.4.3114': attribute type 16 has an invalid length. [ 532.948712][T18304] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3114'. [ 533.407471][T18308] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 533.427290][T18308] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 533.444240][T18308] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 533.445847][T18308] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 533.446858][T18308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 533.637166][ T8221] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 533.882488][T18314] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3118'. [ 533.930249][T18314] syzkaller0: entered promiscuous mode [ 533.930280][T18314] syzkaller0: entered allmulticast mode [ 534.214599][ T25] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 534.364401][T18325] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 534.379642][ T25] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 534.687485][T18307] rxe_eth0 speed is unknown, defaulting to 1000 [ 534.938669][T18307] lo speed is unknown, defaulting to 1000 [ 535.309390][T18307] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.309588][T18307] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.310042][T18307] bridge_slave_0: entered allmulticast mode [ 535.312133][T18307] bridge_slave_0: entered promiscuous mode [ 535.345784][T18307] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.347611][T18307] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.347837][T18307] bridge_slave_1: entered allmulticast mode [ 535.371340][T18307] bridge_slave_1: entered promiscuous mode [ 535.395457][T18285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.603150][T18307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.612717][T18307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.664062][ T52] Bluetooth: hci4: command tx timeout [ 535.693823][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3124'. [ 535.890564][T18307] team0: Port device team_slave_0 added [ 535.907701][T18307] team0: Port device team_slave_1 added [ 536.128586][T18367] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3128'. [ 536.161411][T18307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.161462][T18307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.161498][T18307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.284823][T18371] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input106 [ 536.343110][T18307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.345197][T18307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.345261][T18307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.534143][T18375] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3131'. [ 536.694080][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3133'. [ 536.725404][T18307] hsr_slave_0: entered promiscuous mode [ 536.726732][T18307] hsr_slave_1: entered promiscuous mode [ 536.728102][T18307] debugfs: 'hsr0' already exists in 'hsr' [ 536.728131][T18307] Cannot create hsr debugfs directory [ 536.976344][T18389] FAULT_INJECTION: forcing a failure. [ 536.976344][T18389] name failslab, interval 1, probability 0, space 0, times 0 [ 536.976405][T18389] CPU: 1 UID: 0 PID: 18389 Comm: syz.3.3136 Not tainted syzkaller #0 PREEMPT(full) [ 536.976428][T18389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 536.976445][T18389] Call Trace: [ 536.976453][T18389] [ 536.976467][T18389] dump_stack_lvl+0xe8/0x150 [ 536.976504][T18389] should_fail_ex+0x410/0x560 [ 536.976537][T18389] should_failslab+0xa8/0x100 [ 536.976568][T18389] __kvmalloc_node_noprof+0x176/0x820 [ 536.976596][T18389] ? __rhashtable_init_noprof+0x545/0xaf0 [ 536.976624][T18389] ? __rhashtable_init_noprof+0x545/0xaf0 [ 536.976657][T18389] __rhashtable_init_noprof+0x545/0xaf0 [ 536.976684][T18389] nft_rhash_init+0x11f/0x3c0 [ 536.976845][T18389] ? __pfx_nft_rhash_init+0x10/0x10 [ 536.976868][T18389] ? kasan_quarantine_put+0xbb/0x1f0 [ 536.976890][T18389] ? __pfx_nft_rhash_key+0x10/0x10 [ 536.976914][T18389] ? __pfx_nft_rhash_obj+0x10/0x10 [ 536.976938][T18389] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 536.976967][T18389] ? kfree+0x1c5/0x650 [ 536.976983][T18389] ? nf_tables_newset+0x13b5/0x2570 [ 536.977045][T18389] nf_tables_newset+0x1c1f/0x2570 [ 536.977077][T18389] ? __pfx_nf_tables_newset+0x10/0x10 [ 536.977102][T18389] ? lock_acquire+0x115/0x350 [ 536.977140][T18389] ? __nla_parse+0x40/0x60 [ 536.977174][T18389] nfnetlink_rcv+0x1288/0x28c0 [ 536.977253][T18389] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 536.977315][T18389] ? skb_clone+0x246/0x3a0 [ 536.977359][T18389] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.977428][T18389] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.977452][T18389] netlink_unicast+0x8ef/0xa80 [ 536.977487][T18389] netlink_sendmsg+0x813/0xb40 [ 536.977516][T18389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.977544][T18389] ? apparmor_socket_sendmsg+0x98/0x360 [ 536.977573][T18389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.977591][T18389] sock_sendmsg_nosec+0x14e/0x190 [ 536.977616][T18389] ____sys_sendmsg+0x54e/0x850 [ 536.977646][T18389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.977679][T18389] ? import_iovec+0x73/0xa0 [ 536.977709][T18389] ___sys_sendmsg+0x2a5/0x360 [ 536.977733][T18389] ? __lock_acquire+0x747/0x2de0 [ 536.977757][T18389] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.977817][T18389] ? __fget_files+0x2a/0x420 [ 536.977852][T18389] ? __fget_files+0x3a2/0x420 [ 536.977888][T18389] __x64_sys_sendmsg+0x1b1/0x290 [ 536.977917][T18389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.977965][T18389] do_syscall_64+0x166/0x520 [ 536.977994][T18389] ? trace_irq_disable+0x3b/0x140 [ 536.978016][T18389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.978037][T18389] ? clear_bhb_loop+0x70/0xc0 [ 536.978062][T18389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.978081][T18389] RIP: 0033:0x7f899db9f559 [ 536.978101][T18389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.978116][T18389] RSP: 002b:00007f899ea23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.978137][T18389] RAX: ffffffffffffffda RBX: 00007f899de25fa0 RCX: 00007f899db9f559 [ 536.978149][T18389] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 536.978161][T18389] RBP: 00007f899ea23090 R08: 0000000000000000 R09: 0000000000000000 [ 536.978171][T18389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.978181][T18389] R13: 00007f899de26038 R14: 00007f899de25fa0 R15: 00007ffc6f83e338 [ 536.978211][T18389] [ 537.191132][T18385] syzkaller0: entered promiscuous mode [ 537.191156][T18385] syzkaller0: entered allmulticast mode [ 537.216401][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 537.494232][T18396] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input107 [ 537.686954][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3140'. [ 537.740186][ T52] Bluetooth: hci4: command tx timeout [ 538.119301][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3142'. [ 538.202679][T18402] tc_dump_action: action bad kind [ 538.417969][T18436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3143'. [ 538.568421][T18440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3144'. [ 538.804259][T18447] netlink: 'syz.4.3143': attribute type 16 has an invalid length. [ 538.804284][T18447] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3143'. [ 538.888474][T18449] netlink: 'syz.3.3144': attribute type 16 has an invalid length. [ 538.888500][T18449] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3144'. [ 539.328330][T18458] FAULT_INJECTION: forcing a failure. [ 539.328330][T18458] name failslab, interval 1, probability 0, space 0, times 0 [ 539.328397][T18458] CPU: 0 UID: 0 PID: 18458 Comm: syz.1.3147 Not tainted syzkaller #0 PREEMPT(full) [ 539.328422][T18458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 539.328434][T18458] Call Trace: [ 539.328443][T18458] [ 539.328452][T18458] dump_stack_lvl+0xe8/0x150 [ 539.328484][T18458] should_fail_ex+0x410/0x560 [ 539.328515][T18458] should_failslab+0xa8/0x100 [ 539.328542][T18458] __kmalloc_cache_noprof+0xa3/0x600 [ 539.328565][T18458] ? __pfx_nft_rhash_init+0x10/0x10 [ 539.328589][T18458] ? __nft_trans_set_add+0x5e/0x710 [ 539.328687][T18458] ? __nft_trans_set_add+0x5e/0x710 [ 539.328708][T18458] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 539.328736][T18458] __nft_trans_set_add+0x5e/0x710 [ 539.328755][T18458] ? nf_tables_newset+0x13b5/0x2570 [ 539.328779][T18458] nf_tables_newset+0x1d87/0x2570 [ 539.328808][T18458] ? __pfx_nf_tables_newset+0x10/0x10 [ 539.328830][T18458] ? lock_acquire+0x115/0x350 [ 539.328862][T18458] ? __nla_parse+0x40/0x60 [ 539.328893][T18458] nfnetlink_rcv+0x1288/0x28c0 [ 539.328942][T18458] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 539.329092][T18458] ? skb_clone+0x246/0x3a0 [ 539.329138][T18458] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.329157][T18458] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.329183][T18458] netlink_unicast+0x8ef/0xa80 [ 539.329221][T18458] netlink_sendmsg+0x813/0xb40 [ 539.329252][T18458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.329282][T18458] ? apparmor_socket_sendmsg+0x98/0x360 [ 539.329310][T18458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.329330][T18458] sock_sendmsg_nosec+0x14e/0x190 [ 539.329355][T18458] ____sys_sendmsg+0x54e/0x850 [ 539.329388][T18458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.329423][T18458] ? import_iovec+0x73/0xa0 [ 539.329456][T18458] ___sys_sendmsg+0x2a5/0x360 [ 539.329479][T18458] ? __lock_acquire+0x747/0x2de0 [ 539.329504][T18458] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.329568][T18458] ? __fget_files+0x2a/0x420 [ 539.329595][T18458] ? __fget_files+0x3a2/0x420 [ 539.329646][T18458] __x64_sys_sendmsg+0x1b1/0x290 [ 539.329671][T18458] ? net_tx_action+0x5bb/0xc30 [ 539.329745][T18458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.329779][T18458] ? handle_softirqs+0x720/0x860 [ 539.329816][T18458] do_syscall_64+0x166/0x520 [ 539.329842][T18458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.329863][T18458] ? clear_bhb_loop+0x70/0xc0 [ 539.329888][T18458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.329907][T18458] RIP: 0033:0x7fc8ced9f559 [ 539.329926][T18458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.329941][T18458] RSP: 002b:00007fc8cfcf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.329962][T18458] RAX: ffffffffffffffda RBX: 00007fc8cf025fa0 RCX: 00007fc8ced9f559 [ 539.329984][T18458] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 539.329995][T18458] RBP: 00007fc8cfcf6090 R08: 0000000000000000 R09: 0000000000000000 [ 539.330007][T18458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.330018][T18458] R13: 00007fc8cf026038 R14: 00007fc8cf025fa0 R15: 00007fff678e5ba8 [ 539.330051][T18458] [ 539.819899][ T52] Bluetooth: hci4: command tx timeout [ 539.843917][T18307] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.973811][ T8212] IPVS: starting estimator thread 0... [ 540.069459][T18468] IPVS: using max 37 ests per chain, 88800 per kthread [ 540.203397][T18307] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.400065][T18307] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.429899][T18486] bridge_slave_1: left allmulticast mode [ 540.429927][T18486] bridge_slave_1: left promiscuous mode [ 540.430153][T18486] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.442970][T18486] bridge_slave_0: left allmulticast mode [ 540.443123][T18486] bridge_slave_0: left promiscuous mode [ 540.446053][T18486] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.622670][T18307] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.293091][T18510] __nla_validate_parse: 5 callbacks suppressed [ 541.293113][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 541.293126][T18510] FAULT_INJECTION: forcing a failure. [ 541.293126][T18510] name failslab, interval 1, probability 0, space 0, times 0 [ 541.293164][T18510] CPU: 1 UID: 0 PID: 18510 Comm: syz.3.3158 Not tainted syzkaller #0 PREEMPT(full) [ 541.293182][T18510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 541.293191][T18510] Call Trace: [ 541.293199][T18510] [ 541.293206][T18510] dump_stack_lvl+0xe8/0x150 [ 541.293236][T18510] should_fail_ex+0x410/0x560 [ 541.293261][T18510] should_failslab+0xa8/0x100 [ 541.293283][T18510] __kmalloc_noprof+0xfe/0x720 [ 541.293300][T18510] ? nft_set_elem_init+0xa8/0x7e0 [ 541.293406][T18510] ? nft_set_elem_init+0xa8/0x7e0 [ 541.293427][T18510] nft_set_elem_init+0xa8/0x7e0 [ 541.293450][T18510] nf_tables_newsetelem+0x2428/0x4200 [ 541.293496][T18510] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 541.293577][T18510] ? lock_acquire+0x115/0x350 [ 541.293601][T18510] ? nla_validate_array+0xfc/0x260 [ 541.293637][T18510] ? __pfx___nla_validate_parse+0x10/0x10 [ 541.293663][T18510] ? __pfx_nf_tables_newset+0x10/0x10 [ 541.293681][T18510] ? lock_acquire+0x115/0x350 [ 541.293698][T18510] ? nfnl_pernet+0x23/0x240 [ 541.293765][T18510] ? __nla_parse+0x40/0x60 [ 541.293788][T18510] nfnetlink_rcv+0x1288/0x28c0 [ 541.293829][T18510] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 541.293876][T18510] ? skb_clone+0x246/0x3a0 [ 541.293911][T18510] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.293928][T18510] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.293948][T18510] netlink_unicast+0x8ef/0xa80 [ 541.293976][T18510] netlink_sendmsg+0x813/0xb40 [ 541.294000][T18510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.294022][T18510] ? apparmor_socket_sendmsg+0x98/0x360 [ 541.294044][T18510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.294058][T18510] sock_sendmsg_nosec+0x14e/0x190 [ 541.294077][T18510] ____sys_sendmsg+0x54e/0x850 [ 541.294102][T18510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.294128][T18510] ? import_iovec+0x73/0xa0 [ 541.294152][T18510] ___sys_sendmsg+0x2a5/0x360 [ 541.294170][T18510] ? __lock_acquire+0x747/0x2de0 [ 541.294190][T18510] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.294239][T18510] ? __fget_files+0x2a/0x420 [ 541.294260][T18510] ? __fget_files+0x3a2/0x420 [ 541.294289][T18510] __x64_sys_sendmsg+0x1b1/0x290 [ 541.294313][T18510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 541.294358][T18510] do_syscall_64+0x166/0x520 [ 541.294398][T18510] ? trace_irq_disable+0x3b/0x140 [ 541.294420][T18510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.294441][T18510] ? clear_bhb_loop+0x70/0xc0 [ 541.294465][T18510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.294484][T18510] RIP: 0033:0x7f899db9f559 [ 541.294516][T18510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.294533][T18510] RSP: 002b:00007f899ea23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.294555][T18510] RAX: ffffffffffffffda RBX: 00007f899de25fa0 RCX: 00007f899db9f559 [ 541.294569][T18510] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 541.294582][T18510] RBP: 00007f899ea23090 R08: 0000000000000000 R09: 0000000000000000 [ 541.294594][T18510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.294604][T18510] R13: 00007f899de26038 R14: 00007f899de25fa0 R15: 00007ffc6f83e338 [ 541.294636][T18510] [ 541.654972][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3161'. [ 541.783647][T18519] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3162'. [ 541.787680][T18522] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3162'. [ 541.834286][T18518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3162'. [ 541.852695][T18521] hsr0: entered allmulticast mode [ 541.852755][T18521] hsr_slave_0: entered allmulticast mode [ 541.852788][T18521] hsr_slave_1: entered allmulticast mode [ 541.854630][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3163'. [ 541.899606][ T52] Bluetooth: hci4: command tx timeout [ 541.979336][T18521] hsr_slave_0: left promiscuous mode [ 542.042490][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'. [ 542.390436][T18521] hsr_slave_1: left promiscuous mode [ 542.456196][T18521] hsr0 (unregistering): left allmulticast mode [ 542.613940][T18307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 542.634698][T18307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.647391][T18307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 542.667581][T18307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.675612][T18307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 542.696985][T18307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.698596][T18307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 542.806070][T18307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.232792][T18547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3170'. [ 543.232847][T18547] FAULT_INJECTION: forcing a failure. [ 543.232847][T18547] name failslab, interval 1, probability 0, space 0, times 0 [ 543.232889][T18547] CPU: 0 UID: 0 PID: 18547 Comm: syz.4.3170 Not tainted syzkaller #0 PREEMPT(full) [ 543.232911][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 543.232923][T18547] Call Trace: [ 543.232932][T18547] [ 543.232941][T18547] dump_stack_lvl+0xe8/0x150 [ 543.232974][T18547] should_fail_ex+0x410/0x560 [ 543.233075][T18547] should_failslab+0xa8/0x100 [ 543.233102][T18547] __kmalloc_noprof+0xfe/0x720 [ 543.233123][T18547] ? nft_set_elem_init+0xa8/0x7e0 [ 543.233146][T18547] ? nft_set_elem_init+0xa8/0x7e0 [ 543.233173][T18547] nft_set_elem_init+0xa8/0x7e0 [ 543.233204][T18547] nf_tables_newsetelem+0x2428/0x4200 [ 543.233406][T18547] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 543.233447][T18547] ? lock_acquire+0x115/0x350 [ 543.233476][T18547] ? nla_validate_array+0xfc/0x260 [ 543.233522][T18547] ? __pfx___nla_validate_parse+0x10/0x10 [ 543.233551][T18547] ? __pfx_nf_tables_newset+0x10/0x10 [ 543.233574][T18547] ? lock_acquire+0x115/0x350 [ 543.233590][T18547] ? nfnl_pernet+0x23/0x240 [ 543.233624][T18547] ? __nla_parse+0x40/0x60 [ 543.233653][T18547] nfnetlink_rcv+0x1288/0x28c0 [ 543.233704][T18547] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 543.233758][T18547] ? skb_clone+0x246/0x3a0 [ 543.233794][T18547] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.233816][T18547] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.233837][T18547] netlink_unicast+0x8ef/0xa80 [ 543.233872][T18547] netlink_sendmsg+0x813/0xb40 [ 543.233911][T18547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.233936][T18547] ? apparmor_socket_sendmsg+0x98/0x360 [ 543.233962][T18547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.233981][T18547] sock_sendmsg_nosec+0x14e/0x190 [ 543.234002][T18547] ____sys_sendmsg+0x54e/0x850 [ 543.234038][T18547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.234068][T18547] ? import_iovec+0x73/0xa0 [ 543.234094][T18547] ___sys_sendmsg+0x2a5/0x360 [ 543.234210][T18547] ? __lock_acquire+0x747/0x2de0 [ 543.234348][T18547] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.234415][T18547] ? __fget_files+0x2a/0x420 [ 543.234439][T18547] ? __fget_files+0x3a2/0x420 [ 543.234469][T18547] __x64_sys_sendmsg+0x1b1/0x290 [ 543.234495][T18547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.234530][T18547] do_syscall_64+0x166/0x520 [ 543.234553][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.234569][T18547] ? clear_bhb_loop+0x70/0xc0 [ 543.234590][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.234605][T18547] RIP: 0033:0x7fc17eb9f559 [ 543.234622][T18547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.234634][T18547] RSP: 002b:00007fc17fa87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.234651][T18547] RAX: ffffffffffffffda RBX: 00007fc17ee25fa0 RCX: 00007fc17eb9f559 [ 543.234662][T18547] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 543.234735][T18547] RBP: 00007fc17fa87090 R08: 0000000000000000 R09: 0000000000000000 [ 543.234747][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 543.234757][T18547] R13: 00007fc17ee26038 R14: 00007fc17ee25fa0 R15: 00007ffcd5ecd628 [ 543.234848][T18547] [ 543.348324][T18307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.385382][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'. [ 543.507806][T18307] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.692017][ T8220] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.692129][ T8220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.771110][T18554] ip6gre1: entered allmulticast mode [ 543.828382][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.828479][ T8221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.871745][T18554] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input108 [ 544.180893][T18573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3173'. [ 544.401060][T18578] netlink: 'syz.4.3173': attribute type 16 has an invalid length. [ 544.794782][T18582] ip6gre1: entered allmulticast mode [ 544.863554][T18582] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input109 [ 544.952046][T18591] v: renamed from vlan1 (while UP) [ 545.472595][T18603] netlink: 'syz.1.3178': attribute type 10 has an invalid length. [ 545.544715][T18603] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.564588][T18603] bond0: (slave team0): Enslaving as an active interface with an up link [ 546.032671][T18622] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input110 [ 546.904943][T18307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.947418][T18645] __nla_validate_parse: 1 callbacks suppressed [ 546.947440][T18645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3186'. [ 547.185629][T18307] veth0_vlan: entered promiscuous mode [ 547.252780][T18307] veth1_vlan: entered promiscuous mode [ 547.530885][T18307] veth0_macvtap: entered promiscuous mode [ 547.795221][T18307] veth1_macvtap: entered promiscuous mode [ 547.921191][T18307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.988682][T18307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.107160][ T173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.107638][ T173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.107690][ T173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.107727][ T173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.674844][ T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.674868][ T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.802806][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3193'. [ 548.831858][T18675] xfrm0: entered allmulticast mode [ 548.832967][T18678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3194'. [ 548.840610][T18435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.840635][T18435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.935647][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3195'. [ 549.008707][T18683] netlink: 'syz.3.3195': attribute type 1 has an invalid length. [ 549.008762][T18683] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3195'. [ 549.012507][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3195'. [ 549.331889][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3197'. [ 549.906297][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'. [ 550.845667][T18308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 550.857424][T18308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 550.859970][T18308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 550.881554][T18308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 550.882592][T18308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 551.304665][ T5614] syz_tun (unregistering): left allmulticast mode [ 551.465930][ T44] infiniband s`z1: ib_query_port failed (-19) [ 551.501217][ T50] smbdirect: ib_dev[s`z1] removed [ 551.793792][T18743] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 551.836272][T18745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.166197][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.189695][ T52] Bluetooth: hci3: unexpected cc 0x2040 length: 5 > 1 [ 553.019804][ T52] Bluetooth: hci2: command tx timeout [ 553.116906][T18757] dummy0: left allmulticast mode [ 553.116936][T18757] dummy0: left promiscuous mode [ 553.117241][T18757] bridge1: port 2(dummy0) entered disabled state [ 553.276463][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.643238][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.781691][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3216'. [ 553.782296][T18719] rxe_eth0 speed is unknown, defaulting to 1000 [ 554.249268][T18789] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3220'. [ 554.426465][T18789] syzkaller0: entered promiscuous mode [ 554.426489][T18789] syzkaller0: entered allmulticast mode [ 554.499388][T18794] net_ratelimit: 1126 callbacks suppressed [ 554.499415][T18794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.794470][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3223'. [ 554.906100][T18798] netlink: 'syz.3.3223': attribute type 1 has an invalid length. [ 554.906156][T18798] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3223'. [ 555.015332][T18719] lo speed is unknown, defaulting to 1000 [ 555.100083][ T52] Bluetooth: hci2: command tx timeout [ 555.415865][T18802] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 555.703093][T18810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3228'. [ 555.904271][T18815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3227'. [ 556.087114][T18804] netlink: 'syz.2.3227': attribute type 16 has an invalid length. [ 556.087145][T18804] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3227'. [ 557.181145][ T52] Bluetooth: hci2: command tx timeout [ 559.280723][ T52] Bluetooth: hci2: command tx timeout [ 560.494379][ T50] bond11 (unregistering): (slave bridge0): Releasing backup interface [ 560.523775][ T50] .` (unregistering): left promiscuous mode [ 560.523804][ T50] bond_slave_0: left promiscuous mode [ 560.523962][ T50] bond_slave_1: left promiscuous mode [ 560.525922][ T50] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.528715][ T50] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.542405][ T50] .` (unregistering): Released all slaves [ 560.584792][ T50] bond1 (unregistering): (slave veth3): Releasing active interface [ 560.586864][ T50] bond1 (unregistering): Released all slaves [ 560.613278][ T50] bond2 (unregistering): Released all slaves [ 560.693944][ T50] bond3 (unregistering): (slave veth7): Releasing active interface [ 560.714892][ T50] bond3 (unregistering): Released all slaves [ 560.734252][ T50] bond4 (unregistering): (slave veth5): Releasing active interface [ 560.735920][ T50] bond4 (unregistering): Released all slaves [ 560.788324][ T50] bond5 (unregistering): (slave veth13): Releasing active interface [ 560.793364][ T50] bond5 (unregistering): Released all slaves [ 560.813271][ T50] bond0 (unregistering): (slave veth15): Releasing active interface [ 560.815473][ T50] bond0 (unregistering): Released all slaves [ 560.849527][ T50] bond6 (unregistering): (slave veth17): Releasing active interface [ 560.849558][ T50] veth0_to_bond: entered promiscuous mode [ 560.852442][ T50] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 560.852470][ T50] veth0_to_bond: left promiscuous mode [ 560.855113][ T50] bond6 (unregistering): Released all slaves [ 560.912628][ T50] bond7 (unregistering): (slave veth19): Releasing active interface [ 560.914762][ T50] bond7 (unregistering): Released all slaves [ 560.951281][ T50] bond8 (unregistering): (slave veth21): Releasing active interface [ 560.955078][ T50] bond8 (unregistering): Released all slaves [ 560.987719][ T50] bond9 (unregistering): (slave veth23): Releasing active interface [ 561.001079][ T50] bond9 (unregistering): Released all slaves [ 561.027319][ T50] bond10 (unregistering): (slave veth25): Releasing active interface [ 561.032241][ T50] bond10 (unregistering): Released all slaves [ 561.058280][ T50] bond11 (unregistering): Released all slaves [ 561.081839][ T50] bond12 (unregistering): (slave bond13): Releasing backup interface [ 561.082562][ T50] bond12 (unregistering): Released all slaves [ 561.114612][ T50] bond13 (unregistering): Released all slaves [ 561.138810][ T50] bond14 (unregistering): (slave veth27): Releasing active interface [ 561.154287][ T50] bond14 (unregistering): Released all slaves [ 561.177650][ T50] bond15 (unregistering): (slave veth29): Releasing active interface [ 561.191778][ T50] bond15 (unregistering): Released all slaves [ 561.213334][ T50] bond16 (unregistering): (slave veth31): Releasing active interface [ 561.215632][ T50] bond16 (unregistering): Released all slaves [ 561.285028][T18828] netlink: 'syz.1.3233': attribute type 1 has an invalid length. [ 561.322489][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 561.818046][T18868] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3239'. [ 561.843107][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3240'. [ 561.935738][T18868] syzkaller0: entered promiscuous mode [ 561.935791][T18868] syzkaller0: entered allmulticast mode [ 562.382520][ T50] tipc: Left network mode [ 562.579490][ T50] IPVS: stopping master sync thread 18325 ... [ 562.746591][T18903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3243'. [ 562.919269][T18886] netlink: 'syz.2.3243': attribute type 16 has an invalid length. [ 562.919322][T18886] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3243'. [ 563.195349][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.388614][T18915] dummy0: mtu less than device minimum [ 563.855460][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3250'. [ 563.939167][T18719] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.939414][T18719] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.939753][T18719] bridge_slave_0: entered allmulticast mode [ 563.967838][T18719] bridge_slave_0: entered promiscuous mode [ 563.982843][T18923] netlink: 'syz.0.3249': attribute type 1 has an invalid length. [ 564.028859][T18719] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.034804][T18719] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.035164][T18719] bridge_slave_1: entered allmulticast mode [ 564.085774][T18719] bridge_slave_1: entered promiscuous mode [ 564.120545][T18916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3246'. [ 564.420729][T18945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3251'. [ 564.530337][T18950] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3254'. [ 564.587917][T18719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.607970][T18719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.647189][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 564.743073][T18719] team0: Port device team_slave_0 added [ 564.743285][T18953] netlink: 'syz.2.3255': attribute type 6 has an invalid length. [ 564.766971][T18719] team0: Port device team_slave_1 added [ 564.916830][T18954] syzkaller0: entered promiscuous mode [ 564.916860][T18954] syzkaller0: entered allmulticast mode [ 565.420441][T18977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3258'. [ 565.585881][T18983] netlink: 'syz.2.3258': attribute type 16 has an invalid length. [ 565.585907][T18983] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3258'. [ 565.916333][ T50] batadv0: left promiscuous mode [ 565.934103][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.934199][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.937834][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.937860][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.168770][ T50] veth1_macvtap: left promiscuous mode [ 566.175638][ T50] veth0_macvtap: left promiscuous mode [ 566.515141][T19004] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input111 [ 568.276207][ T298] bridge1: port 1(veth3) entered blocking state [ 568.276423][ T298] bridge1: port 1(veth3) entered forwarding state [ 568.297266][T18719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.297301][T18719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.297343][T18719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.525052][T18719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.525088][T18719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.525140][T18719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.536723][ T8214] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 568.894180][ T30] audit: type=1800 audit(1792641772.587:12): pid=19033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3267" name="blkio.bfq.time_recursive" dev="tmpfs" ino=377 res=0 errno=0 [ 568.930670][T18719] hsr_slave_0: entered promiscuous mode [ 568.936690][T18719] hsr_slave_1: entered promiscuous mode [ 568.950385][T18719] debugfs: 'hsr0' already exists in 'hsr' [ 568.950432][T18719] Cannot create hsr debugfs directory [ 569.378925][T19037] netlink: 'syz.1.3268': attribute type 1 has an invalid length. [ 569.438658][ T50] IPVS: stop unused estimator thread 0... [ 569.542558][T19037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 569.767997][T19050] bond1: (slave dummy0): making interface the new active one [ 569.798385][T19050] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 570.141226][T19060] ip6gre1: entered allmulticast mode [ 570.231251][T19060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input112 [ 570.258963][T19071] __nla_validate_parse: 1 callbacks suppressed [ 570.258985][T19071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3274'. [ 570.466412][T19082] netlink: 'syz.3.3274': attribute type 16 has an invalid length. [ 570.466453][T19082] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3274'. [ 571.450662][T19106] ieee802154 phy0 wpan0: encryption failed: -126 [ 571.453986][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'. [ 571.454010][T19106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3281'. [ 571.454233][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'. [ 571.454246][T19106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3281'. [ 571.591795][T19108] netlink: 'syz.1.3282': attribute type 10 has an invalid length. [ 571.594619][ T30] audit: type=1804 audit(1792641775.277:13): pid=19110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3282" name="/newroot/43/cgroup.controllers" dev="tmpfs" ino=235 res=1 errno=0 [ 571.594672][ T30] audit: type=1800 audit(1792641775.277:14): pid=19110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3282" name="cgroup.controllers" dev="tmpfs" ino=235 res=0 errno=0 [ 571.798309][T19108] bond1: (slave dummy0): Releasing active interface [ 571.863652][T19108] team0: Port device dummy0 added [ 572.013863][T19114] block nbd0: reconnected socket [ 572.013883][T19114] nbd: socks must be embedded in a SOCK_ITEM attr [ 572.169839][T19124] ip_tables: iptables: counters copy to user failed while replacing table [ 572.189901][ T52] block nbd0: Receive control failed (result -32) [ 572.611461][T19134] netlink: 'syz.0.3286': attribute type 1 has an invalid length. [ 572.670024][T19134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.762548][T19141] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3287'. [ 572.820659][T18719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 572.840901][T18719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 572.859866][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 572.882239][T19138] bond1: (slave dummy0): making interface the new active one [ 572.885617][T19138] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 572.891384][T18719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 572.916615][T18719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 572.917917][T18719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 572.964325][T18719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 572.977835][T19141] syzkaller0: entered promiscuous mode [ 572.977895][T19141] syzkaller0: entered allmulticast mode [ 572.994352][T18719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 573.008260][T18719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.525972][T19158] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input113 [ 573.553135][T18719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.658132][T18719] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.694874][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.695129][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.845978][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.846106][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.935011][T19164] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3291'. [ 574.452651][T19175] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.452690][T19175] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 574.616097][T19183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3294'. [ 574.616127][T19183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3294'. [ 575.215032][T19191] syzkaller0: entered promiscuous mode [ 575.215069][T19191] syzkaller0: entered allmulticast mode [ 575.298203][T19194] __nla_validate_parse: 2 callbacks suppressed [ 575.298226][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3296'. [ 575.865672][T19177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.865710][T19177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 576.216948][T19177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.216986][T19177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 576.808849][T19235] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input114 [ 577.105250][ T8214] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 577.105285][ T8214] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 577.129408][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'. [ 577.151689][T18719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.482912][T19177] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 577.483045][T19177] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 577.764872][T19261] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3304'. [ 577.999192][T19271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3306'. [ 578.225118][T19271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 578.278611][T19275] macvlan2: entered promiscuous mode [ 578.278652][T19275] bond2: entered promiscuous mode [ 578.291458][T19275] macvlan2: entered allmulticast mode [ 578.291496][T19275] bond2: entered allmulticast mode [ 578.310478][T19275] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 578.325151][T19275] bond2: left allmulticast mode [ 578.325198][T19275] bond2: left promiscuous mode [ 578.572708][T18719] veth0_vlan: entered promiscuous mode [ 578.616160][T18719] veth1_vlan: entered promiscuous mode [ 578.691560][T18719] veth0_macvtap: entered promiscuous mode [ 578.715321][T18719] veth1_macvtap: entered promiscuous mode [ 578.798849][T18719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.824445][T18719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.907466][T19289] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3311'. [ 578.920070][ T298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.920712][ T283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.920786][ T283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.932126][ T298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.106414][T19291] netlink: 'syz.0.3310': attribute type 1 has an invalid length. [ 579.212528][T19291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.227203][ T8221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.227241][ T8221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.318814][T19291] bond1: (slave dummy0): Releasing active interface [ 579.351661][T19291] bond2: (slave dummy0): making interface the new active one [ 579.362024][T19291] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 579.404778][ T8214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.404802][ T8214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.623711][T19305] syzkaller0: entered promiscuous mode [ 579.623767][T19305] syzkaller0: entered allmulticast mode [ 579.776604][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3315'. [ 580.614933][T19341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3320'. [ 581.042335][T19357] netlink: 'syz.0.3325': attribute type 1 has an invalid length. [ 581.381548][ T52] Bluetooth: hci4: unexpected cc 0x2040 length: 5 > 1 [ 581.660984][T18308] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.668513][T18308] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.676009][T18308] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.696286][T18308] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.696966][T18308] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.749333][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 581.777525][T19365] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3328'. [ 582.719762][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 583.234960][ T8223] IPVS: starting estimator thread 0... [ 583.341227][T19405] IPVS: using max 31 ests per chain, 74400 per kthread [ 583.416988][T19362] rxe_eth0 speed is unknown, defaulting to 1000 [ 583.654143][T19411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3338'. [ 583.821855][ T52] Bluetooth: hci1: command tx timeout [ 583.839837][T19418] ip6gre1: entered allmulticast mode [ 583.868689][T19414] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input115 [ 584.131770][T19428] bridge1: entered promiscuous mode [ 584.131793][T19428] bridge1: entered allmulticast mode [ 584.203619][T19428] team0: Port device bridge1 added [ 584.265025][T19362] lo speed is unknown, defaulting to 1000 [ 584.887843][T19437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3343'. [ 585.046405][T19437] pim6reg: entered allmulticast mode [ 585.417894][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3347'. [ 585.889905][T19362] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.890608][T19362] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.890830][T19362] bridge_slave_0: entered allmulticast mode [ 585.894200][T19362] bridge_slave_0: entered promiscuous mode [ 585.898633][T19362] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.898770][T19362] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.898925][T19362] bridge_slave_1: entered allmulticast mode [ 585.903637][ T52] Bluetooth: hci1: command tx timeout [ 585.903852][T19362] bridge_slave_1: entered promiscuous mode [ 585.982363][T19456] syzkaller0: entered promiscuous mode [ 585.982387][T19456] syzkaller0: entered allmulticast mode [ 586.210212][T19362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.223794][T19362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.340049][T19484] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input116 [ 586.397264][T19362] team0: Port device team_slave_0 added [ 586.418557][T19362] team0: Port device team_slave_1 added [ 586.495928][T19498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3353'. [ 586.555507][T19362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.555527][T19362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.555550][T19362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.585851][T19496] netlink: 'syz.1.3354': attribute type 4 has an invalid length. [ 586.585909][T19496] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3354'. [ 586.645883][T19362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.645918][T19362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.645975][T19362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.824040][T19362] hsr_slave_0: entered promiscuous mode [ 586.825947][T19362] hsr_slave_1: entered promiscuous mode [ 586.826838][T19362] debugfs: 'hsr0' already exists in 'hsr' [ 586.826859][T19362] Cannot create hsr debugfs directory [ 586.991999][T19506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3355'. [ 587.042215][T19506] tipc: Can't bind to reserved service type 2 [ 587.094253][T19509] geneve1: entered promiscuous mode [ 587.151085][T19509] siw: device registration error -23 [ 587.271206][T19362] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 587.357096][T19516] netlink: 'syz.0.3357': attribute type 21 has an invalid length. [ 587.357136][T19516] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3357'. [ 587.435921][T19362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 587.493972][T19516] netlink: 'syz.0.3357': attribute type 5 has an invalid length. [ 587.494012][T19516] netlink: 'syz.0.3357': attribute type 6 has an invalid length. [ 587.494041][T19516] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3357'. [ 587.516456][T19362] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 587.572223][T19362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 587.576424][T19362] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 587.615023][T19362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 587.703956][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3361'. [ 587.752111][T19362] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 587.775628][T19362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 587.994095][ T52] Bluetooth: hci1: command tx timeout [ 588.225041][T19362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.270530][T19362] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.286059][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.286229][ T8214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.343389][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.343554][ T8214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.443751][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 588.443793][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 588.443849][T19555] netlink: 'syz.1.3363': attribute type 12 has an invalid length. [ 588.443880][T19555] netlink: 'syz.1.3363': attribute type 14 has an invalid length. [ 588.488722][T19559] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3364'. [ 588.524955][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3365'. [ 588.540856][T19555] netlink: 'syz.1.3363': attribute type 12 has an invalid length. [ 588.540880][T19555] netlink: 'syz.1.3363': attribute type 14 has an invalid length. [ 588.543837][ T120] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.544519][ T120] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.544875][ T120] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.569583][ T8214] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.858707][T19562] syzkaller0: entered promiscuous mode [ 588.858748][T19562] syzkaller0: entered allmulticast mode [ 588.932017][T19568] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input117 [ 590.060318][ T52] Bluetooth: hci1: command tx timeout [ 590.326806][T19362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.350680][T19623] syzkaller0: entered promiscuous mode [ 590.350706][T19623] syzkaller0: entered allmulticast mode [ 590.682276][T19362] veth0_vlan: entered promiscuous mode [ 590.748662][T19633] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input118 [ 590.775727][T19362] veth1_vlan: entered promiscuous mode [ 591.104178][T19362] veth0_macvtap: entered promiscuous mode [ 591.149664][T19362] veth1_macvtap: entered promiscuous mode [ 591.292330][T19362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.315478][T19362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.400690][ T8221] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.401296][ T8221] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.401336][ T8221] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.497032][ T8212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.497068][ T8212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.543149][ T298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.592976][T19646] netlink: 'syz.4.3380': attribute type 1 has an invalid length. [ 591.592999][T19646] __nla_validate_parse: 5 callbacks suppressed [ 591.593011][T19646] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3380'. [ 591.616806][ T283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.616877][ T283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.618341][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3380'. [ 591.820420][T19650] macsec1: entered promiscuous mode [ 591.820443][T19650] macsec1: entered allmulticast mode [ 592.089016][T19669] netlink: 'syz.2.3326': attribute type 1 has an invalid length. [ 593.005257][T19692] netlink: zone id is out of range [ 593.005275][T19692] netlink: zone id is out of range [ 593.005284][T19692] netlink: zone id is out of range [ 593.005292][T19692] netlink: zone id is out of range [ 593.005300][T19692] netlink: zone id is out of range [ 593.005308][T19692] netlink: zone id is out of range [ 593.005320][T19692] netlink: zone id is out of range [ 593.005327][T19692] netlink: zone id is out of range [ 593.005335][T19692] netlink: zone id is out of range [ 593.005343][T19692] netlink: zone id is out of range [ 593.008623][T19692] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3390'. [ 593.315949][T19700] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input119 [ 594.927951][T19658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 595.131725][ T52] Bluetooth: hci5: unexpected cc 0x2040 length: 5 > 1 [ 595.577105][T19720] syzkaller0: entered promiscuous mode [ 595.577144][T19720] syzkaller0: entered allmulticast mode [ 595.612437][T19720] tipc: Started in network mode [ 595.612501][T19720] tipc: Node identity e218a9694f6a, cluster identity 4711 [ 595.616823][T19720] tipc: Enabled bearer , priority 0 [ 595.662115][T19725] netlink: 'syz.4.3400': attribute type 1 has an invalid length. [ 595.676664][T19720] tipc: Resetting bearer [ 595.848078][T19716] tipc: Resetting bearer [ 595.994299][T19716] tipc: Disabling bearer [ 596.352622][T19741] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3403'. [ 596.645776][T19748] netlink: 844 bytes leftover after parsing attributes in process `syz.0.3406'. [ 596.645809][T19748] netlink: 844 bytes leftover after parsing attributes in process `syz.0.3406'. [ 596.768792][T19750] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input120 [ 597.194480][ T52] Bluetooth: hci1: unexpected cc 0x2040 length: 5 > 1 [ 598.196569][T19777] 8021q: VLANs not supported on vcan0 [ 598.346000][T19784] net_ratelimit: 2256 callbacks suppressed [ 598.346022][T19784] netlink: zone id is out of range [ 598.346031][T19784] netlink: zone id is out of range [ 598.346039][T19784] netlink: zone id is out of range [ 598.346047][T19784] netlink: zone id is out of range [ 598.346055][T19784] netlink: zone id is out of range [ 598.346061][T19784] netlink: zone id is out of range [ 598.346073][T19784] netlink: zone id is out of range [ 598.346085][T19784] netlink: zone id is out of range [ 598.346093][T19784] netlink: zone id is out of range [ 598.346101][T19784] netlink: zone id is out of range [ 598.404489][T19786] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3416'. [ 598.453274][T19787] netlink: 'syz.2.3415': attribute type 1 has an invalid length. [ 598.889423][T19791] batman_adv: batadv0: Adding interface: syzkaller0 [ 598.889443][T19791] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.889475][T19791] batman_adv: batadv0: Interface activated: syzkaller0 [ 599.050285][T19795] geneve2: entered allmulticast mode [ 599.660772][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 599.772164][T19809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3421'. [ 600.068905][T19809] veth3: entered allmulticast mode [ 600.116748][T19790] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 600.259240][T19790] batman_adv: batadv0: Removing interface: syzkaller0 [ 600.767777][T19831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3431'. [ 600.767938][T19835] netlink: 'syz.0.3432': attribute type 1 has an invalid length. [ 600.798976][T19831] netlink: 'syz.1.3431': attribute type 1 has an invalid length. [ 600.799016][T19831] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3431'. [ 600.827166][T19835] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.828042][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3431'. [ 600.859478][T19839] netlink: 'syz.2.3433': attribute type 1 has an invalid length. [ 600.867773][T19838] bond3: (slave veth5): Enslaving as an active interface with a down link [ 601.012802][ T52] Bluetooth: hci3: unexpected cc 0x2040 length: 5 > 1 [ 601.483672][T19844] syzkaller0: entered promiscuous mode [ 601.483695][T19844] syzkaller0: entered allmulticast mode [ 601.503199][ T52] Bluetooth: hci4: unexpected cc 0x2040 length: 5 > 1 [ 601.531980][ T52] Bluetooth: hci5: unexpected cc 0x2040 length: 5 > 1 [ 601.732228][T19854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3439'. [ 603.358541][T19885] syzkaller0: entered promiscuous mode [ 603.358568][T19885] syzkaller0: entered allmulticast mode [ 603.446435][T19889] tipc: Started in network mode [ 603.446468][T19889] tipc: Node identity 4ea84c88965, cluster identity 4711 [ 603.488968][T19889] tipc: Enabled bearer , priority 0 [ 603.522469][T19876] tipc: Resetting bearer [ 603.523355][ T52] Bluetooth: hci1: unexpected cc 0x2040 length: 5 > 1 [ 603.609320][T19900] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 603.824572][T19876] tipc: Disabling bearer [ 603.853120][T19897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3450'. [ 604.091279][T19900] 8021q: adding VLAN 0 to HW filter on device bond4 [ 604.254594][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'. [ 604.260779][T19902] bond4: (slave veth7): Enslaving as an active interface with a down link [ 604.318074][T19913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3454'. [ 604.413562][T19912] syzkaller0: entered promiscuous mode [ 604.413587][T19912] syzkaller0: entered allmulticast mode [ 604.477996][T19915] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3455'. [ 604.561685][T19888] infiniband syz0: set active [ 604.561742][T19888] infiniband syz0: added bond0 [ 604.568496][T19888] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 604.582608][T19915] syzkaller0: entered promiscuous mode [ 604.582631][T19915] syzkaller0: entered allmulticast mode [ 604.634560][T19888] infiniband syz0: Couldn't open port 1 [ 604.635869][T19888] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 604.635929][T19888] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 604.635992][T19888] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 604.827828][T19888] RDS/IB: syz0: added [ 604.827959][T19888] smc: adding ib device syz0 with port count 1 [ 604.828000][T19888] smc: ib device syz0 port 1 has no pnetid [ 605.130677][T19933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3461'. [ 605.432733][T19943] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input121 [ 605.644665][T19945] netlink: 'syz.3.3465': attribute type 1 has an invalid length. [ 605.857883][T19945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 606.000947][T19954] bond1: (slave veth5): Enslaving as an active interface with a down link [ 606.211430][T19967] netlink: 'syz.0.3469': attribute type 1 has an invalid length. [ 606.211492][T19967] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3469'. [ 606.212420][T19967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3469'. [ 606.219339][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 606.436557][T19970] pim6reg: entered allmulticast mode [ 606.464856][T19968] pim6reg: left allmulticast mode [ 606.539863][T19975] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3471'. [ 606.586411][T19977] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3472'. [ 606.961488][T19977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3472'. [ 606.964143][T19977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3472'. [ 607.678407][T19980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3473'. [ 607.696097][T19977] syzkaller0: entered promiscuous mode [ 607.696120][T19977] syzkaller0: entered allmulticast mode [ 608.022650][T20005] net_ratelimit: 1123 callbacks suppressed [ 608.022678][T20005] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 608.175850][T20008] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input122 [ 608.311756][T19949] udevd[19949]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 608.312581][T19949] udevd[19949]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 613.985488][T20025] netlink: 'syz.4.3481': attribute type 1 has an invalid length. [ 614.072004][T20025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 614.142228][T18308] Bluetooth: hci1: unexpected cc 0x2040 length: 5 > 1 [ 614.192516][T20030] bond1: (slave veth3): Enslaving as an active interface with a down link [ 615.459887][T20052] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3490'. [ 615.802398][T20052] syzkaller0: entered promiscuous mode [ 615.802465][T20052] syzkaller0: entered allmulticast mode [ 615.891778][T20057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3492'. [ 616.157134][T20072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3493'. [ 616.544192][T20083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3494'. [ 618.718308][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.758831][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.771029][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.787878][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.803155][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 620.946867][T18308] Bluetooth: hci0: command tx timeout [ 622.743847][T20083] 8021q: adding VLAN 0 to HW filter on device bond2 [ 623.021943][T18308] Bluetooth: hci0: command tx timeout [ 623.370452][T20085] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 624.067160][T20116] macsec1: entered promiscuous mode [ 624.067187][T20116] bridge0: entered promiscuous mode [ 624.185247][T20115] [ 624.187848][T20115] ====================================================== [ 624.195499][T20115] WARNING: possible circular locking dependency detected [ 624.203167][T20115] syzkaller #0 Not tainted [ 624.207600][T20115] ------------------------------------------------------ [ 624.214887][T20115] syz.3.3500/20115 is trying to acquire lock: [ 624.222797][T20115] ffff888028bf3418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 624.233303][T20115] [ 624.233303][T20115] but task is already holding lock: [ 624.241334][T20115] ffff888028bf2ef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 624.252090][T20115] [ 624.252090][T20115] which lock already depends on the new lock. [ 624.252090][T20115] [ 624.262607][T20115] [ 624.262607][T20115] the existing dependency chain (in reverse order) is: [ 624.271652][T20115] [ 624.271652][T20115] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 624.280315][T20115] blk_alloc_queue+0x544/0x690 [ 624.285635][T20115] __blk_mq_alloc_disk+0x194/0x390 [ 624.291483][T20115] nbd_dev_add+0x494/0xb60 [ 624.296534][T20115] nbd_init+0x168/0x1f0 [ 624.301363][T20115] do_one_initcall+0x250/0x870 [ 624.306879][T20115] do_initcall_level+0x10a/0x1a0 [ 624.315388][T20115] do_initcalls+0x59/0xa0 [ 624.321104][T20115] kernel_init_freeable+0x29d/0x3e0 [ 624.327125][T20115] kernel_init+0x22/0x1d0 [ 624.332337][T20115] ret_from_fork+0x514/0xb70 [ 624.338220][T20115] ret_from_fork_asm+0x1a/0x30 [ 624.343538][T20115] [ 624.343538][T20115] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 624.354339][T20115] fs_reclaim_acquire+0x71/0x100 [ 624.362502][T20115] __kmalloc_cache_node_noprof+0x66/0x620 [ 624.370435][T20115] create_worker+0x112/0x7c0 [ 624.375758][T20115] workqueue_prepare_cpu+0xe4/0x170 [ 624.382194][T20115] cpuhp_invoke_callback+0x434/0x810 [ 624.390037][T20115] _cpu_up+0x2ce/0x5b0 [ 624.396366][T20115] cpu_up+0x1d2/0x220 [ 624.401496][T20115] cpuhp_bringup_mask+0xb2/0x1a0 [ 624.407879][T20115] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 624.415262][T20115] bringup_nonboot_cpus+0x17/0x30 [ 624.421528][T20115] smp_init+0x32/0x110 [ 624.426581][T20115] kernel_init_freeable+0x27f/0x3e0 [ 624.432693][T20115] kernel_init+0x22/0x1d0 [ 624.437577][T20115] ret_from_fork+0x514/0xb70 [ 624.442828][T20115] ret_from_fork_asm+0x1a/0x30 [ 624.448659][T20115] [ 624.448659][T20115] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 624.457039][T20115] cpus_read_lock+0x42/0x160 [ 624.463159][T20115] static_key_slow_inc+0x12/0x30 [ 624.469137][T20115] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 624.476408][T20115] nbd_genl_foreach_sock+0x265/0x450 [ 624.482513][T20115] nbd_genl_reconfigure+0xbbb/0x1040 [ 624.490534][T20115] genl_family_rcv_msg_doit+0x233/0x340 [ 624.499239][T20115] genl_rcv_msg+0x614/0x7a0 [ 624.504688][T20115] netlink_rcv_skb+0x226/0x4a0 [ 624.510103][T20115] genl_rcv+0x28/0x40 [ 624.514832][T20115] netlink_unicast+0x8ef/0xa80 [ 624.520137][T20115] netlink_sendmsg+0x813/0xb40 [ 624.526232][T20115] sock_sendmsg_nosec+0x14e/0x190 [ 624.532071][T20115] ____sys_sendmsg+0x54e/0x850 [ 624.537407][T20115] ___sys_sendmsg+0x2a5/0x360 [ 624.543261][T20115] __x64_sys_sendmsg+0x1b1/0x290 [ 624.549284][T20115] do_syscall_64+0x166/0x520 [ 624.556812][T20115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.566153][T20115] [ 624.566153][T20115] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 624.574679][T20115] __mutex_lock+0x19d/0x1550 [ 624.580511][T20115] nbd_queue_rq+0x373/0xff0 [ 624.585854][T20115] blk_mq_dispatch_rq_list+0x499/0x1990 [ 624.593702][T20115] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 624.603055][T20115] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 624.610380][T20115] blk_mq_run_work_fn+0x16c/0x300 [ 624.617770][T20115] process_scheduled_works+0xc3d/0x1630 [ 624.624783][T20115] worker_thread+0xa47/0xfb0 [ 624.630029][T20115] kthread+0x38b/0x480 [ 624.635076][T20115] ret_from_fork+0x514/0xb70 [ 624.643041][T20115] ret_from_fork_asm+0x1a/0x30 [ 624.649237][T20115] [ 624.649237][T20115] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 624.656719][T20115] __mutex_lock+0x19d/0x1550 [ 624.663492][T20115] nbd_queue_rq+0xc1/0xff0 [ 624.671480][T20115] blk_mq_dispatch_rq_list+0x499/0x1990 [ 624.679832][T20115] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 624.689255][T20115] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 624.699279][T20115] blk_mq_run_work_fn+0x16c/0x300 [ 624.705554][T20115] process_scheduled_works+0xc3d/0x1630 [ 624.712541][T20115] worker_thread+0xa47/0xfb0 [ 624.717676][T20115] kthread+0x38b/0x480 [ 624.722442][T20115] ret_from_fork+0x514/0xb70 [ 624.727661][T20115] ret_from_fork_asm+0x1a/0x30 [ 624.733670][T20115] [ 624.733670][T20115] -> #1 (set->srcu){.+.+}-{0:0}: [ 624.741593][T20115] __synchronize_srcu+0xc9/0x2f0 [ 624.747183][T20115] elevator_switch+0x1e8/0x7b0 [ 624.752497][T20115] elevator_change+0x2fa/0x480 [ 624.757893][T20115] elevator_set_default+0x375/0x440 [ 624.764223][T20115] blk_register_queue+0x3f3/0x4e0 [ 624.770908][T20115] __add_disk+0x6b8/0xdb0 [ 624.776468][T20115] add_disk_fwnode+0x100/0x3a0 [ 624.781784][T20115] nbd_dev_add+0x733/0xb60 [ 624.787015][T20115] nbd_init+0x168/0x1f0 [ 624.792325][T20115] do_one_initcall+0x250/0x870 [ 624.797756][T20115] do_initcall_level+0x10a/0x1a0 [ 624.803424][T20115] do_initcalls+0x59/0xa0 [ 624.808392][T20115] kernel_init_freeable+0x29d/0x3e0 [ 624.814157][T20115] kernel_init+0x22/0x1d0 [ 624.819132][T20115] ret_from_fork+0x514/0xb70 [ 624.824270][T20115] ret_from_fork_asm+0x1a/0x30 [ 624.829567][T20115] [ 624.829567][T20115] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 624.838253][T20115] __lock_acquire+0x164c/0x2de0 [ 624.844553][T20115] lock_acquire+0x115/0x350 [ 624.850212][T20115] __mutex_lock+0x19d/0x1550 [ 624.855474][T20115] elevator_change+0x1af/0x480 [ 624.861781][T20115] elevator_set_none+0xb5/0x140 [ 624.867723][T20115] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 624.874818][T20115] nbd_start_device+0x189/0xb30 [ 624.883149][T20115] nbd_genl_connect+0x167d/0x1cd0 [ 624.890390][T20115] genl_family_rcv_msg_doit+0x233/0x340 [ 624.900581][T20115] genl_rcv_msg+0x614/0x7a0 [ 624.907840][T20115] netlink_rcv_skb+0x226/0x4a0 [ 624.913255][T20115] genl_rcv+0x28/0x40 [ 624.918424][T20115] netlink_unicast+0x8ef/0xa80 [ 624.924099][T20115] netlink_sendmsg+0x813/0xb40 [ 624.929506][T20115] sock_sendmsg_nosec+0x14e/0x190 [ 624.935092][T20115] ____sys_sendmsg+0x54e/0x850 [ 624.940419][T20115] ___sys_sendmsg+0x2a5/0x360 [ 624.945644][T20115] __x64_sys_sendmsg+0x1b1/0x290 [ 624.951123][T20115] do_syscall_64+0x166/0x520 [ 624.956357][T20115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.963916][T20115] [ 624.963916][T20115] other info that might help us debug this: [ 624.963916][T20115] [ 624.974429][T20115] Chain exists of: [ 624.974429][T20115] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 624.974429][T20115] [ 624.989248][T20115] Possible unsafe locking scenario: [ 624.989248][T20115] [ 624.999505][T20115] CPU0 CPU1 [ 625.007791][T20115] ---- ---- [ 625.014287][T20115] lock(&q->q_usage_counter(io)#51); [ 625.020503][T20115] lock(fs_reclaim); [ 625.029452][T20115] lock(&q->q_usage_counter(io)#51); [ 625.040360][T20115] lock(&q->elevator_lock); [ 625.045763][T20115] [ 625.045763][T20115] *** DEADLOCK *** [ 625.045763][T20115] [ 625.054868][T20115] locks held by syz.3.3500/20115: 6, last CPU#1: [ 625.063225][T20115] #0: ffffffff912c05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 625.072860][T20115] #1: ffffffff912c0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 625.082321][T20115] #2: ffff888028c9b1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 625.094459][T20115] #3: ffff888028c9b0d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 625.108510][T20115] #4: ffff888028bf2ef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 625.120043][T20115] #5: ffff888028bf2f28 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 625.131671][T20115] [ 625.131671][T20115] stack backtrace: [ 625.138291][T20115] CPU: 1 UID: 0 PID: 20115 Comm: syz.3.3500 Not tainted syzkaller #0 PREEMPT(full) [ 625.148380][T20115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 625.158990][T20115] Call Trace: [ 625.162287][T20115] [ 625.165322][T20115] dump_stack_lvl+0xe8/0x150 [ 625.169956][T20115] print_circular_bug+0x2e2/0x300 [ 625.176825][T20115] check_noncircular+0x12f/0x150 [ 625.181984][T20115] __lock_acquire+0x164c/0x2de0 [ 625.187047][T20115] lock_acquire+0x115/0x350 [ 625.191613][T20115] ? elevator_change+0x1af/0x480 [ 625.196720][T20115] __mutex_lock+0x19d/0x1550 [ 625.201636][T20115] ? elevator_change+0x1af/0x480 [ 625.206599][T20115] ? rcu_is_watching+0x16/0xb0 [ 625.211498][T20115] ? elevator_change+0x1af/0x480 [ 625.216576][T20115] ? __pfx___mutex_lock+0x10/0x10 [ 625.221900][T20115] ? enable_work+0x17f/0x230 [ 625.226572][T20115] ? lockdep_hardirqs_on+0x7b/0x110 [ 625.231887][T20115] ? __cancel_work_sync+0xf8/0x110 [ 625.237058][T20115] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 625.242574][T20115] elevator_change+0x1af/0x480 [ 625.248186][T20115] elevator_set_none+0xb5/0x140 [ 625.254610][T20115] ? __pfx_elevator_set_none+0x10/0x10 [ 625.261325][T20115] ? xa_load+0x1db/0x210 [ 625.265771][T20115] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 625.271739][T20115] ? kernfs_add_one+0xfc/0x6f0 [ 625.276613][T20115] ? nbd_start_device+0x17d/0xb30 [ 625.281676][T20115] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 625.289575][T20115] ? sysfs_add_file_mode_ns+0x258/0x300 [ 625.296795][T20115] nbd_start_device+0x189/0xb30 [ 625.305240][T20115] ? device_create_file+0xf4/0x1b0 [ 625.312633][T20115] nbd_genl_connect+0x167d/0x1cd0 [ 625.318148][T20115] ? __pfx_nbd_genl_connect+0x10/0x10 [ 625.324865][T20115] ? rcu_is_watching+0x16/0xb0 [ 625.329951][T20115] ? __nla_parse+0x40/0x60 [ 625.335902][T20115] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 625.344631][T20115] genl_family_rcv_msg_doit+0x233/0x340 [ 625.351060][T20115] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 625.358647][T20115] ? __lock_acquire+0x747/0x2de0 [ 625.363726][T20115] genl_rcv_msg+0x614/0x7a0 [ 625.368350][T20115] ? __pfx_genl_rcv_msg+0x10/0x10 [ 625.374546][T20115] ? __pfx_nbd_genl_connect+0x10/0x10 [ 625.380133][T20115] netlink_rcv_skb+0x226/0x4a0 [ 625.384980][T20115] ? __pfx_genl_rcv_msg+0x10/0x10 [ 625.390036][T20115] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 625.395413][T20115] ? down_read+0x2be/0x330 [ 625.399865][T20115] genl_rcv+0x28/0x40 [ 625.404044][T20115] netlink_unicast+0x8ef/0xa80 [ 625.408848][T20115] netlink_sendmsg+0x813/0xb40 [ 625.413845][T20115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.419212][T20115] ? apparmor_socket_sendmsg+0x98/0x360 [ 625.426282][T20115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.431985][T20115] sock_sendmsg_nosec+0x14e/0x190 [ 625.439587][T20115] ____sys_sendmsg+0x54e/0x850 [ 625.445016][T20115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.450662][T20115] ? import_iovec+0x73/0xa0 [ 625.456002][T20115] ___sys_sendmsg+0x2a5/0x360 [ 625.461172][T20115] ? __lock_acquire+0x747/0x2de0 [ 625.466406][T20115] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.472615][T20115] ? futex_wait+0x2a2/0x390 [ 625.477371][T20115] ? __fget_files+0x2a/0x420 [ 625.482673][T20115] ? __fget_files+0x3a2/0x420 [ 625.489827][T20115] __x64_sys_sendmsg+0x1b1/0x290 [ 625.496024][T20115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 625.503644][T20115] do_syscall_64+0x166/0x520 [ 625.508804][T20115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.517110][T20115] ? clear_bhb_loop+0x70/0xc0 [ 625.523954][T20115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.535021][T20115] RIP: 0033:0x7f899db9f559 [ 625.540273][T20115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.566509][T20115] RSP: 002b:00007f899ea02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.576184][T20115] RAX: ffffffffffffffda RBX: 00007f899de26090 RCX: 00007f899db9f559 [ 625.585223][T20115] RDX: 000000000400400c RSI: 0000200000000280 RDI: 000000000000000b [ 625.597189][T20115] RBP: 00007f899dc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 625.607581][T20115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.617338][T20115] R13: 00007f899de26128 R14: 00007f899de26090 R15: 00007ffc6f83e338 [ 625.627462][T20115] [ 625.701509][T18308] Bluetooth: hci0: command tx timeout [ 625.724790][T20107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.738410][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.813861][T20121] smc: removing ib device sys [ 625.834761][T20121] smbdirect: ib_dev[sys] removed [ 625.848691][T18308] block nbd2: Receive control failed (result -32) [ 625.848876][T18308] block nbd2: Receive control failed (result -32) [ 626.011682][T20088] rxe_eth0 speed is unknown, defaulting to 1000 [ 626.036268][T20088] rxe_eth0 speed is unknown, defaulting to 1000 [ 626.047603][T20088] rxe_eth0 speed is unknown, defaulting to 1000 [ 626.426178][ T173] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.426236][ T173] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.523560][ T173] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.523620][ T173] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.630705][ T173] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.630865][ T173] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.674998][T20088] infiniband rxe0: set active [ 626.675052][T17329] rxe_eth0 speed is unknown, defaulting to 1000 [ 626.675104][T20088] infiniband rxe0: added rxe_eth0 [ 626.708148][T20088] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 626.708187][T20088] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 626.708222][T20088] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 626.777104][ T173] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.777145][ T173] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.805562][T20088] RDS/IB: rxe0: added [ 626.805612][T20088] smc: adding ib device rxe0 with port count 1 [ 626.805641][T20088] smc: ib device rxe0 port 1 has no pnetid [ 626.825237][T18671] rxe_eth0 speed is unknown, defaulting to 1000 [ 626.827155][T20088] rxe_eth0 speed is unknown, defaulting to 1000 [ 627.044605][ T173] bridge_slave_1: left allmulticast mode [ 627.044630][ T173] bridge_slave_1: left promiscuous mode [ 627.044837][ T173] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.077846][ T173] bridge_slave_0: left allmulticast mode [ 627.077903][ T173] bridge_slave_0: left promiscuous mode [ 627.078144][ T173] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.348551][ T173] team0: Port device bridge1 removed [ 627.408712][ T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.422645][ T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.427458][ T173] bond0 (unregistering): (slave team0): Releasing backup interface [ 627.455674][ T173] bond0 (unregistering): Released all slaves [ 627.475475][ T173] bond1 (unregistering): Released all slaves [ 627.493942][ T173] bond2 (unregistering): Released all slaves [ 627.531013][T20088] rxe_eth0 speed is unknown, defaulting to 1000 [ 627.740313][T18308] Bluetooth: hci0: command tx timeout [ 628.036773][T20088] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.114204][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 628.208966][T20088] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.431832][T20088] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.634588][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 628.686281][T20088] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.893945][T20088] rxe_eth0 speed is unknown, defaulting to 1000 [ 629.095107][T20088] rxe_eth0 speed is unknown, defaulting to 1000 [ 629.133454][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 629.284021][ T283] smc: removing ib device syz0 [ 629.321125][T20088] lo speed is unknown, defaulting to 1000 [ 629.322959][T20088] rxe_eth0 speed is unknown, defaulting to 1000 [ 629.398125][ T283] smbdirect: ib_dev[syz0] removed [ 630.177407][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 630.433166][T20088] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.433292][T20088] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.433470][T20088] bridge_slave_0: entered allmulticast mode [ 630.434713][T20088] bridge_slave_0: entered promiscuous mode [ 630.480800][T20088] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.480867][T20088] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.480960][T20088] bridge_slave_1: entered allmulticast mode [ 630.482010][T20088] bridge_slave_1: entered promiscuous mode [ 630.618371][T20088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.644988][T20088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.742037][T20088] team0: Port device team_slave_0 added [ 630.744165][T20088] team0: Port device team_slave_1 added [ 630.823437][T20088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.823457][T20088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.823480][T20088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.826468][T20088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.826486][T20088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.826507][T20088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.950563][ T173] tipc: Left network mode [ 631.116627][T20088] hsr_slave_0: entered promiscuous mode [ 631.117763][T20088] hsr_slave_1: entered promiscuous mode [ 631.123074][T20088] debugfs: 'hsr0' already exists in 'hsr' [ 631.123111][T20088] Cannot create hsr debugfs directory [ 631.355634][ T173] hsr_slave_0: left promiscuous mode [ 631.356166][ T173] hsr_slave_1: left promiscuous mode [ 631.356667][ T173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.356684][ T173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.357199][ T173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.357212][ T173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.373756][ T173] veth1_macvtap: left promiscuous mode [ 631.373820][ T173] veth0_macvtap: left promiscuous mode [ 631.373958][ T173] veth1_vlan: left promiscuous mode [ 631.374034][ T173] veth0_vlan: left promiscuous mode [ 631.543025][ T173] team0 (unregistering): Port device team_slave_1 removed [ 631.578718][ T173] team0 (unregistering): Port device team_slave_0 removed [ 631.651194][ T173] team0 (unregistering): Port device dummy0 removed [ 631.770394][T20088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 631.812657][T20088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.813549][T20088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 631.853203][T20088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.854057][T20088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 631.882917][T20088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.884272][T20088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 631.949496][T20088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.996975][ T173] IPVS: stop unused estimator thread 0... [ 632.053531][T20088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.077671][T20088] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.090075][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.090142][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.096614][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.096670][ T8223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.454506][T20088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.670606][T20088] veth0_vlan: entered promiscuous mode [ 632.676102][T20088] veth1_vlan: entered promiscuous mode [ 632.707943][T20088] veth0_macvtap: entered promiscuous mode [ 632.725631][T20088] veth1_macvtap: entered promiscuous mode [ 632.741782][T20088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.746337][T20088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.787769][T20088] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 632.811862][ T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.811896][ T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.813896][T20088] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 632.819291][ T283] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.820182][ T283] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.820237][ T283] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.820266][ T283] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.878230][ T283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.878265][ T283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50