last executing test programs: 55.216042133s ago: executing program 3 (id=3117): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000012090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) 55.186908477s ago: executing program 3 (id=3118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, 0x25, 0x101, 0x70bd25, 0xfffffffc, {0x10}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=0x0, @ANYBLOB="d50633008b00009effffff120000090211000001"], 0x6f4}}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ec8cf5760ecd4e7d1c09ec55743a3c3d48de4b4c39091e9539363e4d5a08781e8b3d0b6974ba13b9aed2e9a00b7b8a7314d194c7ac062501fdb775a2cbf0bc01045aa4a3cb59f131572d9716f08af3507de5f5fd04ade53b2e5e17998011424b136cb168391917ea55f6ee74b616c9f266da14fdee13d2fa0e994c264ea2e969af7c958de3ae30315d439e288b844ecc33deb9ec23d7765d45fe3ec9f9ff2cab688ccd84480af8b0", @ANYRES16=r2, @ANYBLOB="080029bd7000fbdbdf251d00000008000300", @ANYRES32=r6, @ANYBLOB="080001002c000000"], 0x24}, 0x1, 0x0, 0x0, 0x1e034f266531d34}, 0x40) close(r0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) unshare(0xe040400) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x8, 0x0, &(0x7f0000000040)) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x0, 0xb, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x215, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3c}, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00', {}, {}, 0x11}, 0x2e8, 0x110, 0x178, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e28, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x21, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3], 0x4}}, @common=@inet=@multiport={{0x50}, {0x12, 0xe, [0x4e24, 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e20, 0x4e24, 0x7f, 0x4e22, 0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e21], [0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffc, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x5, 'snmp\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 54.980676213s ago: executing program 3 (id=3119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f0000000040)=@ethtool_stats={0x15, 0x1, [0x2]}}) r1 = socket(0x2b, 0x80801, 0x1) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x90) r3 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000fc0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034084000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a830a1620ba", 0xd8}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f0000000040)=@ethtool_stats={0x15, 0x1, [0x2]}}) (async) socket(0x2b, 0x80801, 0x1) (async) shutdown(r1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x90) (async) socket$kcm(0x10, 0x5, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000fc0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034084000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a830a1620ba", 0xd8}], 0x1}, 0x0) (async) 54.739744794s ago: executing program 3 (id=3121): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x3, 0x1}, {0xf, 0x4}, {0xf, 0x3}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000180)=""/161, 0x41, 0xa1, 0x1}, 0x28) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 54.439586244s ago: executing program 3 (id=3124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x7}, 0x1c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r3, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001b14010026bd7000fedb9f2508"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="018000000000ffdbdf25256d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, &(0x7f0000000000)=0xffffd047, 0x4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r7], 0x14}, 0x1, 0x0, 0x0, 0x8095}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c020000000006000000000000000000000000000000000000ff02000000000000000000000000000100010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000000400000000000000010000000000000a00100001"], 0xc4}}, 0x4c050) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r10], 0x18}}, 0x400c0c0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000072009fb3000000000000000007"], 0x18}}, 0x0) 53.803891839s ago: executing program 3 (id=3131): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15", 0xcb}, {0x0}], 0x2}}], 0x1, 0x20000044) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r3}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc848}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 38.752277276s ago: executing program 32 (id=3131): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15", 0xcb}, {0x0}], 0x2}}], 0x1, 0x20000044) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r3}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc848}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 5.199577909s ago: executing program 1 (id=3483): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x109bed8a1a5fce17, 0xffffffffffffffff, 0x85e66000) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x29, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1) (async) r4 = epoll_create1(0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_pwait(r4, &(0x7f00000001c0), 0x0, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) (async) pselect6(0x40, &(0x7f0000000000)={0x36c8, 0x80000001, 0x800000002, 0x3, 0x12, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa4400, 0x0) close(r5) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ffff0000000000000000000095000000000000005500d75667c6cf5355b3715ab0c52cec50104f4c4e13259d5320634e6f6728f62a8a4b07a17ff707fc12fbb0755d3f04924af0b2292ed0c58e780748a38ed74238fe91364b66b27fa6e5c8caff5d439247654597d6ff26a57cd540e2f50293ec712426af1cb2c5d6282f5d61197e670da7c7a968279c1d12f9dab435aac424e76bd902"], 0x0, 0x5, 0x36, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) 3.616758204s ago: executing program 4 (id=3495): unshare(0x2c020400) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x1, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0x8041, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x209, 0x4, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x0, 0x8001, 0x2b12, 0xff, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x67dc, 0x8, 0x11000, 0x8, 0x5, 0x80079b, 0x2, 0x2000001, 0x7f, 0x4, 0x9, 0x7, 0xf, 0x4, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x5, 0x4007, 0x8, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x4, 0x100002, 0x8, 0x2000752, 0x0, 0x3, 0x5, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x1, 0xfdffffff, 0x2, 0xfffffffe, 0x2, 0x100, 0x5, 0x5b, 0x3, 0x33b, 0x5, 0x20006, 0x5, 0x10003, 0x6, 0x4002, 0xd9a, 0xd, 0x29f, 0xfffffff5, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x0, 0x8, 0x5, 0x20000001, 0x1fc, 0xc5c, 0xffffffff]}}) r1 = socket$rxrpc(0x21, 0x2, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000a0000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000ca000000950000000000000039ab0e774910e8"], &(0x7f0000000140)='GPL\x00', 0x1, 0x100, &(0x7f0000000440)=""/216}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x1, 0x18}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r4, 0x4b9b6000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd0, &(0x7f0000001280)=0x8, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002640)=ANY=[@ANYBLOB="200080001e00210025bd7000000000002000000005002a000000000004001180"], 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) 2.941703539s ago: executing program 0 (id=3496): socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) close(0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000060c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x32}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYRES16=r5], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000040) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 2.93698289s ago: executing program 5 (id=3497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000005c0)={0x0, "91a8ec9d04a9b56682a9d2d8ff368611"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540081007bd6a7e0c0cd974e368c8be2025945f79d740cf63bf4b6eadd9347ce75ac833dc8fd7bb322213f88e006b6de6da25970daec68ee781f7a2f788bd3bb5f176579f3ed43be15d9f4a14a6d1a3870130f8bec7be272e5031784601fea2783556cc711d9abf0e26f186322d048cf13c33cf03a6a4dc56f1d494c1490e3ee4c774c55fdc70242f360110f1f6765fd6b7855378be5ef6bb66a729894b82054d4517b60a918b4bf1a3ca77258620a50ba897db24cce381bb38a15adadb0d901924d97a390592b692acdb06ca5ddbf4a9b57bd16", @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x13c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="5f82f2b87e9cdb67204e595c269f150d05812bd7081611b3bddc5460e211ba96b2f7d50a2bcf2afc99557e1fe038fd46d740aff15be513e66612e6b6eb7e7141be44d04aa36b3d7d9d4184648ed896581ae8839626f65cb99318952f57d465add22181dcd247563f135981439fcf598663727d2737b300289d68e84702036e14301a70bb622d8b2e927c78a250df81605104414fb93ca8c4c3fe51abad77ec4c608622055c7e22116c6669875e9d2901ab93dc23f6e8f297eefcaa5592056d8bc017fffd1c10c95d226c3aefe2f0c26a81df8ef1cf441cb6b4b47e7ebafa421746788f", @ANYRES32=r9, @ANYBLOB="00000073006300fdc0c80169aaa53bf604dab1d5f233939ffbf251591b5ac097433ad68212eef4cbad28fdbf8ec64734804ad9e204f7946d6a1e182bcca19b6c0de450f40f1d6bf751cb856ed74482ffff1992e62141061df8da9f0ca88e16996c0d9ca9de34750a8cc55d08096307f3d509bd4ddca6005300bb804d8c52af5aa3543fd54b15a8dd0ce0a1a0ec60fd7a844c244a081f0225e16ea2040057804d1ae06d342d820bc4967748364ba4aa33fbe4f992372af7dd9c901d3206070400888008006900", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="9bb77d08004500ffffffff0c0013008100"/28], 0x7bc}, 0x1, 0x0, 0x0, 0x880}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000015c0)={r2, 0xb46}) 2.732270894s ago: executing program 1 (id=3498): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(rfc4106(aegis256))\x00'}, 0xb5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10001) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x800) sendto$rose(r2, &(0x7f0000000000)="929ce7bc21", 0xfffffffffffffc8f, 0x4000, 0x0, 0x0) 2.713276716s ago: executing program 5 (id=3499): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000004) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000e80400"/20, @ANYRES32=r1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a3000000000a00100000b0a010100000000000000000500000a0900020073797a31000000000900010073797a3000000000080005400000002896000d40e90d797967c9c8c1becd564b76e87bff429eeb56d7aa9611b66db044bcedc09d38f40500000043fa1ba918601fa217c49aa56c958015d75a7f0637dcbf719b7c7932b42bf5aa968d2317640f59b0df33037ba85d4ae85dff05b4bbb7697169df821b99f3fcb4c533c22cda2a67126f320cadaa16eae76e9da235348760256494c7e52b772b852d39ff839afb3f770c811cff0a40000000020c000b400000000000000007a7000d405a6ecb296e17ab9e235eec50bd4fee36ab1a9d4502d92b2bf05853412182b399cd64b808d2435ab55406bc7e14d5799ca3b19cf3383f3f6d86d0e308184cc2354038ce7f7527b2ad86214984b3b46bc7cbb630572f9a9628b3a529b5533a369809c43b24b52bbcc0a588193f29737789f7a0f9ec467da05d4165f6acc978e431ea32d69024b97b078ee0e4db6a496d69093c32b947dc2cacc8e2748e6d2041c1b47bb000080008400000000008000f40000000030c001180070001007274000044000000060a010400000000000000000500000008000b400000000014000480100001800800010064757000040002800900010073797a300000000005000740ae000000140000001100010000000000000000000000000a"], 0x22c}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 2.448003955s ago: executing program 1 (id=3501): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000080)=""/131, &(0x7f0000000140)=0x83) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x2, 0x0, {0xa, 0x4e21, 0x101, @mcast1, 0xaf}}}, 0x32) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r2 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f6, 0x8, 0x70bd2c, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x29, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf9c}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xab}, @generic={0x30, 0x7, 0x9, 0x40, 0x6}, @call={0x85, 0x0, 0x0, 0xab}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1b}, @jmp={0x5, 0x0, 0x1, 0x2, 0x2, 0x134, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x2, 0xa8, &(0x7f0000000500)=""/168, 0x41100, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xb, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000640)=[{0x1, 0x5, 0x4, 0x2}, {0x3, 0x1, 0xf, 0xc}, {0x4, 0x2, 0xa, 0xb}, {0x1, 0x4, 0x2, 0xa}, {0x1, 0x5, 0xc, 0x3}, {0x2, 0x4, 0x4, 0x7}, {0x1, 0x2, 0x3, 0x3}, {0x4, 0x3, 0xc, 0xc}], 0x10, 0x1}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x29, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf9c}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xab}, @generic={0x30, 0x7, 0x9, 0x40, 0x6}, @call={0x85, 0x0, 0x0, 0xab}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1b}, @jmp={0x5, 0x0, 0x1, 0x2, 0x2, 0x134, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x2, 0xa8, &(0x7f0000000500)=""/168, 0x41100, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xb, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000640)=[{0x1, 0x5, 0x4, 0x2}, {0x3, 0x1, 0xf, 0xc}, {0x4, 0x2, 0xa, 0xb}, {0x1, 0x4, 0x2, 0xa}, {0x1, 0x5, 0xc, 0x3}, {0x2, 0x4, 0x4, 0x7}, {0x1, 0x2, 0x3, 0x3}, {0x4, 0x3, 0xc, 0xc}], 0x10, 0x1}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000780)={r1, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r4) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x6c, r7, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff44}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x6c, r7, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff44}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x80, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x80, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000009c0)={0x2, &(0x7f0000000980)=[{0x8, 0xc, 0x0, 0x58fa}, {0x5, 0x2, 0xfa, 0xffff70ec}]}) (async) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000009c0)={0x2, &(0x7f0000000980)=[{0x8, 0xc, 0x0, 0x58fa}, {0x5, 0x2, 0xfa, 0xffff70ec}]}) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000a00)={0x7, 0x3, 0xa, 0x3, 0x9, 0x0, [{0x9, 0x4, 0x81, '\x00', 0x100}, {0x0, 0x5, 0x6, '\x00', 0x1b04}, {0x6, 0x7, 0x7, '\x00', 0x1680}, {0x7, 0x7, 0xb, '\x00', 0x400}, {0xfc59, 0x55, 0x7, '\x00', 0x1101}, {0xa3, 0x1, 0x7, '\x00', 0x204}, {0x5, 0x8, 0xb, '\x00', 0x1200}, {0x10000, 0x7, 0x6, '\x00', 0x2400}, {0x2, 0x2, 0x80000001, '\x00', 0x8}]}) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000a00)={0x7, 0x3, 0xa, 0x3, 0x9, 0x0, [{0x9, 0x4, 0x81, '\x00', 0x100}, {0x0, 0x5, 0x6, '\x00', 0x1b04}, {0x6, 0x7, 0x7, '\x00', 0x1680}, {0x7, 0x7, 0xb, '\x00', 0x400}, {0xfc59, 0x55, 0x7, '\x00', 0x1101}, {0xa3, 0x1, 0x7, '\x00', 0x204}, {0x5, 0x8, 0xb, '\x00', 0x1200}, {0x10000, 0x7, 0x6, '\x00', 0x2400}, {0x2, 0x2, 0x80000001, '\x00', 0x8}]}) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0xcad29395224aafee}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x8c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x77a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffff801}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044880}, 0x20001848) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000dc0)={0x0, @in6={{0xa, 0x4e21, 0x4, @private2, 0xa}}, 0x8, 0x9, 0x872, 0x3, 0x0, 0x3d638775, 0x8}, &(0x7f0000000e80)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000ec0)={r10, 0xa4, "bf12a239abe844549304dfad71a1cb510c291a5ae39f81bb3f1d06f1eb4afb92df2f73211f16d9e20dbf4b2c697b1fd88f86d1ae5deb6d3aee26cc8f32040f3a954f2592c3e5c7b8d4d885eea4151f11bc06a224c9f116afd8448d14eba6230f3d79bd007dacc39c4bc845d8f5131e4dcba1707bb7f1d4b6ab321068d8a49162b2eddca19ddbd26e94f215b2d71bea6afae0f2bab908112f4f94f3bfc6755c7cd494d783"}, &(0x7f0000000f80)=0xac) bind$bt_hci(r3, &(0x7f0000000fc0)={0x1f, 0x1, 0x1}, 0x6) bind$alg(r4, &(0x7f0000001000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000001000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) close(r8) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)={0x114, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x18}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb773}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2f}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x28}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0xc080}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)={0x114, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x18}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb773}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2f}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x28}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0xc080}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000001280)=0x4, 0x4) getsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f00000012c0)={@dev, @loopback, @multicast1}, &(0x7f0000001300)=0xc) (async) getsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f00000012c0)={@dev, @loopback, @multicast1}, &(0x7f0000001300)=0xc) ioctl$FIBMAP(r8, 0x1, &(0x7f0000001340)=0x4) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) 2.247523177s ago: executing program 2 (id=3502): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400210000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) 2.168527588s ago: executing program 1 (id=3503): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async) read$nci(r3, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async) unshare(0x22020600) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8030002d80"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}, 0x2, 0x34005}, 0x0) 2.146187757s ago: executing program 0 (id=3504): syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x4c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@routing={0x33, 0x0, 0x1, 0x6}], {{}, {}, {}, {0x8, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) unshare(0x22020600) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000019000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcac48dc4}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2.076739457s ago: executing program 4 (id=3505): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) socket$packet(0x11, 0x2, 0x300) close(0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000555859d4a0fbaf83895c2f288d65d55a"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x24, 0x101, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) (async) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001840)=""/241, &(0x7f0000001940)=0xf1) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r7, 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) accept$ax25(r4, &(0x7f0000000100)={{}, [@null, @netrom, @default, @default, @null, @rose, @default, @rose]}, &(0x7f0000000180)=0x48) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 2.019934061s ago: executing program 2 (id=3506): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x43, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.857430509s ago: executing program 2 (id=3507): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001040)={r0, &(0x7f0000000040)="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"}, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000001080)={{0x32, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e23, 0x1, 'dh\x00', 0x4, 0x4, 0x2e}, {@private=0xa010100, 0x4e21, 0x2000, 0x80000001, 0xfffff1f2, 0x9}}, 0x44) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001100), 0x101800, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000001180)={0x4, 0x8, '\x00', 0x1, &(0x7f0000001140)=[0x0]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000011c0), r2) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000001200)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000025c0)={&(0x7f0000001280)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000001300)=""/83, 0x53}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/160, 0xa0}, {&(0x7f0000002440)=""/200, 0xc8}], 0x4, &(0x7f0000002580)=""/6, 0x6}, 0x60) r4 = accept$inet(r3, 0x0, &(0x7f0000002600)) bind(r4, &(0x7f0000002640)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x1, 0x2, {0xa, 0x4e21, 0x0, @empty, 0x1}}}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f00000026c0), r2) ioctl$OCFS2_IOC_RESVSP64(r4, 0x4030582a, &(0x7f0000002700)={0x0, 0x0, 0x4, 0x5, 0xf5d, 0x99a}) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002780), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000002880)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x64, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000054) connect$bt_rfcomm(r0, &(0x7f00000028c0)={0x1f, @any, 0x4}, 0xa) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000002900), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000002940)=r0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000002980)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000002a40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000002a80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002ac0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000002b00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000002b40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002b80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002bc0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000002cc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x58, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '/\x02'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20008811) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002d40), r2) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000002e00)={&(0x7f0000002d00), 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x1c, r14, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_OPT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x40, 0x0, 0xd7414e10061bcb03, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24048095) 1.68445257s ago: executing program 0 (id=3508): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x3}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 1.593727272s ago: executing program 2 (id=3509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8106}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a56462712cb064ecce5e7a9ce0a575a4f7952cb768637e60bd5d2e4b5992de991371274fdf535e001022e25659a7c85615c1b88bc894123c090014e8fb87efecdcb73858479526222b22ff81971ef49b2cb0dcebea6d90e9c1677fbefd35893d883a2c559b7af8db8b2d89fcc8af461b2a74af360eace66cec40d927006bd666c8122217c27902b3933106d0cc5bf6fec345ae9606c3c1a3000c94df67ae600900ffa2f49ec035883e27b1a9e9dff3e8bfc7d1be00f1a0820102b19000000000000000009095601e090012086dee84efd375f0642ed261765d3b9efdfbed9b430bcf04060000bdff1c8bcfc00300000000000000ab5d5f299354997c8bef9ca55841a57eddff9220c67c9e17bee524c3dc74c0271124cf9e4e2d23f7062351edf77c7129eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d486e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6ee4830d87a347d448b0737e852306b4713e5ce6cac6a27e29f164b9f16d6f045271b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b5e45a209d48d6dc2389d7f34cb9c02cf517c8ee8a9b6159ce895101c2ccff2bde95aa860ed9b8b6d6b8fcab7663d9bd8415e6f90fdb007b8f3e0ffe3a638c4fd88d20d235173720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a900e1d8cf81bcb1d2620bee688eb0a284040000005cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250b7d00ff03d5314fa8d37932055bb6d30d0000cad2375a34c7f15c3096f31e6aa6887864f62760ae35214552982bba84d92b1261251330dde4cf97b7cc6b2349e4f7a56003f7303d210fccd2efe6cda2595aacc36db66ff83af576b56dfbd40b15d569244d7d6e1182c4fa829c3f86acd17082bfed73ab9ef37705f9d2734801899e248e1a7155e28f000000000000000fce52263e3953a6f8560f852602ca905b58a9e2dbf16dd0322d0bb3ceb1b01752230bcbbf731701b2b1768aabb9a002090c09ab606e91ad9d88e7205464594add8691b62d55127cd891b8abe4358697e1b5f038773c0aa220cdce78b9346adbd72b293e66ef1a04905aaf6bd31e8d40d425d21232956ee45935d7adb2bf9fb37ff145472c58dbc8db58d0cde99df77d86ed71070000000000006d5cf959fb84c9f8ec46ec9af313d13d1bd85d57f598c00eb7bb8b6b4ff5875a50e2ea3287cf0f838bffdbf985fdce1fb66979b51cc6d6d6661354f33986f7acee499e25e3b70db6f15d7f2bfc0000000000000000ff7f00009eeb78c3d2e83f5e0eaf5cec82f45884cb0394271826ac2d5cc0afc4e784b515c659901c5c6a8573436be7b0f64c6176ef37db239a1ee9839436e951aef4196798d518a4820a241cec1b3e4923dae4c87d460900000000000000de7b13645fc6921a759e2c23153f432a3e5167628a94aacd0f40543049d8ef9787b56006227f143ce5554837675b93eeced66fe71bbe2c055660d23af1c9a83b78d0fde1f9dd526858a320563807a1ef41829913ce0b280010dca0cb3a98a8986e8e656dcaa6ae4ee6717a29e50450688763f1b17c156b860ba0d5a121d00ceac30ef5e104c43d76074c3884cb8fa504ebc94f7c83e90b6cad8d2a02df007bd585f4472cfb004cd9f09995000000000021000002cfceb7feffffffffffffffb1a6c40ac666744ca6c8fbba8452b686fd9b6250edd7d86ebc35898637dd88540e40d5799c11ee9883be26229eeee3941494fcd4389af9b755843126338c346b4d50a5b8684ad74bad46f4ffd86292d72a933fcb7304aef4b4a4bf6e054fea3549e08c0dd2334f485da9382887c16306176f73f029e2f9f8145360cfd5ffd66ae82d51e683ff364981b358a5f48af10059a0716951942eed021e41ba076d486cd095ffcefc3e8b8ead226c5a640b06fc13311826d024248f14b62a7fb0f9b95c9e23e7d29aca69e77db40dd00c0b20e43e300b1a46e243e2a8321dbb1270a22d9a2368de08d625566f253f0760abb44c11583fa5b914ab298ade422e4c0ddc7b17dd2aa8ac94d93d6b590000000000000000000000009b90eb1db265c18521667d305886e9c47ad357a76be0c9ce899bdd80a51a2017190a590d092bc500ea71b338098d1007517c1d6e785d5e0975ca2c2edf221b30377e61fce8bf47e7b93da593d154caca75b1ef1273aa501807005593ba45d219d7c656be0fb900000000004093461ceec5fce099368e07060c21cabb846f2447fc7223731787bda817113489be9925b2f568b15e5d22c8fabbfd3edac460c70a5619a043ada38fea3b104f9c1a473b7820faecfbb40b5e0d3681013c0cb2b8acc1ceb5f790210a3be07b2727c4e5a5d20468b3ed35f9a71519904c6dd76dee5738dcdac1f4358bb65c1aca8eb0a65aacbaaca92cc7cc553b1c5181d81c15ff4eaea3bcbfc4e0d06bd8d2e2d941924f860f2aba2253b9038e6923b026b7ece3e9fcdf6aa14a65bd6cd7e78457dac1fb3cdc421d6059e17d44e378189035c2fe489e5b7a87c23ec952e2affbc7a4c707312b17a5f428527cb42a8cbd072490eae617e6ea32ee7d3055bfc9b1128553cb963d3873115296a8bd2efb7368ea2727b294d6eceee49ad9093738a3b1bbfa163a917380953fdc3a443a6585925ee14a817390a655c1988632a414b304d688116d79693efd80b293ddc89bb27529c34f4f8ee3ddbaf1c13a4e15186353efd0ced475794ff5f9b0580f2fb996928f0ca6d1a9f4bda1fe9c1bc2e657448c00ca6afb2e5b1c336d657c87f2634db46e2e8e82366a2de4dd41ca0a26ab49d5d357e5a8af73d9504af230513acadd2f0d9d99c4b6e4ebf68582cf8dc4dac990b216a6a216b0cae87a2339fda14e546b224857f758cb64ca2dcdf32b5420ad9f33dbaeb36b7466c5129508d57329f57ac682757e398c4d2a6f93fb1dfc2c840e06bd6c0d7ceedc3721b19c7c9fc1645cf32d79807c4d3e0898ae2a829df5c03834bc2558aeed652399a9cf9e5c859d3c5c5341b329fea445d2e040562a813c35ed1c1afab50aeb12eea9456adf21953947413c03af836bc339355250daeaca253f809493c75c9dcdbae3a76753d593623348e82b1e9c5480fd099b6322b6c6158ebe8ecba0ab364ce4a58e244b76d16b81905878c4caaad1f54cc11df97a50356638016a7e50a92ee55af3c64ae2b95653373d3471c0f26119e18426fae7739a9031618635a257cf58b1e9b8264b6543d6c1c372b66d9a5f96198ae01beeb398744ac4b6f26b568cd7b792039ac4e10f9307b1a8dc268a5d2af3dbce55fdac6d1a158a2243c679261aa080acdf0d55753d3163664df7e4129f12f850c694dc140cf9380687da9914be848a01bc7f5278eb3c3210664b62743887b822814c58a3304b392c7e2a6e64576248af87c0f995af921be86e8102d8343c0de8cda3512f84c894ed6c0206e41443c456467c42ff9ddad36e882cc5287394aedd8d413a061a2894f2ef5fc3072fc8a0c5c2a9f94954278c3d67a0b0fa6e002ce0840e3405d166f037a6e678ce1af6ed9c6e7023f8663d294f4bee1effc148e096d2eb91903c482548c0c5b135a31ae6903a9cb9a40a89155ce15dbe3e373a7ac4c7b4d391bdac5268b2d419f13aeb86f68725a4633eb883417bc23243a302ccc919e0b141ae8aeb7457264f8cad663255db96efda704cef9428ffeb16acd3295a36b1e514ecf65944d5c754e02410075714612e7841e6c7e1e2366bd6ccf335ac9dd35332ee78aaa2ff6950c81fd53db93dcebe8b9c42aeefaf63150d649bd1542014ac64daaec18e82854454967e37a6dccea142f2504a6aba4dd44594c230101a4574d56a1ff4f5b7dd246f7d607ff6f8bebf4fd7e709122f3129bec4dd5b4129829d15d1d3b1fb82e341a325f7863c5035a6568b35327a8364d98bdf516e27b57976af232128856692b491469c525eb2a48d4794459dae9213bd0088206f364f8c2c727e3e1d1a3ca9f1b40fea92bfea26189d3bf91e92c1e8795334cc268e0b31cd354701eff8adfa247b848b0ae203f78380b818c0afbe01efec884ff0a6cecfb726886bbdaf78ed3ebc40556b434d0fd81799d96cf302e1115c8cda0b4c7f27c8b4ad1a5808f6b908816ca7483f94fbb8391e6533833470c9c3352d70ae03bc8479e64caf16d5fabe77519aa196fcfb4e480620ef153a09e1dd59490ffab33976fba5b3126dc509e4cbc94bd59f745319efc4523e1f0387968be039a920a0abc8aef753f82ca796055bf28affa706df1312a898162454ff9010ee5fa95d56fa608ab283481c20d0fa2b3149a54c268d2b77ad6ce63f97e10bf3baa14dc7a4492587ae1e26237787231d000000000000000000000000003ef8cbcd3ffe8d35974cbb469c41e8ad0b58c5376c4fa943d02a4bd12dab3cab9ef4e62cb10820de0d87ddd79f820879e4ad8868f81cf931760d5c6b9c7337e8efcaa4e63eed8e3eb668f104cf1fa53fb300acb4bd61371d6f12165e9814d2517cba3403530d06737da5cb6ca5996af9a16cca9853430842bdf0995c53681e4a2b0bd1fdaeb0e7839669aed97a6f6f25f7de9ba0ea23384b85957faf49d62dba00af3c7e3c817e13e63c487fc167f2aff6e5a250937bb43b0a8e9d12ff551e6cc2d304aec2a5d843ea327c0a3379594726b92b1919367f3b1711087f160503b3b37170579ce2a664b21d86aca4cf19c1f36d264b0b7ba3de1e020601418d981c6f596e48d5cebe4ff0fb8046e87a5c4d95c079350000008a27cfe092f2b6b3f29599c2fb70e4ff3b6406006f07985f711ffbac75353a4dd0485de8728ce21b970a69815cc9573bf823ac81cb5492fdb730d65febcc86fa51e69972400147308c9e1d4245519934af03cecad1281994e50fff10b517b8a4af87e2cfa0bda85534b381e26c6d0129a0331c4989de36a7ce1fd38038e435d28ea4301eedc52ca3395de54498a4ed8f7d9b777b482da2b69161db7996e196e172e594b5673e3f4c607f570daebc30e0a5fbeb25a0aeb3c6e875aff6aeb6c6865eef373bce286a5557f55e28c290c1780690f3f63e6fedb4d942ddc4182e335e52d0dfe0a26108234b51d77073ce17415ead4cd526952e38353834f71cf0afff05ca8239aab1927ac1453201dd18caa4316814554fca8f579a721476946beae9d9b763b2e42dc69658a0c5d67045028aeb1135e3fabf7b7aa76ec475a06a771bb914188f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.567582576s ago: executing program 1 (id=3510): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000138500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.507998134s ago: executing program 4 (id=3511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x44, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfb}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}]}, 0x44}}, 0x0) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async, rerun: 32) r9 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) bind$can_j1939(r9, &(0x7f0000000180)={0x1d, r8, 0x8000002, {0x0, 0x0, 0x4}, 0xfd}, 0x18) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x70}, 0x1, 0x0, 0x0, 0x2}, 0x10) 1.484554287s ago: executing program 0 (id=3512): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) unshare(0x22020400) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7ff, 0x1fb, 0x1, 0x2}, 0x1c) recvmmsg$unix(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40851}, 0x800) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x188, r6, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}, @TIPC_NLA_SOCK={0xec, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x61e1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x31f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x188}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000040)={0x9a9, 0x9, 0xff, 0x4, 0x1fffffd}, 0x14) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x85, &(0x7f0000000000)={r13, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000000380)={r13, 0x6f, "56f0721ad7f7cdeda14725d1690b5d44007f50bb8a9bbd83839351baf14332f94b785460be02550935250476b26aa58dd4c373786449e55d9deff53d7b0cfb734b85704648e43a3464db650e9b9e5834242391bb73a0e0ffb866e2f59bd33ec68c47751d16ad80cdc19c390a27d23c"}, &(0x7f0000000600)=0x77) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x4e, 0x7ff, 0x7ff, 0x1, 0xc, 0x6, 0x80000}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8c7}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6fd7b298}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004000) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x44, r3, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe}]}, 0x44}}, 0xc010) 1.277192571s ago: executing program 2 (id=3513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0xe, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @local}) 1.095898564s ago: executing program 5 (id=3514): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x33, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd6001010000081100fc020000000000000000000000000000ff02000000000000000000000000000100004e220008907831e4f296737a192147d11c17fcb27fcf9f717a7d90baab8be643d292d21df7253155494d9494030814ba241eae721ef063bb5fe116ff83b2b00126825787b06f09595a41bda4b2cba6ea8c86718c61713ac322f118cf481396cc9bf75daad3e8a4885b7a8ea0bc48908e31c8c68bb25bf68a09d9"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb09001800000000000c0300b3bd00680f0000000000003018c422143937c7c1c68b61f2f18a254b4431a6a1cc8dad97403ab51ab00b97c0e6d8054ff9de33a63024f151bd9734fa310adecc66f537e6ebdb397a3fd27d5ec652229a80b597bbf209bd04454270daf3bcfaed7acad76b32eda24a06147df194923c228160b9d988c35ef852efed1c048edb2800e3ef8462bbe7caaee079269d3ef31171066f3d0b3cf9fc34835e23b174fa3486152c00000000fc"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x26, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="000000fbdb5f250a002c000008001e000100000014000500fe8000000000000000000000c97cad6b11918c000000bb000000000000000869b3598bf29ec0102b81287b63aa5083a8b6378b367576048697ce82225495515f1948269b55cdda71334e602875ac7200002ae1463867d27e6ea7df7897fd2e2915ddabd4210edf511c1403a878c3af232db41f653f38062e5aa6bac5f007ceb6d8d815d5ff7b9975c860f9d6eea1b1ebe213d69485890f00f8c97900fafc07182a0dc2b9b8b71413d92563e18319b116ed2bf1bd"], 0x38}, 0x1, 0x0, 0x0, 0x4000090}, 0x50) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c00)=@newchain={0x2c, 0x64, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xe, 0xb}, {}, {0x3, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x0) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r12, 0x40047211, &(0x7f0000000080)=0x3) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd"], 0xfdef) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f0000004ec0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004e80)={&(0x7f0000002080)={0x261c, r13, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xfe, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}], @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1ff}], @NL80211_ATTR_IE={0xbb, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x2, 0x46}}, @challenge={0x10, 0x1, 0x4e}, @channel_switch={0x25, 0x3, {0x0, 0x7c}}, @fast_bss_trans={0x37, 0x77, {0x20, 0x1, "4cf4e3b569cd2cbed0851f94ba7721fa", "34e1880639bcc1029a1121f95dee63347ae03070578d686d06ff81605920dfe4", "728f3104df57c6213ea64884307c18c151ea98cf0138e98b5676766bf4c48d67", [{0x4, 0x23, "9db8700763a5750cde681e3ecc2db1219c62da3dcd5c068d00cdb72e5d4f3933240462"}]}}, @preq={0x82, 0x2b, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0xd4, 0x0, 0x9, @device_b, 0x4, @value, 0x8a, 0x9, 0x1, [{{0x1, 0x0, 0x1}, @device_a, 0x20}]}}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x4d}, 0x7, 0x9, @broadcast, 0x9, 0x9, 0x80000000}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "85d010907434b9a69812"}, @NL80211_ATTR_FILS_ERP_RRK={0xd, 0xfc, "5216ffd666674b5d32"}, @NL80211_ATTR_FILS_ERP_RRK={0xc9, 0xfc, "5637f56b28c33ed02bb2a2ee1f0a1b4dfc4160683460c9d362e493a40817a172f2671ddf87d304844ca31e9b2f69a270f03d265b56a9e0e29e409aeaf4aa1a49a76917a98d6bff4b17afc4f6b8f7d16d19f0bed1a77e7a44a3b8556e5ecf0f29b4c06b775b91e353bb65d519ff73838483e39e6889a6766e4062610f5586e64e263c35ef021e7cdebe75d204cd527060b4f00d34b856960924f380c93eba45ffe370c7f545113c80f70706d7c745045991cb28fed4ae32bddfe366d4bbf93541a5a923af11"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x82, 0xfa, "6771a4b9a537bacb7de0ba4492f04bb8fb4ed49ffcf13e18b3d395c10ca96888b87df4fae2478a0056f1ed57070939208b4ca4121c278d32f6e5ed514266879d231d92653ace0ecc9ad7ebd6989a1b154509402eeb475ee8ad209945fdb450f6c6618c01b2a7a778aec129c2ed44ef08ed86727aae7592a81d6e25861688"}], @NL80211_ATTR_IE={0x85, 0x2a, [@ssid={0x0, 0x19, @random="8cfef2c0b3eceffb127b413af1a098fab481bafd1d5856d6f4"}, @preq={0x82, 0x5c, {{0x1, 0x0, 0x1}, 0x81, 0x0, 0xa7, @device_a, 0xa, @void, 0x2c, 0x3, 0x6, [{{0x1}, @device_b, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0xf}, {{0x0, 0x0, 0x1}, @device_a, 0x401}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}]}}, @gcr_ga={0xbd, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '$'}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "2aa910be641b5a398bbbd873"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "0a735ab1d148478fb644"}, @NL80211_ATTR_FILS_ERP_REALM={0xf, 0xfa, "be2cf013ee86071cbb09f4"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "aa736f00eec16e61c6eed9a8"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0xa1, 0xfa, "1fe1cc92ecbf080e6e1483021fdb326aeea353da63a019cb87075d4bb7b4d019d469609d0ad2c8898a94123a2604b135e20483cf35c4c2f728e90aec9d17219fd4c282cec97b89c41e8caafbb274e4904dda47dca0b369d525adedfefe80c7553ee2a7df7bade1f0707aabf8e260cefbdf630e387d42a71bb6446a21cf0fec9a7c8cf748b10e9dd33b1178297a35136c72045e6902cbb0ba4fa97c958e"}], @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xee}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "d8b020e4b47c1bebd70d76c658e36c255c944a88d70b28f1a2ad42951b5afe9cb3e9cf1b24307748633f88ab8306e69570002a51c8c114d076a94db829f5c26182dfbc8da1a938bd903922bb940d090e88a616bd9ce8ff9ee1dcba52d4eac8a1f9aef987eee9895407c8726f1571cbb048a2b9006de9f9256ba9d563861e7c1f4d2e27d30a8102c34ccbdab1f0a0d2fb72724aa3a0b9c754a35687fcf0fea6a3abf51f3c4d1cdb4212913c856a8c69b825428d8fcd18721d998ccefec8bcaae094da067445b4cba5181bbdcc8f8593673222a44aa6cdfe36fb4a1709bc73f10c36ab32b5692174875850b0f1e027b4a6849d47cec2143899e18209ed7716f47f22a98eb25eadb7d080124ad38313a0fb821e555ef7de57e20f59201547c7878b107f6b5e4d2ad44f8c1618822376242f57e3e7b87330aa46c6a5e8985a6fbaa26ce8f0246b7e588d69542d3757291c2e4337a2ef33261a03887ed01d875a9f11ff8ca9fcc1a85a862eb6a2e764cc2376d1647e72e20730031317fd13ec038f3d96e50a293b72516c3c17497ecf8ef60b73ca46e429d2a71f6d68b9521c42044a7ebb168e68842dee7db014c6b8968e514aab2b6863c0e761b026c3fb923e0642f3ac200f7fa6a9d0637f4915fbde8ddb614e831b86859266afaaf2e83f6da9db95328adc6e926933b3e3344d6e1e63df23e64c28ea9becb26e9b91f14fadb4d3a5419c758428098762221f22eb55c97dbf61a3f7332253ccae9d83cd14a179d7651f5613c715b12ada2d07d4fd93a41866afd7b5e399230701d36c9f6f5dcf1acca0494622a4d1fe4f1b6523241f3d9f7c0324146fa3857b2f05fce7fe8526f5de641b576c4e11f111fe442800f480fca64a158007ea99fd34704bbd426268d65fa080a2a2594f94429cc2801ad399003ec036d3ea4f42c71589d0727491f079ea3057e78d6190375990244d5f26518cf09479b27768220fca3802e8b0803887ff44331a52ec14ef2a2296d96c5eee4fe5acac8df979cc147a38e2cf3478fddb0989228e9c8948df31895be28811691c4de0d52b9535e60d893be0244c15c10fd543229a45c6deff43aa21fc7db965da1633d06a8ef645a2133120e8df96365e57c5d6e9acffc76be86c6a1352a708abf9096afde0c54cac75f136c347ef9fdac4986441d658207b58b1c54dc6240454b7146f0b5a5b3eb2815909dd39199e60480ab683c12773068e7ad880fa9e81a81333c31336c331214a31148cf08780917b12a862abdc3925134df36f346692c0ba4659f4d24da015392b341df0d47506e92ee4a15142ddab1c43c0289c90bf34b08d208b0ea76418b52aadaca8ff38511999913b5ad1ef51c56d2067b5d4f709ec7db7152182f02706273583ddfc9b8434f0d6e7004ae5082cc4b7b15e2a8371a5506d4b6043a9b648ebdb78258d5ce7d8636e3eafc32364bd9d0198bbdb660cbb01ab855a2d278e2507a6b33a84fc588636434f1038c7a8215d461cc66d7198addbe15d6e3e657715da54a981fc839ede84e6d88f4af90090aa3fa5e1aacec3c111c14edcc30a8e17eaa214fa7bf7a995548af33464e3a1d4a07cf43203965ec2ec02e9a515f422a31247ec217375e7c86a478a29e7ee0b4e5105121f94a0e74053c78cfbcee43af980ec63cd04805f61038d7c99a44cef319e4e593c2e74f1090e435445d6be0cb1192abfadc2869e99cce48dd920987617fa52aea029fbdf9b2e199925f4ce23c2112b62ca1dab56a96c20596f701632c4c9a84f5676fdd9456ac3c0374312fa92fc372b424fa36ea2fd38fbacf17a03466c393b9f76194c7c5216e5a6d2d2ee9dbf86b219f3626651ee1bfd726e1c51b0bce0131128d3e20533c43dc9dc4c41e1042d7b94c4487a21cf697de7b71e970071bdddbbeb18d07eb4af7b0d7657823b71cf8cbaa2baa306e4ab0715bac24e3939e620ce5f560ddd65be18e97906f7d3f5895c8a6961ee2499d6aee86d81dc8e0d259994291f6ef032672750759463fd85144d01bf6f647fa4949ee41c4a3decbecdb387d1583873d00fe8d7d856cd493a7b8872db8ebdfcc091047bb9dc4c878999245d2f6b9ad15cdf1a500a41e3a82c86423521ba76f14390c4755e19e270b5815fc85cde659d0261f3a60f86505ef9e79924cb7ce7072a0c150314ef2e3e5324d3bc028354fbc28846a3110a302df418e23ad8c833e50d8d71b79523985bbd263b8611fc4fe408043c8063962379e53fbe0fadad07d2db1bc487aee5780698b68ba51735edcb8f1bcac1906d6683dceae36a17d2f134ecf25f3f30da14203d0a8a6721af75a4b16a05343d48e856dfec20a4cab8dc4421b5cf50b12228541a114fc9fb010fc905f645ed4ee497b7e3b7a79517c7fef3d60af6724975240d3d2af6f8cf82307541f37061efab62278ed3c82f7f7bed8dfdc4444cbb792b6ec52fae8c093950aafea9371a6fdb805fce75ba98d316330419e608023f169034ae3ea6d7d608facab9d08c935a9913625d184e6449bb3f692a7ffb97f2ffb7eeac5223c799bd86f54a7e51ecc221a0476812d29642a01c20e04f61663c88212a7fa2b90b35b76361ffa6b26585b9e5aa871ff0593167a6bc046273ad97955aec213596340d86f272969b52089aa977753dc4f9db4986d7ea038ac8bb3c93b4d2bd17895a84634f434bd29931111e77d4a6f0247eca870064c0afdd74518ef8a437f3fe4978acbd10085e7eab9df3032c8195a613117622de3283defc0be6e50874c07292aee746b2a352176dc9ccb195dcc9e598b27388142149082b243ee49b0dafa228858d59534b15adbd52b24c21f721b917edf75eea80ad92a59b4c6a8e846809e4b84207656b41377e96a2141649fb4065473b889f5e58b4a9de9785d230119f20bc822e10791256d3eec048f26a35c4ff5656b946864ff90ac90fa829e18d6f0102dc727800faa06ca81f304eb1c2d8dac5aca8a7f2c41c107f68299b2be7e84d379704a91df7098233e7f453d3bb5a62b1f48e1c7eac9f67f7c8e7ca9a1181fb5e9d819a72492ddac56cc1a8eb9f526122b7495cd0bc892f55aa7a35fbe276357b196b0968fc2f400a7408dee4f502abf67f7f982bcde52d9116f99ce20d3abe49ff42b1fafc446e6a7169c1f3572b8a65a01c33a502914747deeceea06730064827183a7e277d46730c94c4882e536ce062d17a081a665fe07a07663346ebb518fdc063e0c69ae18932034d452cfe20acb635de6f62b381f3bbb051413ff310e877b1c992cfbaa45441bf14a6f8401f9caa0f2cd4bd5e114c1a2e0d2119c1ce39a701b8f0be6969e6496e779f9b26431835e18b5f08fcdf823953de8c589aafe2c07662777f5877a993ca87b37a4b320877002f28188ffc81ebd6a1a5f782f41f37e9d99ad0986188981050dd6ca8c39c7bbe62ead4b06962e797404ba4ab88198618490383210fe83b540254ec3ba89c22d5706bdba9c6d665612a147a291032e8f216347ed680d6098b3761dce8844421e9453cc2b881021e4427d97db1afeeb4e467053e34a366bfb393dec4e5fa8e498bd8ea5b9bced46cb1cbb88677cb199d72dad886c60352e3a788fbd95afc2c3bdbf3e6bfc3a6c76f3b780eb8beac08f269d83087cf7d4da5508d1b26d8a583718cd2129bfadee239dccdc34821c6acf5fd5b41827ab1c3993b252fdb30afc597918165836304b650d8f3dfa880de851f9b4ccc9786938296509dd9cdbde1ea6b5fd5bb2c28370f2f65fb98539a08b5378779427feb7dbcc9dd40d66af7d94bd97e702994da617031c2f1dd4c6eaaa00ef3be5c8a40598992354903247f7134c22e0b0e1f93a17712d680e93d39733fa1cbf268755dddadcab835e56fdcda04c10570c2d3e5ce48bed32549e2d74722c6bb5c8f699c7eedc3c72fc72bdfd4673710b5248e6e8a4ee1f4af7555f96114f952f3d5199ba643dd4b95c0ba326e4b99369ea7beb458194b808a963697a4fc6fedd6f02b2e2d1831302ed03942234d25250edbc2cf175c3a94f0f44c2d20cd9cab0afa90e16eeb77fe64fc17b401287d6f0576a8e15b2bca006f6c1a9149ac86fb72480064ed37ba9e1e1fdec92c95bafd0baf80187a4e32e891dccddda6599b34f2a475d17d78ce430bf4d97237b2c4635c36a0913898ead7fe59983831804c926e2e93fec0abdfa8618d048f86e0819a53c65969c393dd70c2a19ed36132ab24a58a67973d3442998afa357042ea40d1f40bf771dec8836b5e2d6763fc12ee9aa0415b356e66590eb092f1a573c2e028a63040d3fe65850413d472b3f85a80811438459d56c6a2e3499bb1fe9583e969becf7fdf710ba4076010eacb65563daf6b1c7d3e8a61a583e1667fbbdcc5e6b42998a9ac304c5c5809ab82e930d8318c2b4d106635d70fce73b5da47bb6959749566955fb6db9c42b6eb73e2ce9f9b57488c3dab333ed353fc48c717be85887ae2310ba62c5c7232add6dd8ad21ffe932e927ffd661f9fbf03b8b4726117e56e478d9e54b3b6559c0753159f1e2cb020a5deb15255d1d41007da8a48fec912cef8f19198b51183d2880a0ee315a67cce66ea4decec5ae37a4a905f7fbdcc9181dfd2b29fa66d993e32dd953e257972b91373f7752da8a5c442c82441aed6905ec3351cbda69f284becfd009b4682b69e853071995d909bce083753e4e8ba888b9034cce715689d22cd87d5253e374fdcd1332c5c8d3cc4daeccfedc5cf265cae723e024c874835caccc43dc6dda28142449334279af4148c20348a565068e9e6b0b9bb9ab417ccbe44c8ae3c5bb5bc4d4aaf023ca293263203711ee12e67d639ff064095c57fbf5dea33e06b132d725e6a0d5f38be5d8ca002e71901d8f7440d6ef1619759a0b38fb44fe5d540fdc3f068d86f0d3f2bb5ba981e0816c79c9cb5964dbf0c7e20d2437d216bd4f485c48416f8567ecf6fb0a2f166d33a78cfa4877ee703c83b1e427456176d05d95901832555a32f1775b1a5320b50ccf0eaddcef0b4052f0d1880a41eda0155c1fa68fe8d5733dc6885488ad9f08d877cc81c0965df9a352c3a015e70a60ab51693df2e15f7cb0a1b5802271d02f717107e0843e7c9a40b2411a722075432ead7bec0fcefcd7470b2e057e55cbd6ab188bdca27738467338d20f9276092e882b0d1eafd1ff657126157fb155af5c744bf441e7b1cc98f7447479a8642ed3c83386b1641567d45cbf66a02a1c369eebc31f9e19bf614ba90851bb6964c84d04ad909846f5a7f57976e696e27458f97a13f9a725957fe3725e8db6e6ba60c01d6b663f4e542d4f9f34b5173ce8c443929597dffa6b6219f82db41a15d79cff1a5597763d21afee469e8dade462d0b8acf1cbec74911c4a957e66d11b8f947aa6ef9a00a82ada1065a01e129877ea822001ed4c860f01fefe9eeec57d194e7d4a22ef89783f4b3cc868f0fb44beecf26c782a715bf01c8967277b5963505b2411d9082371bb7de3ed2b3c9d5eaeb2c95e1c0681c84310b8a1a10db2c43e35d59b0333f5b5057e51dc4c429ef015eb476d03d395c7b31ecde6d7afe7ac89c2f1a057b0e20f0ae49251db00b22875530b30ca9951a898059c9cc142c34ce650130cb5fb23c252e2b3b558599a7d6cbd6db21b3c2f03529161a0caf3a28b2eff3cbf256fbe8bd08593adab90e0e71ddc4ee303e8c9cf3eb8369be720aae5e016db04c56ccdb6ab3165a5de067e2a44492d1ca9c9e84d1c47c953e0a9c6a939613e0caccdfaf302280d1e9829b28aad7025e720b9656a1"}, @NL80211_ATTR_FILS_ERP_RRK={0x8d, 0xfc, "57c9cb4ed7dff72af9ed081413ce10d23d74fb78a95ab311762fce31eb3579dc693b096f6eae5bb22a4a0cb2d7adbba00ae7f9260813044219557069dbf2e7efc315e10ed957d9aff5efe57fe5f8e47a3195c75a23f264801fbce08397c54f19f1fc09eea379de73edb2c3bbb39a5766254eabb57e8d44dbeb811226f2bcb6de4d4c3afd638c5d4311"}, @NL80211_ATTR_FILS_ERP_REALM={0x5d, 0xfa, "469ebe589e8e493867224c72d280156af77b07a5d2840b635cd5ff21842b3a14a4f8aee7285ac840557f31076d5127d0bc0e4ceb346df3c4ed8157db2966aadb65e8f39f5865053471e5d5794f48c12ff21a4afec6875fa869"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "fcf6f9c57d2597cb94462b8384"}]]}, 0x261c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b7000000639d0000bca30000000000002403000030feffff720af0ffa4ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000414010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd607410ee222ec8f206c4b74"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10, 0xffffffffffffffff}, 0x94) 1.078732852s ago: executing program 4 (id=3515): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xa, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000000000800000000000", @ANYRES32, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000004000000000000000000e5858e8a94c42407000000000000"], 0x50) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x9c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xa, 0x6, 0x4, 0xf, 0x5, 0xe, 0xe, 0xb, 0x8, 0xf, 0xe, 0x6, 0x1, 0xf, 0x5, 0x2], 0x3, [0x8, 0xfbb3, 0x3, 0x2, 0x0, 0x8, 0x0, 0x101, 0x23b, 0x0, 0x1c2, 0x401, 0x0, 0x1, 0x8, 0xa], [0x4c0, 0xbbf, 0x3, 0x1ff, 0xb, 0x8001, 0xfff, 0xfffe, 0x6, 0x9, 0x7, 0x100, 0x4, 0x9, 0x1a, 0x3]}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000080) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, 0x0, 0x0) (async) write(r12, &(0x7f0000000040)="07000000010001", 0x7) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x183203, 0x0) write$ppp(r13, &(0x7f00000008c0), 0x0) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18}, 0xc800) (async) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x20, 0x0) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095", @ANYRES8=r1, @ANYRES8=r7, @ANYBLOB="5139dffcca14ef37ed28cf7e4085377da49d87edc437e282c79dc895efdd3cda145cf80178e5d9d3c0fa56ed040154e83813d408bf265d5fa3ca6d1b24cf4ae80acf8b35615bf01c6d95b87b194a898360b620b673d1b69f9b39082a4cad1349346c72fd2b1b02967390d31247bcf5d3cd54bc386d79788769d10c01467cceaddbe4816ccb44b667caf0", @ANYRESDEC=r11, @ANYRES8, @ANYRES8=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r14, 0x0, 0xe, 0x0, &(0x7f0000000240)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) 1.06332353s ago: executing program 0 (id=3516): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000904ffff0f00000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) 796.007044ms ago: executing program 0 (id=3517): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002c80)={0x1c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x4}]}, 0x18}}, 0x8000) pipe(&(0x7f0000019480)={0xffffffffffffffff}) splice(r5, 0x0, r2, 0x0, 0x10500, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000005c0)={0x0, 0x5, 0x0, 0xd6, 0x7, 0x0, [{0x3, 0x9674, 0x6, '\x00', 0x2906}, {0xf, 0x0, 0x7}, {0x5, 0x0, 0x8, '\x00', 0x10a}, {0xc0000, 0x32, 0x8000000000000001, '\x00', 0x101}, {0x5, 0x1, 0x262f, '\x00', 0x886}, {0xfffffffffffffc00, 0x0, 0xf924, '\x00', 0x404}, {0xc81, 0x4, 0x6}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) r11 = socket(0x15, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@generic={&(0x7f0000000480)='./file0/file0\x00', r9}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r10, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xffff}, [@alu={0x4, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffc0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x180}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xa7, &(0x7f0000000080)=""/167, 0x41100, 0x10, '\x00', r1, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0x3, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000002c0)=[r5, r6, r10, 0xffffffffffffffff, r12], &(0x7f0000000300)=[{0x5, 0x7, 0x0, 0x5}, {0x5, 0x2, 0x6, 0x7}, {0x1, 0x5, 0xe, 0xc}], 0x10, 0xfff}, 0x94) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000004c0)={0x88aa, 0x20, [0x368, 0x9, 0x4, 0x1], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f0000000500)={{r12}, {@val, @actul_num={@val=0x2b, 0x1f3, 0x11}}}) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x880, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 694.16421ms ago: executing program 4 (id=3518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@val={0x88a8, 0x1, 0x0, 0x4}}, {@generic={0x4305}}}}, 0x16) 546.691522ms ago: executing program 5 (id=3519): r0 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000270000000000019079ac1e0001ac1414aa0500a7780300000045000000000d00000000000000000000ffffffff"], 0x0) 361.701735ms ago: executing program 1 (id=3520): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010069703667726500003c00028004001200060003001800000008000d000d000000050008000000000014000700ff0a0000000000000000000000000001060018000b0000009fcca25b39"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) listen(r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000a00000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x1050, r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000340)="21fe3e0a383e60cb311a7ac6c74441a7f974d11000000078534bdab4be75b7973575615d1721dd14e30d5e613ab417f47818cb63eb82c88eccbe85a1e41ee75c878d65b95edd0fb74b5c933b195dfd0b813e43f8ed5349ceebf493441c777a566d03604d98cd1ad6f2919ae9d194ade13357d148168e94fb85fa1082476f2904e6d2334a37e25ed149be33d82c9df1ee93e8554241e01d13f8d31222cdd5d76161a88689f19ed397beee82d89f4a94b100371db4060bf3996ebdad8609a444f57779ea2d0cfc38688ce1d8467c1cf00468f1a22167e63713b0", &(0x7f0000000140)=@buf="f15f118d13caac2421c8787278438f27c98871e69d9532078ae343ca", 0x4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r2}, 0x20) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r5) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c8b0}, 0x480c4) 316.904763ms ago: executing program 5 (id=3521): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r1, 0x8990, &(0x7f0000000040)="58a34d3a") r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x5}, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x200, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 297.395557ms ago: executing program 4 (id=3522): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\f\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r7) socket(0x10, 0x809, 0xffff) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet(0x10, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xfe, 0xfd, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e00, @private=0xa010100}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000980)="a94f27926fe79c88feddafe3efb13e7d8b64922a0f33c998cc0cf604d7618328e66d48a11951b9eab683264e56c8052c63ba980dd47bc6a9e94843c191cfbb387b6622a77c0b121dddb67aa17d31072774f06fa6ae0d18354c4c7523ecc87e85450dc7963623ee7c891d32e3284ce10c8d7825a019e4f11389cf2603c0b88969dcf74c64ee954586", 0x88}, {&(0x7f0000000a40)="053f163a7674fcafa16eddd3d06a5136a3bff4f4361ad7608f5952e2235954b96d39bb20fc3115e244aa8e41fcd22ad741a587c0dd3fb03aca851c90e0df86fe7228276e2da1614b0a398361825f317cf438fceb7bb142a73b1937be8161006d25c36fee482dcb6e000955bac2cd83d80819a687b6f07cd0763ad749ece7726a396618a1249380570e92391d0c", 0x8d}, {&(0x7f0000000b00)="803973cd670ced39d7367c87787b1381efc4599fcb695c3a5c7d068aee63334d8bd0594ab3d8ccd67f81550b8fc973ba43e9edc528ca855cdf46392fffe758299db23b3b9f742c07cc9aa4ecc08b0fbecd55f847870634", 0x57}], 0x3, &(0x7f00000003c0)=ANY=[], 0xd0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r8, @ANYBLOB="ffffff7f00000000000000000800001e00000000", @ANYRES32=r11, @ANYRES32, @ANYBLOB="05000000000000000100"/28], 0x50) 195.614127ms ago: executing program 2 (id=3523): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x3}}}, 0x32) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000001400)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001"], 0xcdc}}, 0x20040010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x8040040}, 0x0) 0s ago: executing program 5 (id=3524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="79e0c692b81819d02b9c78a859e7301ea921ba8c5e551b314a04843dd223313489344af763a704d0786bcd2f992df0870a0be9bd9ee38cc01a46418c5be08fb037c92b94301d216cc26e285625933b84e662c9bd77cdc92edbbb1f81a2d9bfdb13ed444878ab1695a2272f82ffee27d78ae6ec16b70e07c8f8467b996f018c1636864e517ef1c162367d6e6a23eb17d6040b42f545c34cb8f7d5082590", 0x9d}, {&(0x7f00000004c0)="e7c5d156b307c94ba19a1ae301a64b7a10922a42b3708ea3b8bd28122538ce27aa186d5969965084d227a021ffbd98fcd0bf73c7e9b1f6820d714dfd0612ffeb2c1999de8c7804b2d865feae6292003a8707973b5d3b774e2837adf7cbf86d4f5e853165390a59b9bd12d1743ccfc201ccf6b2588a86d66533b577a5efa9497318faba6dca6e68aa50852ee574ab388d86c811c134062fdf80c1493976d3c8ecf7b5495034cd42f82d507a40dd90d871bac768cd7782415793f8aeaf3625fd2f3609d96ccdcbe63c7beb8565e75427f50c5aee1824859f8adc0b098b3c17ae89a709f60b8dc4ce48c7960f557e2f2dcf07", 0xf1}, {&(0x7f00000005c0)="d738aa290f2b8d3b1e0388fe614bc0f5c2ff98c4e1135ba8157baf8d8e4a31c887703e45d7183af3fc04948a922eeaf20f78a88ef492e2c93a2cf017b655b2301a9d66bd810ea4057076788d4a30f77bac2e3a3dbb09068594cad81c1e0b7bc2137f3efec7bef9dc596e2d5c245c36000100ce4bfb886dba9311250ac29c6aeccb73bf3675143c46ebf90260142c27b4602ac0df0d29863152", 0x99}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="d951f40494eaf97e4b44875ddc45bd97a5bf", 0x12}, {&(0x7f00000016c0)="43d5bc4a8a7a0569b54741ea0a2e3dd30a163089df726f7ae102bb2f746cc104c1399e1be96bc31b85c1ca36acad358940a9457d0c4be22e8f07a60a078bf81225bf52ac9e35", 0x46}], 0x6, 0xe) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000002200010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) vmsplice(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="79e0c692b81819d02b9c78a859e7301ea921ba8c5e551b314a04843dd223313489344af763a704d0786bcd2f992df0870a0be9bd9ee38cc01a46418c5be08fb037c92b94301d216cc26e285625933b84e662c9bd77cdc92edbbb1f81a2d9bfdb13ed444878ab1695a2272f82ffee27d78ae6ec16b70e07c8f8467b996f018c1636864e517ef1c162367d6e6a23eb17d6040b42f545c34cb8f7d5082590", 0x9d}, {&(0x7f00000004c0)="e7c5d156b307c94ba19a1ae301a64b7a10922a42b3708ea3b8bd28122538ce27aa186d5969965084d227a021ffbd98fcd0bf73c7e9b1f6820d714dfd0612ffeb2c1999de8c7804b2d865feae6292003a8707973b5d3b774e2837adf7cbf86d4f5e853165390a59b9bd12d1743ccfc201ccf6b2588a86d66533b577a5efa9497318faba6dca6e68aa50852ee574ab388d86c811c134062fdf80c1493976d3c8ecf7b5495034cd42f82d507a40dd90d871bac768cd7782415793f8aeaf3625fd2f3609d96ccdcbe63c7beb8565e75427f50c5aee1824859f8adc0b098b3c17ae89a709f60b8dc4ce48c7960f557e2f2dcf07", 0xf1}, {&(0x7f00000005c0)="d738aa290f2b8d3b1e0388fe614bc0f5c2ff98c4e1135ba8157baf8d8e4a31c887703e45d7183af3fc04948a922eeaf20f78a88ef492e2c93a2cf017b655b2301a9d66bd810ea4057076788d4a30f77bac2e3a3dbb09068594cad81c1e0b7bc2137f3efec7bef9dc596e2d5c245c36000100ce4bfb886dba9311250ac29c6aeccb73bf3675143c46ebf90260142c27b4602ac0df0d29863152", 0x99}, {&(0x7f0000000680)="82dc6d601155b43dc091b32ba008168639a933ee6dadbb85fedbed7e838191d92b65a2550047931acb93eaf8ca172e5152805a20e691536cf40ba008966644a650f09538c2e8fd3040002957891888b12a575152c0285518f5a93ba3b82d9eb89490c694ef1a85e98e09236a360edf6598323f6ab6f8a56d973781b3cf59876e612a0937c28c2d737f0094fd82d557c27ad293aa739e06e06c079a3ae123dc1f717e45a1011741a0d56f2b52cbc742269d05a63022db009c3aef79c8f0884d7c988c263c3ef8e73212c42f978a2abcc0e2f0622ecadccae099e2a2fa83a5e93dee4e9fe97190a38609239b92f26139cf232ff6d3821cf7925d15353b0383f5d31f88f4116656accd505a278c43524250821cbbfad815078ca3bf3f15bda1429d8dd0e4902ae5fce3bcabd3b877f1d1ef5e5dcbdb605901502d9c0827c78c18fb4805d9e4a6bcf686216cb190b1e0da5ca00a5e60a72a924db66fe59d03c2a50e793b188559f008d6da3ee3b176811a966edde1fa623112b239094a01fb0e80992c0100b7ecf750396546e6b8d8cc89bd773b97d703a8c8a85f04667b51aaca631c69ebb72f1229e2ec7692d75190ac8328678ad365d05f0937e4c5aa81f89649d1d79e7d69cd040fc8c72b97cb7986afc85982e93bd7bdc9456d6d451239b84a0b14b8ea9f0822a2f8d4d69eff17307c6cd941ae61191e9819ebecd5bee279ef24d5601070e9d978a1021ba6b27c1140041604a03fa19368d657e0bb571b6f605cfddfce791713ce4b9c9b9984eafd66f9c3d1e691f831f76c296666ca9cfc948cc849964f2090766469e2f320caec2d286fba390e669b04b0a89d03e6d6485c390e6b6fb55b6852df6a9b85a51948deb8ad298633147506b1c7bd6733085a45fb1133e142f54cde46230214182a5fd21a8621e6493f644445064e7d1f1c72daae0d7459bf00d909a9885cf093da5bf5bb6ebbabdf852a1e8b281a4b05f0484014effb7aedeab9ee135a4ffbb9615d2e7c114155760e3b9c47497afaf152e8e7dad2904475694b3cc9da6bf01a6afc321d9ebe2c88a5e98fa9930eb8c2db37a1fbb17a42c5a3baf307443eb79c010816f5cb0583eb718613681aca0c2e00f9a9cd2a53429927d3a62d06ee6ae613dc5151be2ca9ab44f7acb1ed961f3f6e27ecb599ac4276357f3a1a07bc58c8036c20c4839bccb346b3ee8c9aa5e677159d0cb51c802090ba34ec5fd734e0562827ca79f5094485bde80b121f805826e8b6d5af9c3e546c2ff731b28580355905f8b8a2c6ec943b4345797a4e4ac9a13125a8d7f46bc8a240c686b1f696005df97913e50c6e1b84514e8f788e265fb239e9d531d3f4149be75b045d6fda91cc1f86b71ef5ea5eac009df2f85d5c4a0a39fb8a307cc92d4dc648a0e32e0253c67a0f5f2371a994ed3d12aa413056bc9ae5ce189c0856ee3fb287d6053c6a5f486e5f60088584e01225acf1d7cdefc0b0334adaed94496f50f0804eda94b29585b4b0c2024f138f1a56f019149a4b01a49e5ee86609a9cbb1cde6f080878c95376feb94c5f6480e5b95cd982506dd7a3b41f390f624930cb58cbf54f0a84058628856a123b9bdc0c224230b443f928bfcc58983c858c4835b988b33a8aeb80442234eb0998083cf4d9d26635b18ec4bd255998581ec5d3cb5cbbaaae35d426a938d5e4e17912d792f3e44762e4efa7dd6a655b322507b2476eca42df91313cb78fa17a1835b5a272810ee0dcc1bd60e99266582c851d72c53f8dee316fa7175746a0b16115262126db10b8da731ac21703954bd6d97cb6995c646bb339e20ea97f6da898757b3367369d013fe1f886f4f91af734f040072cbcc14bf4c26c8a8210d62c7ec2fe9bf7d8b8cc898558ea4e76d9c8a94939489f86693baf47f8a666ca0d17b86243632719b5c90838f3f4e716e11e64540390eb21588d5dd64be797b4457e95cfca87f7d3ca0286fbab46f595c3223cc76fc56e895ca501132a9789fd916da42f5016fc753453d213ecdf8736a0f034946c3f905ccd7416b1871b44e3e765d081db8108268b947458944ba80319a146a98b2be34642ba34d622f50a5fd71cea82b9400e15ff8b64d796c39b32fd0c73ec1afc6572042a0934d502f1392df0849b5e612709972593260c412a69a12e30a7c1a05533337bd833e32091aea4d3acadcb24fbbe356bf4959fdd22380cc0b5d7b6c4f1ecf6e2e82d8b0548fd648cd693a62ac7268be0d1da871d3e11d989243b65d3686c52c6ff69aa8551ef7cdc0fb3e2881c60a10d5ea4a3c254c3ab86d83dd1375e4f87162cdedee87bdd1ce1a6cca214c335f0760a2cc246eadc61f457da56bf86ffe8a7abc224f3a24091e3572e00516add8afdfea5d344d17fdc17de4ecc0b33dae43c6c4aed404675efed5fa91551e8ed265fd474892acf541cf6c829b296d9d42bdaaef86e2a743d7d2becd275974e2586f6fe2e0ed2b152f8139276cafef996d92a064067eaf5d02df6948c191fc637d849eb87f982285ac1760f4a7f19bdd2b4456b774cb58a005e82a7537f64a4497a9650b7ebb08b06f9d708a4600293c5f114fd35c2576cd3b224f66b7a295600cdd3b4958e64a7bf459111f4067b6a4514bd4078e1de63ded33a9e4a6c8cae89253d4a1a2bc198e73b53b57c7a7bd480dc544730b34d31c26c43fc4371386dfb50b7082565d3e186c451e1f6c3cec18481f53876b75467b0f8d0b756765e884fcc723d04ac637a7c194b3c80769fe7d4192a35e75c4a0ede87848a11a1e314f9a3fc65504fc467379444416339f073417a8426106c20ef14d2a2b682a1ba7a93d6a2c64a4f53b0375fa9f35c97d410aada881a28c588d042c09c42f29dc7642dfaab4df32fef21a6d0629af0bbb96c83bbfefb62a33e760fb0a207dacb87404977389dffb2e4c893b1953c227f62aae6f3af7c83ace6006213e469c1e47e18835165ec93f96d9a59d036011167ef9b6a2ac70899988fadc5afca2c60553d84f17aa7d35cca1c4814fd03d26ffab1cfd1f4fd712d3acd603dcad7f170a1662a19ecc0e9d71de5854e83221bb318731564de38e4932abec146139ae588118af55d6553cfcf83e566314a1d1c1d29eebaeb16cbdbe799fe52f748190f1f18830088e167dee9a9b10dba655fc25b48f022ac1fd0db4448cb9174293b00e377fd3663b784a0f86746fd51093a8d0d3238ba634b8264fb4de1a4521aa6d7f3be02b19ba8c93ded6da708ac6a9eeb0efdc1a2586a56f62b4376650194200bb042a4a692e38073849d629282f688cbca71a55b6c141620fc2a271235cf9e67a1b9cd9821ede1dd7b666e48f885b66b34b0ee14e1bd67b6548eff3db85064b22a312e2773a4165f021bc0da6f4bbf04ab8a13103936d61f2002442c96a7a46751c4af0b3a7855b55cddc5c46a04c38c6173353c2b3eea06bc3e7ab93763899d95ec6e73d34892de7307d26e16d7259efc038bd00a0ab5dca19df7c4496be86778a9c867e02850e607a922e59e4afd85798aed13dced28989226db7379fe61a34383b6eb736317f631283a4265c60b21d4b23971c858fffb684ccf07e631b080f35bca8876d58887115ec85dbd9d47374e8395e6cac5deb09a277c858030e4b09ce212cb4644dfb735ffaaadf955d58345b0c5e6211719a0dfa58c877535bd0b7d74fc49321eea60705fda6e71dfb2eb0f85da6872b9f81aa30436b11994c8a8f8fc151c0f9d0b5ad633a0960e2afb656de39db1d372af88f24081c09b014399d022ca5c8761d4c5d214cad7ee3bd3c6d6b47f95fee9e4d95242ee37e85e7e8560df8bc89d811b8e0019c8d4896d64aaf57587c8ae9a412c66f2a5981dd10395e439887d4ab1ee1296cde60cc15d3e48523a69aa5ced997e10c51950b0764c7e36efa4f6f0adc70fa677ac1a06ac1a24bbb6992bc9ac47bb20eff9706600bb93435fa796e71c18bf8f4db2f042035dddaae216b59f42a160211fa1bfa5d69c664fd1941ec82294b85a4b2536fad00330099d04cedb1710240ff1911ec73466c8fb32f739ada5c812081692ed80afc2ca4da62f5f84b483d5be51f43c7918b7a699123766114be7d5884a0cd31ba88fd7a6caae7d866683269e5c98b22a3e26aba8029a309563e6241664d314c713dd0e1b758e3660ad92c0eff926f0978c937580a44ca173e0c7503fc08be6bd9eb9a3365ee47d75f547700cff478134fe2f9edc239d0b7cb4f9534837dd14d3dce5bf100749b1b410d10e14dafa8ca465b4801d0135a412a292e64be699736573f2ade16c1bc025dab4733e2120e38d8039a0012a2a7c646c7acab2f35e00578b9fa796cf3fb191acf8ca5d77120c6c2a7ad6877349f6dde028b91944054ffaa36c05e13ce570fbe0cb26ef35ce9f355c7346b3b0787831e31d514c3a43f6d4d2563b7b34b4bf92ad91306ec71e891f4130c616083ea6251d4b952476bfb1c9c05ff63a3ef9022bfffc720d04cf8d13f0691cb9c985f4b2562dc91638fa92080fb16c5c7df8bb57bf04b5d992ec585a842f4a7307beb0455b0e1320ca67a8d04a67a30b5b1ccf6b6bfb6a646671958b8647a2af5b6ae41a81402da3ad9545ac20539d7279d5607e1c3deb93da0878261776b5d1da53d12388e6a322efa2e8b8883c9b449c97348e078bf5393a1e81c1d409637d7d34a9514158b48cf6f5ba50f23b3f1588f2d916b588e1cd689b6be16b1183d12f4c8a638fbf8f983383d3599a72cd00f11da6d4675e498e22a4b5b6471192e59633e62ec2e061ae9b4fc53b4f813f0d5cec422479ae3e3145baa9f78075a99b12cb9bdbbb5d108e11c7609c6d1edba83cbdcde8d67d6cb4d62665886626afd7ce5db134c0b846cd323bca6d173062a9ce98610bd27a2dcab757c1c66ec8bcaf43b7a6512fc11ccc6c806cf81d4e6cf0a2674374c920bc6524f6e0c187e100c542c12e0b434183a461398d4e0b5dfe7d4dd8e15aada7ee7a4c5fcf73c2cc0b901caa7ad45440544076eedf9bf325822b6000c47ec659d6ac59e04a655c0dbd3f914e0b255567bbb5b510dc207b774fb261faba9ea8b165a3d4783aa870810762a2846f8e0008d119aa7d7f48c71a218b2ad1009b449dd46a92c038391e2a9fce46953059775daa2027a60a39a8e5030f016659c0d3462e92cf7ecd5574ef825927c940ae9f4451219f56023587381c78cac46d38c485ba97902e239b0743a65ee2339bbe018f96a0ba262118e46c17dccd3f49a1fff7977c8bc17126e06de4232236ca542933c6581eae3c942caa43f154034a43f2502fe3eaf59fae28e364752f488c50b06e553324d6c0a1118e1b3fce44fd1df7c54e8873fe5d8da72807b7f3328b477876ce2764de67cf353f287998c80229e90a19f73ccf4953bb4d9899ea10561f8cd97a9103f2b084dcff09184c50a97720bfcc12375aac52682e16ab2d56053beec66513491a245afc0e03713812f28bcbfbacab12129396bf8cfc0beefc048981e7b0b41d7b78b065a96f2c657b2347d56c96e44ea967de330c527033aac7ab2987d3259889cfbf80b4050b4bf0dff6378101b9ccfb377d571b193bb54537fcf8541dfe1b6377ce1dd444977c9908030c5b0dc9456fdc683a7751be00a35e1c9261a622cc510cb0a81f6b410f746b43f257751c02c895cd09c63556ccefdef5a112ee41ab5b820ccd048b9132fd3152de1d133b698a6f26d7c155e98d8f89cdc63e9270c43e5b64be19d1c640544e6dc19631757f36a4c697f1ee7c214f2921faf5d6867799c76692283", 0x1000}, {&(0x7f0000001680)="d951f40494eaf97e4b44875ddc45bd97a5bf", 0x12}, {&(0x7f00000016c0)="43d5bc4a8a7a0569b54741ea0a2e3dd30a163089df726f7ae102bb2f746cc104c1399e1be96bc31b85c1ca36acad358940a9457d0c4be22e8f07a60a078bf81225bf52ac9e35", 0x46}], 0x6, 0xe) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000002200010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8001) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) kernel console output (not intermixed with test programs): eed is unknown, defaulting to 1000 [ 500.916912][T13627] IPVS: Scheduler module ip_vs_sip not found [ 501.347885][T13657] netlink: 'syz.0.1928': attribute type 10 has an invalid length. [ 501.462447][T13657] team0: Port device bond0 added [ 501.601095][T13662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1930'. [ 501.625939][T13668] netlink: 'syz.0.1932': attribute type 3 has an invalid length. [ 501.637006][T13668] netlink: 4344 bytes leftover after parsing attributes in process `syz.0.1932'. [ 501.646750][T13668] netlink: 'syz.0.1932': attribute type 3 has an invalid length. [ 501.655245][T13668] netlink: 4344 bytes leftover after parsing attributes in process `syz.0.1932'. [ 501.876649][T13673] can: request_module (can-proto-0) failed. [ 501.916729][T13673] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1934'. [ 501.932352][T13673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1934'. [ 502.778377][T13728] netlink: 'syz.2.1947': attribute type 3 has an invalid length. [ 503.004089][T13740] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 503.093810][T13749] nbd: must specify at least one socket [ 503.272339][T13753] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1953'. [ 503.940392][T13782] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 503.958842][T13782] syzkaller1: linktype set to 825 [ 503.995017][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1959'. [ 504.437301][T13803] bond7: option lacp_active: invalid value (8) [ 504.445895][T13803] bond7 (unregistering): Released all slaves [ 504.733921][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'. [ 504.768168][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'. [ 504.797519][T13816] netlink: 58 bytes leftover after parsing attributes in process `syz.2.1967'. [ 504.833060][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'. [ 505.025828][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'. [ 505.280842][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 505.325468][T13859] netlink: zone id is out of range [ 505.332357][T13859] netlink: zone id is out of range [ 506.210511][T13858] delete_channel: no stack [ 506.219525][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1987'. [ 506.461397][T13902] batadv_slave_1: entered promiscuous mode [ 506.485325][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1990'. [ 506.508058][T13902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.713290][T13902] batadv_slave_1 (unregistering): left promiscuous mode [ 506.733804][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1994'. [ 506.740503][T13902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.796804][T13912] batadv_slave_1: entered promiscuous mode [ 506.886506][T13912] batadv_slave_1 (unregistering): left promiscuous mode [ 507.186501][T13933] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 507.201041][T13933] netlink: 'syz.1.1998': attribute type 2 has an invalid length. [ 507.255605][T13933] hsr_slave_0: left promiscuous mode [ 507.279664][T13933] hsr_slave_1: left promiscuous mode [ 507.966686][T13968] bridge8: entered promiscuous mode [ 508.183405][T13991] netlink: 'syz.0.2009': attribute type 2 has an invalid length. [ 508.245413][T13991] netlink: 'syz.0.2009': attribute type 2 has an invalid length. [ 508.408713][T13993] macsec3: entered promiscuous mode [ 508.637188][T14004] netlink: 'syz.4.2015': attribute type 2 has an invalid length. [ 508.691346][T14004] !¼Þ: entered promiscuous mode [ 508.707412][T14004] netlink: 'syz.4.2015': attribute type 2 has an invalid length. [ 508.729922][T14004] !¼Þ: left promiscuous mode [ 508.786857][T14011] xt_ecn: cannot match TCP bits for non-tcp packets [ 508.875108][T14011] netlink: 'syz.4.2015': attribute type 2 has an invalid length. [ 509.088149][T14011] : entered promiscuous mode [ 509.305493][T14032] netlink: 'syz.2.2024': attribute type 5 has an invalid length. [ 509.631762][T14049] xt_TPROXY: Can be used only with -p tcp or -p udp [ 509.825174][T14064] __nla_validate_parse: 5 callbacks suppressed [ 509.825197][T14064] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2033'. [ 509.894252][T14054] lo speed is unknown, defaulting to 1000 [ 510.073676][T14069] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2035'. [ 510.106970][T14068] delete_channel: no stack [ 510.427878][T14085] xt_hashlimit: size too large, truncated to 1048576 [ 510.567537][T14086] ip6tnl2: entered allmulticast mode [ 510.625685][T14076] –: renamed from dummy0 (while UP) [ 510.644372][T14092] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 510.679844][T14092] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 511.254456][T14113] tipc: Enabled bearer , priority 0 [ 511.270322][T14113] syzkaller0: entered promiscuous mode [ 511.282704][T14113] syzkaller0: entered allmulticast mode [ 511.348739][T14113] tipc: Resetting bearer [ 511.518567][T14111] tipc: Resetting bearer [ 511.586077][T14111] tipc: Disabling bearer [ 511.859357][ T29] audit: type=1800 audit(1776931417.400:12): pid=14136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2055" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2172 res=0 errno=0 [ 512.015373][T14139] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 512.033624][T14139] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 512.318872][T14147] syzkaller1: entered promiscuous mode [ 512.329147][T14147] syzkaller1: entered allmulticast mode [ 512.335877][T11791] nci: nci_rsp_packet: unsupported rsp opcode 0xf35 [ 513.308555][T14186] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.315844][T14186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.323807][T14186] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.331277][T14186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.345524][T14186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.158172][T14153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.380207][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 515.417205][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 515.437780][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 515.458445][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 515.478054][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 515.488815][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 515.504349][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 515.613994][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 515.819483][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 515.833360][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 516.089507][T14238] validate_nla: 4 callbacks suppressed [ 516.089528][T14238] netlink: 'syz.1.2078': attribute type 2 has an invalid length. [ 516.142415][T14242] netlink: 'syz.1.2078': attribute type 2 has an invalid length. [ 519.110800][T14236] syzkaller0: entered promiscuous mode [ 519.129377][T14236] syzkaller0: entered allmulticast mode [ 519.201458][T14238] !©9: entered promiscuous mode [ 519.214624][T14242] !©9: left promiscuous mode [ 519.340257][T14254] netlink: 'syz.2.2081': attribute type 10 has an invalid length. [ 519.365356][T14254] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 519.981548][T14288] ip6gre3: entered promiscuous mode [ 519.990491][T14288] ip6gre3: entered allmulticast mode [ 520.026423][T14288] netlink: 'syz.4.2088': attribute type 6 has an invalid length. [ 520.162057][T14292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.234616][T14292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.299028][T14294] tipc: Invalid UDP bearer configuration [ 520.299091][T14294] tipc: Enabling of bearer rejected, failed to enable media [ 520.476494][T14298] netlink: 'syz.2.2090': attribute type 3 has an invalid length. [ 520.627007][T14306] __nla_validate_parse: 20 callbacks suppressed [ 520.627030][T14306] netlink: 840 bytes leftover after parsing attributes in process `syz.4.2093'. [ 520.629457][T14302] lo speed is unknown, defaulting to 1000 [ 520.692410][T14308] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 520.834244][T14308] bond7: entered promiscuous mode [ 520.843335][T14308] 8021q: adding VLAN 0 to HW filter on device bond7 [ 520.851349][T14308] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 520.916702][T14316] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 520.930015][T14316] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 520.950479][T14316] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 521.072045][T14308] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 521.075288][T14313] lo speed is unknown, defaulting to 1000 [ 521.084488][T14308] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 521.108060][T14308] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 521.195494][T14311] lo speed is unknown, defaulting to 1000 [ 521.239203][T14308] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 521.254308][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 521.284565][T14308] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 521.352625][T14308] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 521.379480][T14337] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2100'. [ 521.396892][T14308] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 521.427207][T14308] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 521.481892][T14308] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 522.404807][T14370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2106'. [ 522.508202][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2106'. [ 522.879129][T14385] sctp: [Deprecated]: syz.4.2110 (pid 14385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.879129][T14385] Use struct sctp_sack_info instead [ 522.901922][T14385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2110'. [ 522.924368][T14385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2110'. [ 522.971532][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2110'. [ 523.401122][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 523.626846][T14420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2116'. [ 524.804247][T14461] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 525.420752][T14458] netlink: zone id is out of range [ 525.431422][T14458] netlink: zone id is out of range [ 525.441262][T14458] netlink: zone id is out of range [ 525.446505][T14458] netlink: zone id is out of range [ 525.472679][T14458] netlink: zone id is out of range [ 525.480929][T14483] lo speed is unknown, defaulting to 1000 [ 525.482153][T14458] netlink: zone id is out of range [ 525.492765][T14491] netlink: 'syz.1.2134': attribute type 6 has an invalid length. [ 525.506919][T14491] netlink: 'syz.1.2134': attribute type 7 has an invalid length. [ 525.507060][T14458] netlink: zone id is out of range [ 525.516054][T14491] netlink: 'syz.1.2134': attribute type 8 has an invalid length. [ 525.580527][T14458] netlink: zone id is out of range [ 525.602821][T14458] netlink: zone id is out of range [ 525.619352][T14458] netlink: zone id is out of range [ 525.768741][T14504] __nla_validate_parse: 8 callbacks suppressed [ 525.768795][T14504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2135'. [ 525.908549][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2135'. [ 525.938969][T14510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2137'. [ 526.070147][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2137'. [ 526.122366][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2137'. [ 526.705336][T14530] tipc: Enabled bearer , priority 0 [ 526.863633][T14537] syzkaller0: entered promiscuous mode [ 526.880086][T14537] syzkaller0: entered allmulticast mode [ 526.890792][T14537] tipc: Resetting bearer [ 526.939060][T14529] tipc: Resetting bearer [ 527.084798][T14549] validate_nla: 1 callbacks suppressed [ 527.084821][T14549] netlink: 'syz.3.2148': attribute type 3 has an invalid length. [ 527.820748][T14561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2150'. [ 530.481857][T14529] tipc: Disabling bearer [ 530.498393][ T5839] tipc: Node number set to 2136699704 [ 530.816365][T14586] xt_hashlimit: size too large, truncated to 1048576 [ 531.501043][T14577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.831981][T14635] net_ratelimit: 7 callbacks suppressed [ 531.832002][T14635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.916551][T14641] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2167'. [ 532.152883][T14645] bond9: entered promiscuous mode [ 532.158025][T14645] bond9: entered allmulticast mode [ 532.164194][T14645] 8021q: adding VLAN 0 to HW filter on device bond9 [ 532.172792][T14646] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 532.178448][T14651] dvmrp1: left allmulticast mode [ 532.582438][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2175'. [ 532.701832][T14684] syzkaller0: entered promiscuous mode [ 532.709175][T14684] syzkaller0: entered allmulticast mode [ 532.717017][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 532.726280][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 535.325440][T14672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.560323][T14694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2180'. [ 535.583025][T14694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2180'. [ 535.623151][T14694] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2180'. [ 535.848469][T14711] lo speed is unknown, defaulting to 1000 [ 536.089924][T14732] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 536.124754][T14730] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 536.144949][T14730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2190'. [ 536.243624][T14730] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2190'. [ 536.359638][T14746] ipvlan2: entered promiscuous mode [ 536.375922][T14693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.821321][T14757] syz.3.2195 (14757) used obsolete PPPIOCDETACH ioctl [ 536.868328][T14767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.906969][T14761] netlink: 320 bytes leftover after parsing attributes in process `syz.1.2197'. [ 536.944102][T14761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2197'. [ 536.954236][T14761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2197'. [ 536.982977][T14761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2197'. [ 540.187917][T14777] sit1: entered allmulticast mode [ 540.324203][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'. [ 540.405948][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 540.477411][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 540.514984][T14788] netlink: 'syz.3.2203': attribute type 1 has an invalid length. [ 540.732484][T14803] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2207'. [ 540.747606][T14799] lo speed is unknown, defaulting to 1000 [ 540.783389][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'. [ 540.893229][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 541.066895][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 541.978934][T14856] __nla_validate_parse: 1 callbacks suppressed [ 541.978955][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2220'. [ 542.241249][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 542.278290][T14871] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2227'. [ 542.319865][T14871] netlink: 'syz.2.2227': attribute type 2 has an invalid length. [ 542.588428][T14891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2230'. [ 543.846354][T14928] lo speed is unknown, defaulting to 1000 [ 544.160889][T14950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.245908][T14958] netlink: 'syz.2.2247': attribute type 1 has an invalid length. [ 544.825305][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2252'. [ 544.969592][T14984] lo speed is unknown, defaulting to 1000 [ 545.086521][T14993] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2257'. [ 545.099099][T14993] netlink: 7056 bytes leftover after parsing attributes in process `syz.1.2257'. [ 545.120634][T14993] openvswitch: netlink: Missing key (keys=40, expected=80) [ 545.121226][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2258'. [ 545.400336][T15004] xt_TCPMSS: Only works on TCP SYN packets [ 545.665811][T15019] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2265'. [ 545.695230][T15023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2266'. [ 545.965550][T15032] syzkaller1: entered promiscuous mode [ 545.971641][T15032] syzkaller1: entered allmulticast mode [ 546.389601][T15011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.805916][T15048] ip6gretap0: entered promiscuous mode [ 546.818882][T15048] macsec0: entered promiscuous mode [ 546.829859][T15048] vlan3: entered promiscuous mode [ 546.868984][T15048] vlan3: left promiscuous mode [ 546.902247][T15048] ip6gretap0: left promiscuous mode [ 546.996443][T15064] tipc: Enabled bearer , priority 0 [ 547.215363][T15073] __nla_validate_parse: 1 callbacks suppressed [ 547.215385][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'. [ 547.425020][T15079] xt_ecn: cannot match TCP bits for non-tcp packets [ 547.968305][T15095] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2288'. [ 548.007477][T15095] openvswitch: netlink: Flow actions attr not present in new flow. [ 548.215480][T15117] lo speed is unknown, defaulting to 1000 [ 548.583782][T15126] syzkaller0: entered promiscuous mode [ 548.601552][T15126] syzkaller0: entered allmulticast mode [ 548.634074][T15126] TC_ACT_REPEAT abuse ? [ 548.890561][T15132] Cannot find del_set index 3 as target [ 549.442155][T15151] Cannot find del_set index 0 as target [ 550.556699][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'. [ 550.932010][T15226] lo speed is unknown, defaulting to 1000 [ 551.304704][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2321'. [ 551.325064][T15243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.334411][T15243] IPv6: NLM_F_CREATE should be set when creating new route [ 551.341761][T15243] IPv6: NLM_F_CREATE should be set when creating new route [ 551.675581][T15260] gre1: entered promiscuous mode [ 551.712619][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 551.740086][T15257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2324'. [ 551.865164][T15267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2327'. [ 552.286352][T15286] tipc: Resetting bearer [ 553.054049][T15310] netlink: 'syz.2.2335': attribute type 1 has an invalid length. [ 553.087166][T15310] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2335'. [ 553.124524][T15310] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2335'. [ 553.158916][T15310] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2335'. [ 553.197438][T15316] netlink: 'syz.3.2337': attribute type 1 has an invalid length. [ 553.229841][T15316] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2337'. [ 553.240718][T15320] netlink: 'syz.1.2338': attribute type 3 has an invalid length. [ 554.162471][T15354] lo speed is unknown, defaulting to 1000 [ 554.297108][T15365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2346'. [ 554.396275][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 555.493275][T15403] netlink: 'syz.0.2356': attribute type 2 has an invalid length. [ 555.519062][T15403] netlink: 'syz.0.2356': attribute type 1 has an invalid length. [ 555.534202][T15403] netlink: 'syz.0.2356': attribute type 1 has an invalid length. [ 556.039881][T15423] bond0: entered allmulticast mode [ 556.805020][T15449] netlink: 'syz.0.2367': attribute type 1 has an invalid length. [ 556.858547][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'. [ 556.913610][T15450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2367'. [ 557.237519][T15461] netlink: 'syz.0.2373': attribute type 4 has an invalid length. [ 557.263317][T15462] netlink: 'syz.3.2372': attribute type 4 has an invalid length. [ 557.282222][T15462] netlink: 'syz.3.2372': attribute type 4 has an invalid length. [ 557.384692][T15441] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 557.574892][T15469] xt_NFQUEUE: number of total queues is 0 [ 557.855561][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 558.067676][T15491] lo speed is unknown, defaulting to 1000 [ 558.285870][T15499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2383'. [ 558.483729][T15503] xt_CONNSECMARK: invalid mode: 0 [ 558.727878][T15513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2387'. [ 558.845282][T15519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2386'. [ 558.924701][T15513] lo speed is unknown, defaulting to 1000 [ 559.282110][T15527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.897818][T15539] wg2: entered allmulticast mode [ 560.635040][T15570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2401'. [ 560.885199][T15586] validate_nla: 2 callbacks suppressed [ 560.885219][T15586] netlink: 'syz.0.2405': attribute type 1 has an invalid length. [ 560.941159][T15590] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2406'. [ 561.039501][T15586] bond10: entered promiscuous mode [ 561.062870][T15586] 8021q: adding VLAN 0 to HW filter on device bond10 [ 561.295770][T15593] bond10: (slave veth9): making interface the new active one [ 561.304499][T15593] veth9: entered promiscuous mode [ 561.316730][T15593] bond10: (slave veth9): Enslaving as an active interface with an up link [ 561.456049][T15601] netlink: 'syz.3.2408': attribute type 2 has an invalid length. [ 561.466182][T15601] netlink: 'syz.3.2408': attribute type 2 has an invalid length. [ 561.484607][T15601] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2408'. [ 564.823174][T15628] netlink: 'syz.4.2419': attribute type 10 has an invalid length. [ 564.848651][T15628] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2419'. [ 565.411999][T15650] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 565.425515][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 565.447368][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 565.986921][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2428'. [ 566.000137][T15650] tipc: Enabling of bearer rejected, failed to enable media [ 566.161522][T15678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.362424][T15700] sctp: [Deprecated]: syz.0.2431 (pid 15700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.362424][T15700] Use struct sctp_sack_info instead [ 566.725085][T15706] syzkaller0: entered promiscuous mode [ 566.734717][T15706] syzkaller0: entered allmulticast mode [ 566.787053][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2438'. [ 566.827698][T15722] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 566.836565][T15710] bridge7: entered promiscuous mode [ 566.937696][T15728] netlink: 'syz.1.2440': attribute type 21 has an invalid length. [ 566.954015][T15725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2435'. [ 566.972863][T15716] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2437'. [ 566.985774][T15725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2435'. [ 567.074418][T15735] netlink: 'syz.1.2440': attribute type 1 has an invalid length. [ 567.093036][T15728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2440'. [ 567.448844][T15748] .iÿ: renamed from ip6gre0 (while UP) [ 567.530935][T15740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2442'. [ 568.468678][T15798] lo speed is unknown, defaulting to 1000 [ 568.843715][T15818] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 568.874014][T15818] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 569.518006][T15839] lo speed is unknown, defaulting to 1000 [ 570.552988][T15881] netlink: 'syz.3.2470': attribute type 2 has an invalid length. [ 570.590419][T15881] __nla_validate_parse: 5 callbacks suppressed [ 570.590441][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 570.633245][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2470'. [ 570.659129][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 570.957415][T15898] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 570.967833][T15898] netlink: 'syz.1.2475': attribute type 2 has an invalid length. [ 570.979292][T15898] netlink: 'syz.1.2475': attribute type 2 has an invalid length. [ 570.998838][T15898] netlink: 'syz.1.2475': attribute type 2 has an invalid length. [ 571.013632][T15898] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 571.019014][T15901] macsec3: entered promiscuous mode [ 571.025697][T15898] netlink: 'syz.1.2475': attribute type 2 has an invalid length. [ 571.036423][T15899] netlink: 'syz.4.2477': attribute type 1 has an invalid length. [ 571.041530][T15901] virt_wifi0: entered promiscuous mode [ 571.060154][T15898] netlink: 3936 bytes leftover after parsing attributes in process `syz.1.2475'. [ 571.080113][T15898] block nbd2: Unsupported socket: should be TCP or UNIX. [ 571.084731][T15899] gretap2: entered allmulticast mode [ 571.229944][T15911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2479'. [ 571.263479][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 571.385406][T15921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2484'. [ 571.625857][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 571.673248][T15933] erspan1: entered allmulticast mode [ 572.695461][T15985] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2500'. [ 572.816926][T15998] validate_nla: 3 callbacks suppressed [ 572.816945][T15998] netlink: 'syz.2.2502': attribute type 89 has an invalid length. [ 573.002666][T15997] lo speed is unknown, defaulting to 1000 [ 573.044684][T16006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2504'. [ 573.756757][T16029] dvmrp1: entered allmulticast mode [ 574.695858][T16073] block nbd2: server does not support multiple connections per device. [ 574.785561][T16073] block nbd2: shutting down sockets [ 574.933013][T16093] netlink: 'syz.1.2523': attribute type 1 has an invalid length. [ 575.050554][T16093] 8021q: adding VLAN 0 to HW filter on device bond9 [ 575.210593][T16111] netlink: 'syz.2.2527': attribute type 3 has an invalid length. [ 575.376005][T16111] block nbd2: NBD_DISCONNECT [ 575.453471][T16111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.630957][T16132] __nla_validate_parse: 8 callbacks suppressed [ 575.630981][T16132] netlink: 8210 bytes leftover after parsing attributes in process `syz.0.2532'. [ 575.677930][T16132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2532'. [ 575.978924][T16148] netlink: 'syz.1.2536': attribute type 12 has an invalid length. [ 576.078377][T16153] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2538'. [ 576.102643][T16155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2537'. [ 576.115156][T16153] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2538'. [ 576.145906][T16153] netlink: 'syz.0.2538': attribute type 6 has an invalid length. [ 576.189230][T16153] netlink: 'syz.0.2538': attribute type 6 has an invalid length. [ 576.392209][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2539'. [ 576.400778][T16164] tipc: Resetting bearer [ 576.478942][T16165] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 576.694279][T16173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2541'. [ 576.766401][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2541'. [ 576.820309][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2543'. [ 576.836350][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2542'. [ 576.911037][T16184] netlink: 'syz.1.2542': attribute type 2 has an invalid length. [ 577.058474][T16187] bond8: option ad_user_port_key: invalid value (65535) [ 577.078072][T16187] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 577.093494][T16187] bond8 (unregistering): Released all slaves [ 577.346333][T16209] netlink: 'syz.4.2550': attribute type 1 has an invalid length. [ 577.440951][T16209] bond11: entered promiscuous mode [ 577.446834][T16209] 8021q: adding VLAN 0 to HW filter on device bond11 [ 577.507604][T16217] netlink: 'syz.2.2553': attribute type 1 has an invalid length. [ 577.531880][T16217] netlink: 'syz.2.2553': attribute type 1 has an invalid length. [ 577.545270][T16209] bond11: entered allmulticast mode [ 577.628443][T16209] bond11: (slave bridge9): making interface the new active one [ 577.650492][T16209] bridge9: entered promiscuous mode [ 577.670272][T16209] bridge9: entered allmulticast mode [ 577.699498][T16209] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 579.361838][T16289] bridge0: port 3(vlan2) entered disabled state [ 579.388133][T16289] bond0: left allmulticast mode [ 579.492874][T16289] wg2: left allmulticast mode [ 579.528803][T16289] macsec2: left promiscuous mode [ 579.545386][T16289] ip6gre1: left promiscuous mode [ 579.563467][T16289] ip6gre1: left allmulticast mode [ 579.606472][T16289] bond9: left promiscuous mode [ 579.616832][T16289] bond9: left allmulticast mode [ 579.653388][T16289] gre1: left promiscuous mode [ 579.674170][T16289] bond10: left promiscuous mode [ 579.684655][T16289] veth9: left promiscuous mode [ 579.704102][T16289] bridge7: left promiscuous mode [ 579.716045][T16289] virt_wifi0: left promiscuous mode [ 579.716212][T16321] netlink: 'syz.4.2573': attribute type 1 has an invalid length. [ 579.721748][T16289] macsec3: left promiscuous mode [ 579.848379][T16321] bond12: entered promiscuous mode [ 579.854006][T16321] bond12: entered allmulticast mode [ 579.860337][T16321] 8021q: adding VLAN 0 to HW filter on device bond12 [ 579.898989][T16324] macvlan3: entered promiscuous mode [ 579.913839][T16324] macvlan3: entered allmulticast mode [ 579.922421][T16324] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 580.263889][T16306] lo speed is unknown, defaulting to 1000 [ 580.465387][T16357] netlink: 'syz.3.2583': attribute type 1 has an invalid length. [ 580.622675][T16357] bond7: entered promiscuous mode [ 580.628268][T16357] 8021q: adding VLAN 0 to HW filter on device bond7 [ 580.720149][T16360] 8021q: adding VLAN 0 to HW filter on device bond7 [ 580.748623][T16360] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 580.780164][T16368] __nla_validate_parse: 12 callbacks suppressed [ 580.780188][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2586'. [ 580.781712][T16360] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 580.832227][T16360] bond7: (slave vti0): making interface the new active one [ 580.846386][T16360] vti0: entered promiscuous mode [ 580.860669][T16360] bond7: (slave vti0): Enslaving as an active interface with an up link [ 581.128182][T16381] netlink: 'syz.0.2590': attribute type 4 has an invalid length. [ 581.144781][T16381] netlink: 'syz.0.2590': attribute type 4 has an invalid length. [ 581.168488][T16381] netlink: 'syz.0.2590': attribute type 4 has an invalid length. [ 581.526840][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 581.661108][T16398] syzkaller0: entered promiscuous mode [ 581.678303][T16398] syzkaller0: entered allmulticast mode [ 581.801216][T16409] netlink: 'syz.2.2598': attribute type 1 has an invalid length. [ 582.028260][T16409] bond9: entered promiscuous mode [ 582.044884][T16409] 8021q: adding VLAN 0 to HW filter on device bond9 [ 582.187518][T16412] bond9: (slave veth11): making interface the new active one [ 582.195307][T16412] veth11: entered promiscuous mode [ 582.212719][T16412] bond9: (slave veth11): Enslaving as an active interface with an up link [ 582.487529][T16439] bridge0: port 4(vlan2) entered blocking state [ 582.506557][T16439] bridge0: port 4(vlan2) entered disabled state [ 582.523770][T16439] vlan2: entered allmulticast mode [ 582.539286][T16439] bridge0: entered allmulticast mode [ 582.565603][T16439] vlan2: left allmulticast mode [ 582.579987][T16439] bridge0: left allmulticast mode [ 582.694992][T16440] lo speed is unknown, defaulting to 1000 [ 582.864422][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2608'. [ 582.892845][T16451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2609'. [ 582.897194][T16448] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 583.200804][T16461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2611'. [ 583.213403][T16463] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2612'. [ 583.223588][T16461] netlink: 'syz.3.2611': attribute type 4 has an invalid length. [ 583.234269][T16463] bridge_slave_1: default FDB implementation only supports local addresses [ 583.284343][T16463] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 583.478002][T16465] syzkaller1: entered promiscuous mode [ 583.483736][T16465] syzkaller1: entered allmulticast mode [ 583.517716][T16465] Bluetooth: MGMT ver 1.23 [ 583.545051][T16468] netlink: 'syz.0.2613': attribute type 58 has an invalid length. [ 583.574765][T16468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2613'. [ 584.491504][T16480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2617'. [ 584.773841][T16485] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2618'. [ 584.885060][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 584.960805][T16499] bond2: (slave lo): Releasing backup interface [ 584.996401][T16499] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 585.025714][T16501] netlink: 'syz.4.2622': attribute type 2 has an invalid length. [ 585.103355][T16499] bridge_slave_0: left allmulticast mode [ 585.127821][T16499] bridge_slave_0: left promiscuous mode [ 585.137997][T16499] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.174779][T16499] bridge_slave_1: left allmulticast mode [ 585.192042][T16499] bridge_slave_1: left promiscuous mode [ 585.210939][T16499] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.244353][T16499] bond0: (slave bond_slave_0): Releasing backup interface [ 585.295649][T16518] netlink: 'syz.1.2623': attribute type 1 has an invalid length. [ 585.304198][T16519] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 585.337215][T16499] team0: Port device C removed [ 585.386456][T16499] team0: Port device team_slave_1 removed [ 585.400179][T16499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 585.762692][T16501] bond13: option primary_reselect: invalid value (133) [ 585.809569][T16501] bond13 (unregistering): Released all slaves [ 586.087729][T16518] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 586.088108][T16519] __nla_validate_parse: 6 callbacks suppressed [ 586.088127][T16519] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2622'. [ 586.641031][T16568] netlink: 'syz.0.2632': attribute type 5 has an invalid length. [ 586.854098][T16587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.883375][T16581] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2634'. [ 587.076996][T16595] netlink: 'syz.4.2638': attribute type 11 has an invalid length. [ 587.329243][T16607] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2643'. [ 587.341007][T16607] RDS: rds_bind could not find a transport for 0:f0:100:0:a00:0:1:fd0a, load rds_tcp or rds_rdma? [ 587.387325][T16609] delete_channel: no stack [ 587.788769][T16630] syzkaller0: entered promiscuous mode [ 587.807523][T16630] syzkaller0: entered allmulticast mode [ 588.122861][T16649] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 588.750785][T16684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2662'. [ 588.792346][T16681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2660'. [ 588.810317][T16684] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2662'. [ 588.859280][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 590.218393][T16696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2663'. [ 590.235104][T16714] syzkaller0: entered promiscuous mode [ 590.240959][T16714] syzkaller0: entered allmulticast mode [ 590.263358][T16728] tun0: tun_chr_ioctl cmd 1074025675 [ 590.281169][T16728] tun0: persist enabled [ 590.285693][T16732] tun0: tun_chr_ioctl cmd 1074025675 [ 590.294601][T16732] tun0: persist disabled [ 590.412715][ T43] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.422821][ T43] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 590.469261][T16745] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2669'. [ 590.480479][T16745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.519244][ T43] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.537347][ T43] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 590.555828][ T43] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.573108][ T43] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 590.591289][T16729] lo speed is unknown, defaulting to 1000 [ 590.620757][ T43] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.629602][T16750] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2671'. [ 590.648696][ T43] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 590.666574][T16744] lo speed is unknown, defaulting to 1000 [ 590.727094][T16742] lo speed is unknown, defaulting to 1000 [ 591.036505][T16745] netlink: 'syz.4.2669': attribute type 4 has an invalid length. [ 591.493009][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2679'. [ 591.805010][T16787] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.2683'. [ 591.849381][T16795] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2684'. [ 591.954259][T16797] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2685'. [ 592.011975][T16797] netlink: 'syz.3.2685': attribute type 162 has an invalid length. [ 592.066482][T16797] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2685'. [ 592.130016][T16797] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2685'. [ 592.203325][T16797] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2685'. [ 592.934170][T16830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2693'. [ 592.966365][T16830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 593.222039][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'. [ 593.317153][T16847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 593.375466][T16846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 593.622871][T16865] netlink: 'syz.4.2699': attribute type 10 has an invalid length. [ 593.664469][T16865] team0: Port device dummy0 added [ 593.882392][T16884] netlink: 'syz.4.2699': attribute type 10 has an invalid length. [ 593.901410][T16869] 8021q: adding VLAN 0 to HW filter on device bond8 [ 593.945601][T16869] team0: Failed to send port change of device bond8 via netlink (err -105) [ 593.992429][T16869] team0: Failed to send options change via netlink (err -105) [ 594.033263][T16869] team0: Port device bond8 added [ 594.140869][T16884] team0: Port device dummy0 removed [ 594.385920][T16888] ip6tnl3: entered allmulticast mode [ 594.565267][T16894] tipc: Resetting bearer [ 594.643756][T16905] syzkaller0: entered promiscuous mode [ 594.658109][T16905] syzkaller0: entered allmulticast mode [ 595.050745][T16926] veth0_macvtap: left promiscuous mode [ 595.178908][T16930] veth1_to_hsr: left allmulticast mode [ 595.205368][T16930] veth1_to_hsr: left promiscuous mode [ 595.305688][T16936] lo speed is unknown, defaulting to 1000 [ 595.397533][T16942] lo speed is unknown, defaulting to 1000 [ 595.568485][T16914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 595.813573][T16955] netlink: 'syz.1.2718': attribute type 2 has an invalid length. [ 596.272541][T16969] netlink: 'syz.1.2722': attribute type 12 has an invalid length. [ 596.911486][T17001] __nla_validate_parse: 9 callbacks suppressed [ 596.911510][T17001] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2728'. [ 597.415484][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2731'. [ 597.906095][T17038] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 597.937515][T17038] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 597.974879][T17038] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 598.222733][T17054] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2739'. [ 598.244478][T17055] netlink: 'syz.1.2737': attribute type 1 has an invalid length. [ 598.266165][T17055] netlink: 760 bytes leftover after parsing attributes in process `syz.1.2737'. [ 598.284222][T17055] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2737'. [ 598.457937][T17064] netlink: 'syz.2.2743': attribute type 29 has an invalid length. [ 598.603535][T17077] netlink: 'syz.3.2745': attribute type 1 has an invalid length. [ 598.624978][T17077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2745'. [ 598.642732][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2745'. [ 598.711631][T17079] sctp: [Deprecated]: syz.1.2746 (pid 17079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.711631][T17079] Use struct sctp_sack_info instead [ 598.745495][T17077] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2745'. [ 598.765290][T17081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2747'. [ 599.060929][T17101] xfrm0: entered promiscuous mode [ 599.089513][T17101] xfrm0: entered allmulticast mode [ 599.359526][T17105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2753'. [ 599.652850][T17119] lo speed is unknown, defaulting to 1000 [ 600.050187][T17143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.073003][T17143] netlink: 'syz.1.2764': attribute type 1 has an invalid length. [ 600.187077][T17143] bond10 (unregistering): Released all slaves [ 600.338116][T17156] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 4, id = 0 [ 600.355815][T17155] syzkaller1: entered promiscuous mode [ 600.370929][T17155] syzkaller1: entered allmulticast mode [ 600.389309][T17155] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 600.772163][T17164] macvtap0: entered promiscuous mode [ 600.796730][T17164] veth1_to_hsr: entered promiscuous mode [ 600.827861][T17164] macvtap0: entered allmulticast mode [ 600.853640][T17164] veth1_to_hsr: entered allmulticast mode [ 600.946558][T17181] tc_dump_action: action bad kind [ 601.121833][T17194] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.196941][T17194] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.252920][T17194] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.338840][T17194] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.446072][T17202] lo speed is unknown, defaulting to 1000 [ 601.597241][ T1144] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.655214][ T1144] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.751777][ T1144] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.951554][T17219] __nla_validate_parse: 6 callbacks suppressed [ 601.951577][T17219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2786'. [ 602.090508][T17213] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2785'. [ 602.099909][ T85] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.218174][T17221] vxcan5: entered promiscuous mode [ 602.289291][T17232] No such timeout policy "syz0" [ 603.053439][T17285] netlink: 'syz.3.2801': attribute type 3 has an invalid length. [ 603.063962][T17285] netlink: 'syz.3.2801': attribute type 3 has an invalid length. [ 603.090343][T17285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2801'. [ 603.126500][T17287] bond10: option arp_all_targets: invalid value (129) [ 603.141451][T17287] bond10 (unregistering): Released all slaves [ 603.182219][T17292] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.2803'. [ 603.212673][T17292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2803'. [ 603.240295][T17292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2803'. [ 603.330265][T17297] syzkaller1: entered promiscuous mode [ 603.350760][T17297] syzkaller1: entered allmulticast mode [ 603.367944][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2804'. [ 603.514029][T17309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2807'. [ 603.675784][T17311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2808'. [ 604.033900][T17331] netlink: 'syz.2.2814': attribute type 8 has an invalid length. [ 604.097554][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 604.112142][T17333] lo speed is unknown, defaulting to 1000 [ 604.290948][T17328] bond1: entered promiscuous mode [ 604.338561][T17328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.494267][T17340] bond1: (slave vti0): refused to change device type [ 604.619843][T15826] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 604.641844][T17342] lo speed is unknown, defaulting to 1000 [ 604.807094][T17361] tipc: Enabling of bearer rejected, failed to enable media [ 605.705933][T17400] lo speed is unknown, defaulting to 1000 [ 605.706693][T17403] tun0: tun_chr_ioctl cmd 1074812118 [ 605.737743][T17403] tun0: tun_chr_ioctl cmd 1074033169 [ 606.106810][T17430] netlink: 'syz.0.2838': attribute type 5 has an invalid length. [ 606.428168][T17442] netlink: 'syz.0.2840': attribute type 1 has an invalid length. [ 606.463572][T17442] netlink: 'syz.0.2840': attribute type 2 has an invalid length. [ 606.844938][T17461] netlink: 'syz.0.2842': attribute type 2 has an invalid length. [ 607.293379][T17486] netlink: 'syz.3.2847': attribute type 1 has an invalid length. [ 607.722287][T17499] __nla_validate_parse: 5 callbacks suppressed [ 607.722310][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2850'. [ 607.882955][T17486] 8021q: adding VLAN 0 to HW filter on device bond9 [ 607.890549][T17506] netlink: 'syz.1.2852': attribute type 1 has an invalid length. [ 607.898739][T17506] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2852'. [ 607.945314][T17508] xt_HMARK: spi-set and port-set can't be combined [ 607.954307][T17495] bond9: (slave gretap3): making interface the new active one [ 607.981885][T17508] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2853'. [ 608.018458][T17495] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 608.275960][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2850'. [ 608.867195][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2862'. [ 608.905729][T17560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2863'. [ 608.907034][T17545] bond13: entered promiscuous mode [ 608.984256][T17560] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 609.386729][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2864'. [ 609.545906][T17592] syzkaller0: entered promiscuous mode [ 609.568607][T17591] SET target dimension over the limit! [ 609.600155][T17592] syzkaller0: entered allmulticast mode [ 610.076362][T17608] openvswitch: netlink: Actions may not be safe on all matching packets [ 610.312612][T17248] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 610.326843][T17248] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 610.338005][T17248] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 610.347903][T17248] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 610.356169][T17248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 610.517445][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2880'. [ 610.888844][T17617] lo speed is unknown, defaulting to 1000 [ 611.186332][T17653] lo speed is unknown, defaulting to 1000 [ 611.202804][T17661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2888'. [ 611.425306][T17675] netlink: 'syz.0.2890': attribute type 12 has an invalid length. [ 611.693957][T17671] lo speed is unknown, defaulting to 1000 [ 612.462918][T15826] Bluetooth: hci5: command tx timeout [ 612.469164][T17617] chnl_net:caif_netlink_parms(): no params data found [ 614.540462][T15826] Bluetooth: hci5: command tx timeout [ 616.459349][T17617] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.459569][T17731] netlink: 'syz.3.2898': attribute type 2 has an invalid length. [ 616.474862][T17617] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.482289][T17617] bridge_slave_0: entered allmulticast mode [ 616.491643][T17617] bridge_slave_0: entered promiscuous mode [ 616.504554][T17617] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.512503][T17617] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.520481][T17617] bridge_slave_1: entered allmulticast mode [ 616.536211][T17737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2898'. [ 616.546729][T17617] bridge_slave_1: entered promiscuous mode [ 616.582055][T17731] !: entered promiscuous mode [ 616.587778][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2897'. [ 616.631298][T15826] Bluetooth: hci5: command tx timeout [ 616.700413][T17617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.726451][T17617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.857308][T17745] netlink: 'syz.0.2900': attribute type 1 has an invalid length. [ 616.872770][T17617] team0: Port device team_slave_0 added [ 616.878845][T17745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.896359][T17617] team0: Port device team_slave_1 added [ 616.993264][T17617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.001144][T17617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.006174][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2900'. [ 617.028850][T17617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.056096][T17617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.069343][T17617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.115531][T17617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.150362][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2903'. [ 617.187909][T17761] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2900'. [ 617.348543][T17767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'. [ 617.415217][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2906'. [ 617.428526][T17617] hsr_slave_0: entered promiscuous mode [ 617.436503][T17617] hsr_slave_1: entered promiscuous mode [ 617.442968][T17617] debugfs: 'hsr0' already exists in 'hsr' [ 617.448792][T17617] Cannot create hsr debugfs directory [ 617.611965][T17783] vlan5: entered allmulticast mode [ 617.617335][T17783] bond0: entered allmulticast mode [ 617.624992][T17784] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2910'. [ 617.663364][T17784] team0: Port device bond0 removed [ 617.687987][T17784] bond0 (unregistering): Released all slaves [ 617.738339][T17792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2912'. [ 617.821103][T17795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.966993][T17802] netlink: 'syz.3.2914': attribute type 44 has an invalid length. [ 618.003789][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2914'. [ 618.264843][T17803] lo speed is unknown, defaulting to 1000 [ 618.395465][T17617] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.597296][T17617] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.701705][T15826] Bluetooth: hci5: command tx timeout [ 618.753016][T17617] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.780304][T17824] tipc: Enabled bearer , priority 10 [ 618.864210][T17617] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.009175][T17829] tipc: Enabled bearer , priority 0 [ 619.051420][T17829] syzkaller0: entered promiscuous mode [ 619.074159][T17829] syzkaller0: entered allmulticast mode [ 619.289249][T17829] tipc: Resetting bearer [ 619.342965][T17828] tipc: Resetting bearer [ 619.388612][T17828] tipc: Disabling bearer [ 619.491207][T17851] netlink: 'syz.3.2926': attribute type 21 has an invalid length. [ 619.879022][T17617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 619.967927][T17617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 620.010051][T17617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 620.058213][T17617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 620.071639][T17617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 620.086870][T17617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 620.102002][T17617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 620.217491][T17617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 620.292197][T17897] tipc: Enabling of bearer rejected, already enabled [ 620.448032][T17617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.488653][T17617] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.522869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.530134][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.552685][T17921] openvswitch: netlink: Multiple metadata blocks provided [ 620.593301][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.600622][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.858704][T17926] lo speed is unknown, defaulting to 1000 [ 620.892232][T17928] geneve2: entered promiscuous mode [ 620.897549][T17928] geneve2: entered allmulticast mode [ 620.928826][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 620.938928][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 620.955238][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 620.984152][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 621.207945][T17617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.326715][T17945] lo speed is unknown, defaulting to 1000 [ 621.423342][T17617] veth0_vlan: entered promiscuous mode [ 621.456758][T17617] veth1_vlan: entered promiscuous mode [ 621.631282][T17617] veth0_macvtap: entered promiscuous mode [ 621.687749][T17617] veth1_macvtap: entered promiscuous mode [ 621.731339][T17958] __nla_validate_parse: 5 callbacks suppressed [ 621.731357][T17958] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2950'. [ 621.795926][T17617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.840773][T17617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.991796][ T85] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.036964][ T85] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.078232][ T85] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.098180][ T85] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.583567][T11788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.613329][T11788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.717005][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.742004][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.896893][T17987] tipc: Enabling of bearer rejected, already enabled [ 623.316168][T18008] lo speed is unknown, defaulting to 1000 [ 623.509090][T18014] lo speed is unknown, defaulting to 1000 [ 623.603079][T18020] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2962'. [ 623.666904][T17248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 623.680879][T17248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 623.691001][T17248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 623.703265][T17248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 623.712944][T17248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 623.784652][T18026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2963'. [ 623.803069][T18026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2963'. [ 624.012253][T18030] netlink: 'syz.3.2964': attribute type 24 has an invalid length. [ 624.052249][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2964'. [ 624.089984][T18031] netlink: zone id is out of range [ 624.115084][T18031] netlink: zone id is out of range [ 624.146651][T18031] netlink: zone id is out of range [ 624.181109][T18031] netlink: zone id is out of range [ 624.195396][T18031] netlink: zone id is out of range [ 624.210405][T18030] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 624.217074][T18031] netlink: zone id is out of range [ 624.228693][T18021] lo speed is unknown, defaulting to 1000 [ 624.242309][T18031] netlink: zone id is out of range [ 624.257781][T18031] netlink: zone id is out of range [ 624.278049][T18031] netlink: zone id is out of range [ 624.291850][T18031] netlink: zone id is out of range [ 624.320801][T18042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2966'. [ 624.361736][T18041] ªªªªª: renamed from vlan0 (while UP) [ 624.876869][T18071] netlink: 'syz.3.2970': attribute type 9 has an invalid length. [ 625.198992][T18021] chnl_net:caif_netlink_parms(): no params data found [ 625.293422][T18080] ip6gretap0: entered promiscuous mode [ 625.305636][T18080] ip6gretap0: entered allmulticast mode [ 625.383938][T18086] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2973'. [ 625.541493][T18099] netlink: 'syz.1.2977': attribute type 2 has an invalid length. [ 625.549958][T18099] netlink: 'syz.1.2977': attribute type 1 has an invalid length. [ 625.589822][T18102] syzkaller0: entered promiscuous mode [ 625.605789][T18102] syzkaller0: entered allmulticast mode [ 625.614532][T18021] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.622301][T18021] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.630464][T18021] bridge_slave_0: entered allmulticast mode [ 625.638796][T18021] bridge_slave_0: entered promiscuous mode [ 625.655200][T18021] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.671436][T18021] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.689226][T18021] bridge_slave_1: entered allmulticast mode [ 625.713106][T18021] bridge_slave_1: entered promiscuous mode [ 625.796888][T18102] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 625.824190][T17248] Bluetooth: hci0: command tx timeout [ 625.952869][T18116] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2981'. [ 625.953736][T18112] tipc: Enabling of bearer rejected, failed to enable media [ 625.976993][T18021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.115689][T18122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2983'. [ 626.139163][T18125] netlink: 'syz.4.2984': attribute type 8 has an invalid length. [ 626.163948][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2984'. [ 626.183613][T18021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.271989][T18125] bond0: entered promiscuous mode [ 626.280109][T18125] gretap0: entered promiscuous mode [ 626.286861][T18125] debugfs: 'hsr1' already exists in 'hsr' [ 626.295574][T18125] Cannot create hsr debugfs directory [ 626.302387][T18125] hsr1: entered promiscuous mode [ 626.322768][T18021] team0: Port device team_slave_0 added [ 626.334749][T18021] team0: Port device team_slave_1 added [ 626.499379][T18021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.516015][T18021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.579753][T18021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.607324][T18021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.632204][T18021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.662694][T18021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.788073][T11788] vlan2: left allmulticast mode [ 626.802187][T11788] dummy0: left allmulticast mode [ 626.824471][T11788] vlan2: left promiscuous mode [ 626.831532][T11788] dummy0: left promiscuous mode [ 626.839766][T11788] bridge0: port 3(vlan2) entered disabled state [ 626.941186][T18153] Unsupported ieee802154 address type: 0 [ 627.084920][T18158] xt_HMARK: spi-set and port-set can't be combined [ 627.242905][T11788] bond7 (unregistering): (slave geneve3): Releasing active interface [ 627.604828][T11788] bond1 (unregistering): Released all slaves [ 627.620200][T11788] bond2 (unregistering): Released all slaves [ 627.635640][T11788] bond3 (unregistering): Released all slaves [ 627.654042][T11788] bond4 (unregistering): Released all slaves [ 627.681803][T11788] bond5 (unregistering): (slave batadv1): Releasing active interface [ 627.690963][T11788] bond5 (unregistering): Released all slaves [ 627.706994][T11788] bond6 (unregistering): Released all slaves [ 627.728522][T11788] bond7 (unregistering): Released all slaves [ 627.743432][T11788] bond8 (unregistering): Released all slaves [ 627.758604][T11788] bond9 (unregistering): Released all slaves [ 627.775205][T11788] bond10 (unregistering): (slave veth9): Releasing backup interface [ 627.784752][T11788] bond10 (unregistering): Released all slaves [ 627.812549][T11788] bond11 (unregistering): Released all slaves [ 627.900588][T17248] Bluetooth: hci0: command tx timeout [ 627.938672][T18164] __nla_validate_parse: 1 callbacks suppressed [ 627.938696][T18164] netlink: 64134 bytes leftover after parsing attributes in process `syz.2.2995'. [ 627.998422][T18021] hsr_slave_0: entered promiscuous mode [ 628.014663][T18021] hsr_slave_1: entered promiscuous mode [ 628.031379][T18021] debugfs: 'hsr0' already exists in 'hsr' [ 628.042532][T18021] Cannot create hsr debugfs directory [ 628.127566][T11788] tipc: Left network mode [ 628.320865][T11788] IPVS: stopping backup sync thread 11565 ... [ 628.789114][T18176] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.797268][T18176] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.918008][T18176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.946018][T18176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.128233][T18179] bridge0: port 4(team0) entered blocking state [ 629.136108][T18179] bridge0: port 4(team0) entered disabled state [ 629.156821][T18179] team0: entered allmulticast mode [ 629.170462][T18179] team_slave_0: entered allmulticast mode [ 629.181866][T18179] team_slave_1: entered allmulticast mode [ 629.191082][T18179] team0: entered promiscuous mode [ 629.196448][T18179] team_slave_0: entered promiscuous mode [ 629.204043][T18179] team_slave_1: entered promiscuous mode [ 629.213324][T18179] bridge0: port 4(team0) entered blocking state [ 629.219832][T18179] bridge0: port 4(team0) entered forwarding state [ 629.337674][ T85] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.365383][ T85] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.390512][T18187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2999'. [ 629.427950][T18186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3000'. [ 629.450204][ T85] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.524645][ T85] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.735062][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2999'. [ 629.980030][T17248] Bluetooth: hci0: command tx timeout [ 630.015078][T18158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 630.442296][T11788] hsr_slave_0: left promiscuous mode [ 630.457319][T11788] hsr_slave_1: left promiscuous mode [ 631.793380][T18213] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 631.849291][T18213] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 631.905978][T18213] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 632.060606][T17248] Bluetooth: hci0: command tx timeout [ 632.517527][T18021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 632.545465][T18021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 632.578776][T18021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 632.606447][T18021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 632.640667][T18021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 632.655222][T18021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 632.683089][T18021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 632.722552][T18021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 632.805172][T18254] netlink: 'syz.2.3013': attribute type 1 has an invalid length. [ 632.861120][T18254] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3013'. [ 633.161905][T18021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.262432][T18021] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.331731][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.338986][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.401063][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.408332][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.481485][T11788] IPVS: stop unused estimator thread 0... [ 633.545346][T18279] netlink: 'syz.1.3015': attribute type 3 has an invalid length. [ 633.904129][T18285] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3016'. [ 633.937519][T18285] syzkaller1: entered promiscuous mode [ 633.961631][T18285] syzkaller1: entered allmulticast mode [ 634.073380][T18285] geneve2: entered promiscuous mode [ 634.092078][T18285] geneve2: entered allmulticast mode [ 634.282087][T18021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.430712][T18021] veth0_vlan: entered promiscuous mode [ 634.461414][T18021] veth1_vlan: entered promiscuous mode [ 634.552527][T18021] veth0_macvtap: entered promiscuous mode [ 634.584730][T18021] veth1_macvtap: entered promiscuous mode [ 634.643115][T18021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.693567][T18021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.752760][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.773024][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.792403][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.831516][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.855689][T18315] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 634.883871][T18315] syzkaller1: linktype set to 270 [ 635.348956][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.365462][T18331] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3028'. [ 635.380938][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.451145][T18331] tipc: Enabled bearer , priority 0 [ 635.457988][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.472768][T18331] syzkaller0: entered promiscuous mode [ 635.479163][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.491520][T18331] syzkaller0: entered allmulticast mode [ 635.507542][T18341] netlink: 'syz.1.3031': attribute type 1 has an invalid length. [ 635.516033][T18341] netlink: 1820 bytes leftover after parsing attributes in process `syz.1.3031'. [ 635.546392][T18341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 635.633475][T18331] tipc: Resetting bearer [ 635.785804][T18352] Cannot find set identified by id 0 to match [ 635.827129][T18330] tipc: Resetting bearer [ 635.948805][T18330] tipc: Disabling bearer [ 636.117427][T18358] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3035'. [ 636.182421][T18360] erspan0: entered promiscuous mode [ 636.207065][T18360] macvlan2: entered promiscuous mode [ 636.243569][T18360] erspan0: left promiscuous mode [ 636.251445][T15826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 636.269238][T15826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 636.280491][T15826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 636.292530][T15826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 636.303957][T15826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 636.423833][T18364] lo speed is unknown, defaulting to 1000 [ 636.563434][T18370] netlink: 'syz.1.3039': attribute type 9 has an invalid length. [ 636.587370][T18370] netlink: 'syz.1.3039': attribute type 6 has an invalid length. [ 636.649299][T18370] netlink: 'syz.1.3039': attribute type 7 has an invalid length. [ 636.708581][T18370] netlink: 'syz.1.3039': attribute type 8 has an invalid length. [ 636.926011][T18364] chnl_net:caif_netlink_parms(): no params data found [ 637.637160][ T85] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.681722][ T85] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 637.788786][T18364] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.815029][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.842028][T18364] bridge_slave_0: entered allmulticast mode [ 637.870867][T18364] bridge_slave_0: entered promiscuous mode [ 637.931869][T18364] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.954136][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.980505][T18364] bridge_slave_1: entered allmulticast mode [ 638.006167][T18364] bridge_slave_1: entered promiscuous mode [ 638.113283][ T85] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.128717][ T85] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 638.380462][T17248] Bluetooth: hci3: command tx timeout [ 638.393540][ T85] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.430805][ T85] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 638.554650][T18444] netlink: 'syz.2.3057': attribute type 1 has an invalid length. [ 638.591861][T18364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.621576][T18364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.681361][ T85] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.692303][ T85] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 638.765080][T18437] lo speed is unknown, defaulting to 1000 [ 638.785917][T18364] team0: Port device team_slave_0 added [ 638.804374][T18364] team0: Port device team_slave_1 added [ 638.926980][T18364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.935760][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.962789][T18364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.991714][T18364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.005036][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.035358][T18364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.319104][T18468] netlink: 'syz.4.3063': attribute type 1 has an invalid length. [ 639.366489][T18468] netlink: 'syz.4.3063': attribute type 1 has an invalid length. [ 639.368285][T18364] hsr_slave_0: entered promiscuous mode [ 639.385153][T18364] hsr_slave_1: entered promiscuous mode [ 639.536435][T18475] netlink: 'syz.2.3066': attribute type 1 has an invalid length. [ 639.705273][ T85] bond2 (unregistering): (slave ip6gretap2): Releasing active interface [ 639.790801][ T85] bond7 (unregistering): (slave vti0): Releasing backup interface [ 639.798745][ T85] vti0 (unregistering): left promiscuous mode [ 639.884939][ T85] bond9 (unregistering): (slave gretap3): Releasing active interface [ 640.006159][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.015459][ T85] bond_slave_0: left promiscuous mode [ 640.023849][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.034316][ T85] bond_slave_1: left promiscuous mode [ 640.043541][ T85] bond0 (unregistering): Released all slaves [ 640.054730][ T85] bond1 (unregistering): Released all slaves [ 640.097925][ T85] bond2 (unregistering): Released all slaves [ 640.141516][ T85] bond3 (unregistering): (slave macvlan2): Releasing backup interface [ 640.152725][ T85] veth0_to_bond: left promiscuous mode [ 640.162592][ T85] bond3 (unregistering): Released all slaves [ 640.186758][ T85] bond4 (unregistering): Released all slaves [ 640.228378][ T85] bond5 (unregistering): Released all slaves [ 640.257071][ T85] bond6 (unregistering): Released all slaves [ 640.286104][ T85] bond7 (unregistering): Released all slaves [ 640.325202][ T85] team0: Port device bond8 removed [ 640.333184][ T85] bond8 (unregistering): Released all slaves [ 640.362481][ T85] bond9 (unregistering): Released all slaves [ 640.460750][T17248] Bluetooth: hci3: command tx timeout [ 640.714910][ T85] !: left promiscuous mode [ 640.784172][T18497] netlink: 'syz.0.3072': attribute type 2 has an invalid length. [ 641.153623][ T85] tipc: Left network mode [ 641.355316][T18515] pim6reg: entered allmulticast mode [ 641.953079][T18540] bridge0: port 3(vlan2) entered blocking state [ 641.970194][T18540] bridge0: port 3(vlan2) entered disabled state [ 641.986591][T18540] vlan2: entered allmulticast mode [ 642.006862][T18540] geneve0: entered allmulticast mode [ 642.033194][T18540] vlan2: entered promiscuous mode [ 642.047268][T18540] geneve0: entered promiscuous mode [ 642.394045][T18492] infiniband syz0: set down [ 642.412063][T18492] infiniband syz0: added ipvlan0 [ 642.549982][T17248] Bluetooth: hci3: command tx timeout [ 642.556496][T18492] RDS/IB: syz0: added [ 642.575060][T18492] smc: adding ib device syz0 with port count 1 [ 642.582283][T18492] smc: ib device syz0 port 1 has no pnetid [ 642.715768][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 642.765818][T18562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3081'. [ 644.456765][T18523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 644.517504][T18364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 644.621244][T17248] Bluetooth: hci3: command tx timeout [ 644.633852][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.643149][T18364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 644.692303][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.719099][T18364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 644.758349][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.773876][T18578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3084'. [ 644.792173][T18364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 644.838957][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 645.062557][T18594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3087'. [ 645.151402][T18597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.276041][T18364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.362979][T18364] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.416842][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.424151][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.528254][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.535591][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.599336][T18608] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3090'. [ 646.260900][ T85] hsr_slave_0: left promiscuous mode [ 646.272774][ T85] hsr_slave_1: left promiscuous mode [ 646.300837][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.310572][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.333043][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.342452][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.355257][ T85] veth1_vlan: left promiscuous mode [ 646.405032][T18635] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3092'. [ 646.620329][ T85] pim6reg (unregistering): left allmulticast mode [ 646.783639][ T85] team0 (unregistering): Port device team_slave_1 removed [ 646.799198][ T85] team0 (unregistering): Port device team_slave_0 removed [ 647.245563][T18364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.284625][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3098'. [ 647.425695][T18364] veth0_vlan: entered promiscuous mode [ 647.454655][T18364] veth1_vlan: entered promiscuous mode [ 647.529136][T18660] netlink: 'syz.4.3100': attribute type 10 has an invalid length. [ 647.539312][ T85] IPVS: stop unused estimator thread 0... [ 647.661291][T18364] veth0_macvtap: entered promiscuous mode [ 647.696770][T18666] smc: removing ib device syz0 [ 647.708377][T18364] veth1_macvtap: entered promiscuous mode [ 647.830955][T18364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.841798][T18670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3102'. [ 647.933230][T18364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.994210][T11788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.016287][T11788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.177674][T11788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.230925][T11788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.377591][T18676] lo speed is unknown, defaulting to 1000 [ 648.928813][T18687] syzkaller1: entered promiscuous mode [ 648.948280][T18687] syzkaller1: entered allmulticast mode [ 649.107229][T11788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.126257][T11788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.547664][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.580746][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.700260][T18716] netlink: 'syz.1.3108': attribute type 1 has an invalid length. [ 649.727909][T18716] netlink: 'syz.1.3108': attribute type 3 has an invalid length. [ 649.766406][T18716] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3108'. [ 650.483209][T18747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3112'. [ 651.095827][T15826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 651.116827][T15826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 651.132095][T15826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 651.148285][T15826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 651.156450][T15826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 651.357234][T18758] lo speed is unknown, defaulting to 1000 [ 652.548797][T18787] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3120'. [ 652.568164][T18787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3120'. [ 652.574832][T18758] chnl_net:caif_netlink_parms(): no params data found [ 652.598809][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3120'. [ 652.643215][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3121'. [ 652.705835][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3122'. [ 652.743334][T18758] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.751151][T18758] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.758520][T18758] bridge_slave_0: entered allmulticast mode [ 652.766212][T18795] netlink: 'syz.1.3122': attribute type 10 has an invalid length. [ 652.777404][T18758] bridge_slave_0: entered promiscuous mode [ 652.792715][T18758] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.809955][T18758] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.823045][T18758] bridge_slave_1: entered allmulticast mode [ 652.838981][T18758] bridge_slave_1: entered promiscuous mode [ 652.852197][T18795] team0: Port device dummy0 added [ 652.947532][T18758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.985554][T18758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.113462][T18758] team0: Port device team_slave_0 added [ 653.135824][T18758] team0: Port device team_slave_1 added [ 653.156008][T18813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3127'. [ 653.246294][T18758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.260112][T17248] Bluetooth: hci4: command tx timeout [ 653.279824][T18758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.311166][T18819] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3127'. [ 653.328206][T18758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.347150][T18758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.370680][T18758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.427931][T18758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.455878][T18819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.473287][T18819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.485331][T18819] bond0 (unregistering): Released all slaves [ 653.709465][T18833] syzkaller1: entered promiscuous mode [ 653.755302][T18833] syzkaller1: entered allmulticast mode [ 653.819190][T18824] lo speed is unknown, defaulting to 1000 [ 653.876642][T18758] hsr_slave_0: entered promiscuous mode [ 653.896391][T18758] hsr_slave_1: entered promiscuous mode [ 653.904111][T18758] debugfs: 'hsr0' already exists in 'hsr' [ 653.910281][T18758] Cannot create hsr debugfs directory [ 653.915983][T18841] lo speed is unknown, defaulting to 1000 [ 653.960933][T18840] lo speed is unknown, defaulting to 1000 [ 654.322023][T18849] netlink: 'syz.2.3135': attribute type 2 has an invalid length. [ 654.423524][T18853] netlink: 'syz.2.3135': attribute type 2 has an invalid length. [ 654.595381][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'. [ 654.714743][T18862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3136'. [ 654.794469][T18860] bond11 (unregistering): Released all slaves [ 655.206387][T18876] lo speed is unknown, defaulting to 1000 [ 655.340020][T17248] Bluetooth: hci4: command tx timeout [ 655.387526][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3142'. [ 656.082154][T18898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3145'. [ 656.094345][T18898] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3145'. [ 656.419786][T18758] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 656.483382][T18758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 656.501609][T18758] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 656.537182][T18758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 656.563422][T18758] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 656.591645][T18758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.612092][T18758] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 656.632518][T18758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 656.914014][T18758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.968641][T18758] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.996220][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.003686][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.027855][T18943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3157'. [ 657.030611][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.044657][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.420321][T17248] Bluetooth: hci4: command tx timeout [ 657.713363][T18758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.158633][T18958] lec:lec_atm_close: lec0: Shut down! [ 658.713125][T18758] veth0_vlan: entered promiscuous mode [ 658.757842][T18758] veth1_vlan: entered promiscuous mode [ 658.898972][T18758] veth0_macvtap: entered promiscuous mode [ 658.933381][T18758] veth1_macvtap: entered promiscuous mode [ 658.983446][T18998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3166'. [ 658.999139][T18758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.038054][T18758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.099061][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.125192][T11774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.143928][T11774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.154663][T11774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.359117][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.390727][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.500075][T17248] Bluetooth: hci4: command tx timeout [ 659.514640][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.543493][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.818307][T19021] pimreg0: tun_chr_ioctl cmd 1074025681 [ 659.917468][T19027] pimreg0: tun_chr_ioctl cmd 1074025673 [ 660.644203][T18024] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 660.659479][T18024] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 660.673081][T18024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 660.688920][T18024] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 660.704678][T18024] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 660.736552][T19055] 8021q: VLANs not supported on vxcan0 [ 660.762561][T19046] nbd2: detected capacity change from 0 to 63 [ 660.818523][T15826] block nbd2: Receive control failed (result -104) [ 660.821727][T19050] lo speed is unknown, defaulting to 1000 [ 661.632448][ T5489] lec:lec_start_xmit: lec0:No lecd attached [ 661.771050][T19050] chnl_net:caif_netlink_parms(): no params data found [ 661.871962][T19099] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3186'. [ 661.885693][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'. [ 661.897151][T19099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3186'. [ 661.982924][T19099] xt_hashlimit: size too large, truncated to 1048576 [ 662.063428][T19110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3186'. [ 662.103794][T19050] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.124083][T19050] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.131665][T19050] bridge_slave_0: entered allmulticast mode [ 662.146835][T19050] bridge_slave_0: entered promiscuous mode [ 662.156717][T19050] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.166021][T19050] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.173904][T19050] bridge_slave_1: entered allmulticast mode [ 662.183282][T19050] bridge_slave_1: entered promiscuous mode [ 662.288680][T19050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.333837][T19050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.400536][T19050] team0: Port device team_slave_0 added [ 662.410625][T19050] team0: Port device team_slave_1 added [ 662.484949][T19050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.508425][T19050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.571730][T19050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.595440][T19050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.619074][T19050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.689906][T19050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.780414][T15826] Bluetooth: hci1: command tx timeout [ 662.814533][T19050] hsr_slave_0: entered promiscuous mode [ 662.822145][T19050] hsr_slave_1: entered promiscuous mode [ 662.828765][T19050] debugfs: 'hsr0' already exists in 'hsr' [ 662.835502][T19050] Cannot create hsr debugfs directory [ 662.842471][T19124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3192'. [ 663.114023][T19050] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.244418][T19135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3195'. [ 663.256119][T19124] nbd: socks must be embedded in a SOCK_ITEM attr [ 663.269547][T19126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3192'. [ 663.285127][T19126] nbd: nbd64 already in use [ 663.293526][T17732] block nbd64: NBD_DISCONNECT [ 663.317302][T19050] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.503044][T19050] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.649564][T19050] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.185496][T19154] bridge1: entered promiscuous mode [ 664.365626][T19050] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 664.377858][T19050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.402358][T19050] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 664.404844][T19161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3201'. [ 664.422355][T19050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.435832][T19050] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 664.445302][T19050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.454699][T19050] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 664.473362][T19050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.699611][T19050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.762879][T19050] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.811478][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.818705][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.868371][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.869833][T15826] Bluetooth: hci1: command tx timeout [ 664.875897][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.890203][T19183] 8021q: VLANs not supported on ip_vti0 [ 664.901960][T19180] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 664.909151][T19177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3204'. [ 664.918501][T19180] syzkaller1: linktype set to 260 [ 664.947704][T19183] veth3: entered allmulticast mode [ 664.962463][T19177] geneve0: entered promiscuous mode [ 665.083592][T19182] lo speed is unknown, defaulting to 1000 [ 665.767682][T19210] lo speed is unknown, defaulting to 1000 [ 665.893013][T19202] lo speed is unknown, defaulting to 1000 [ 665.958298][T19213] lo speed is unknown, defaulting to 1000 [ 666.248515][T19050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.273559][T19229] netlink: 'syz.1.3214': attribute type 13 has an invalid length. [ 666.366741][T19231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3214'. [ 666.704541][T19239] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 666.730279][T19239] bond1 (unregistering): Released all slaves [ 666.940487][T15826] Bluetooth: hci1: command tx timeout [ 667.179688][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 667.189896][ C1] lec:lec_tx_timeout: lec0 [ 667.195006][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 667.240548][T19050] veth0_vlan: entered promiscuous mode [ 667.289379][T19050] veth1_vlan: entered promiscuous mode [ 667.426416][T19050] veth0_macvtap: entered promiscuous mode [ 667.457603][T19050] veth1_macvtap: entered promiscuous mode [ 667.536453][T19050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.579454][T19050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.676777][ T1144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.701204][ T1144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.717705][ T1144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.744317][T19272] veth1_to_bond: entered allmulticast mode [ 667.761225][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3223'. [ 667.821801][T19278] veth1_to_bond (unregistering): left allmulticast mode [ 667.891777][T19278] bond0: (slave bond_slave_1): Releasing backup interface [ 667.959135][ T1144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.186087][T19289] netlink: 'syz.4.3227': attribute type 1 has an invalid length. [ 668.212785][T19289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3227'. [ 668.223323][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.249741][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.258844][T19289] netlink: 'syz.4.3227': attribute type 1 has an invalid length. [ 668.345146][T19289] netlink: 'syz.4.3227': attribute type 4 has an invalid length. [ 668.354830][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.384087][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.450640][T19290] team0: entered promiscuous mode [ 668.484809][T19290] team_slave_0: entered promiscuous mode [ 668.516379][T19290] team_slave_1: entered promiscuous mode [ 668.530104][T19296] net_ratelimit: 23 callbacks suppressed [ 668.530125][T19296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.558617][T19290] team0: entered allmulticast mode [ 668.568975][T19290] team_slave_0: entered allmulticast mode [ 668.576260][T19290] team_slave_1: entered allmulticast mode [ 668.885106][T18024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.915535][T18024] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.925759][T18024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.938025][T18024] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.957766][T18024] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 669.022246][T15826] Bluetooth: hci1: command tx timeout [ 669.335804][T19317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3231'. [ 669.360522][T19317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3231'. [ 669.369887][T19304] lo speed is unknown, defaulting to 1000 [ 669.696690][T19331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3235'. [ 669.994873][T19304] chnl_net:caif_netlink_parms(): no params data found [ 670.148541][T19342] lo speed is unknown, defaulting to 1000 [ 670.524837][T19362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3241'. [ 670.579930][T19304] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.597471][T19304] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.605063][T19304] bridge_slave_0: entered allmulticast mode [ 670.625571][T19304] bridge_slave_0: entered promiscuous mode [ 670.758383][T19304] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.788666][T19304] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.799320][T19304] bridge_slave_1: entered allmulticast mode [ 670.822653][T19304] bridge_slave_1: entered promiscuous mode [ 671.019863][T15826] Bluetooth: hci2: command tx timeout [ 671.207729][T19304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.347983][T19304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.464165][T19304] team0: Port device team_slave_0 added [ 671.476316][T19304] team0: Port device team_slave_1 added [ 671.565729][T19304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.573105][T19304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.635977][T19304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.661665][T19304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.678802][T19304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.730018][T19304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.894045][T19304] hsr_slave_0: entered promiscuous mode [ 671.911451][T19304] hsr_slave_1: entered promiscuous mode [ 671.917782][T19304] debugfs: 'hsr0' already exists in 'hsr' [ 671.931435][T19304] Cannot create hsr debugfs directory [ 672.219693][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 672.227800][ C1] lec:lec_tx_timeout: lec0 [ 672.232846][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 672.464478][T19421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3251'. [ 672.650251][T19427] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3254'. [ 672.773566][T19304] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 672.818598][T19304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 672.840671][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3255'. [ 672.861477][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3255'. [ 672.892730][T19304] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 672.945672][T19304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 672.960922][T19442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3257'. [ 672.976012][T19304] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 673.023627][T19304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.081955][T19304] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 673.110702][T15826] Bluetooth: hci2: command tx timeout [ 673.131670][T19304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 673.153994][T19442] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3257'. [ 673.373919][T19455] lo speed is unknown, defaulting to 1000 [ 673.605640][T19456] lo speed is unknown, defaulting to 1000 [ 673.839138][T19471] netlink: 'syz.4.3261': attribute type 32 has an invalid length. [ 673.879469][T19473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3262'. [ 674.098133][T19471] syzkaller1: tun_chr_ioctl cmd 35108 [ 674.127584][T19485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3261'. [ 674.857542][T19501] veth2: entered allmulticast mode [ 674.967485][T19304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.073378][T19304] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.107728][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.115004][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.191834][T15826] Bluetooth: hci2: command tx timeout [ 675.282178][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 675.296975][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.304262][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.330579][T19511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3270'. [ 675.785266][T19530] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3272'. [ 675.860335][T19533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3273'. [ 675.936531][T19536] pimreg9: entered allmulticast mode [ 675.953708][T19533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3273'. [ 676.072186][T19542] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3275'. [ 676.107916][T19542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3275'. [ 676.369210][T19304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.239656][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 677.247785][ C1] lec:lec_tx_timeout: lec0 [ 677.253630][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 677.260665][T18024] Bluetooth: hci2: command tx timeout [ 677.432585][T19587] lo speed is unknown, defaulting to 1000 [ 677.449153][T19304] veth0_vlan: entered promiscuous mode [ 677.526384][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3289'. [ 677.582612][T19599] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3290'. [ 677.635520][T19304] veth1_vlan: entered promiscuous mode [ 677.675985][T19603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3289'. [ 678.128599][T19304] veth0_macvtap: entered promiscuous mode [ 678.315575][T19304] veth1_macvtap: entered promiscuous mode [ 678.399471][T19304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.457249][T19304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.503535][ T1102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.526451][ T1102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.565544][ T1102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.588522][ T1102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.898404][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.920580][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.048840][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.084869][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.385573][T19652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.573038][T19657] syzkaller0: entered promiscuous mode [ 679.578686][T19657] syzkaller0: entered allmulticast mode [ 680.952281][T19708] __nla_validate_parse: 7 callbacks suppressed [ 680.952303][T19708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3318'. [ 681.115398][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3319'. [ 681.153044][T19708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 681.171913][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3318'. [ 681.205367][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3318'. [ 681.235368][T19721] bond1: entered promiscuous mode [ 681.243723][T19721] bond1: entered allmulticast mode [ 681.261588][T19721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 681.333474][T19721] team0: Port device bond1 added [ 681.378593][T19722] vxcan0: entered promiscuous mode [ 681.403037][T19722] vxcan1: entered promiscuous mode [ 681.721678][T19734] lo speed is unknown, defaulting to 1000 [ 681.757108][T19738] lo: entered allmulticast mode [ 681.763060][T19741] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 681.780763][T19738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.269664][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 682.277828][ C1] lec:lec_tx_timeout: lec0 [ 682.282791][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 682.731493][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3334'. [ 682.798305][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3334'. [ 682.958166][T19382] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.001349][T19382] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.060748][T19782] netlink: 'syz.4.3335': attribute type 12 has an invalid length. [ 683.168757][T19792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3338'. [ 683.469435][T19792] bond0: option primary_reselect: invalid value (133) [ 683.497499][T19812] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 683.523434][T19792] bond0 (unregistering): Released all slaves [ 683.677255][T19382] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.706644][T19790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.776986][T19812] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3338'. [ 683.821633][T19382] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.842080][T19776] lo speed is unknown, defaulting to 1000 [ 683.864573][T19803] lo speed is unknown, defaulting to 1000 [ 684.432752][T19829] Bluetooth: MGMT ver 1.23 [ 684.942377][T19850] geneve2: entered promiscuous mode [ 684.973668][T19847] lo speed is unknown, defaulting to 1000 [ 684.979572][T19382] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 685.020330][T19382] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 685.077617][T19382] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 685.131817][T19382] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 685.143621][T19862] netlink: 'syz.5.3352': attribute type 29 has an invalid length. [ 685.196294][T19867] IPVS: set_ctl: invalid protocol: 46 172.20.20.16:20002 [ 685.242490][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3351'. [ 685.384221][T19870] netlink: 'syz.1.3354': attribute type 1 has an invalid length. [ 685.397736][T19870] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3354'. [ 685.906132][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.921660][T19888] sock: sock_timestamping_bind_phc: sock not bind to device [ 685.930956][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 686.287337][T19900] __nla_validate_parse: 1 callbacks suppressed [ 686.287358][T19900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3361'. [ 686.345985][T19900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3361'. [ 686.372860][T19908] openvswitch: netlink: IPv4 tun info is not correct [ 686.375017][T19900] netlink: 58 bytes leftover after parsing attributes in process `syz.4.3361'. [ 686.443329][T19911] syzkaller1: entered promiscuous mode [ 686.458602][T19911] syzkaller1: entered allmulticast mode [ 686.588074][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3367'. [ 686.711097][T19919] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 686.743092][T19919] bond2 (unregistering): Released all slaves [ 687.289673][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 687.297812][ C1] lec:lec_tx_timeout: lec0 [ 687.302968][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 687.348243][T19944] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3376'. [ 687.493824][T19949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.314976][T19944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.345636][T19944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.623814][T19944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.667163][T19944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.902055][T19944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.927958][T19944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.967808][T19994] syz_tun: entered allmulticast mode [ 689.009133][T19994] syz_tun: left allmulticast mode [ 689.107170][T19944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.139334][T19944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.675292][T20011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3392'. [ 689.725819][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3392'. [ 689.727991][ T1102] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.775533][ T1102] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.970251][T19382] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.007075][T19382] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.043104][T20011] dummy0: entered promiscuous mode [ 690.048635][T20011] macvtap1: entered promiscuous mode [ 690.054595][T20011] macvtap1: entered allmulticast mode [ 690.060599][T20011] dummy0: entered allmulticast mode [ 690.076779][T20021] dummy0: left allmulticast mode [ 690.082323][T20021] dummy0: left promiscuous mode [ 690.150394][T19382] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.158807][T19382] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.269594][ T1144] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.282149][ T1144] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.493567][T20037] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3397'. [ 690.533315][T20039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3396'. [ 690.796020][T20052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3400'. [ 690.985493][T20056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.143896][T20063] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 691.226826][T20062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 691.262946][ T1643] block nbd2: Possible stuck request ffff8880277ce000: control (read@0,1024B). Runtime 30 seconds [ 691.290595][ T1643] block nbd2: Possible stuck request ffff8880277ce1c0: control (read@1024,1024B). Runtime 30 seconds [ 691.301930][ T1643] block nbd2: Possible stuck request ffff8880277ce380: control (read@2048,1024B). Runtime 30 seconds [ 691.314436][ T1643] block nbd2: Possible stuck request ffff8880277ce540: control (read@3072,1024B). Runtime 30 seconds [ 691.438621][T20072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3406'. [ 691.646988][T20091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3408'. [ 691.650570][T20084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3409'. [ 691.831735][T20096] bridge_slave_0: left allmulticast mode [ 691.839332][T20096] bridge_slave_0: left promiscuous mode [ 691.847524][T20096] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.864646][T20101] netlink: 'syz.0.3413': attribute type 2 has an invalid length. [ 691.876851][T20101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3413'. [ 691.896309][T20096] bridge_slave_1: left allmulticast mode [ 691.909484][T20096] bridge_slave_1: left promiscuous mode [ 691.924996][T20096] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.931097][T20105] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3414'. [ 691.944042][T20096] vlan2: left promiscuous mode [ 691.948966][T20096] geneve0: left promiscuous mode [ 691.976540][T20096] team0: Port device team_slave_0 removed [ 692.008481][T20096] team0: Port device team_slave_1 removed [ 692.024093][T20096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.032217][T20096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.041955][T20096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.049519][T20096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.067608][T20110] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 692.069355][T20096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 692.207747][T20101] bond0: option primary_reselect: invalid value (133) [ 692.220709][T20101] bond0 (unregistering): Released all slaves [ 692.237849][T20116] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3416'. [ 692.252996][T20116] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3416'. [ 692.262483][T20116] netlink: 'syz.1.3416': attribute type 5 has an invalid length. [ 692.275082][T20116] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3416'. [ 692.292857][T20119] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3416'. [ 692.319192][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 692.322594][T20119] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3416'. [ 692.328869][ C1] lec:lec_tx_timeout: lec0 [ 692.341724][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 692.361174][T20119] netlink: 'syz.1.3416': attribute type 5 has an invalid length. [ 692.459051][T20101] bond0: option primary_reselect: invalid value (133) [ 692.478120][T20101] bond0 (unregistering): Released all slaves [ 692.659356][T20126] vti1: entered promiscuous mode [ 692.687919][T20126] vti1: entered allmulticast mode [ 693.056664][T20141] netlink: 'syz.1.3423': attribute type 15 has an invalid length. [ 693.738343][T20171] ip6erspan0: entered allmulticast mode [ 693.852111][T20173] netlink: 'syz.4.3433': attribute type 7 has an invalid length. [ 693.860097][T20173] netlink: 'syz.4.3433': attribute type 8 has an invalid length. [ 695.905550][T20234] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 697.359674][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 697.367760][ C1] lec:lec_tx_timeout: lec0 [ 697.372460][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 700.903649][T20291] bond1: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 700.915548][T20291] bond1: entered promiscuous mode [ 700.921324][T20291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 701.059100][T20291] bond2: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 701.082594][T20291] bond2: entered promiscuous mode [ 701.101421][T20291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 701.186099][T20291] bond3: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 701.196440][T20291] bond3: entered promiscuous mode [ 701.202418][T20291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 701.308654][T20291] bond4: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 701.352818][T20291] bond4: entered promiscuous mode [ 701.364896][T20291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 701.389228][T20320] macsec1: entered promiscuous mode [ 701.396012][T20320] macsec1: entered allmulticast mode [ 701.467159][T20291] bond5: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 701.530709][T20291] bond5: entered promiscuous mode [ 701.556389][T20291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 701.754654][T20291] bond6: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 701.801011][T20291] bond6: entered promiscuous mode [ 701.820589][T20291] 8021q: adding VLAN 0 to HW filter on device bond6 [ 702.246767][T20349] bond2 (unregistering): Released all slaves [ 702.307265][T20356] __nla_validate_parse: 11 callbacks suppressed [ 702.307287][T20356] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3486'. [ 702.331330][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3483'. [ 702.344242][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 702.379799][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 702.388063][ C1] lec:lec_tx_timeout: lec0 [ 702.394218][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 703.091685][T20352] lo speed is unknown, defaulting to 1000 [ 703.462901][T20377] xt_HMARK: proto mask must be zero with L3 mode [ 703.495617][T20377] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3492'. [ 704.057177][T20380] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 704.105021][T20380] bond2 (unregistering): Released all slaves [ 704.281069][T20387] lo speed is unknown, defaulting to 1000 [ 704.431697][T20394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3497'. [ 704.669304][T20400] lo speed is unknown, defaulting to 1000 [ 705.283294][T20419] netlink: 'syz.0.3504': attribute type 3 has an invalid length. [ 705.326323][T20419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3504'. [ 705.703727][T20400] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3499'. [ 705.715499][T20400] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3499'. [ 706.299068][T20456] syzkaller0: entered allmulticast mode [ 706.310784][T20457] netlink: 'syz.4.3515': attribute type 13 has an invalid length. [ 706.617931][T20470] batadv_slave_1: entered promiscuous mode [ 706.634320][ T5144] block nbd1: Receive control failed (result -22) [ 707.314518][T20493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3523'. [ 707.432499][T20469] batadv_slave_1: left promiscuous mode [ 707.456705][T20493] [ 707.459130][T20493] ====================================================== [ 707.466179][T20493] WARNING: possible circular locking dependency detected [ 707.473240][T20493] syzkaller #0 Not tainted [ 707.477775][T20493] ------------------------------------------------------ [ 707.484830][T20493] syz.2.3523/20493 is trying to acquire lock: [ 707.490930][T20493] ffff888026393d98 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300 [ 707.499855][T20493] [ 707.499855][T20493] but task is already holding lock: [ 707.507237][T20493] ffff88802abfd958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 707.516766][T20493] [ 707.516766][T20493] which lock already depends on the new lock. [ 707.516766][T20493] [ 707.527206][T20493] [ 707.527206][T20493] the existing dependency chain (in reverse order) is: [ 707.536243][T20493] [ 707.536243][T20493] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 707.544446][T20493] __mutex_lock+0x1a3/0x1550 [ 707.549595][T20493] elevator_change+0x1b3/0x450 [ 707.554907][T20493] elevator_set_none+0xb5/0x140 [ 707.560319][T20493] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 707.566672][T20493] nbd_start_device+0x17f/0xb10 [ 707.572070][T20493] nbd_genl_connect+0x165b/0x1cf0 [ 707.577642][T20493] genl_family_rcv_msg_doit+0x22a/0x330 [ 707.583795][T20493] genl_rcv_msg+0x61c/0x7a0 [ 707.588846][T20493] netlink_rcv_skb+0x232/0x4b0 [ 707.594337][T20493] genl_rcv+0x28/0x40 [ 707.599042][T20493] netlink_unicast+0x75c/0x8e0 [ 707.604366][T20493] netlink_sendmsg+0x813/0xb40 [ 707.609696][T20493] ____sys_sendmsg+0x972/0x9f0 [ 707.615108][T20493] ___sys_sendmsg+0x2a5/0x360 [ 707.620347][T20493] __x64_sys_sendmsg+0x1bd/0x2a0 [ 707.625851][T20493] do_syscall_64+0x15f/0xf80 [ 707.631002][T20493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.637534][T20493] [ 707.637534][T20493] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 707.646201][T20493] blk_alloc_queue+0x546/0x680 [ 707.651527][T20493] __blk_mq_alloc_disk+0x197/0x390 [ 707.657627][T20493] nbd_dev_add+0x499/0xb50 [ 707.662601][T20493] nbd_init+0x168/0x1f0 [ 707.667325][T20493] do_one_initcall+0x250/0x870 [ 707.673670][T20493] do_initcall_level+0x104/0x190 [ 707.679261][T20493] do_initcalls+0x59/0xa0 [ 707.684141][T20493] kernel_init_freeable+0x2a6/0x3e0 [ 707.689993][T20493] kernel_init+0x1d/0x1d0 [ 707.694875][T20493] ret_from_fork+0x514/0xb70 [ 707.700015][T20493] ret_from_fork_asm+0x1a/0x30 [ 707.705333][T20493] [ 707.705333][T20493] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 707.713111][T20493] fs_reclaim_acquire+0x71/0x100 [ 707.718604][T20493] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 707.724975][T20493] __alloc_skb+0x1d0/0x7d0 [ 707.730036][T20493] __ip6_append_data+0x2d6d/0x3f70 [ 707.735709][T20493] ip6_append_data+0x10f/0x280 [ 707.741034][T20493] rawv6_sendmsg+0x12d3/0x18e0 [ 707.746360][T20493] ____sys_sendmsg+0x80a/0x9f0 [ 707.751683][T20493] ___sys_sendmsg+0x2a5/0x360 [ 707.756914][T20493] __x64_sys_sendmsg+0x1bd/0x2a0 [ 707.762404][T20493] do_syscall_64+0x15f/0xf80 [ 707.767634][T20493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.774074][T20493] [ 707.774074][T20493] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 707.781927][T20493] lock_sock_nested+0x41/0x100 [ 707.787250][T20493] inet_shutdown+0x6a/0x390 [ 707.792294][T20493] nbd_mark_nsock_dead+0x2e9/0x560 [ 707.797956][T20493] recv_work+0x1c2e/0x1d40 [ 707.802924][T20493] process_scheduled_works+0xb5d/0x1860 [ 707.809020][T20493] worker_thread+0xa53/0xfc0 [ 707.814415][T20493] kthread+0x388/0x470 [ 707.819024][T20493] ret_from_fork+0x514/0xb70 [ 707.824162][T20493] ret_from_fork_asm+0x1a/0x30 [ 707.829485][T20493] [ 707.829485][T20493] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 707.837724][T20493] __mutex_lock+0x1a3/0x1550 [ 707.842873][T20493] nbd_queue_rq+0x37b/0x1100 [ 707.848027][T20493] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 707.854234][T20493] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 707.861121][T20493] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 707.867654][T20493] blk_mq_run_hw_queue+0x348/0x4f0 [ 707.873344][T20493] blk_mq_dispatch_list+0xd16/0xe10 [ 707.879091][T20493] blk_mq_flush_plug_list+0x48d/0x570 [ 707.885009][T20493] __blk_flush_plug+0x3ed/0x4d0 [ 707.890425][T20493] __submit_bio+0x28d/0x580 [ 707.895590][T20493] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 707.901877][T20493] block_read_full_folio+0x599/0x830 [ 707.907728][T20493] filemap_read_folio+0x137/0x3b0 [ 707.913330][T20493] do_read_cache_folio+0x358/0x590 [ 707.918987][T20493] read_part_sector+0xb6/0x2b0 [ 707.924291][T20493] adfspart_check_ICS+0xb1/0x960 [ 707.929772][T20493] bdev_disk_changed+0x817/0x1770 [ 707.935354][T20493] blkdev_get_whole+0x380/0x510 [ 707.940807][T20493] bdev_open+0x31e/0xd30 [ 707.945599][T20493] blkdev_open+0x470/0x610 [ 707.950568][T20493] do_dentry_open+0x785/0x14e0 [ 707.955875][T20493] vfs_open+0x3b/0x340 [ 707.960489][T20493] path_openat+0x2e08/0x3860 [ 707.965626][T20493] do_file_open+0x23e/0x4a0 [ 707.970707][T20493] do_sys_openat2+0x113/0x200 [ 707.976029][T20493] __x64_sys_openat+0x138/0x170 [ 707.981569][T20493] do_syscall_64+0x15f/0xf80 [ 707.986765][T20493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.993719][T20493] [ 707.993719][T20493] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 708.000979][T20493] __mutex_lock+0x1a3/0x1550 [ 708.006131][T20493] nbd_queue_rq+0xc6/0x1100 [ 708.011176][T20493] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 708.017277][T20493] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 708.024322][T20493] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 708.030844][T20493] blk_mq_run_hw_queue+0x348/0x4f0 [ 708.036509][T20493] blk_mq_dispatch_list+0xd16/0xe10 [ 708.042261][T20493] blk_mq_flush_plug_list+0x48d/0x570 [ 708.048195][T20493] __blk_flush_plug+0x3ed/0x4d0 [ 708.053616][T20493] __submit_bio+0x28d/0x580 [ 708.058680][T20493] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 708.064887][T20493] block_read_full_folio+0x599/0x830 [ 708.070751][T20493] filemap_read_folio+0x137/0x3b0 [ 708.076339][T20493] do_read_cache_folio+0x358/0x590 [ 708.082082][T20493] read_part_sector+0xb6/0x2b0 [ 708.087388][T20493] adfspart_check_ICS+0xb1/0x960 [ 708.092871][T20493] bdev_disk_changed+0x817/0x1770 [ 708.098523][T20493] blkdev_get_whole+0x380/0x510 [ 708.103986][T20493] bdev_open+0x31e/0xd30 [ 708.108792][T20493] blkdev_open+0x470/0x610 [ 708.113774][T20493] do_dentry_open+0x785/0x14e0 [ 708.119089][T20493] vfs_open+0x3b/0x340 [ 708.123720][T20493] path_openat+0x2e08/0x3860 [ 708.128864][T20493] do_file_open+0x23e/0x4a0 [ 708.133914][T20493] do_sys_openat2+0x113/0x200 [ 708.139169][T20493] __x64_sys_openat+0x138/0x170 [ 708.144660][T20493] do_syscall_64+0x15f/0xf80 [ 708.149809][T20493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.156254][T20493] [ 708.156254][T20493] -> #0 (set->srcu){.+.+}-{0:0}: [ 708.163413][T20493] __lock_acquire+0x15a5/0x2cf0 [ 708.168850][T20493] lock_sync+0x9d/0x120 [ 708.173553][T20493] __synchronize_srcu+0xca/0x300 [ 708.179036][T20493] elevator_switch+0x1e8/0x7a0 [ 708.184430][T20493] elevator_change+0x2cc/0x450 [ 708.189746][T20493] elevator_set_default+0x36c/0x430 [ 708.195578][T20493] blk_register_queue+0x3e9/0x4e0 [ 708.201182][T20493] __add_disk+0x677/0xd50 [ 708.206074][T20493] add_disk_fwnode+0xfb/0x480 [ 708.211300][T20493] nbd_dev_add+0x72c/0xb50 [ 708.216261][T20493] nbd_genl_connect+0x962/0x1cf0 [ 708.221748][T20493] genl_family_rcv_msg_doit+0x22a/0x330 [ 708.227852][T20493] genl_rcv_msg+0x61c/0x7a0 [ 708.233082][T20493] netlink_rcv_skb+0x232/0x4b0 [ 708.238408][T20493] genl_rcv+0x28/0x40 [ 708.242936][T20493] netlink_unicast+0x75c/0x8e0 [ 708.248250][T20493] netlink_sendmsg+0x813/0xb40 [ 708.253562][T20493] ____sys_sendmsg+0x972/0x9f0 [ 708.258891][T20493] ___sys_sendmsg+0x2a5/0x360 [ 708.264151][T20493] __x64_sys_sendmsg+0x1bd/0x2a0 [ 708.269743][T20493] do_syscall_64+0x15f/0xf80 [ 708.274885][T20493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.281319][T20493] [ 708.281319][T20493] other info that might help us debug this: [ 708.281319][T20493] [ 708.291572][T20493] Chain exists of: [ 708.291572][T20493] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 708.291572][T20493] [ 708.305358][T20493] Possible unsafe locking scenario: [ 708.305358][T20493] [ 708.312821][T20493] CPU0 CPU1 [ 708.318199][T20493] ---- ---- [ 708.323666][T20493] lock(&q->elevator_lock); [ 708.328290][T20493] lock(&q->q_usage_counter(io)#49); [ 708.336305][T20493] lock(&q->elevator_lock); [ 708.343441][T20493] sync(set->srcu); [ 708.347360][T20493] [ 708.347360][T20493] *** DEADLOCK *** [ 708.347360][T20493] [ 708.355516][T20493] 6 locks held by syz.2.3523/20493: [ 708.360729][T20493] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 708.368970][T20493] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 708.377984][T20493] #2: ffff888011f8a1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 708.388385][T20493] #3: ffff88802abfd9e0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x119/0x4e0 [ 708.398268][T20493] #4: ffff88802abfd468 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 708.409192][T20493] #5: ffff88802abfd958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 708.419071][T20493] [ 708.419071][T20493] stack backtrace: [ 708.424984][T20493] CPU: 1 UID: 0 PID: 20493 Comm: syz.2.3523 Not tainted syzkaller #0 PREEMPT(full) [ 708.425009][T20493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 708.425022][T20493] Call Trace: [ 708.425031][T20493] [ 708.425041][T20493] dump_stack_lvl+0xe8/0x150 [ 708.425072][T20493] print_circular_bug+0x2e1/0x300 [ 708.425106][T20493] check_noncircular+0x12e/0x150 [ 708.425140][T20493] __lock_acquire+0x15a5/0x2cf0 [ 708.425172][T20493] ? lockdep_unlock+0x5d/0xd0 [ 708.425194][T20493] ? __lock_acquire+0x146e/0x2cf0 [ 708.425223][T20493] ? __synchronize_srcu+0xb6/0x300 [ 708.425246][T20493] lock_sync+0x9d/0x120 [ 708.425271][T20493] ? __synchronize_srcu+0xb6/0x300 [ 708.425299][T20493] __synchronize_srcu+0xca/0x300 [ 708.425323][T20493] ? do_raw_spin_lock+0x12b/0x2f0 [ 708.425344][T20493] ? __pfx___synchronize_srcu+0x10/0x10 [ 708.425374][T20493] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 708.425395][T20493] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 708.425419][T20493] ? synchronize_srcu+0x20d/0x270 [ 708.425444][T20493] elevator_switch+0x1e8/0x7a0 [ 708.425463][T20493] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 708.425485][T20493] elevator_change+0x2cc/0x450 [ 708.425506][T20493] ? do_raw_spin_unlock+0xf5/0x210 [ 708.425528][T20493] elevator_set_default+0x36c/0x430 [ 708.425549][T20493] ? __pfx_elevator_set_default+0x10/0x10 [ 708.425574][T20493] ? disk_register_independent_access_ranges+0x2db/0x380 [ 708.425605][T20493] ? blk_crypto_sysfs_register+0x11c/0x170 [ 708.425636][T20493] blk_register_queue+0x3e9/0x4e0 [ 708.425664][T20493] __add_disk+0x677/0xd50 [ 708.425691][T20493] ? down_read+0x270/0x2e0 [ 708.425727][T20493] add_disk_fwnode+0xfb/0x480 [ 708.425755][T20493] nbd_dev_add+0x72c/0xb50 [ 708.425779][T20493] ? __pfx_nbd_dev_add+0x10/0x10 [ 708.425811][T20493] ? bpf_lsm_capable+0x9/0x20 [ 708.425834][T20493] ? security_capable+0x7e/0x2c0 [ 708.425859][T20493] ? radix_tree_lookup+0x25c/0x290 [ 708.425880][T20493] nbd_genl_connect+0x962/0x1cf0 [ 708.425901][T20493] ? __pfx___nla_validate_parse+0x10/0x10 [ 708.425925][T20493] ? __pfx_nbd_genl_connect+0x10/0x10 [ 708.425948][T20493] ? rcu_is_watching+0x15/0xb0 [ 708.425975][T20493] ? trace_kmalloc+0x2a/0xf0 [ 708.426008][T20493] ? __nla_parse+0x40/0x60 [ 708.426028][T20493] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 708.426051][T20493] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 708.426078][T20493] genl_family_rcv_msg_doit+0x22a/0x330 [ 708.426104][T20493] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 708.426132][T20493] ? __lock_acquire+0x6b5/0x2cf0 [ 708.426163][T20493] genl_rcv_msg+0x61c/0x7a0 [ 708.426187][T20493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.426208][T20493] ? __pfx_nbd_genl_connect+0x10/0x10 [ 708.426236][T20493] netlink_rcv_skb+0x232/0x4b0 [ 708.426264][T20493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.426285][T20493] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 708.426319][T20493] ? down_read+0x270/0x2e0 [ 708.426344][T20493] ? genl_rcv+0xd/0x40 [ 708.426364][T20493] genl_rcv+0x28/0x40 [ 708.426382][T20493] netlink_unicast+0x75c/0x8e0 [ 708.426413][T20493] netlink_sendmsg+0x813/0xb40 [ 708.426446][T20493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.426476][T20493] ? aa_sock_msg_perm+0xf1/0x1b0 [ 708.426503][T20493] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 708.426535][T20493] ____sys_sendmsg+0x972/0x9f0 [ 708.426565][T20493] ? __might_fault+0xaf/0x130 [ 708.426594][T20493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.426629][T20493] ? import_iovec+0x73/0xa0 [ 708.426650][T20493] ___sys_sendmsg+0x2a5/0x360 [ 708.426678][T20493] ? __lock_acquire+0x6b5/0x2cf0 [ 708.426713][T20493] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.426746][T20493] ? futex_wait+0x2a2/0x390 [ 708.426781][T20493] ? __fget_files+0x2a/0x420 [ 708.426805][T20493] ? __fget_files+0x3a0/0x420 [ 708.426834][T20493] __x64_sys_sendmsg+0x1bd/0x2a0 [ 708.426866][T20493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 708.426901][T20493] ? rcu_is_watching+0x15/0xb0 [ 708.426933][T20493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.426953][T20493] do_syscall_64+0x15f/0xf80 [ 708.426976][T20493] ? trace_irq_disable+0x3b/0x140 [ 708.426997][T20493] ? clear_bhb_loop+0x40/0x90 [ 708.427020][T20493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.427040][T20493] RIP: 0033:0x7f10bab9c819 [ 708.427059][T20493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.427077][T20493] RSP: 002b:00007f10bb9a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.427099][T20493] RAX: ffffffffffffffda RBX: 00007f10bae16270 RCX: 00007f10bab9c819 [ 708.427113][T20493] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 708.427126][T20493] RBP: 00007f10bac32c91 R08: 0000000000000000 R09: 0000000000000000 [ 708.427139][T20493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.427152][T20493] R13: 00007f10bae16308 R14: 00007f10bae16270 R15: 00007ffc4c4c8ff8 [ 708.427177][T20493] [ 708.909872][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6510 ms [ 708.917954][ C1] lec:lec_tx_timeout: lec0 [ 708.924253][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 708.935635][T20493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3523'. [ 709.019565][T17772] udevd[17772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 709.044748][T17732] udevd[17732]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 714.309670][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5380 ms [ 714.317791][ C1] lec:lec_tx_timeout: lec0 [ 714.322764][ C1] lec:lec_start_xmit: lec0:No lecd attached