last executing test programs: 10.027987132s ago: executing program 2 (id=737): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000480)="a9807181b4", 0x5}], 0x2}}], 0x1, 0x60048014) r1 = socket$inet(0xa, 0x0, 0x200) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000353a44f2790b2b52c343317aabb7001cf5a5a0627b4c9c75ab07ed494a725820699ef8e76734c54933d07ea30c54195f9edf72ff107732dbfc0d57c59ca3ba29db4a64b8ac0ab9ea5b472b32ef590192ee7b857c915748bfaa8fb249e078f82820949e197636b46eaad7ab84801622de9d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fffffffffffffffffcffffff00"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) connect$inet(r1, &(0x7f0000000340)={0x2, 0xfffd, @private=0xa010100}, 0x10) listen(r1, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x200000d0) syz_emit_ethernet(0x81, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbb73fd8541f8e686dd60122d92004b3afffe8000000000000000000000000000bbff9b5df17769a307c000000000000001010390780600000060fd760900083200fe8000000000000000000000000000aafe88000000000000000000000000000137ff49a30a299d88e9d04bd0f569ddc883fe285eba17b3ff7a7498"], 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x120, 0xb, 0x148, 0x0, 0x148, 0x1f8, 0x230, 0x242, 0x1f8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {0x7f}, {}, 0x73, 0x0, 0x70}, 0x0, 0xd8, 0x120, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff, {0xfffffffffffffff7}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4e, 0x6, 0x5eef6840, 'syz0\x00', {0xb}}}}, {{@uncond, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x4, 0xffffffff, 0x101, 'pptp\x00', 'syz1\x00', {0x333}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="80ceebe6fe88a8c7c21e4166d493ed13593261929ed72ca2806f66325a51d49d039dd3b5278b1549a7bdf3931f2d031fcd742a57515647b69ccfbfcf239e0d3e8c73294f222a499f69e993c1f77267c2d5bd03131324960ea1aefd1c609c857117136e5b3b60a2a1a4d85e57102945f92e50571709db009a4e", @ANYRESHEX=r4, @ANYBLOB="997425bd7000fbdbdf2515000000400001800d0001007564703a73797a32000000002c0002800800040000000000080001000600000008000300a6000000080002002f0400000800010013000000"], 0x54}}, 0x2400c000) accept4(r1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffe0}, {0x7, 0x7}, {0x8, 0xc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000d4}, 0x20040084) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x4, 0x0, &(0x7f0000000000)) 9.574289861s ago: executing program 2 (id=743): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)=0x1) 6.364034762s ago: executing program 2 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x75f}}]}]}]}, 0x50}}, 0x20000010) 6.168947791s ago: executing program 2 (id=804): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000005d4c1c07000000000000000000000000000000b7d38174e7c8d36500e811e7bca338e6"], 0x18}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) unshare(0x10070500) (async, rerun: 64) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) (rerun: 64) 6.076813248s ago: executing program 2 (id=805): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "13320049cfcbec452f447f975a888af2"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20050004}, 0x20040000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000080)={r6, 0x8, 0x4, 0x2, 0x84, 0xb}, &(0x7f00000000c0)=0x14) (async) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r4, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000004) 5.931314807s ago: executing program 2 (id=807): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r8, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0xffff, 0xd}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.417690717s ago: executing program 3 (id=839): recvmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000400)=""/67, 0x43}], 0x3}, 0x200}], 0x1, 0x40010040, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x0, 0x700}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000008018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020020007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000ce0000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, 0x94) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x80800) recvmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000400)=""/67, 0x43}], 0x3}, 0x200}], 0x1, 0x40010040, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x0, 0x700}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) (async) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000008018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020020007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000ce0000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, 0x94) (async) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x80800) (async) 2.17771879s ago: executing program 3 (id=841): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0xff, 0x9, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000000480)="bc80b8af", 0x4}, {&(0x7f0000000740)="b1481d9379202a7b189c4403b06c533d2ee426ecc224650728b52af44c5e0e2823b049b53d966b9b5f2af3b10a3b617107a92ba0f02f977309bc1cc0d0053566fa29c4e86837ccef575e474747b5adf3f18efd77be6b176527ed6956a517a56826fd57a8b137e5bce74165cf0235223f03f78989ce68252d1c3e8914860ef18fd200095e80dfef4aff", 0x89}, {&(0x7f0000000800)="68eb5795d6dbcd270d60c92c86ef42cafac0677dea75812b5de7ef32bf20b00b1ca456154f1eb9b0b7db3b11cf162e1aae72fbe36821516864b4bb2f676da2f1e3ed3d7ea85e46bb944f51dca868aa990a91f849929b6d", 0x57}, {&(0x7f0000000880)="658842b9ef3a504e7ace8e757dc7c2433055c443b6dc1a65a0b24f07858c233b24e1b84c2f0e51ced4f52c8864faa7631c3a987189ac3430d85a7e957f45d228424c5587d5f0c8474a42ac7f5f019a6ca183618979e41bd825ea315f95a3837ce94072ae3b903cd2", 0x68}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="658c2b819fa8c8e003322b5bec2dbe", 0xf}, {&(0x7f0000001c40)="a793a8e2eafa47b17d0241225cb7f71412a2d72624aaa97232d64dafdd01180bc896548edd44a9b9fb5683afafacc4499ee0787d36d6f98303c37ede251ac243a56262d2b02c4d2766307a17d0035128ef1bcf73f1b16c24f2b5", 0x5a}, {&(0x7f0000001cc0)="4632f645806a38b73dc877a5863f61d3e49c1588d20160564c7e980e9579b0a615e43fcd9cc7b464de7fc9675401408008b5fbcd3d972ac507d623f82e8a3f5e8973c515640fc14308aaeb6b3b12b0445b231d192aac3c5b65f0030633e194a2496a3dae05edd9fbee15cfca5e071f0c11334b2dbb6f387d15d5884a72721f65e3fa", 0x82}, {&(0x7f0000001d80)="135ed35e00e55dec4daeb25fe74eb00cf8539cef2133cb4e9ccab9bcadc745943aa7a23d5ad3aa2c7114c1e270ce5807913368aca7eb400f9c4415be89e7626481c80b93bea05992ceb6411f4fc14f1fcce5ade3cd71ba48498703fa", 0x5c}, {&(0x7f0000001e00)}], 0xa, &(0x7f0000001f80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x5c, 0x0, 0x5, [0x5]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x28, 0x0, 0x7, {[@cipso={0x86, 0xc, 0x3, [{0x6, 0x2}, {0x2, 0x4, "dbc1"}]}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x2, 0x6, "edc83621"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010101}}}], 0xb8}}, {{&(0x7f0000002040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002080)="42fbefccbf7e3e2bd5ef11aa8aafa1e354a892ee52fd4ab3e5b24b14d79e8cc151a06f00b3ef9e91970be7605db8e04c7e7f244e78a8488c7d59fe2f884dc10080ba9945199bf2744bf0fc7921650d1f0af1d494560f3856d6c29b3bb90056fc0464ca41478cd4ab2eb5ca8dcabb25f8020f70bfc2a3a24d241597d626c71bc1cf59a10925", 0x85}, {&(0x7f0000002140)="eff07da887d06c70dfa985fe3c3073c3fd9ed7714b98ccc570f5cc42eb9aaa61e581d89ca678062f4dcd81673c9db02832a70916fd70f20c16154113835305e1e0594ca49088eef0154780fc2784a7ed547e587ee11bf973718d82ef37fda11d70661e881e4b7114795633187d85dde0daf74dbc43dfe72e1721bd53bde66c265285c04010b0c0076d694e2dce3f6680cee509aa734b75f8269197f8574501cb3b021285ab206963d7fda593ae4532270ac132e4f4b96ee57745dbf2c0fd5a18795f3408d81d7a4ce3aa147ef787e3f344411ed127bbb44f69b04471f5c4cd0ed69de2386e83df39b043bcc33af21952cb11ae", 0xf3}], 0x2, &(0x7f0000002280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xed}}], 0x18}}, {{&(0x7f00000022c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002400)=[{&(0x7f0000002300)="7b9d17f33698058c625f8269a3c146a3ccf848e124104897ea7ce48bab9f6b76135e4712e57d135e8f900f44640d7e85daa1b234cb2a5a6302d15a48b992e92329ddf68692f8abd42c189e3eef0ca05f53fd81a012b027b8c4364dc294a6bbc039f06ed88c7ae4e4cbbd5f9c15cb4bb64e97a9dd7560e3a1c9f908089cbad9cdbe24d12312fd2cf3e904eb71fed4791db28c327a6e001d60ed983b8197229008603fd41ee0f49818340865f1a5c14d7dde3276c84b87734a7aadccaeb616ebc8fc113a7d7c6640ffd592a6a3", 0xcc}], 0x1, &(0x7f0000002440)=ANY=[@ANYBLOB="1400000000001300000000000100000002000000889aeb1566e0c37f2aa1fa8f8a05000000001c00", @ANYRES32=0x0, @ANYBLOB="0a010102e000000200000000140000000000000000000000010000000000000000000000140000000000000000000000010000007f000000000000005c000000000000000000000007000000440c3ab164010100fffffff9004408ad80000007fb83028313c47f0000010a010101ac1e0001ac1414aa891f83e0000001ac1414bbffffffffe0000001ac1e0101e0000002ffffffff00000000000000110000000000000000000000010000000400000000000000110000000000000000000000010000000100000000000000"], 0xf8}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000002540)="8a43c48fe9e34cb3f2eb48d20f1d69f99f39ec151eb1fcec50112ab2036b49d18471f2dc874555764536341fceed599b410992aff324a580405ee1f18e461221377f7a796bfcf466fa641056a243d5308e5995fbc5d7d33f86e27d60cf012780108653ad11259600451363b6819eec015ff4f6c1c69a8ff3f6dc6f0bb3b6d3a7", 0x80}, {&(0x7f00000025c0)="5e1b2e7fb2f2b4e5008e72909667c61f91da6367c1b7d8e6af5242ff8d6f4db34f518df5d8956dfb83d1804466a6697cbb0b25da07d0bea93f7455c9e4f2d4cb0b", 0x41}, {&(0x7f0000002640)="2de8b0b885bd52493e6b3fe9c2b3eed6628c94e3b387c087ad72f72c12dc6fdfb090607c2b817b0fd8b3de6628d1643c5e97e3659555e7487315e9e7aeb29f00855cf3e6804cd16de1119a87289d68682754a51f13fc6a816ccbfa81a5a807d525c94798bdabae3f76e922afe2e827a4a873c6d746d0f5a51dd28fcb2655aee5de70ae376d6b722adddf971b9044b7b242fea34285b786e49e29966131b69ea491645805905efbf41084fbf751828a43488d788dd2b79effd99a9b768de356a3ef33cbfa50ff4bcf07b0c2cc", 0xcc}, {&(0x7f0000002740)="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", 0x1000}], 0x4, &(0x7f0000003780)=ANY=[@ANYBLOB="110000000000000000000000010000000100000000000000140000000000000000000000010000000600000000000000110000000000800000000000010000000e000000000000001c000000000000000000000007000000440c39837f0000010000106e0000000011000000000000000000000001000100000000000000140000000000000000000100000003000000000000001c0000000000000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0a01010100000000"], 0xb8}}, {{&(0x7f0000003840)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003c00)=[{&(0x7f0000003880)="89cc0ea4847be45f7cdc70d7ac9986210e924b275f27a6b3297312f787802b1e6a9fced185f518beccedc22b9c91d116865a67c5d052a2f8cd90379a2a72fb2934092f23315f79caf1b345d061c663e3545ee448adc1425991e498f0fbad832df77b2fde673023635e1a283425d076fc0bdf3081f42e2c8419ef8ba46b9e931dfbb832ea2079009e82f63ac1e9cfd86079838cd477b77dc7ac29bdec59e9d85924688465a0c9aeb2ad5e3c8b1bf18b11f23d6b3d843f81ada7f4ae6443a5d5d0", 0xc0}, {&(0x7f0000003940)="07033b5ec96b8397117ee99e6e4cb7a3f3202df5311649ded2435bc5ace0570a711fcb1bebc95bcb311dd1db4c2810a7531b6153c150002593f43f80dce1563677aad0f0e2831bcfcbc203a9a5aa3c3de4339871f6e2ced3aae7439fff4e1719f3fa9de0e5b997b15f3ef3e66271403737f2dd3ba901e4e137febc1022902da34d462b7faed06ea2dc81d9bdee4a5dd225db4eaddd37aff3c321db6f6fb899414b58993077534b96e7f40108cc8e62779d3a345cb3800595ea877c0b261c13351265", 0xc2}, {&(0x7f0000003a40)="dc2162d7dc0cdf8c0e677d3833575da4761cf1782ae315d69fd539cc890f058cf7b6fbcefbbc02a27d4846afe3e81d0cd589b43fcda8235cf8196ee91305391df0283a70c787364991716577b7024d74e9723f8f35a41994f067d23b1139fd894c7ef8b69cae3c50ffabf2d9d7d193d24e6415162b1ed48f7a853e0f9b17e0a63db1223bedaead1d378887ca97bf667bddefc1d577bad636079fcae9aa", 0x9d}, {&(0x7f0000003b00)="4ca5c68aba4a46323d71ab36a9b289eeeaca69c7a451acd922a04117f17b1935a0e670cfddb270824e96f27cd3e25a920add29a7b40a9947bb590257a1c0ad2abaa886a05da7fc7e0204c0a173fe4c5aeb66421d682020736b5c34fd9252f328a04331317b5892928084d9056407434e2e14bb8c49d83513963d8aae98ac214e57bbec523f8ec66935831ee68dcb68967090a7f67c7ee9fa", 0x98}, {&(0x7f0000003bc0)="ade0074b7c26fdbed91043a42f3b289a6218408a520d7bcda50f5aa43201c35b86f1b8a0d06a", 0x26}], 0x5, &(0x7f0000003c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}], 0x18}}], 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(0x3) shutdown(0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r6, 0x25, 0x4, @void}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)="683f0057954e837474512fcaea99bc671e3d", 0x12}, {&(0x7f0000000580)="a492e95857d9dad0c70b72425db11aaf3ffd93dad70350", 0x17}, {&(0x7f0000000400)="9f52141c0fb098", 0x7}], 0x5) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000300)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/81, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x28000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x9f) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r9, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b80080009"], 0x184}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010029bd7000fd03000000000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.977494353s ago: executing program 1 (id=843): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000180), 0x4) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) (async) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="ed5d5e67"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="ed5d5e67"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x166}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) (async) sendmsg$netlink(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 1.828291972s ago: executing program 0 (id=844): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8106}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x20000000) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, 0x0, 0x0) close(r2) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r8, 0x0, 0x0}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) writev(r10, &(0x7f0000000200), 0x0) vmsplice(r9, 0x0, 0x0, 0x1) close(r9) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) (async) write$cgroup_devices(r2, &(0x7f0000000140)={'a', ' *:* ', 'wm\x00'}, 0x9) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002ac0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002c00)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000007b0b00000000000001000100181100005e7d54de93d61b4f183a9f1e6b1343be02c057f1fe1ffc9c4cff325ff4fa862ff69b6dc9e745e8e1e2c99208dec50a7455f5d448cb32472cc1ca0b70e97051d39b83be0e955fdfa71489c9d0c812b4ba6f443aa88cd6526e6ae9b5a76b17346ae273ccc91b7ef557e7920ecd6b0dd203df029860f5cffcd796f6447a41544fe523", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018520000050000000000000000000000180000000000000000000000c2030000186d00000300000000000000a0ffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x1000, &(0x7f0000001ac0)=""/4096, 0x41100, 0x36, '\x00', 0x0, 0x17, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2dc12, r0, 0x5, &(0x7f0000002b40)=[r7, r6, r8, r9, r11], &(0x7f0000002b80)=[{0x0, 0x1, 0x7, 0x3}, {0x0, 0x4, 0xf, 0xb}, {0x0, 0x4, 0x5, 0x4}, {0x5, 0x2, 0xe, 0x3}, {0x1, 0x5, 0x10, 0x1}], 0x10, 0x3}, 0x94) 1.67369665s ago: executing program 1 (id=845): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) socket(0x18, 0xa, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0xc, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@remote, 0x20, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x100000000000008}, {0xf8}, 0x0, 0x4, 0xa, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x844) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070cf55"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.591454382s ago: executing program 0 (id=846): recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) write(r4, &(0x7f0000000000)='S', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000007b7030000000800008500000086000000bf092000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.525490941s ago: executing program 3 (id=847): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) 1.36920573s ago: executing program 1 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x300, 0x0, 0xff, 0x9, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x300, 0x2, 0x0, 0x2, 0xfffd, 0xa2}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000007c0)={0x8, 0xffffffff, 0x2, 0xfffffffc}, 0x10) unshare(0x66000080) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x10800}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000300)={r11, 0x6, 0x9c, "076cbea95b2671d9d2218297724d3e4f863029f318b476024d6875f7d909bfe66ce8fba0abde6f65062c7914986f14f055105d2243d146020754357fc4f11ee89fd9e7d965a619d9cbc123816165da829fd34e35a3e0931706607687085c3f2e411c5f3218fffb6af504be6436e637380c849406a534cd852f804a17192c6aa52f26ee318715a0351a5043de1a6bdb697eefad0ef48b9d2981ed8b89"}, 0xa4) write$tun(r0, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @generic="a769d2f390ada7719ae33683632b35f8b348dafc1a29c71979a299bf8d18ae5e759d13f159efec41979e150eaa19a088ac9fe94d23fe04fd451a50b5f8830aab348c7ed920c4"}}, 0x54) 1.095178689s ago: executing program 4 (id=849): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000ed00000000000000000a40000000160a05000000000000000000020000140900010073797a300000000014000380080001400000000008000240000000030900020073797a3000000000140000001100040000000000000000000000000a"], 0x68}}, 0x4000000) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_opts(r2, 0x0, 0xf, 0x0, &(0x7f0000000500)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'macvlan0\x00', 0x200}) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000de00000000000100000a5c000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010065727370616e30000000000000000000140000001100010000000000000000000000000af4aba8c2718aef7a8dc0649da364fae16d74c894c020e1a098506b2224b78ea12c14f703b3e3a4f5731aad6d825c50787553f5f8b576a14424599e5c9e58f22b33f13e382ffe73b2a0dbe25fa51bd0db4a2d030163da8facf232be18a184ee7c00"/241], 0x84}}, 0x24040884) 963.574187ms ago: executing program 3 (id=850): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000740)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={0x0, 0xda}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000b06010200000000000000000000000005000100070000000900020073797a3100000000400007800c001a002a"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xa7, 0x807, 0x2, 0x72b0, 0x600, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r8, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x8, 0x2, 0xffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, {0xb, 0x2}, {0xfff2, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010) 933.479465ms ago: executing program 4 (id=851): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040003}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/97, 0x61}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/102, 0x66}], 0x2}, 0x7fffffff}], 0x2, 0x142, 0x0) 783.64624ms ago: executing program 4 (id=852): epoll_create(0x400) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x2, @mcast1}}}, &(0x7f0000000040)=0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000100)={0x20000001}) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 781.987248ms ago: executing program 1 (id=853): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000003c0), 0x4) r5 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 703.041961ms ago: executing program 0 (id=854): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd0, 0x0, 0x7, 0xb00, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xf}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x68f1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x47}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xb}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f00000002c0)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x1e) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@void, @void, @eth={@empty, @remote, @val={@void, {0x8100, 0x3, 0x0, 0x4}}, {@mpls_mc={0x8848, {[{0x6}, {0x6}, {0x5}, {0x8}, {0xfc000}, {0xffff4, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv4=@igmp={{0x6, 0x4, 0x0, 0x3, 0xa0, 0x65, 0x0, 0x7, 0x2, 0x0, @local, @private=0xa010101, {[@end]}}, {0x11, 0x7, 0x0, @rand_addr=0x64010100, "27c6b7381539b68a2d9a88bdbe274fb15ef7959ced9eff6efa979849b86bc03af6c5431a3319334cf29f524076e7d63454a04267d2c893d74009cb73232dcc343ffe5509d591ebcbb6b0c1689aa2d2cd063b90a630e262e93783076b460a2e98ba31522fa78d63632285d8b9619a8dfca3b48e04838c34a333d248b1841775e6"}}}}}}}, 0xce) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000680)={{r2, &(0x7f0000000400)='syz1\x00', 0x404080, &(0x7f0000000440)={@_ha_fsid={[0x0, 0x3]}, {0x9, 0x3, 0xf6, 0xaa34}}, 0x3, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x8}, 0x1, &(0x7f0000000640)=[{0x3, 0x7, &(0x7f0000000500)='(*-[,+:\\}!\x00', &(0x7f0000000540)="c70df965f7e6b619bf40f59ef1c08949a0ee4203e37e2a11d6ff84957b3e01956124f2e447808a25fc8795e05e714f2b7b67f10e39557e2c641e30dc1c537ec012abc1e3b51e285037bcefb5887d3e42cce602279d57ac6144d9ecf945411a77c04834d52933311bb23f8beff7fd078d34c22ee8b05ff1bf38d62b65d2871460df8d95613529c248e46142466771a9588c83a858893dc428d694a115dfa74ba2ea13fc6587cdc6f8dcd4f2c6892384dcb72d7bbeb81e26f8b51a8021481665ca541f69a8d904c3ecc773df5475c5b20ad3a5a189639466d5e2126a554360032e3d7a38058004470fc0fe81984d", 0xed, 0x28}]}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000700)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r3, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000017c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000001800)=[0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000001880)=[{}], 0x8, 0x10, &(0x7f00000018c0), &(0x7f0000001900), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000001940)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={r3, 0x58, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001c40)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl2\x00', 0x0, 0x40, 0x0, 0x9, 0x2, {{0x22, 0x4, 0x0, 0x3c, 0x88, 0x68, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_addr={0x44, 0x54, 0x35, 0x1, 0x0, [{@loopback, 0x4}, {@rand_addr=0x64010100, 0x6}, {@local, 0x9}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7}, {@multicast1, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@remote, 0x1000}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3}]}, @timestamp_addr={0x44, 0x1c, 0x1b, 0x1, 0x6, [{@multicast2, 0x2}, {@local, 0x9fb}, {@rand_addr=0x64010102, 0x1}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$inet(r3, &(0x7f0000001e80)={&(0x7f0000000740)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000780)="9b3f5bfc78a844d4046f2303ab03f9f5550a7f146a533cf34ea56b5da706bb137e026f618b25bef34de0d690a7dabd59d22166155dceff89e66a44285ff2d71d7f72187dee25afd06fb4ff7e065b24db9128b04f2c2aef66f89f257e7a9aa8eb56b602530a45991f7ab4b220047c386a7e628a4c340ada3fb1b323ffa6d525be7dc37ddf693200ab5dfc6453ad9f3855d302898204d528725b08e3237385ed51d9584ae5c10e84ab38eaa30e810335d6a8777accf76b8818f98453852ab8ff492b37e7f1fcb097b9b65f6e0bd5050ca1f48315e11cc31a5c6a8da854b1783b419755134f1386e08955c8eca06e3686975e78a7e06a667e5997fad1b2328a8e6b7fe379f29bd00238c91f4767ca3b1e96b0cff2ce10743d613a7f8fba426d84f3820ce14a7e3c59c8f127544a6efc71090b984c2e48973b50e014edcff69fc0737392615bb44f8e88d28758862c4270022f55729c126a64b165d0d9f1634ddbaf008eb045308b9c3e917307178cb4f02718bad5322f279817df8c607403b99b61bab51f7a01bc8719827e992526432cd21fc29c6ad9af741b221e449828d7d2697086421472fcd330008fca120b24e5de11112f764a9396990c18783970b62df71e8dd9bc135fdc32708508fbdeb3f6c37202cb8807dc57e35ca1736b715dd2d399d05808a7a5e79f3922bb23126a97623a4d7094715b9c4554a9e85648483b498426eb8635df2c30646aa0723c961ef44161f5e447df30066607997f6c4a4066a570ce74675e7ce7f3c2799d129c3e1ecf4354ab97553dd7b9b868ffaed17eb6346ff502fdce44d0377a7f6955122d4ced577063169577920530697fb921ff0b418b51ea45563e682089d385f55c4330b980a21a996d7feae3fdd1af1d47c76f29871b6058ee1ae5f8b61d084ec0136e8220cb7c4801466e83c6a7f918fe61ac44373f8a8f887fe3d0219d4bf34db2649220d66e3f6162cbd0260d45adb3103b94136439bbe4b3104ebe397cb5a820ab5aa9d90dc6ed9e8ee59484aed003717387f0e234bb0887b5dfc0f4210aa9b2a6d522535dddd01842a71d452fa9ffbc70ba843231a2f507d530f7b7695a7d1fe4c1fef2e2f1bef825b5b7f0ca2b3be0492c2852f294df98e766d5126f8478ec34eabb51ea3881bbe7759c162a154dddd574e393683177df93a0a658d7363569dc2fdc5060687b28dbcb082db2f3e37eac2f664a0c3418cd41b24c9733bbd8b8b0db3459625f83b879e7b04415f27950c53d9acb2056f335701238473fab8e51d20775b664f7933efaf9e68613a70f348700e47c7fcbd78a19f5dc4cd43b88019001b7d451f4f439e5b3a9130199cffdb3f2426606fadba0f43fd73d99f99ddb28f66a46946054fc939dae323c365109da617924dac94e06210c7fb9aaf2fdd59136235abbe32f23a9d423591df8dd12222c1737c659b00018d1722f50538eddcd81eafb7dc5388f13eda930272087753e719abb0641cef168aabeb2ce7e21ff524cf7b15aceecc2f589d94084cc574c860542c3f9901f21f40a31c02895acaf1822e47704c3cebd333c88fca120717eed021a62853f95ac8c466c7b6a4811d8bf0d254a91eb641f34484ccc047efc3e5e21a9a8c1c0dc6bac3b614e56b1309720099146627694cbef297a38f6112a448542fd77b3323b647575794fdc25d55b21df71479314436a8f495e5c05f53b94421b53a219a8335c5a6f872e085edcffb734945c007379c684f110875ae1c10c04b012ca9e827b39f449bab781fd4abf8cfb2df66cdb10bd8ae7b479d1a954a91ac975aeea446313f4cb726f4d6aab41a44302867627bb7cd13fdfb8dd0464ca72e1e623b7627849ddd22625e6d04133d0e74aa782f3e05cd7fc2e6d82d1f09586422e2c6d6255a1a1b67efb4b2d7efd21a9589fa0c9a962c81150606928511c6a9d551619facba3ed2af3f2571e3f563fecf5fd544337ba62443636a6a6285b04e86017df71844c850a5bbc517d6b3028197394e0427cc4e048528b64a38f060c039df978da55276b9682526e2b7b067361925de02f5b17307ea22b43bfa3818b88297d7bace2851ddce19218deadeb707775b5019d60ad440bb39c2182afa13c52ffb5b3f3a9e9d9bd395032e8329314796676c132c17532dad0cd5e9032d1c07078acc244652ab2673388b45aaae4aad19dc7a3de7e49c69dde73081c685e34e7aa098052c7b0bba97c78b17adf8cc0dc277a840b5e0be68c05635c37da1c95490b2571d0fa016956b6d95f7fa781cbaa9dea0f9c86ff76c50f9bf32840a12939e11ef851cac2333a41a0b4f8051f9e5498d2db5289de91965b1b12de947dc7d9a7fb3e2234a06520f605b4c8a57ba7fc99bae6cb3379d55e4bdf88a8c9f1366adc6c25006370ce11097b211052a728f07ba1bd47978864f4932372e0aa68098ec4179d75dbe85e9cf90d745598638fb1d2bb69e0cb17ce69a9e610141c0b0c1a1f3676dd080de9a559094e521acfabce98622b48be991354f530625c2db7d511f11aa9fc9737ebac2aacf333ec53b131b80cc106aef57411c3397defefed00fe74b770d73ad9b84dcce7d2e41c1f92c844aa7cf9184ca1cc30d6597387e43cd2a6c6fdff445255a1438661a7f76617c2407800828d84e91dcf8883b329c24a4158872e73af7acae8345c069e6ae4e52cbf5846b4cd9b0113f31ea518c2780084784f34549b66b1b7bc41eb5312646512812aee1f7f0c9d948d79d7a55d2cbed628061d3b6dd52f5359960d07a5eb9b8e0a7d35ce622c821e7273a3732dbd457d06959c88eb84b358e6ea42b136e955fe8b195bd5303e2c95d3a0b39db09c4bf0c9b22ced2d50212925fa637c4544247fae0079f2a1e9563b31bdacde5826d348c7113c80702a2f96a6645bdd63a119686fd1490414c7b58ed76d6c97b578dbdaaf33b8a38bcbd255a4dc172bdb5f6476b37554d0847fe46beaee6a81865871927ef79e26e3f109db1c62be8c069b5da34868f9bf75772d266fa1179379b7d6906f02bc66ac40ec1ca684e32e98d394e809fb65acbc7618a95c3c796efd9ecb903540aa0e6589447d8ca59985a4835528fefc5a936082f2b61a1979c56fa8ae7137f2fae920e863546eedf97e2629d65bc037a3a43be39b3fef4dbf4da9cf247cad03cfff909667c3bf266ca992cc11dd50e2e725677c1b0e74f9c9d62ffec3fdfac93c9076955f239a886858185898e5abaf7d606703af6c09aea22d6d7bae01ecd300dd6270fb5fb752ceff8681174fe98558d409d51fc3ba184405466c2fde7f0c4625ec7264af9b4cc305fa452aae95191483bb59357b3bb4f13436e77984ad2a535cdd6d253e753940845131270af4a9405dbff745fe0b7fbfec44dcad4fbef16490f6602358d362d504e72ae88e9c30086b5c2052af562474d21b99d1089f79d3a08574c4e5912e21958d8f670f3ab23ac35a06557453e6182069e155fbeffcfc9fe6b624363d7cc0702c876aeee93874886e090633dcf1a12241716b2fe2eeab531f05cccf9cf5ec29328ffbe4d4f4b89c9a91a95ae1643e2e229350892d8537838c1833d7505f4cdc3a95104527e9e8bb9c1429ed9d712dc585d62ec1ecc8ebea369756090316b54818090ab87f21a26209e48f6dd35bc6fcbdcbff1de4860e4358bc2d05adfcca7bef9b6bbaf7dbe276641807384f4ee974a24635f360c10641d4dc835b759f3136785b672884261cf54533a856fc221799ab2579ee1b312ab187ef8dec62675c238d5d441c2008f67958aceefbc640fa8b7dc30498c255d494362e75f68b6e4f4f31800f857df44a571f6ae0afd3fbafa8eeff22e507d9d91db563e272d712721fbcc7859e63e8bb711613dd93d7540f3a270317d9f1a69e21c95a26acb7bf1f39f6d559742b489b67ca37af280c1564e9c8fe1f31257f021d25df0e35ff7ae9e3b177bb4f86881898067fcf4ef0c925bb84e806473822d209a3ff6898da96f054ef5c32eef8906d26ced1d74656c3635f173d86b8bc4e2132f971a84e943f0458c9cea84f00ccac75bf74cba1ff77d3f979b3986584336c580cc33ca1c0b7a702cc3b2ce0a3de216e4484498c0918cd9eb2275d53fc85047f65419360a9cb219e1ac274637474053386a7b24804a76ca28fbc3cc429672de2ebbc5c8a478945f4d0a77299b1d7d98fee6ca9b1ab7ca28637ab04bdafd15128c445a855e9138001da1509168e48369815fb62edf197feb6fb6916438fc878b2d23a6cb0f6ad59f6641092b40afa11fb411b097dd02b923bd3c8ddf9eefee820dc8e1d41562eabf1792f0e5ae45f425d247b53621c179b53c50772ab4c8227fe4e2bb50ccab1395242efd7f07fadaa4013aa3245897bb931c55a8b14dda3e38c2c9ba0733b43ec96ee12225aac74ebbcc3a2cb89b3d26d27eb1958d6d43750388ef34b1b014b530d8e89f8bf4e6def096c36b0d913ee7d2cd8fbfc18a98ec958069b8d4da3bf60e6a8bde0dc759ee80d64f4ae66bb6fc8df6919e059e982b85ef0b4ad6044ce225c3efb7734a00bde91fbf3f4abd831fde73b059ad35bb818ad6c71c71f51dcb31be29fd489e3ccc6975b6d9ba57700ac2c2654042448b8fabd88a3e7c4544dba8b144086364b8542d05fc13532f0f038d6b969a85509de8e482ab71195ec1f7bc3bbe34e5bed3855088bbc3ef03c06d699f09b141633bd7cf8c006ed2b748e36571a4aa5d69307f33e122bbf8d61daec61555ac9c8971ece739a3956ea05a9b5b0061ecfb75d780badc4dcc3ad899f2cb4940d4447daaf91109bd2d8cb049db61f9ea769de5eecd056b85e423ce52707d7f695d130e120769308d5ce8a7003426d890aeaf4a816b59829dde1e410071e77232e759c2b96d1e17f0c4342a5c0c891ad1268e02596f878d2bb56acd718c89c0fd660fb670c64ea553794b5637f33ca2267e53db17d275d31b6fed0371e7b66423ff2d00fe74b2cd8efcd4570999fc7ee9bb878994eec80653bebeb6bc1f04a485004af9e79682d8dbb4b7cbb35e5087e2b03592ce26e7db4d369bd128ea6b36fc0a0fe2c3f601a4d34122704bd08b1affab2a35e695591f322f4dec2734532c0308e349f0cbac6787edcb53bbad15171e70fd3c3a91a0f8fa4b7271697e58979e318bdb54699e73ce11d1adb3591a6e4a26728a61d0cb58cef34f4e39ff07c261152b56085eb1e816e6a0dee1f794ac6cd8651dd8c618a3d3b1b58062a3408c7141fc7988ca2e133ca511d27fd9d0c8945892210165394844b96f61513e7b4ab05e83d1875ce866c1ed757f72a2556260796af695715d1200510a7a3e1ac0cc51e808ecc7bd52df9bf03a28f97042323221c686ff7f5b021865589b5387808e0cef4a1fa51addc35129b30ba8e1d2e45bf84a5bb7c0b6320826723aeb91d200e18ff5e124590daee7bf3bb99c6a98852434984caf3d6bc87e9d98a28b1e92e05b31efa5c5827de34dbe7482b7cff59724667d9bae1dc1987adb0cca673918bba1a3d18b152f144c7a139a347915ba06cc73f06f50b4f24a47ad15a21b2ce8241f9b89ae52315cdbb791aa9821af60ac6cbe8e6bd54c4fd4a41fbcce8da80cfa48f961d6fab00fbc493262001bcda3a2697cc7c3fa43a66bef777dbbd54b1311ace8c63d1a127ee675c169a94cc32855c14e3462ae8cc86e5ae5bbd7efe021cecf73877cfe0ea1ea6ee9081abe64e3516af1328a58113fe0adaa313a9ad0e285198be48ff41d974bc64c9fb497dc9261b49af1938f2c97f988bbe7348822a2d05a6bb", 0x1000}], 0x1, &(0x7f0000001c80)=[@ip_retopts={{0x70, 0x0, 0x7, {[@rr={0x7, 0x27, 0x94, [@multicast1, @remote, @remote, @multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010101, @local]}, @timestamp={0x44, 0x24, 0x79, 0x0, 0x4, [0x1, 0x2, 0x9, 0x3, 0x2, 0x9, 0x4db, 0x8000]}, @cipso={0x86, 0x13, 0x0, [{0x5, 0x3, "f3"}, {0x1, 0xa, "af57dc1cc74cb73b"}]}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@rr={0x7, 0xf, 0x54, [@remote, @empty, @loopback]}, @cipso={0x86, 0x27, 0x2, [{0x7, 0x2}, {0x6, 0x6, "c3d98b76"}, {0x5, 0x5, "96d481"}, {0x2, 0x4, "9b51"}, {0x2, 0x3, "ca"}, {0x7, 0xd, "bc4adcf848c8e973481503"}]}, @ssrr={0x89, 0x13, 0xa4, [@rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @noop, @timestamp_addr={0x44, 0x34, 0x14, 0x1, 0x0, [{@remote}, {@broadcast, 0x100}, {@local, 0x4}, {@multicast2, 0xf}, {@broadcast, 0x2}, {@remote, 0x84df}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010100, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x1e8}, 0x8805) accept4$unix(r3, 0x0, &(0x7f0000001ec0), 0x800) r7 = socket$rds(0x15, 0x5, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000002040)={@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x2, 0x1, {0xa, 0x4e21, 0xfffffff9, @mcast2, 0x6}}}, {&(0x7f0000001f00)=""/204, 0xcc}, &(0x7f0000002000)}, 0xa0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000002100)={@local}, &(0x7f0000002140)=0x14) recvmsg$can_j1939(r3, &(0x7f0000002900)={&(0x7f0000002180)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002200)=""/68, 0x44}, {&(0x7f0000002280)=""/252, 0xfc}, {&(0x7f0000002380)=""/57, 0x39}, {&(0x7f00000023c0)=""/22, 0x16}, {&(0x7f0000002400)=""/84, 0x54}, {&(0x7f0000002480)=""/188, 0xbc}, {&(0x7f0000002540)=""/231, 0xe7}, {&(0x7f0000002640)=""/208, 0xd0}, {&(0x7f0000002740)=""/31, 0x1f}], 0x9, &(0x7f0000002840)=""/133, 0x85}, 0x41) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xe4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x10001}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000002a80), &(0x7f0000002ac0)=0x4) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000002b00), &(0x7f0000002b40)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000002d40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffb5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x36}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xf86}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x8000}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x32}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4e4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4401}, 0x4800) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000002ec0)) sendmsg$nl_route(r3, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)=@ipv6_newnexthop={0x28, 0x68, 0x4, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x2, 0x0, 0x13}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x4}, {0x6}]}}]}, 0x28}}, 0x4000080) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) 636.01866ms ago: executing program 4 (id=855): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) unshare(0x26020480) r1 = socket(0x1, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000000008010004, 0x2) recvmmsg$unix(r0, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000001500)=""/10, 0xa}], 0x1}}], 0x1, 0x0, 0x0) 404.194605ms ago: executing program 0 (id=856): socket$netlink(0x10, 0x3, 0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES16=r2], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="fbffffff00000000f31d84", @ANYRES16=r4], 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x2b, 0x3, 0x4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x0, 0x660f537f, 0x70}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) socket$alg(0x26, 0x5, 0x0) 403.821628ms ago: executing program 1 (id=857): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x3a, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000500)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) 288.898783ms ago: executing program 3 (id=858): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04004400128009000100766c616e00000000340002800600010004000000280004800c00010000010000ffffffff0c00010008000000000000000c000100060000000300000008000500", @ANYRES32=r1, @ANYBLOB="ffe763ee6ded498742249aa79f014dd77f22245a73745c3faa2a38b084976ffc16ae09f14c0cd0bb92325740669511ce380a7fa09b7536500e07dcd29f2e0bad644c91097c8424661ea45bd5403f56ea3f0b1b86fca32ffe02ecbade8910e594e5e9d43fefe8c144b25be2d9f5ceee8b405c71e64d13246f74901d5d2ffafaddf6a1312d031bb7a0c1ee10d7521aca139374f97c970519c5e46a8ab888c62093e6002dc8c1e45946ef829fbf7dd5fdb90583a481bb36d72662c6e224ace77d44647767e7c1a45a7dbfd1ea13a85b45f8a87007a97ca8cad54ea097e1fd7e7801b70299a0c6a1ddd3b5d1ad17c1f843681b8e26e70e5d5b8466047fd4aacba5df3dc29c4f5727f456f519023796d9b18041e1ea6e"], 0x6c}}, 0x8000002) 284.803583ms ago: executing program 0 (id=859): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x11, 0x4, 0x6, 0x2, 0x0, 0x70bd26, 0x25dfdbfe}, 0x10}}, 0x8000) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x14, 0x14, 0x2, 0x4, 0xfffffffd, {0x28}}, 0x14}}, 0x4008044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x160, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x160}}, 0x24000020) 216.160504ms ago: executing program 1 (id=860): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x1000, 0x401, 0x8001}, 0x40000, 0x4000005, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0xff, 0x2, 0x1}, 0x100, 0x1, 0x8, 0x0, 0x9, 0x11, 0x1d, 0x12, 0x3, 0xffff, {0x2, 0x3, 0xfb, 0xffff8001, 0x0, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000814}, 0x4008010) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 215.453547ms ago: executing program 4 (id=861): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x698, 0x5, 0x418, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) (async) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xe0}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xe80, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x8, 0x401, 0x0, 0x5, 0x1}, 0xa, 0x0, [{0x5, 0x5, 0xe, 0xfffffff7, 0x0, 0xde}]}, [{0x401, 0x6, 0x4, 0x7ff, 0x3}, {0x80000001, 0x0, 0x5, 0x8b0, 0x5, 0x10000}, {0x5, 0x7, 0x8, 0x7fffffff, 0x4, 0x6}, {0x0, 0xb, 0x1, 0x1ff, 0x1, 0x2}, {0x0, 0x1c2, 0x800, 0x8, 0x7fffffff, 0x1}, {0x2, 0x0, 0x2, 0xffffffff, 0x7, 0x9}, {0x1, 0x7, 0x5, 0x8, 0x800, 0x7ff}, {0x1, 0x8, 0x7, 0x4, 0x6, 0x5}, {0xe, 0x3, 0xdd0, 0x7f, 0x9, 0x8000}, {0x2, 0x9, 0x3, 0x7ff, 0x88b, 0xf}, {0x0, 0x0, 0x9, 0x8, 0x3, 0xfff}, {0x8, 0x6, 0x129f988b, 0x5, 0x401, 0x63}, {0x4, 0x81, 0xa, 0x6, 0xc, 0x200}, {0x1, 0x6, 0x1, 0x8000000, 0x400, 0x3}, {0x2, 0xa10c, 0x8, 0x9, 0x3, 0x2}, {0x320, 0xfffffffa, 0x8, 0x3, 0x2, 0xac7}, {0xb6, 0x6, 0x0, 0x9, 0x4, 0x7}, {0x7, 0x6, 0x6, 0x7, 0x2, 0x6}, {0x6, 0x5, 0x4, 0x2, 0x40000db, 0x5}, {0x1, 0x0, 0x6775, 0x101, 0x8, 0x6}, {0x1, 0x2df, 0x3ff, 0x6, 0x2, 0x2}, {0xf, 0x5, 0xfe000000, 0x8, 0xfffffffd, 0x93a}, {0x19, 0x6571, 0x2, 0x100, 0x3, 0x8}, {0x6, 0xfffffffc, 0x4, 0x5487, 0x8, 0x401}, {0x81, 0xf, 0x8, 0x9d65, 0xf555, 0xa44e}, {0x80000000, 0x6, 0x7, 0x7, 0x3ff, 0x5}, {0x7fffffff, 0x800, 0x5, 0x9, 0x80000001, 0x9}, {0x5, 0x5, 0x0, 0xef48, 0x7, 0xd7f0}, {0x6, 0x9, 0x2, 0x7, 0x3c65, 0x23b}, {0x5, 0xf, 0xf, 0xe, 0xfffffff7, 0x7d}, {0xfffffff9, 0x8, 0x80000000, 0x642, 0x1, 0x3}, {0x80000001, 0x9, 0x5, 0xfff, 0x4602, 0x6}, {0xf18, 0x8, 0xd35, 0x5, 0x7}, {0xd505, 0xee, 0x400, 0x687, 0x5, 0x900000}, {0xfffff8e1, 0x6, 0x8, 0x2, 0xfffff000, 0xe}, {0x80000001, 0x8, 0x0, 0x7ff, 0x4, 0x7}, {0x4, 0x80000001, 0x1000, 0x5, 0x5000, 0x5}, {0x8, 0x8c1a, 0x81, 0x80, 0xfffff3fb, 0x175}, {0xf, 0xffff1ade, 0x4, 0x8, 0x5, 0x1}, {0x401, 0x8, 0x8, 0x7b7, 0x81, 0x9}, {0x9, 0x6, 0x3, 0x101, 0x6, 0x101}, {0x9, 0x7, 0xf, 0x9, 0x2, 0x401}, {0x3, 0xcfec, 0x8, 0x9, 0x7bf, 0x3}, {0x9, 0x1, 0x2, 0x3, 0x8}, {0x0, 0x4, 0x8, 0x1ff, 0x8, 0x9}, {0x400, 0x9, 0x7, 0xffff, 0x67, 0xff}, {0xd, 0x2, 0x7ff, 0xfffffff8, 0x6fe, 0x3}, {0x5, 0x2, 0x2, 0x5, 0x8, 0x6}, {0x9, 0xc919, 0x10000, 0xeb8, 0x1, 0x2}, {0x1, 0x10001, 0x8, 0x799, 0x1, 0x6}, {0x3, 0x8, 0xb4, 0xe3, 0x1}, {0x82, 0x3, 0x734bca02, 0x4, 0xfc000000, 0x80000001}, {0x9, 0xf, 0x8, 0x2, 0x9}, {0x7ff, 0x5, 0x100, 0xb53, 0x7, 0x3}, {0x7, 0x8, 0x0, 0x9, 0x80, 0x9}, {0x81, 0x51, 0x3, 0x9, 0x6, 0x5}, {0x100, 0x7, 0x4, 0x0, 0x1, 0x4000000}, {0x800, 0x3, 0xfffffffd, 0x53, 0x6, 0x1}, {0x3, 0x3, 0xd, 0x8, 0x9, 0x5}, {0x5, 0x100, 0x0, 0x80000001, 0x9, 0x2}, {0xa6c, 0x101, 0x7, 0x10000, 0x8, 0x6}, {0x4, 0x6, 0x4, 0x3, 0x3, 0xfffffff8}, {0x5, 0x5, 0x0, 0x3ff, 0x2400000, 0x2665c80f}, {0xfc6, 0x7, 0x8, 0x80000001, 0x4365, 0x10000}, {0x3, 0xf42, 0x536, 0x5, 0xfff, 0x8}, {0x6, 0xfffffff9, 0x2, 0x1c000, 0x1d3, 0x5}, {0x7, 0xa, 0x0, 0x6, 0x6, 0x40}, {0x5, 0xe8, 0x8, 0xa, 0x5, 0xa}, {0x4, 0x6, 0x5, 0x9, 0x5, 0x2e5e}, {0x9, 0x1, 0x800, 0x141, 0x10, 0x20}, {0x1, 0x7, 0x0, 0x9, 0xd8, 0x9}, {0x9, 0x8, 0x7fff, 0x4, 0x6, 0x5}, {0x17, 0x1000, 0x3, 0x5, 0x9, 0xffffffff}, {0x7, 0x7, 0x8, 0xe, 0xf9, 0xfffffc00}, {0x80, 0x976c, 0x3, 0x8, 0x0, 0x5c}, {0x7fff, 0x9, 0x0, 0x800, 0x1ff}, {0x0, 0x401, 0x1, 0x4000000, 0x0, 0x8}, {0xd, 0x8, 0x2, 0xffff, 0x6, 0xfffffffc}, {0x9, 0x1, 0x401, 0x6, 0x8, 0x9}, {0x0, 0x7fffffff, 0x2, 0x6, 0x200, 0x9}, {0x8, 0x5, 0x5, 0x73, 0x4, 0x4}, {0x3000, 0x5, 0xfffffffd, 0xefc, 0x800, 0xb}, {0x80, 0x3, 0x4, 0x65, 0x7, 0x1}, {0x8, 0x3, 0x4, 0xb, 0x9, 0x3c}, {0x771f, 0x1, 0x4, 0x5, 0x4f7d, 0x5}, {0x3, 0xffffffff, 0x800, 0xff, 0x3, 0x6}, {0x2008000, 0x3, 0x6, 0xfffffffe, 0x8, 0x4}, {0xede, 0x43e, 0x100, 0xb, 0x94, 0x8}, {0xe65, 0x2, 0xffff, 0x4, 0x38000, 0x4}, {0x200, 0x7, 0xffff, 0x1, 0x8, 0xfffffffd}, {0x3ff, 0x0, 0x7f, 0xd494, 0x3, 0x81}, {0x100, 0x7fff, 0x7f, 0x80000001, 0x8, 0x3}, {0x7, 0xce99, 0x100, 0x7, 0x5, 0x1ff}, {0x9, 0x6, 0x10, 0xfffffeff, 0x10001, 0x6}, {0x9, 0x0, 0x81, 0x1, 0x80000000, 0x5}, {0xc, 0x26, 0x552, 0x1, 0x800, 0x4}, {0xfff, 0x0, 0x0, 0xda0b34, 0x3, 0x3}, {0xc, 0xb, 0x0, 0x1000, 0x1a9, 0xff}, {0x8, 0x5, 0x3, 0x4, 0x800, 0x18ce}, {0x8001, 0x1, 0x35, 0x9, 0x1, 0x401}, {0x9, 0x6, 0x8, 0x101, 0x3, 0x2}, {0x4, 0x7, 0x3, 0x6, 0xfffffffa, 0x3}, {0x2, 0x3, 0x0, 0x9, 0x0, 0x5}, {0x200, 0x5, 0x42a11021, 0x10, 0x2, 0x2}, {0x4, 0x9, 0x3, 0x3, 0x10000, 0x101}, {0xffffffff, 0x6, 0x3, 0x1, 0x3, 0x40}, {0x800, 0x7, 0x3, 0x8001, 0x5, 0x2}, {0x4, 0x5, 0x10001, 0x1, 0x1, 0x1}, {0xb04, 0x9, 0x9, 0x9e2, 0x7, 0x2}, {0xff, 0x2, 0x0, 0x2, 0x49, 0x5}, {0x2, 0x200, 0x3, 0x8, 0x2, 0x6}, {0x8, 0x0, 0x5, 0x9, 0x0, 0xfffffff9}, {0x9, 0x7f, 0x8, 0x5, 0x7ff, 0x7ff}, {0x4, 0xffffffff, 0x5, 0x9, 0x6, 0xfffffff8}, {0x0, 0x9, 0x2, 0x4, 0x101, 0x39fd}, {0xa3e0, 0x8, 0x1, 0x3, 0x9f0c, 0x7f}, {0xfff, 0x7, 0x4, 0xab, 0x7, 0x1837}, {0x9, 0x1, 0xbc, 0xfffffffa, 0x0, 0x1}, {0x7, 0x5, 0xa7, 0x8, 0x9, 0x8}, {0x3, 0x8, 0xf, 0x3ff, 0x6, 0x4}, {0x2, 0x9, 0x3, 0x1, 0x1000}, {0x5, 0x1ff, 0x3, 0x1, 0x8, 0x2}, {0x8, 0x6, 0xbb5, 0xfffffff6, 0x9, 0x6}, {0x9, 0x9, 0x4, 0x5, 0x3, 0x1}, {0xe, 0x5, 0x20000, 0x761, 0x8, 0x658}, {0x5, 0xfff, 0xffffff3e, 0x2, 0x8a, 0x81}, {0x0, 0x2, 0x2c48d440, 0x6, 0x1, 0x7ff}, {0x8, 0x7fff, 0x2, 0x665c, 0x3, 0xffffff80}], [{0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x6, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x4}, {0x4}, {0x3}, {}, {0x2}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0xf273b7d1ba59d49e}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x4}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x5}, {0x4}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x1}, {0x4}, {}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1}, {}, {0x1}, {0x4}, {0x2}, {0x928bf56a1a30be56}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0xa}, {0x0, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000000a80)) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00030008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x6, 0xa, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}]}, 0x50}, 0x1, 0x7}, 0x0) (async, rerun: 64) sendmsg$kcm(r4, &(0x7f0000000d80)={&(0x7f00000001c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="9101358a7c4710e7dd024caf8b1f08e5141c4e18103502293c02bcb43e0bf2e204f65f6f727d4250dd97f61d7b325461a6e4556a4245753ac5f5604dd852d5c69249009fb74ea7699468a5dcaa83d7a7c24b94945979baa7552e3c3c4f9b8e28b833f5e790d34c009569d5942ad3679734ad97e8e44325a4f8cc2fc8549c584f7527cd79fe9238ac0490a3ab9787972b8159f30a8a97e4fc5ffdce3ebf1067d62729304f5ea815a0ca1f8faaa909ec9a33fd66dc68bec39bcee0e6bfcf552f8c2d4b67e9f59b8b8a0d281e31074a9d33bf82f4645442678274a7ba5c5c8445d0cf5d887c34", 0xe5}, {&(0x7f0000000bc0)="692a341d2c0ee7c3ece550a0615f710cc8e59e8cee4bb8b88f2cbf08835a4ce6c205608226cec5d68c000bf896c565b56c07b9a3cf95a5a6be637f893cf07fe097962594cc74f55c55eb60ea8fe7ba1d2fb26253ee1efdc83a1350b918494ab6c9d55bad9ff4cabe1ab69564200d6cd3fc9d507d08b66f9f6d4395153b4bf9e851bb93c77c1318bceccff7", 0x8b}, {&(0x7f0000000c80)="f47ec75430cb4f53218d86d95c70451e3d31a2fafdaad5aab892", 0x1a}, {&(0x7f0000000cc0)="ee3eb70174c795a07bcff2f8ee4d59e74f117caf7915190f87a5525ac0114705f6c29860504bc9fb94bbe444b1400ca3ac926c0930ff2001a50fa2ae8069a8023a304bd692fe69a1393392f6d715c0", 0x4f}], 0x4}, 0x4000) (rerun: 64) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@enum={0x4, 0x6, 0x0, 0x6, 0x4, [{0xd, 0xb}, {0x8, 0x4}, {0xc, 0x400}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x100}]}, @fwd={0x9}]}, {0x0, [0x0, 0x30, 0x30, 0x2e, 0x61, 0x61]}}, &(0x7f0000000400)=""/54, 0x68, 0x36, 0x1, 0x7ec, 0x10000}, 0x28) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x24, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 147.821655ms ago: executing program 0 (id=862): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000080), 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500000098000000faffffff00000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001000000000000000b020000f214360fbd7b09fa211da58b9c0376a5eda9aa272487f3b8f8d8b57a3457f68d6b72de57abadbabafb259dce55cb0300a559a3db17c0da995bfef9bdbae84415"], 0x80}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="060000000010"}) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000002940)=[{0x0}, {&(0x7f0000000500)="aa9aeb022e4e7f7b8143b9519a51b21598e25387f1d46fb0ef4b1cfb", 0x1c}], 0x2}}], 0x1, 0xc000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x0, 0x4000) listen(r3, 0xfffffffd) ppoll(&(0x7f00000002c0)=[{r0, 0x5}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="8000000000250b6f8a0105000000000000000000020000006200018014000180c3ff0100ac14142708000200e00000010c00028005000100010000001400018008000100ffffffff080002000000000006000340000000002400028005000100110000000c00028005000100880000000c000280050001002f0000f308000340"], 0x80}, 0x1, 0x0, 0x0, 0x11}, 0x0) 71.432222ms ago: executing program 3 (id=863): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400004e", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) unshare(0x4000400) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x2, @a={0x2, 0x1, 0x6, 0x0, 0xf8, 0xfb, 0xcb, {0xbe, 0x10, "b273f9ae81f5ba3a3bafc0f0eae9ecb5", 0x71, 0x6c}, 0x0, 0xf3, 0x6, 0xc3, 0xb2, "63151811b15ee90f55c0e89fe54f9e8b92d1e25a944cc150dfd97ce859ecf63652934e6b7669eb600a5d2a7cb87d904c037411baa9fd81fab9a803262782cc446abf1cb0d6cfbcba7bc4af0600000000000000d02cc7f8af0ca41b55f6b529201ce772cdff744792bebf22a11a7545cdca5c55a353285907f8398100bc80ce46377f7075cca02a0b8dbd0177d3976f7001ec2ef3ab3190a84f82db1586f6c60847dfd5b20690310567cb67b1ffbd0af1f3e9"}}, 0xd5) 0s ago: executing program 4 (id=864): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 64.395033][ T5807] cgroup: Unknown subsys name 'net' [ 64.547942][ T5807] cgroup: Unknown subsys name 'cpuset' [ 64.556743][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.919282][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.890840][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.913768][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.922293][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.939405][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.940420][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.947303][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.956038][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.962697][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.970393][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.978188][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.984186][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.992647][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.998049][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.012192][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.013972][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.020857][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.027957][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.044553][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.053447][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.061262][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.064491][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.075061][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.084043][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.092751][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.101588][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.582365][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 68.690730][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 68.773403][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 68.849531][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 68.866670][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 68.993985][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.001335][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.009203][ T5823] bridge_slave_0: entered allmulticast mode [ 69.016458][ T5823] bridge_slave_0: entered promiscuous mode [ 69.048586][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.056192][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.063478][ T5823] bridge_slave_1: entered allmulticast mode [ 69.070925][ T5823] bridge_slave_1: entered promiscuous mode [ 69.083468][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.090680][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.098068][ T5821] bridge_slave_0: entered allmulticast mode [ 69.105201][ T5821] bridge_slave_0: entered promiscuous mode [ 69.140702][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.148672][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.156079][ T5821] bridge_slave_1: entered allmulticast mode [ 69.163147][ T5821] bridge_slave_1: entered promiscuous mode [ 69.220998][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.228424][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.235635][ T5832] bridge_slave_0: entered allmulticast mode [ 69.242625][ T5832] bridge_slave_0: entered promiscuous mode [ 69.252416][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.289112][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.296927][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.304088][ T5832] bridge_slave_1: entered allmulticast mode [ 69.311387][ T5832] bridge_slave_1: entered promiscuous mode [ 69.321194][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.331068][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.338578][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.346246][ T5824] bridge_slave_0: entered allmulticast mode [ 69.353205][ T5824] bridge_slave_0: entered promiscuous mode [ 69.362937][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.372844][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.380235][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.387452][ T5820] bridge_slave_0: entered allmulticast mode [ 69.395041][ T5820] bridge_slave_0: entered promiscuous mode [ 69.420981][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.428211][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.435578][ T5824] bridge_slave_1: entered allmulticast mode [ 69.442555][ T5824] bridge_slave_1: entered promiscuous mode [ 69.451494][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.461560][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.468763][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.476112][ T5820] bridge_slave_1: entered allmulticast mode [ 69.483429][ T5820] bridge_slave_1: entered promiscuous mode [ 69.539182][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.550576][ T5823] team0: Port device team_slave_0 added [ 69.558316][ T5823] team0: Port device team_slave_1 added [ 69.599259][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.621067][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.632215][ T5821] team0: Port device team_slave_0 added [ 69.640716][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.660587][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.667818][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.694248][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.708665][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.727198][ T5821] team0: Port device team_slave_1 added [ 69.735200][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.752570][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.760188][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.787176][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.830394][ T5832] team0: Port device team_slave_0 added [ 69.838838][ T5832] team0: Port device team_slave_1 added [ 69.859513][ T5824] team0: Port device team_slave_0 added [ 69.909122][ T5824] team0: Port device team_slave_1 added [ 69.916277][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.923526][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.950289][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.963110][ T5820] team0: Port device team_slave_0 added [ 69.970069][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.977197][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.003855][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.033857][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.041096][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.068062][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.081201][ T5820] team0: Port device team_slave_1 added [ 70.088051][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.095220][ T5833] Bluetooth: hci3: command tx timeout [ 70.095609][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.126865][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.169184][ T5823] hsr_slave_0: entered promiscuous mode [ 70.175025][ T5833] Bluetooth: hci1: command tx timeout [ 70.175032][ T5145] Bluetooth: hci2: command tx timeout [ 70.184441][ T5145] Bluetooth: hci0: command tx timeout [ 70.186589][ T51] Bluetooth: hci4: command tx timeout [ 70.196335][ T5823] hsr_slave_1: entered promiscuous mode [ 70.230333][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.237565][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.265245][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.300247][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.307337][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.334454][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.346202][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.353170][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.379435][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.415077][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.422116][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.448194][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.489811][ T5832] hsr_slave_0: entered promiscuous mode [ 70.496493][ T5832] hsr_slave_1: entered promiscuous mode [ 70.502554][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 70.508942][ T5832] Cannot create hsr debugfs directory [ 70.544788][ T5821] hsr_slave_0: entered promiscuous mode [ 70.551213][ T5821] hsr_slave_1: entered promiscuous mode [ 70.557711][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 70.563455][ T5821] Cannot create hsr debugfs directory [ 70.640700][ T5824] hsr_slave_0: entered promiscuous mode [ 70.647187][ T5824] hsr_slave_1: entered promiscuous mode [ 70.653491][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 70.659463][ T5824] Cannot create hsr debugfs directory [ 70.691702][ T5820] hsr_slave_0: entered promiscuous mode [ 70.698206][ T5820] hsr_slave_1: entered promiscuous mode [ 70.704399][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 70.710262][ T5820] Cannot create hsr debugfs directory [ 71.141859][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.153995][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.170956][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.182277][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.236102][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.255664][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.270598][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.291979][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.351313][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.370444][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.382933][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.393939][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.459090][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.467128][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.519871][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.552139][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.576842][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.588008][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.618336][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.639619][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.696456][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.706236][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.713568][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.738109][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.750122][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.761774][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.768949][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.786327][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.812872][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.834810][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.857051][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.888578][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.895712][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.922543][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.930269][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.009620][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.028477][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.035704][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.079073][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.086419][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.109179][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.177881][ T5833] Bluetooth: hci3: command tx timeout [ 72.190309][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.264291][ T5833] Bluetooth: hci0: command tx timeout [ 72.264826][ T51] Bluetooth: hci2: command tx timeout [ 72.269723][ T5833] Bluetooth: hci1: command tx timeout [ 72.275937][ T5145] Bluetooth: hci4: command tx timeout [ 72.295492][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.307722][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.343588][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.350964][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.381735][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.389008][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.432292][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.490076][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.549574][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.556794][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.572424][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.579608][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.611383][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.632544][ T5823] veth0_vlan: entered promiscuous mode [ 72.691291][ T5823] veth1_vlan: entered promiscuous mode [ 72.818789][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.893839][ T5823] veth0_macvtap: entered promiscuous mode [ 72.953190][ T5821] veth0_vlan: entered promiscuous mode [ 72.972317][ T5823] veth1_macvtap: entered promiscuous mode [ 73.048808][ T5821] veth1_vlan: entered promiscuous mode [ 73.065796][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.089506][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.107730][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.136932][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.149879][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.171309][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.181425][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.213062][ T5821] veth0_macvtap: entered promiscuous mode [ 73.237832][ T5821] veth1_macvtap: entered promiscuous mode [ 73.261615][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.345877][ T5832] veth0_vlan: entered promiscuous mode [ 73.368134][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.384895][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.392984][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.421317][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.435146][ T5820] veth0_vlan: entered promiscuous mode [ 73.458892][ T5832] veth1_vlan: entered promiscuous mode [ 73.468727][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.472109][ T1163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.487711][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.494006][ T1163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.511697][ T5820] veth1_vlan: entered promiscuous mode [ 73.524437][ T1163] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.566353][ T1163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.602478][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.706128][ T5832] veth0_macvtap: entered promiscuous mode [ 73.737925][ T5820] veth0_macvtap: entered promiscuous mode [ 73.746707][ T5824] veth0_vlan: entered promiscuous mode [ 73.755695][ T5832] veth1_macvtap: entered promiscuous mode [ 73.767426][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.775656][ T5820] veth1_macvtap: entered promiscuous mode [ 73.795238][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.841585][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.856761][ T5824] veth1_vlan: entered promiscuous mode [ 73.877163][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.892455][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.949721][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.959494][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.964671][ T5947] Zero length message leads to an empty skb [ 73.975423][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.997252][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.065596][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.066051][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.085009][ T5951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.099915][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.121368][ T5824] veth0_macvtap: entered promiscuous mode [ 74.143103][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.152578][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.167790][ T5824] veth1_macvtap: entered promiscuous mode [ 74.193558][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.209310][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.255037][ T5145] Bluetooth: hci3: command tx timeout [ 74.296271][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.335028][ T5145] Bluetooth: hci4: command tx timeout [ 74.337443][ T5838] Bluetooth: hci2: command tx timeout [ 74.340460][ T51] Bluetooth: hci1: command tx timeout [ 74.345903][ T5833] Bluetooth: hci0: command tx timeout [ 74.364170][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.389328][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.407866][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.475261][ T82] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.487531][ T82] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.522508][ T82] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.531451][ T82] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.551378][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.560552][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.565383][ T5960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.806483][ T5969] openvswitch: netlink: IPv6 tunnel dst address is zero [ 75.304081][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.329110][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.358237][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.375940][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.552172][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.590383][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.606195][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 75.703491][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.732173][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.789257][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 75.914422][ T5984] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 76.115732][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.295468][ T6003] veth0: entered promiscuous mode [ 76.334589][ T5833] Bluetooth: hci3: command tx timeout [ 76.414631][ T5838] Bluetooth: hci4: command tx timeout [ 76.415869][ T51] Bluetooth: hci0: command tx timeout [ 76.420182][ T5838] Bluetooth: hci2: command tx timeout [ 76.431092][ T5833] Bluetooth: hci1: command tx timeout [ 76.479628][ T6003] veth0: left promiscuous mode [ 76.563041][ T6014] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 76.572717][ T6014] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20'. [ 76.614336][ T6016] netlink: 'syz.0.18': attribute type 2 has an invalid length. [ 76.663180][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 76.760276][ T6021] FAULT_INJECTION: forcing a failure. [ 76.760276][ T6021] name failslab, interval 1, probability 0, space 0, times 1 [ 76.770626][ T6022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.788550][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.4.21 Not tainted syzkaller #0 PREEMPT(full) [ 76.788574][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 76.788591][ T6021] Call Trace: [ 76.788598][ T6021] [ 76.788606][ T6021] dump_stack_lvl+0xe8/0x150 [ 76.788638][ T6021] should_fail_ex+0x412/0x560 [ 76.788668][ T6021] should_failslab+0xa8/0x100 [ 76.788690][ T6021] ? skb_clone+0x212/0x3a0 [ 76.788714][ T6021] kmem_cache_alloc_noprof+0x87/0x650 [ 76.788732][ T6021] ? __netlink_lookup+0xc6/0x8b0 [ 76.788757][ T6021] skb_clone+0x212/0x3a0 [ 76.788783][ T6021] __netlink_deliver_tap+0x404/0x850 [ 76.788814][ T6021] ? netlink_deliver_tap+0x2e/0x1b0 [ 76.788834][ T6021] netlink_deliver_tap+0x19c/0x1b0 [ 76.788854][ T6021] netlink_unicast+0x7e3/0x9b0 [ 76.788876][ T6021] ? __pfx_netlink_unicast+0x10/0x10 [ 76.788893][ T6021] ? netlink_sendmsg+0x650/0xb40 [ 76.788908][ T6021] ? skb_put+0x11b/0x210 [ 76.788929][ T6021] netlink_sendmsg+0x813/0xb40 [ 76.788953][ T6021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.788970][ T6021] ? aa_sock_msg_perm+0xf1/0x1b0 [ 76.788991][ T6021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 76.789008][ T6021] ____sys_sendmsg+0x972/0x9f0 [ 76.789032][ T6021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.789056][ T6021] ? import_iovec+0x73/0xa0 [ 76.789075][ T6021] ___sys_sendmsg+0x2a5/0x360 [ 76.789098][ T6021] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.789147][ T6021] ? __fget_files+0x2a/0x420 [ 76.789159][ T6021] ? __fget_files+0x3a0/0x420 [ 76.789182][ T6021] __x64_sys_sendmsg+0x1bd/0x2a0 [ 76.789216][ T6021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 76.789246][ T6021] ? __pfx_ksys_write+0x10/0x10 [ 76.789276][ T6021] do_syscall_64+0x14d/0xf80 [ 76.789296][ T6021] ? trace_irq_disable+0x3b/0x150 [ 76.789310][ T6021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.789326][ T6021] ? clear_bhb_loop+0x40/0x90 [ 76.789344][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.789360][ T6021] RIP: 0033:0x7f47a459c819 [ 76.789385][ T6021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.789396][ T6021] RSP: 002b:00007f47a5491028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.789413][ T6021] RAX: ffffffffffffffda RBX: 00007f47a4815fa0 RCX: 00007f47a459c819 [ 76.789423][ T6021] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 76.789432][ T6021] RBP: 00007f47a5491090 R08: 0000000000000000 R09: 0000000000000000 [ 76.789441][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.789450][ T6021] R13: 00007f47a4816038 R14: 00007f47a4815fa0 R15: 00007ffe744146a8 [ 76.789477][ T6021] [ 76.827734][ T6022] netlink: 'syz.0.18': attribute type 20 has an invalid length. [ 77.005876][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22'. [ 77.130139][ T6024] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22'. [ 77.145796][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22'. [ 77.156860][ T6024] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22'. [ 77.188921][ T6037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.235732][ T6034] Illegal XDP return value 2584297142 on prog (id 12) dev N/A, expect packet loss! [ 77.491443][ T6048] vlan0: entered promiscuous mode [ 77.526878][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 77.637766][ T6048] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.790981][ T6048] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.856098][ T6066] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 77.875364][ T6065] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 77.878074][ T6062] vlan2: entered allmulticast mode [ 77.888819][ T6062] veth0_to_bond: entered allmulticast mode [ 77.947785][ T6067] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 77.951985][ T6066] netlink: 'syz.1.34': attribute type 3 has an invalid length. [ 78.022937][ T6067] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 78.044393][ T6067] netlink: 'syz.0.33': attribute type 4 has an invalid length. [ 78.072067][ T6067] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 78.080374][ T6067] netlink: 'syz.0.33': attribute type 4 has an invalid length. [ 78.114116][ T6048] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.235107][ T6048] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.398279][ T6084] Bluetooth: MGMT ver 1.23 [ 78.474436][ T34] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.588713][ T43] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.615467][ T43] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.668160][ T58] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.707056][ T43] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.745126][ T43] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.781120][ T43] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.817849][ T43] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.893845][ T6103] syzkaller1: entered promiscuous mode [ 78.910849][ T6103] syzkaller1: entered allmulticast mode [ 79.027774][ T6119] Unsupported ieee802154 address type: 0 [ 79.191287][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.248570][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.988484][ T6170] Bluetooth: MGMT ver 1.23 [ 80.038065][ T6170] ip6gre1: entered promiscuous mode [ 80.146459][ T6180] syzkaller0: entered promiscuous mode [ 80.170210][ T6180] syzkaller0: entered allmulticast mode [ 80.495095][ T6195] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.601739][ T6195] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.716871][ T6195] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.912516][ T6195] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.103083][ T6234] batadv_slave_0: entered promiscuous mode [ 81.124076][ T6234] batadv_slave_0: entered allmulticast mode [ 81.188150][ T6234] tipc: Started in network mode [ 81.193190][ T6234] tipc: Node identity facc1546c421, cluster identity 4711 [ 81.252889][ T6234] tipc: Enabled bearer , priority 0 [ 81.341200][ T6234] tipc: Resetting bearer [ 81.348645][ T82] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.359560][ T6242] __nla_validate_parse: 20 callbacks suppressed [ 81.359577][ T6242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.83'. [ 81.409699][ T6233] tipc: Disabling bearer [ 81.420669][ T82] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.439596][ T82] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.545433][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 81.580185][ T82] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.732278][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.90'. [ 82.176912][ T6273] validate_nla: 3 callbacks suppressed [ 82.176931][ T6273] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 82.227439][ T6273] netlink: 'syz.3.94': attribute type 2 has an invalid length. [ 82.233381][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.96'. [ 82.264532][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.96'. [ 82.434150][ T6292] netlink: 'syz.1.100': attribute type 5 has an invalid length. [ 82.458015][ T6292] veth0_macvtap: left promiscuous mode [ 82.488007][ T6292] macvtap0: entered promiscuous mode [ 82.495047][ T6292] macvtap0: entered allmulticast mode [ 82.526274][ T6292] veth0_macvtap: entered promiscuous mode [ 82.548685][ T6292] veth0_macvtap: entered allmulticast mode [ 82.605424][ T6292] team0: Device macvtap0 failed to register rx_handler [ 82.610328][ T6301] tipc: Failed to remove unknown binding: 66,0,0/0:2530976322/2530976324 [ 82.628334][ T6292] veth0_macvtap: left allmulticast mode [ 82.636379][ T6301] tipc: Failed to remove unknown binding: 66,0,0/0:2530976322/2530976323 [ 82.643820][ T6292] veth0_macvtap: left promiscuous mode [ 82.647759][ T6301] tipc: Failed to remove unknown binding: 66,0,0/0:2530976322/2530976324 [ 82.660310][ T6301] tipc: Failed to remove unknown binding: 66,0,0/0:2530976322/2530976323 [ 82.982181][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 83.187649][ T6331] netlink: 52 bytes leftover after parsing attributes in process `syz.4.109'. [ 83.536189][ T6346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.115'. [ 83.817988][ T6346] bond0: entered promiscuous mode [ 83.823073][ T6346] bond_slave_0: entered promiscuous mode [ 83.832380][ T6346] bond_slave_1: entered promiscuous mode [ 83.840720][ T6346] gretap0: entered promiscuous mode [ 83.849031][ T6346] hsr1: entered promiscuous mode [ 83.965540][ T6352] netlink: 'syz.0.118': attribute type 2 has an invalid length. [ 83.986455][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 83.995829][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 84.028540][ T6350] syzkaller0: entered promiscuous mode [ 84.039612][ T6350] syzkaller0: entered allmulticast mode [ 84.122205][ T6357] sctp: [Deprecated]: syz.0.119 (pid 6357) Use of int in maxseg socket option. [ 84.122205][ T6357] Use struct sctp_assoc_value instead [ 84.462105][ T6374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.528330][ T6380] macvlan2: entered allmulticast mode [ 84.666182][ T6395] trusted_key: syz.3.131 sent an empty control message without MSG_MORE. [ 84.832512][ T30] audit: type=1107 audit(1775754684.893:2): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!3щ ЌwЬƒ<е Гі-tœj,{я_Є' [ 85.078958][ T6419] vlan2: entered promiscuous mode [ 85.084036][ T6419] bridge0: entered promiscuous mode [ 85.237129][ T6427] openvswitch: netlink: Unknown key attributes 2 [ 85.246188][ T6425] syzkaller1: entered promiscuous mode [ 85.251709][ T6425] syzkaller1: entered allmulticast mode [ 85.345887][ T6433] team0: Port device syz_tun added [ 85.650413][ T6437] team0: Port device syz_tun removed [ 85.661675][ T6437] bridge_slave_0: left allmulticast mode [ 85.678418][ T6437] bridge_slave_0: left promiscuous mode [ 85.714263][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.785845][ T6437] bridge_slave_1: left allmulticast mode [ 85.791535][ T6437] bridge_slave_1: left promiscuous mode [ 85.805133][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.825884][ T6437] bond0: (slave bond_slave_0): Releasing backup interface [ 85.863833][ T6437] bond0: (slave bond_slave_1): Releasing backup interface [ 85.895975][ T6461] sctp: [Deprecated]: syz.1.148 (pid 6461) Use of int in max_burst socket option deprecated. [ 85.895975][ T6461] Use struct sctp_assoc_value instead [ 85.899416][ T6437] team0: Port device team_slave_0 removed [ 85.923988][ T6437] team0: Port device team_slave_1 removed [ 85.932082][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.952247][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.976747][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.986351][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.996893][ T6466] af_packet: tpacket_rcv: packet too big, clamped from 3 to 4294967272. macoff=96 [ 85.999313][ T6437] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.168965][ T6474] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 86.196556][ T6470] netlink: 'syz.0.152': attribute type 10 has an invalid length. [ 86.204600][ T6477] netlink: 'syz.0.152': attribute type 10 has an invalid length. [ 86.217295][ T6474] bond1: entered promiscuous mode [ 86.222722][ T6474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.248739][ T6477] team0: Port device dummy0 added [ 86.275165][ T6474] bond1: entered allmulticast mode [ 86.350663][ T6474] bond1: (slave bridge1): making interface the new active one [ 86.373624][ T6486] __nla_validate_parse: 10 callbacks suppressed [ 86.373641][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.154'. [ 86.384760][ T6474] bridge1: entered promiscuous mode [ 86.398909][ T6474] bridge1: entered allmulticast mode [ 86.406054][ T6474] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 86.411259][ T6486] nbd: must specify a device to reconfigure [ 86.648803][ T6507] netlink: 76 bytes leftover after parsing attributes in process `syz.2.161'. [ 86.669996][ T6507] netlink: 76 bytes leftover after parsing attributes in process `syz.2.161'. [ 86.691080][ T6505] bond0: entered promiscuous mode [ 86.753640][ T6505] bond_slave_0: entered promiscuous mode [ 86.770495][ T6505] bond_slave_1: entered promiscuous mode [ 86.778964][ T6505] batadv0: entered promiscuous mode [ 86.820620][ T29] cfg80211: failed to load regulatory.db [ 86.831943][ T6505] debugfs: 'hsr1' already exists in 'hsr' [ 86.855586][ T6505] Cannot create hsr debugfs directory [ 86.862111][ T6505] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 86.893185][ T6505] bond0: left promiscuous mode [ 86.898947][ T6505] bond_slave_0: left promiscuous mode [ 86.913438][ T6505] bond_slave_1: left promiscuous mode [ 86.920244][ T6505] batadv0: left promiscuous mode [ 86.942132][ T6511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.160'. [ 86.998196][ T6527] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 87.295996][ T6540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.168'. [ 87.658211][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 87.676431][ T6553] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 87.751781][ T6556] netlink: 14 bytes leftover after parsing attributes in process `syz.1.171'. [ 87.830210][ T6565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.896982][ T6564] netlink: 44 bytes leftover after parsing attributes in process `syz.2.175'. [ 87.924520][ T6570] netlink: 44 bytes leftover after parsing attributes in process `syz.2.175'. [ 88.031608][ T6572] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.177'. [ 88.550058][ T6598] warning: `syz.0.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.562118][ T6613] netlink: 'syz.4.186': attribute type 32 has an invalid length. [ 88.638192][ T6608] bond1: entered promiscuous mode [ 88.673118][ T6608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.725339][ T6613] bond2: option coupled_control: invalid value (12) [ 88.733529][ T6613] bond2 (unregistering): Released all slaves [ 88.767540][ T6611] syzkaller0: entered promiscuous mode [ 88.773320][ T6611] syzkaller0: entered allmulticast mode [ 88.986637][ T6630] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 89.319355][ T6645] openvswitch: netlink: Missing key (keys=40, expected=80) [ 89.331822][ T6646] openvswitch: netlink: Missing key (keys=40, expected=80) [ 89.339942][ T6645] openvswitch: netlink: Missing key (keys=40, expected=80) [ 89.443627][ T6649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.517183][ T6649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.594842][ T6649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.675920][ T6649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.763711][ T1163] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.847307][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.882116][ T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.904498][ T6655] netlink: 'syz.1.199': attribute type 28 has an invalid length. [ 89.931083][ T58] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.944028][ T6661] netlink: 'syz.4.201': attribute type 13 has an invalid length. [ 89.957019][ T6655] netlink: 'syz.1.199': attribute type 3 has an invalid length. [ 90.112178][ T6668] netlink: 'syz.2.204': attribute type 2 has an invalid length. [ 90.147838][ T6669] bridge0: port 3(vlan3) entered blocking state [ 90.154618][ T6669] bridge0: port 3(vlan3) entered disabled state [ 90.161095][ T6669] vlan3: entered allmulticast mode [ 90.166800][ T6669] geneve0: entered allmulticast mode [ 90.173505][ T6669] vlan3: entered promiscuous mode [ 90.180817][ T6669] geneve0: entered promiscuous mode [ 90.205832][ T6668] hmac(sha224): entered promiscuous mode [ 90.263155][ T6675] x_tables: duplicate underflow at hook 2 [ 90.585983][ T5833] Bluetooth: hci4: command tx timeout [ 91.150530][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.158092][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.532794][ T6740] __nla_validate_parse: 8 callbacks suppressed [ 91.532812][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 91.547114][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.619313][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.311342][ T6740] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 93.312432][ T152] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.330685][ T152] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.426497][ T152] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.447941][ T152] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.531723][ T6778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.223'. [ 93.640773][ T6782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.736260][ T6786] netlink: 52 bytes leftover after parsing attributes in process `syz.3.227'. [ 94.353929][ T6810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.234'. [ 94.382336][ T6810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.234'. [ 94.454064][ T6810] ip6gretap1: entered promiscuous mode [ 94.504655][ T6818] netlink: 'syz.0.234': attribute type 4 has an invalid length. [ 94.515901][ T6810] netlink: 364 bytes leftover after parsing attributes in process `syz.0.234'. [ 94.547591][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 94.641150][ T6828] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.238'. [ 95.051476][ T6849] : entered promiscuous mode [ 95.576539][ T6866] syzkaller0: entered promiscuous mode [ 95.595465][ T6866] syzkaller0: entered allmulticast mode [ 95.789170][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 95.798143][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.245'. [ 96.051749][ T6887] No such timeout policy "syz1" [ 96.791259][ T6931] __nla_validate_parse: 1 callbacks suppressed [ 96.791276][ T6931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 97.119695][ T6944] syzkaller0: entered promiscuous mode [ 97.161931][ T6944] syzkaller0: entered allmulticast mode [ 97.422280][ T6955] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 97.845255][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 97.858152][ T6984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.279'. [ 98.024688][ T6976] tipc: Invalid UDP bearer configuration [ 98.024740][ T6976] tipc: Enabling of bearer rejected, failed to enable media [ 98.039981][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.279'. [ 98.245192][ T6995] syz.3.283 uses old SIOCAX25GETINFO [ 98.259095][ T6992] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 98.339658][ T6996] xt_limit: Overflow, try lower: 324382443/0 [ 98.361887][ T6998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.284'. [ 98.676552][ T7012] hsr1: left promiscuous mode [ 99.116573][ T7034] netlink: 'syz.1.294': attribute type 1 has an invalid length. [ 99.164468][ T7035] netlink: 'syz.1.294': attribute type 1 has an invalid length. [ 99.202704][ T7040] netlink: 104 bytes leftover after parsing attributes in process `syz.0.296'. [ 99.222620][ T7044] netlink: 'syz.4.297': attribute type 1 has an invalid length. [ 99.238827][ T7034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.313728][ T7051] IPVS: length: 245 != 8 [ 99.338577][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 99.527379][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.301'. [ 99.790588][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.307'. [ 99.806982][ T7072] sock: sock_timestamping_bind_phc: sock not bind to device [ 100.015664][ T7075] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 100.311973][ T7081] IPVS: Scheduler module ip_vs_ not found [ 100.788370][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 100.856379][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.882416][ T58] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.904147][ T58] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.931927][ T58] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.312951][ T7100] syzkaller1: entered promiscuous mode [ 101.345256][ T7100] syzkaller1: entered allmulticast mode [ 101.485425][ T7143] syzkaller0: entered promiscuous mode [ 101.491097][ T7143] syzkaller0: entered allmulticast mode [ 101.499070][ T7143] 0: reclassify loop, rule prio 0, protocol 700 [ 101.679922][ T7152] netlink: 'syz.0.326': attribute type 11 has an invalid length. [ 101.738497][ T7152] smc: net device wlan0 applied user defined pnetid SYZ0 [ 101.843291][ T7152] netlink: 'syz.0.326': attribute type 13 has an invalid length. [ 101.886071][ T7152] __nla_validate_parse: 9 callbacks suppressed [ 101.886091][ T7152] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.326'. [ 102.013993][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.329'. [ 102.223034][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.330'. [ 102.266803][ T7173] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 102.277750][ T7173] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 102.546108][ T7194] rdma_op ffff8880309f71f0 conn xmit_rdma 0000000000000000 [ 102.570953][ T7194] x_tables: duplicate underflow at hook 3 [ 102.592743][ T7189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.333'. [ 102.607928][ T7194] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 102.711627][ T7200] erspan0: entered promiscuous mode [ 102.731878][ T7200] erspan0: left promiscuous mode [ 102.810520][ T7205] netlink: 64 bytes leftover after parsing attributes in process `syz.3.337'. [ 102.837447][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 102.847291][ T7205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.337'. [ 103.171223][ T7219] syz.0.339 (7219) used greatest stack depth: 17472 bytes left [ 103.380261][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 103.390835][ T7235] syzkaller1: entered promiscuous mode [ 103.396608][ T7235] syzkaller1: entered allmulticast mode [ 103.522973][ T7237] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 103.565000][ T7237] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 103.716062][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 103.791611][ T7250] netlink: 208 bytes leftover after parsing attributes in process `syz.1.349'. [ 104.040685][ T7279] tipc: Can't bind to reserved service type 0 [ 104.072844][ T7279] netlink: 'syz.1.355': attribute type 6 has an invalid length. [ 104.272102][ T7284] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.870178][ T7324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.059943][ T7333] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 105.300599][ T7341] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 105.552138][ T7359] bridge0: entered promiscuous mode [ 105.571008][ T7359] bridge0: port 1(vlan2) entered blocking state [ 105.585392][ T7359] bridge0: port 1(vlan2) entered disabled state [ 105.605587][ T7359] vlan2: entered allmulticast mode [ 105.621912][ T7359] bridge0: entered allmulticast mode [ 105.657830][ T7359] vlan2: left allmulticast mode [ 105.733368][ T7359] bridge0: left allmulticast mode [ 105.750467][ T7359] bridge0: left promiscuous mode [ 106.124647][ T7379] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 106.659447][ T7410] netlink: 'syz.4.379': attribute type 33 has an invalid length. [ 106.667686][ T7411] netlink: 'syz.4.379': attribute type 33 has an invalid length. [ 106.699240][ T7410] `: renamed from team0 (while UP) [ 106.955361][ T7405] nbd0: detected capacity change from 0 to 127 [ 106.965967][ T7409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.097129][ T5838] block nbd0: Receive control failed (result -104) [ 107.103962][ T5833] block nbd0: Receive control failed (result -32) [ 107.566002][ T7446] __nla_validate_parse: 8 callbacks suppressed [ 107.566021][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 107.733707][ T7459] tipc: Started in network mode [ 107.757342][ T7459] tipc: Node identity 8eb4fe38ede1, cluster identity 4711 [ 107.793797][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 107.799966][ T7459] tipc: Enabled bearer , priority 0 [ 107.830895][ T7463] netlink: 'syz.4.391': attribute type 15 has an invalid length. [ 107.854689][ T7463] netlink: 'syz.4.391': attribute type 25 has an invalid length. [ 107.873181][ T7464] syzkaller0: entered promiscuous mode [ 107.889106][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 107.904403][ T7464] syzkaller0: entered allmulticast mode [ 108.032598][ T7459] netlink: 44 bytes leftover after parsing attributes in process `syz.0.388'. [ 108.092839][ T7459] tipc: Resetting bearer [ 108.289358][ T7452] tipc: Resetting bearer [ 108.325988][ T7452] tipc: Disabling bearer [ 108.433966][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.398'. [ 108.910127][ T7518] xt_TCPMSS: Only works on TCP SYN packets [ 109.384800][ T7543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.486240][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 109.554420][ T7553] macvtap1: entered promiscuous mode [ 109.574950][ T7553] syz_tun: entered promiscuous mode [ 109.595986][ T7553] macvtap1: entered allmulticast mode [ 109.611885][ T7553] syz_tun: entered allmulticast mode [ 109.634762][ T7558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.413'. [ 109.676815][ T7560] syzkaller0: entered promiscuous mode [ 109.682419][ T7560] syzkaller0: entered allmulticast mode [ 109.912409][ T7574] netlink: 52 bytes leftover after parsing attributes in process `syz.1.417'. [ 110.046098][ T7578] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 110.194085][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 110.220462][ T7592] netlink: 'syz.2.421': attribute type 11 has an invalid length. [ 110.231606][ T7578] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 110.258304][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 110.330477][ T7598] nbd: must specify a size in bytes for the device [ 110.835625][ T7631] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 110.906590][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.914125][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.966591][ T7633] bridge_slave_0: left allmulticast mode [ 110.972470][ T7633] bridge_slave_0: left promiscuous mode [ 110.981064][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.028694][ T7633] bridge_slave_1: left allmulticast mode [ 111.087883][ T7633] bridge_slave_1: left promiscuous mode [ 111.108381][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.268309][ T7633] bond0: (slave bond_slave_0): Releasing backup interface [ 111.325786][ T7633] bond0: (slave bond_slave_1): Releasing backup interface [ 111.367212][ T7633] team0: Port device team_slave_0 removed [ 111.387859][ T7633] team0: Port device team_slave_1 removed [ 111.398426][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.408732][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.435350][ T7633] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.537072][ T7637] bond3: entered promiscuous mode [ 111.545298][ T7637] bond3: entered allmulticast mode [ 111.551328][ T7637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.577315][ T7640] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.587119][ T7640] team0: Port device dummy0 removed [ 111.597859][ T7640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.622520][ T7645] team0: Failed to send options change via netlink (err -105) [ 111.630335][ T7645] team0: Mode changed to "loadbalance" [ 111.837284][ T7684] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 111.874394][ T7684] netlink: 'syz.4.437': attribute type 2 has an invalid length. [ 111.883099][ T7687] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 112.488423][ T7717] netlink: 'syz.3.440': attribute type 4 has an invalid length. [ 112.580850][ T7721] geneve1: entered promiscuous mode [ 112.711811][ T7725] : entered promiscuous mode [ 112.849078][ T7732] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.859446][ T7732] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.898723][ T7734] __nla_validate_parse: 1 callbacks suppressed [ 112.898736][ T7734] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.451'. [ 112.916538][ T7732] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.926528][ T7732] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.981199][ T7739] netlink: 'syz.4.452': attribute type 3 has an invalid length. [ 113.007234][ T7732] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.017469][ T7732] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.068089][ T7744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.453'. [ 113.077240][ T7744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.096512][ T7732] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.106708][ T7732] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.294384][ T1098] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.319005][ T1098] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.355628][ T43] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.364546][ T43] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.403185][ T43] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.419911][ T43] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.422769][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 113.451311][ T43] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.460295][ T43] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.490671][ T7759] syzkaller0: entered promiscuous mode [ 113.496566][ T7759] syzkaller0: entered allmulticast mode [ 113.519003][ T7759] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 113.527371][ T7758] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 113.556402][ T7758] netlink: 224 bytes leftover after parsing attributes in process `syz.0.457'. [ 113.625357][ T7764] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 113.632887][ T7764] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 113.644384][ T7764] netlink: 'syz.4.460': attribute type 12 has an invalid length. [ 113.673697][ T7768] netlink: 48 bytes leftover after parsing attributes in process `syz.0.462'. [ 114.181004][ T7804] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.309596][ T7809] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.474'. [ 114.322367][ T7811] tipc: Started in network mode [ 114.327412][ T7811] tipc: Node identity e0000001, cluster identity 4711 [ 114.335851][ T7811] tipc: Enabling of bearer rejected, failed to enable media [ 114.437428][ T7818] sctp: [Deprecated]: syz.4.478 (pid 7818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.437428][ T7818] Use struct sctp_sack_info instead [ 114.610611][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 114.623880][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 114.665873][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 114.841646][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 115.051993][ T7853] geneve2: entered promiscuous mode [ 115.068571][ T7861] netlink: 'syz.2.485': attribute type 2 has an invalid length. [ 115.076915][ T7862] netlink: 'syz.2.485': attribute type 2 has an invalid length. [ 115.323606][ T7879] xt_hashlimit: overflow, rate too high: 0 [ 115.472446][ T7888] netlink: 'syz.0.492': attribute type 2 has an invalid length. [ 115.532698][ T7888] !Мо: entered promiscuous mode [ 115.658995][ T7898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.070320][ T7927] openvswitch: netlink: Invalid VLAN frame [ 116.319579][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.327299][ T7929] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.580934][ T7900] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 116.645120][ T7929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.677141][ T7929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.961030][ T7900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.034526][ T7954] bond1: (slave veth3): Enslaving as an active interface with a down link [ 117.043961][ T1098] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.064832][ T7976] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 117.073895][ T7976] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 117.136248][ T1098] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.156304][ T1098] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.230228][ T1098] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.794116][ T8029] geneve0: entered promiscuous mode [ 117.815282][ T8025] geneve0: left promiscuous mode [ 118.023477][ T8045] netlink: 'syz.1.522': attribute type 1 has an invalid length. [ 118.105114][ T8045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.137439][ T8049] vlan2: entered promiscuous mode [ 118.142607][ T8049] bond3: entered promiscuous mode [ 118.152504][ T8049] vlan2: entered allmulticast mode [ 118.158013][ T8049] bond3: entered allmulticast mode [ 118.169422][ T8051] ve: renamed from sit0 [ 118.222924][ T8053] __nla_validate_parse: 16 callbacks suppressed [ 118.222942][ T8053] netlink: 60 bytes leftover after parsing attributes in process `syz.3.523'. [ 118.560257][ T8068] batadv_slave_0: entered promiscuous mode [ 118.582316][ T8068] batadv_slave_0: entered allmulticast mode [ 118.845517][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.527'. [ 119.204664][ T8104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.478996][ T8120] netlink: 'syz.1.539': attribute type 3 has an invalid length. [ 119.645297][ T8133] netlink: 36 bytes leftover after parsing attributes in process `syz.3.540'. [ 120.404992][ T8143] delete_channel: no stack [ 120.433396][ T8142] delete_channel: no stack [ 120.450270][ T8142] delete_channel: no stack [ 120.461680][ T8142] delete_channel: no stack [ 120.495058][ T8142] delete_channel: no stack [ 120.526252][ T8142] delete_channel: no stack [ 120.531127][ T8142] delete_channel: no stack [ 120.545527][ T8142] delete_channel: no stack [ 120.554872][ T8142] delete_channel: no stack [ 120.570509][ T8142] delete_channel: no stack [ 120.580627][ T8142] delete_channel: no stack [ 120.590737][ T8142] delete_channel: no stack [ 120.600880][ T8142] delete_channel: no stack [ 120.614499][ T8142] delete_channel: no stack [ 120.618296][ T8153] netlink: 'syz.3.546': attribute type 5 has an invalid length. [ 120.621147][ T8142] delete_channel: no stack [ 120.652199][ T8142] delete_channel: no stack [ 120.662325][ T8142] delete_channel: no stack [ 120.672483][ T8142] delete_channel: no stack [ 120.682583][ T8142] delete_channel: no stack [ 120.712954][ T8142] delete_channel: no stack [ 120.722936][ T8142] delete_channel: no stack [ 120.739171][ T8142] delete_channel: no stack [ 120.758861][ T8142] delete_channel: no stack [ 120.778595][ T8142] delete_channel: no stack [ 120.787090][ T8142] delete_channel: no stack [ 120.853449][ T8142] delete_channel: no stack [ 120.876221][ T8142] delete_channel: no stack [ 120.881922][ T8142] delete_channel: no stack [ 120.993192][ T8142] delete_channel: no stack [ 121.014505][ T8142] delete_channel: no stack [ 121.022276][ T8142] delete_channel: no stack [ 121.027503][ T8142] delete_channel: no stack [ 121.032866][ T8142] delete_channel: no stack [ 121.038172][ T8142] delete_channel: no stack [ 121.043086][ T8142] delete_channel: no stack [ 121.048539][ T8142] delete_channel: no stack [ 121.053996][ T8142] delete_channel: no stack [ 121.069673][ T8163] syzkaller0: entered promiscuous mode [ 121.077525][ T8163] syzkaller0: entered allmulticast mode [ 121.094701][ T8142] delete_channel: no stack [ 121.099839][ T8142] delete_channel: no stack [ 121.115675][ T8142] delete_channel: no stack [ 121.133389][ T8142] delete_channel: no stack [ 121.138802][ T8142] delete_channel: no stack [ 121.148336][ T8142] delete_channel: no stack [ 121.153087][ T8142] delete_channel: no stack [ 121.162432][ T8142] delete_channel: no stack [ 121.170175][ T8142] delete_channel: no stack [ 121.175126][ T8142] delete_channel: no stack [ 121.179878][ T8142] delete_channel: no stack [ 121.185397][ T8142] delete_channel: no stack [ 121.190065][ T8142] delete_channel: no stack [ 121.195529][ T8142] delete_channel: no stack [ 121.200134][ T8142] delete_channel: no stack [ 121.205445][ T8142] delete_channel: no stack [ 121.210048][ T8142] delete_channel: no stack [ 121.216769][ T8142] delete_channel: no stack [ 121.221486][ T8142] delete_channel: no stack [ 121.226905][ T8142] delete_channel: no stack [ 121.231949][ T8142] delete_channel: no stack [ 121.237284][ T8142] delete_channel: no stack [ 121.241906][ T8142] delete_channel: no stack [ 121.247117][ T8142] delete_channel: no stack [ 121.251735][ T8142] delete_channel: no stack [ 121.257177][ T8142] delete_channel: no stack [ 121.262064][ T8142] delete_channel: no stack [ 121.267200][ T8142] delete_channel: no stack [ 121.486401][ T8172] netlink: 'syz.4.551': attribute type 2 has an invalid length. [ 121.512801][ T8172] : entered promiscuous mode [ 121.547257][ T8172] netlink: 'syz.4.551': attribute type 2 has an invalid length. [ 121.568182][ T8172] : left promiscuous mode [ 121.619406][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.551'. [ 121.827119][ T8196] netlink: 60 bytes leftover after parsing attributes in process `syz.4.557'. [ 121.838770][ T8196] netlink: 60 bytes leftover after parsing attributes in process `syz.4.557'. [ 122.148282][ T8210] netlink: 'syz.4.559': attribute type 12 has an invalid length. [ 122.156239][ T8210] netlink: 'syz.4.559': attribute type 29 has an invalid length. [ 122.163960][ T8210] netlink: 148 bytes leftover after parsing attributes in process `syz.4.559'. [ 122.173246][ T8210] netlink: 59 bytes leftover after parsing attributes in process `syz.4.559'. [ 122.427412][ T8213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.561'. [ 124.411536][ T8173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.575316][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 124.598603][ T8218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'. [ 124.657341][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 124.788231][ T8218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.563'. [ 124.808838][ T8238] netlink: 'syz.0.568': attribute type 1 has an invalid length. [ 124.829724][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 124.959918][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.569'. [ 124.973841][ T8246] x_tables: unsorted underflow at hook 2 [ 125.090204][ T8254] netlink: 'syz.0.573': attribute type 21 has an invalid length. [ 125.099088][ T8254] netlink: 128 bytes leftover after parsing attributes in process `syz.0.573'. [ 125.109268][ T8254] netlink: 'syz.0.573': attribute type 5 has an invalid length. [ 125.123401][ T8254] netlink: 'syz.0.573': attribute type 6 has an invalid length. [ 125.162477][ T8254] netlink: 3 bytes leftover after parsing attributes in process `syz.0.573'. [ 125.331792][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 125.376222][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 125.641019][ T8296] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 125.641019][ T8296] Please contact the netfilter-devel mailing list or update your nftables rules. [ 125.794623][ T8310] netlink: 'syz.1.583': attribute type 1 has an invalid length. [ 125.916666][ T8310] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 126.172555][ T8331] bond2: option ad_select: invalid value (34) [ 126.202809][ T8331] bond2 (unregistering): Released all slaves [ 126.546915][ T8350] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 127.310742][ T8375] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 127.627766][ T8391] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 127.918501][ T8399] netlink: 'syz.1.609': attribute type 10 has an invalid length. [ 127.933275][ T8402] ipvlan2: entered allmulticast mode [ 127.945394][ T8402] syz_tun: entered allmulticast mode [ 127.998480][ T8399] syz_tun: entered promiscuous mode [ 128.011172][ T8399] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 128.087658][ T8408] bridge1: entered promiscuous mode [ 128.093098][ T8408] bridge1: entered allmulticast mode [ 128.108971][ T8408] team0: Failed to send port change of device bridge1 via netlink (err -105) [ 128.118422][ T8408] team0: Failed to send options change via netlink (err -105) [ 128.128284][ T8408] team0: Port device bridge1 added [ 128.310047][ T8421] syzkaller0: entered promiscuous mode [ 128.315852][ T8421] syzkaller0: entered allmulticast mode [ 128.330497][ T8421] TC_ACT_REPEAT abuse ? [ 131.490572][ T8431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.790438][ T8487] bond3: option miimon: invalid value (18446744073709551607) [ 131.798843][ T8487] bond3: option miimon: allowed values 0 - 2147483647 [ 131.857590][ T8487] bond3 (unregistering): Released all slaves [ 131.945865][ T8499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.124075][ T8517] __nla_validate_parse: 14 callbacks suppressed [ 132.124094][ T8517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.632'. [ 132.259310][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 132.477180][ T8528] netlink: 40 bytes leftover after parsing attributes in process `syz.2.634'. [ 132.912381][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.943200][ T8546] team_slave_0: entered promiscuous mode [ 132.949153][ T8546] team_slave_1: entered promiscuous mode [ 132.980784][ T8546] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 133.845798][ T8614] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 133.884462][ T8614] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 134.063576][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 134.064362][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 134.104772][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.657'. [ 134.113987][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.657'. [ 136.122670][ T8570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.242703][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 136.387526][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 136.537597][ T8654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.670'. [ 136.661175][ T8663] netlink: 'syz.1.667': attribute type 9 has an invalid length. [ 136.793678][ T8660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.866864][ T8666] macsec2: entered allmulticast mode [ 136.872365][ T8666] bond2: entered allmulticast mode [ 136.900104][ T8666] bond2: left allmulticast mode [ 136.995776][ T8678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.158351][ T8694] netlink: 'syz.4.682': attribute type 1 has an invalid length. [ 137.167152][ T8694] __nla_validate_parse: 6 callbacks suppressed [ 137.167167][ T8694] netlink: 228 bytes leftover after parsing attributes in process `syz.4.682'. [ 137.206407][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 137.217072][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 137.318858][ T8702] netlink: 576 bytes leftover after parsing attributes in process `syz.1.684'. [ 137.385430][ T5208] block nbd0: Connection timed out, retrying (0/2 alive) [ 137.395354][ T5208] block nbd0: Connection timed out, retrying (0/2 alive) [ 137.402668][ T5208] block nbd0: Connection timed out, retrying (0/2 alive) [ 137.410801][ T5208] block nbd0: Connection timed out, retrying (0/2 alive) [ 137.422147][ T11] block nbd0: Dead connection, failed to find a fallback [ 137.430858][ T11] block nbd0: shutting down sockets [ 137.437672][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.449651][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 137.457986][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.468294][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 137.476547][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.486391][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 137.494460][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.505081][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 137.515212][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.526950][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 137.535120][ T5837] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.544774][ T5837] Buffer I/O error on dev nbd0, logical block 1, async page read [ 137.552572][ T5837] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.562406][ T5837] Buffer I/O error on dev nbd0, logical block 2, async page read [ 137.570792][ T5837] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.580729][ T5837] Buffer I/O error on dev nbd0, logical block 3, async page read [ 137.588810][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.598543][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 137.606442][ T5837] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.616691][ T5837] Buffer I/O error on dev nbd0, logical block 1, async page read [ 137.625510][ T5837] ldm_validate_partition_table(): Disk read failed. [ 137.633463][ T5837] Dev nbd0: unable to read RDB block 0 [ 137.639684][ T5837] nbd0: unable to read partition table [ 137.651649][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 137.652421][ T5837] ldm_validate_partition_table(): Disk read failed. [ 137.679807][ T5837] Dev nbd0: unable to read RDB block 0 [ 137.699245][ T5837] nbd0: unable to read partition table [ 138.275348][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.694'. [ 138.298715][ T8756] netlink: 'syz.2.694': attribute type 8 has an invalid length. [ 138.318208][ T8756] netlink: 96 bytes leftover after parsing attributes in process `syz.2.694'. [ 139.303033][ T8810] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 139.329758][ T8810] bond3 (unregistering): Released all slaves [ 139.695790][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.715'. [ 139.710628][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.715'. [ 139.859577][ T8822] delete_channel: no stack [ 140.107463][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 140.116894][ T8841] openvswitch: netlink: Missing key (keys=40, expected=80) [ 140.248955][ T8853] netlink: 'syz.2.725': attribute type 10 has an invalid length. [ 140.270010][ T8853] dummy0: entered promiscuous mode [ 140.279484][ T8853] team0: Port device dummy0 added [ 140.423504][ T8863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 140.525246][ T8863] team0: No ports can be present during mode change [ 140.654307][ T30] audit: type=1800 audit(1775754740.713:3): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.731" name="memory.events" dev="tmpfs" ino=718 res=0 errno=0 [ 140.854562][ T30] audit: type=1804 audit(1775754740.713:4): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.731" name="/newroot/137/memory.events" dev="tmpfs" ino=718 res=1 errno=0 [ 140.985771][ T8891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.339238][ T8966] __nla_validate_parse: 4 callbacks suppressed [ 142.339256][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.755'. [ 142.771910][ T8993] tipc: Enabled bearer , priority 0 [ 142.829542][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.766'. [ 142.944907][ T9005] tipc: Resetting bearer [ 143.030261][ T9005] vlan3: entered allmulticast mode [ 143.036765][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'. [ 143.044514][ T9005] bridge0: port 3(vlan3) entered blocking state [ 143.052132][ T9005] bridge0: port 3(vlan3) entered disabled state [ 143.063144][ T9005] vlan3: entered promiscuous mode [ 143.076088][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 143.169255][ T9016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.771'. [ 143.220037][ T9016] team0: No ports can be present during mode change [ 143.376029][ T9027] netlink: 32 bytes leftover after parsing attributes in process `syz.3.774'. [ 143.510257][ T9031] openvswitch: netlink: Missing key (keys=40, expected=80) [ 143.610394][ T9035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.777'. [ 143.624923][ T9035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.777'. [ 143.639839][ T9035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.777'. [ 143.682096][ T9037] tun0: tun_chr_ioctl cmd 1074025672 [ 143.692345][ T9037] tun0: ignored: set checksum disabled [ 143.760967][ T9044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.834411][ T7974] tipc: Node number set to 3758096385 [ 143.922209][ T9048] pimreg: tun_chr_ioctl cmd 2147767520 [ 143.928538][ T9048] pimreg: tun_chr_ioctl cmd 35604 [ 143.955172][ T9048] pimreg: tun_chr_ioctl cmd 35605 [ 143.955277][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 144.143797][ T9072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.152776][ T9078] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 144.571923][ T9109] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 144.607044][ T9109] netlink: 'syz.3.799': attribute type 2 has an invalid length. [ 144.709479][ T9112] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 144.937828][ T9120] hsr_slave_1 (unregistering): left promiscuous mode [ 145.124835][ T9139] netlink: 'syz.2.807': attribute type 13 has an invalid length. [ 145.157628][ T9139] netlink: 'syz.2.807': attribute type 17 has an invalid length. [ 145.165363][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.173204][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.228676][ T9133] team_slave_0: left promiscuous mode [ 145.246461][ T9133] team_slave_1: left promiscuous mode [ 145.255031][ T9133] dummy0: left promiscuous mode [ 145.297860][ T9133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.308623][ T9133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.908938][ T9143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.944291][ T9143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.063364][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.073800][ T9139] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.088975][ T9139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.114797][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.128767][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.154669][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.176074][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.214504][ T9143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.230796][ T9143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.297942][ T34] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.308260][ T34] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.320591][ T34] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.335079][ T34] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.419761][ T9143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.450080][ T9143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.480696][ T9169] netlink: 'syz.4.818': attribute type 1 has an invalid length. [ 146.550640][ T9143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.564325][ T9143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.810640][ T34] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.823448][ T34] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.833438][ T34] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.842052][ T34] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.905149][ T9181] block nbd0: reconnected socket [ 146.915339][ T9181] netlink: 'syz.0.821': attribute type 3 has an invalid length. [ 146.946782][ T34] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.950786][ T9181] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 146.970160][ T34] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.004315][ T34] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.039374][ T34] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.230503][ T5833] block nbd0: Receive control failed (result -32) [ 147.376311][ T9202] __nla_validate_parse: 11 callbacks suppressed [ 147.376331][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 147.648526][ T9212] netlink: 'syz.1.829': attribute type 21 has an invalid length. [ 147.768419][ T9191] erspan0: entered promiscuous mode [ 147.778954][ T9191] erspan0: left promiscuous mode [ 148.945827][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 148.967470][ T9263] netlink: 'syz.1.843': attribute type 1 has an invalid length. [ 149.008911][ T9265] netlink: 216 bytes leftover after parsing attributes in process `syz.3.841'. [ 149.025291][ T9265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.841'. [ 149.048123][ T9265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.841'. [ 149.057199][ T9263] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.147091][ T9266] bond4: (slave veth7): Enslaving as an active interface with a down link [ 149.230469][ T9267] bond4: (slave veth9): Enslaving as an active interface with a down link [ 149.426290][ T9283] netlink: 48 bytes leftover after parsing attributes in process `syz.1.845'. [ 149.937442][ T9295] macvlan0: entered allmulticast mode [ 150.093898][ T9298] netlink: 48 bytes leftover after parsing attributes in process `syz.3.850'. [ 150.107853][ T9298] syzkaller0: entered promiscuous mode [ 150.113525][ T9298] syzkaller0: entered allmulticast mode [ 150.191904][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 150.204357][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 150.740263][ T9321] vlan4: entered allmulticast mode [ 150.780523][ T9321] bond0: entered allmulticast mode [ 150.789825][ T9327] xt_cgroup: invalid path, errno=-2 [ 150.808557][ T9321] bond_slave_0: entered allmulticast mode [ 150.825093][ T9321] bond_slave_1: entered allmulticast mode [ 150.842700][ T9325] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 150.871888][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 150.975761][ T1039] [ 150.978126][ T1039] ====================================================== [ 150.985147][ T1039] WARNING: possible circular locking dependency detected [ 150.992193][ T1039] syzkaller #0 Not tainted [ 150.996598][ T1039] ------------------------------------------------------ [ 151.003597][ T1039] kworker/u8:7/1039 is trying to acquire lock: [ 151.009732][ T1039] ffffffff8e85db68 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 151.019307][ T1039] [ 151.019307][ T1039] but task is already holding lock: [ 151.026755][ T1039] ffffffff8e5fcd08 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9ef/0x1e90 [ 151.036144][ T1039] [ 151.036144][ T1039] which lock already depends on the new lock. [ 151.036144][ T1039] [ 151.046544][ T1039] [ 151.046544][ T1039] the existing dependency chain (in reverse order) is: [ 151.055580][ T1039] [ 151.055580][ T1039] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 151.063040][ T1039] __mutex_lock+0x19f/0x1300 [ 151.068153][ T1039] __alloc_workqueue+0x9ef/0x1e90 [ 151.073684][ T1039] alloc_workqueue_noprof+0xe3/0x210 [ 151.079470][ T1039] padata_alloc+0xc1/0x370 [ 151.084486][ T1039] pcrypt_init_padata+0x27/0x100 [ 151.089935][ T1039] pcrypt_init+0x60/0xc0 [ 151.094685][ T1039] do_one_initcall+0x250/0x8d0 [ 151.099958][ T1039] do_initcall_level+0x104/0x190 [ 151.105417][ T1039] do_initcalls+0x59/0xa0 [ 151.110278][ T1039] kernel_init_freeable+0x2a6/0x3e0 [ 151.116096][ T1039] kernel_init+0x1d/0x1d0 [ 151.120930][ T1039] ret_from_fork+0x51e/0xb90 [ 151.126026][ T1039] ret_from_fork_asm+0x1a/0x30 [ 151.131301][ T1039] [ 151.131301][ T1039] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 151.139164][ T1039] cpus_read_lock+0x42/0x160 [ 151.144273][ T1039] static_key_slow_inc+0x12/0x30 [ 151.149810][ T1039] nbd_genl_reconfigure+0x132f/0x1ea0 [ 151.155692][ T1039] genl_family_rcv_msg_doit+0x22a/0x330 [ 151.161747][ T1039] genl_rcv_msg+0x61c/0x7a0 [ 151.166761][ T1039] netlink_rcv_skb+0x232/0x4b0 [ 151.172114][ T1039] genl_rcv+0x28/0x40 [ 151.176604][ T1039] netlink_unicast+0x80f/0x9b0 [ 151.181873][ T1039] netlink_sendmsg+0x813/0xb40 [ 151.187203][ T1039] ____sys_sendmsg+0x972/0x9f0 [ 151.192485][ T1039] ___sys_sendmsg+0x2a5/0x360 [ 151.197757][ T1039] __x64_sys_sendmsg+0x1bd/0x2a0 [ 151.203200][ T1039] do_syscall_64+0x14d/0xf80 [ 151.208300][ T1039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.214704][ T1039] [ 151.214704][ T1039] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 151.222334][ T1039] __mutex_lock+0x19f/0x1300 [ 151.227448][ T1039] nbd_queue_rq+0x37b/0x1100 [ 151.232565][ T1039] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 151.238683][ T1039] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 151.245517][ T1039] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 151.252005][ T1039] blk_mq_run_hw_queue+0x348/0x4f0 [ 151.258101][ T1039] blk_mq_dispatch_list+0xd16/0xe10 [ 151.263900][ T1039] blk_mq_flush_plug_list+0x48d/0x570 [ 151.269869][ T1039] __blk_flush_plug+0x3ed/0x4d0 [ 151.275228][ T1039] __submit_bio+0x28d/0x580 [ 151.280342][ T1039] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 151.286660][ T1039] block_read_full_folio+0x599/0x830 [ 151.292454][ T1039] filemap_read_folio+0x137/0x3b0 [ 151.297986][ T1039] do_read_cache_folio+0x358/0x590 [ 151.303791][ T1039] read_part_sector+0xb6/0x2b0 [ 151.309323][ T1039] adfspart_check_ICS+0xa5/0xa40 [ 151.314856][ T1039] bdev_disk_changed+0x7ba/0x1550 [ 151.320409][ T1039] blkdev_get_whole+0x380/0x510 [ 151.326032][ T1039] bdev_open+0x31e/0xd30 [ 151.330778][ T1039] blkdev_open+0x470/0x610 [ 151.335701][ T1039] do_dentry_open+0x785/0x14e0 [ 151.340975][ T1039] vfs_open+0x3b/0x340 [ 151.345671][ T1039] path_openat+0x2e08/0x3860 [ 151.350940][ T1039] do_file_open+0x23e/0x4a0 [ 151.355972][ T1039] do_sys_openat2+0x113/0x200 [ 151.361300][ T1039] __x64_sys_openat+0x138/0x170 [ 151.366691][ T1039] do_syscall_64+0x14d/0xf80 [ 151.371883][ T1039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.378292][ T1039] [ 151.378292][ T1039] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 151.385495][ T1039] __mutex_lock+0x19f/0x1300 [ 151.390640][ T1039] nbd_queue_rq+0xc6/0x1100 [ 151.395690][ T1039] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 151.401851][ T1039] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 151.408717][ T1039] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 151.415216][ T1039] blk_mq_run_hw_queue+0x348/0x4f0 [ 151.420928][ T1039] blk_mq_dispatch_list+0xd16/0xe10 [ 151.426633][ T1039] blk_mq_flush_plug_list+0x48d/0x570 [ 151.432514][ T1039] __blk_flush_plug+0x3ed/0x4d0 [ 151.437966][ T1039] __submit_bio+0x28d/0x580 [ 151.443064][ T1039] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 151.449290][ T1039] block_read_full_folio+0x599/0x830 [ 151.455094][ T1039] filemap_read_folio+0x137/0x3b0 [ 151.460628][ T1039] do_read_cache_folio+0x358/0x590 [ 151.466335][ T1039] read_part_sector+0xb6/0x2b0 [ 151.471712][ T1039] adfspart_check_ICS+0xa5/0xa40 [ 151.477275][ T1039] bdev_disk_changed+0x7ba/0x1550 [ 151.482804][ T1039] blkdev_get_whole+0x380/0x510 [ 151.488178][ T1039] bdev_open+0x31e/0xd30 [ 151.493011][ T1039] blkdev_open+0x470/0x610 [ 151.497960][ T1039] do_dentry_open+0x785/0x14e0 [ 151.503334][ T1039] vfs_open+0x3b/0x340 [ 151.507997][ T1039] path_openat+0x2e08/0x3860 [ 151.513183][ T1039] do_file_open+0x23e/0x4a0 [ 151.518275][ T1039] do_sys_openat2+0x113/0x200 [ 151.523476][ T1039] __x64_sys_openat+0x138/0x170 [ 151.528840][ T1039] do_syscall_64+0x14d/0xf80 [ 151.533940][ T1039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.540398][ T1039] [ 151.540398][ T1039] -> #4 (set->srcu){.+.+}-{0:0}: [ 151.547521][ T1039] __synchronize_srcu+0xca/0x300 [ 151.552983][ T1039] elevator_switch+0x1e8/0x7a0 [ 151.558374][ T1039] elevator_change+0x2cc/0x450 [ 151.563754][ T1039] elevator_set_default+0x36c/0x430 [ 151.569476][ T1039] blk_register_queue+0x366/0x430 [ 151.575086][ T1039] __add_disk+0x677/0xd50 [ 151.579927][ T1039] add_disk_fwnode+0xfb/0x480 [ 151.585276][ T1039] nbd_dev_add+0x72c/0xb50 [ 151.590211][ T1039] nbd_init+0x168/0x1f0 [ 151.594978][ T1039] do_one_initcall+0x250/0x8d0 [ 151.600257][ T1039] do_initcall_level+0x104/0x190 [ 151.605870][ T1039] do_initcalls+0x59/0xa0 [ 151.610701][ T1039] kernel_init_freeable+0x2a6/0x3e0 [ 151.616495][ T1039] kernel_init+0x1d/0x1d0 [ 151.621346][ T1039] ret_from_fork+0x51e/0xb90 [ 151.626794][ T1039] ret_from_fork_asm+0x1a/0x30 [ 151.632096][ T1039] [ 151.632096][ T1039] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 151.640243][ T1039] __mutex_lock+0x19f/0x1300 [ 151.645576][ T1039] elevator_change+0x1b3/0x450 [ 151.650955][ T1039] elevator_set_none+0xb5/0x140 [ 151.656329][ T1039] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 151.662929][ T1039] nbd_start_device+0x17f/0xb10 [ 151.668469][ T1039] nbd_genl_connect+0x165b/0x1cf0 [ 151.674010][ T1039] genl_family_rcv_msg_doit+0x22a/0x330 [ 151.680280][ T1039] genl_rcv_msg+0x61c/0x7a0 [ 151.685572][ T1039] netlink_rcv_skb+0x232/0x4b0 [ 151.690853][ T1039] genl_rcv+0x28/0x40 [ 151.695368][ T1039] netlink_unicast+0x80f/0x9b0 [ 151.700651][ T1039] netlink_sendmsg+0x813/0xb40 [ 151.706010][ T1039] ____sys_sendmsg+0x972/0x9f0 [ 151.711288][ T1039] ___sys_sendmsg+0x2a5/0x360 [ 151.716750][ T1039] __x64_sys_sendmsg+0x1bd/0x2a0 [ 151.722285][ T1039] do_syscall_64+0x14d/0xf80 [ 151.727385][ T1039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.733901][ T1039] [ 151.733901][ T1039] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 151.742677][ T1039] blk_alloc_queue+0x546/0x680 [ 151.747990][ T1039] __blk_mq_alloc_disk+0x197/0x390 [ 151.753626][ T1039] nbd_dev_add+0x499/0xb50 [ 151.758563][ T1039] nbd_init+0x168/0x1f0 [ 151.763223][ T1039] do_one_initcall+0x250/0x8d0 [ 151.768581][ T1039] do_initcall_level+0x104/0x190 [ 151.774026][ T1039] do_initcalls+0x59/0xa0 [ 151.778855][ T1039] kernel_init_freeable+0x2a6/0x3e0 [ 151.784660][ T1039] kernel_init+0x1d/0x1d0 [ 151.789497][ T1039] ret_from_fork+0x51e/0xb90 [ 151.794669][ T1039] ret_from_fork_asm+0x1a/0x30 [ 151.800036][ T1039] [ 151.800036][ T1039] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 151.807231][ T1039] fs_reclaim_acquire+0x71/0x100 [ 151.812678][ T1039] prepare_alloc_pages+0x152/0x650 [ 151.818292][ T1039] __alloc_frozen_pages_noprof+0x12f/0x380 [ 151.824604][ T1039] __alloc_pages_noprof+0xa/0x30 [ 151.830220][ T1039] pcpu_populate_chunk+0x182/0xb30 [ 151.836014][ T1039] pcpu_alloc_noprof+0xc6c/0x19c0 [ 151.841551][ T1039] xt_percpu_counter_alloc+0x161/0x220 [ 151.847517][ T1039] translate_table+0x134a/0x2110 [ 151.852960][ T1039] ipt_register_table+0x11b/0x7f0 [ 151.858495][ T1039] iptable_raw_table_init+0x54/0x80 [ 151.864296][ T1039] xt_find_table_lock+0x30c/0x3e0 [ 151.869829][ T1039] xt_request_find_table_lock+0x26/0x100 [ 151.876164][ T1039] do_ipt_get_ctl+0x716/0x1240 [ 151.881522][ T1039] nf_getsockopt+0x26e/0x290 [ 151.886617][ T1039] ip_getsockopt+0x19e/0x230 [ 151.891714][ T1039] do_sock_getsockopt+0x2d3/0x3f0 [ 151.897342][ T1039] __x64_sys_getsockopt+0x1a4/0x240 [ 151.903048][ T1039] do_syscall_64+0x14d/0xf80 [ 151.908147][ T1039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.914617][ T1039] [ 151.914617][ T1039] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 151.922334][ T1039] __lock_acquire+0x15a5/0x2cf0 [ 151.927789][ T1039] lock_acquire+0xf0/0x2e0 [ 151.932731][ T1039] __mutex_lock+0x19f/0x1300 [ 151.937932][ T1039] pcpu_alloc_noprof+0x218/0x19c0 [ 151.943475][ T1039] __alloc_workqueue+0xa81/0x1e90 [ 151.949009][ T1039] alloc_workqueue_noprof+0xe3/0x210 [ 151.954884][ T1039] __rds_conn_create+0x134b/0x22d0 [ 151.960607][ T1039] rds_conn_create+0x43/0x60 [ 151.965718][ T1039] rds_tcp_accept_one+0x46b/0xd50 [ 151.971260][ T1039] rds_tcp_accept_worker+0x1d/0x70 [ 151.976886][ T1039] process_scheduled_works+0xb6e/0x18c0 [ 151.983045][ T1039] worker_thread+0xa53/0xfc0 [ 151.988329][ T1039] kthread+0x388/0x470 [ 151.992910][ T1039] ret_from_fork+0x51e/0xb90 [ 151.998010][ T1039] ret_from_fork_asm+0x1a/0x30 [ 152.003464][ T1039] [ 152.003464][ T1039] other info that might help us debug this: [ 152.003464][ T1039] [ 152.013707][ T1039] Chain exists of: [ 152.013707][ T1039] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 152.013707][ T1039] [ 152.026733][ T1039] Possible unsafe locking scenario: [ 152.026733][ T1039] [ 152.034175][ T1039] CPU0 CPU1 [ 152.039631][ T1039] ---- ---- [ 152.044987][ T1039] lock(wq_pool_mutex); [ 152.049253][ T1039] lock(cpu_hotplug_lock); [ 152.056793][ T1039] lock(wq_pool_mutex); [ 152.063649][ T1039] lock(pcpu_alloc_mutex); [ 152.068208][ T1039] [ 152.068208][ T1039] *** DEADLOCK *** [ 152.068208][ T1039] [ 152.076623][ T1039] 4 locks held by kworker/u8:7/1039: [ 152.081898][ T1039] #0: ffff888031c6f148 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 152.092762][ T1039] #1: ffffc900048cfc40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 152.105445][ T1039] #2: ffff888034ca6e68 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xae/0xd50 [ 152.116677][ T1039] #3: ffffffff8e5fcd08 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9ef/0x1e90 [ 152.126768][ T1039] [ 152.126768][ T1039] stack backtrace: [ 152.132647][ T1039] CPU: 0 UID: 0 PID: 1039 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 152.132662][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 152.132671][ T1039] Workqueue: krdsd rds_tcp_accept_worker [ 152.132690][ T1039] Call Trace: [ 152.132697][ T1039] [ 152.132705][ T1039] dump_stack_lvl+0xe8/0x150 [ 152.132724][ T1039] print_circular_bug+0x2e1/0x300 [ 152.132744][ T1039] check_noncircular+0x12e/0x150 [ 152.132764][ T1039] __lock_acquire+0x15a5/0x2cf0 [ 152.132780][ T1039] ? trace_sched_exit_tp+0x3a/0x150 [ 152.132796][ T1039] ? __lock_acquire+0x6b5/0x2cf0 [ 152.132812][ T1039] ? __lock_acquire+0x6b5/0x2cf0 [ 152.132828][ T1039] lock_acquire+0xf0/0x2e0 [ 152.132842][ T1039] ? pcpu_alloc_noprof+0x218/0x19c0 [ 152.132859][ T1039] __mutex_lock+0x19f/0x1300 [ 152.132875][ T1039] ? pcpu_alloc_noprof+0x218/0x19c0 [ 152.132891][ T1039] ? pcpu_alloc_noprof+0x218/0x19c0 [ 152.132904][ T1039] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 152.132918][ T1039] ? lockdep_hardirqs_on+0x7a/0x110 [ 152.132934][ T1039] ? __pfx___mutex_lock+0x10/0x10 [ 152.132949][ T1039] ? __mutex_lock+0xd09/0x1300 [ 152.132967][ T1039] ? __alloc_workqueue+0x9ef/0x1e90 [ 152.132981][ T1039] pcpu_alloc_noprof+0x218/0x19c0 [ 152.132994][ T1039] ? rcu_is_watching+0x15/0xb0 [ 152.133011][ T1039] ? __kasan_kmalloc+0x93/0xb0 [ 152.133026][ T1039] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 152.133042][ T1039] __alloc_workqueue+0xa81/0x1e90 [ 152.133059][ T1039] alloc_workqueue_noprof+0xe3/0x210 [ 152.133071][ T1039] ? pcpu_alloc+0x10/0x360 [ 152.133090][ T1039] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 152.133104][ T1039] ? mutex_init_lockep+0xf9/0x130 [ 152.133123][ T1039] __rds_conn_create+0x134b/0x22d0 [ 152.133136][ T1039] ? __rds_conn_create+0x2e4/0x22d0 [ 152.133158][ T1039] ? __pfx___rds_conn_create+0x10/0x10 [ 152.133171][ T1039] ? __ipv6_chk_addr_and_flags+0x686/0x7e0 [ 152.133186][ T1039] ? __ipv6_chk_addr_and_flags+0x187/0x7e0 [ 152.133204][ T1039] rds_conn_create+0x43/0x60 [ 152.133218][ T1039] rds_tcp_accept_one+0x46b/0xd50 [ 152.133233][ T1039] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 152.133250][ T1039] rds_tcp_accept_worker+0x1d/0x70 [ 152.133262][ T1039] ? process_scheduled_works+0xa8d/0x18c0 [ 152.133277][ T1039] process_scheduled_works+0xb6e/0x18c0 [ 152.133301][ T1039] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.133318][ T1039] ? assign_work+0x3d5/0x5e0 [ 152.133334][ T1039] worker_thread+0xa53/0xfc0 [ 152.133356][ T1039] kthread+0x388/0x470 [ 152.133368][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 152.133383][ T1039] ? __pfx_kthread+0x10/0x10 [ 152.133394][ T1039] ret_from_fork+0x51e/0xb90 [ 152.133412][ T1039] ? __pfx_ret_from_fork+0x10/0x10 [ 152.133426][ T1039] ? __switch_to+0xc7d/0x1450 [ 152.133441][ T1039] ? __pfx_kthread+0x10/0x10 [ 152.133452][ T1039] ret_from_fork_asm+0x1a/0x30 [ 152.133473][ T1039] [ 152.498557][ T9345] __nla_validate_parse: 1 callbacks suppressed [ 152.498577][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 152.556789][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 152.565916][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'.