last executing test programs: 4.383259123s ago: executing program 2 (id=3751): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 4.242419805s ago: executing program 2 (id=3752): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x8000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f000000a100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f000000b140)={0x0, 0x0, &(0x7f000000b100)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf250f000000280001800800030002000000140002006261746164763000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="6202f66b97178ba6f9f677a2620dbbb64f261941cf96"], 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20004000) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000340)={'mangle\x00', 0x0, [0x3, 0x10000, 0x3, 0x5, 0x6]}, &(0x7f00000003c0)=0x54) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "a54696a0d5a81dd4", "cb828498fa745f30316aeee5b82eba86806778a81712bc27e01e092e2c2514fe", "6cc8d75e", "9e7ff2ded0a0d8bd"}, 0x38) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="8400000010001ffffcfffffffddbd9017628eef1b8a70c3c63ac", @ANYRES32=0x0, @ANYBLOB="00000100000000005c001280090001007866726d000000004c000280080001000400000008000100030000000800020001000000080002000100000008000200010000000800010001000000080012000200000800010000000000080001000300000008000a0000", @ANYRES32=r1, @ANYRESHEX=0x0], 0x84}}, 0x0) 4.134423251s ago: executing program 0 (id=3754): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f00000018c0)="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", 0x1000}, {&(0x7f0000001380)="625acd8f38fb2d83d2e0aa839a894c77c03015b83731793e2a2fa534307fbbf2c990592cb642f557ecb70bbe625ae3248727161901baaa286f0cd36aafeb5c1d487e8506490fe0616a2af6"}], 0x4b) r1 = socket(0x2a, 0x5, 0x3) bind(r1, &(0x7f0000000380)=@nl=@unspec, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) unshare(0x20040600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="183000000000030000009700deffffff0000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) writev(r0, &(0x7f0000000240)=[{&(0x7f00000018c0)="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", 0x1000}, {&(0x7f0000001380)="625acd8f38fb2d83d2e0aa839a894c77c03015b83731793e2a2fa534307fbbf2c990592cb642f557ecb70bbe625ae3248727161901baaa286f0cd36aafeb5c1d487e8506490fe0616a2af6"}], 0x4b) (async) socket(0x2a, 0x5, 0x3) (async) bind(r1, &(0x7f0000000380)=@nl=@unspec, 0x80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async) unshare(0x20040600) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="183000000000030000009700deffffff0000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) 3.914024185s ago: executing program 0 (id=3756): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x0, 0x5, 0x4, 0x10}, @generic={0x8, 0x2, 0x2, 0xd4, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xb}, {0x0, 0x5, 0x5, 0xc}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000840)={r1, r4}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28", 0xa6}], 0x1}}], 0x2, 0x2090) socket(0x2, 0x80805, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x70}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) 3.852955361s ago: executing program 2 (id=3757): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084002560c2a09800000500000000000000030000002000000000dff3cd3c0000000000000007000002040000", @ANYRES32=0x0], 0x38, 0x8844}], 0x1, 0x4008080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="08000700ac"], 0x2c}, 0x1, 0xffffff7f}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x7, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x13, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r9, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010094381e166af1e9c703000000403390802c0004fe13000100020000000000000000000009000000b9327c9700020000000000000000000009000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) 3.542978356s ago: executing program 0 (id=3761): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r14, r10, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r15) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) 3.306996938s ago: executing program 3 (id=3763): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000001c0)={0x3, 'team_slave_0\x00', {0xff}, 0x5}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1881982e", @ANYRES16=r6, @ANYBLOB="04002abd7000fbdbdf252100000009001f007068793200000000"], 0x20}, 0x1, 0x0, 0x0, 0x24048041}, 0x2001) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r5) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="040002"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2c, 0x0, @gue={{0x1, 0x0, 0x2, 0x7, 0x8106, @void}, "134a318536459f4c076600"/32}}}}}}}, 0x52) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="39fb030300"/14, 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.985628454s ago: executing program 2 (id=3767): r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000108004580001c00000000002f907800000000e00000012008000b00089078"], 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000002c0), &(0x7f0000000240)=r3}, 0x20) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x439, 0x70bd26, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x249b, 0x24}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2c008014}, 0x4040) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) getsockopt$sock_buf(r5, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804b2e7989e14f088a8", 0x0, 0x4fd, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000280)={0x1f, @fixed}, 0x8) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$bt_BT_VOICE(r8, 0x112, 0x13, 0x0, 0x2) bind$phonet(r0, &(0x7f00000000c0)={0x23, 0x2, 0x9, 0x7a}, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) unshare(0xa020480) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000003c0), &(0x7f0000000440)=0x4) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000380)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) r10 = socket(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xff22) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 2.948062695s ago: executing program 0 (id=3769): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x2, 0x4) sendmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)="b1b70e1e7c709d44a654032a137645d37c92f60f38fd7175e639fbc4e5fcbc1b90748d87f225bea34e38e5847913", 0x2e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@ipv6_delrule={0x2c, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x2c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.822027887s ago: executing program 2 (id=3771): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0xc000) (async) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3}, 0x8) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40080) r5 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b000000018000100000000000000000002000000000000090000000006001500040000008c0016808800088084000180"], 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x4) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001ec0)={{r0, &(0x7f00000002c0)='(](}\x00', 0x400000, &(0x7f0000000300)={@_ha_fsid={[0x5, 0x2]}, {0x0, 0x1, 0x8001, 0x10000}}, 0x7, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x3ff}, 0x9, &(0x7f0000001d80)=[{0x2, 0x8001, &(0x7f00000003c0)='\x00', &(0x7f0000001500)="11ac5430830eb9e0b1e248ae9a571f7072fb09d96ac1a4cc1469683932230a4782fbfb3a10c981084b16f69fd40a369a99c6b8f7e64b0d7b862479c61b287818334da97d20ad47a117f7796732550d487a22c628baaee80619865fdcd6dd661da53cd436fbfa553b9b343da309a4befdf9c13124591355cf295a0032c367fb7aa10a49c358b86aafcfaafbecbcacc7e2bde3011dd4c248cf564022d01bec0643c18b9eabd17fb4d32617fddc4d756a12eed2919504de7c9753e00e1c34cc916ec820eb7086f4e7dad5a23979750fdb", 0xcf, 0x12}, {0x2, 0xb, &(0x7f0000001600)=']^\x00', &(0x7f0000001640)="700ca4f21e30154ab6ee61dc17e9bf7e354ae8acd58147d2f3fc96301f77242a9f29ad6673aa34cf5167cf1244b28c753db031afccf4848899e08c3108cd66380d379d45282fae9a85d4fb", 0x4b, 0x2}, {0x2, 0xfffffff8, &(0x7f00000016c0)='\'\x86^)\x00', &(0x7f0000001700)="b579c190c049979e2f98c5e7a7269c498ea2c9843e9b309229ae88ccc8b4cd4ed0879897d37551b53317cfa81b37c55ffeb7649d8e488e6f7b0fb2a689347a89bcb80b04ed7e121a1ec2f66379077f4d8d646aa06e9139a7be5ba4d56c3536b3ef47dcbef20ee7cc4807e785ee73f0e27f59d908a05eb9b27c63605e490b2cffac", 0x81, 0x30}, {0x2, 0x2, &(0x7f00000017c0)='\']\x00', &(0x7f0000001800)="cdf2490e2165248f18abae39f874da44cbca7bf3c30b8bfaf17818ef8fdd6154cf9cc7036f893ceec57f334ddfd01dc33b6ca808c8afb928ba6e74fc74e1c9b55d6557", 0x43}, {0x3, 0x2, &(0x7f0000001880)='\x00', &(0x7f00000018c0)="10f8034b87cd84629b8e2bef449d55ec4634a5faedb1f6e08b4076d295975095ea1eb3f4b3cb901a992ad2d6b1292ee75f84419d8f7435c959e2a66f17d5305372494eb4c04b8d", 0x47, 0x32}, {0x2, 0x77f60bc8, &(0x7f0000001940)='\x00', &(0x7f0000001980)="e2e2549bb757f3f8f25ecf431b81ca0773452c8f3268ef80fee9c2045f0ef07aa025ed8988d691cb3f3d5822c08c7a4596b4674077957d81352091da823fcecb5740053d8abdf348e1d83e363b2626cf8bdfdb483f34c512c8224a8a9cee2f81585baa19765ae4e56038b3a55096fc84000acc75d82c43c261444fd7ee6f6a30d27e61425def65dd7075fd90d32fd20f0598c61366", 0x95, 0x2}, {0x2, 0x5, &(0x7f0000001a40)='^^', &(0x7f0000001a80)="b07aead646c3fb41ab6d6830f8c01a389de3a6ac7fc5ff6c7623829eb785ec01eb69d543c9d96c5b8625b2760709a7fed5a35e8379d146a1355044f7ca4d4068103ac77f6f13796491c6c5d3b60db11d602ac8a7f9162bf0d5f3f00dd2ac552c79f3cb4f1cdba018fa18d1bd4a4e450e75bfb9e1f0bb48b2b610d4e7a6874d1577a3bca0a539e67603b72177f118d4df43d6bb8748240a699a1b963a4bd2b8d6521f5b4db457c2e9588bc39f90c73e1d1882069bd89b7ffd58fd7ae4cbed73674376627e426ad3d4299524aa6f05245ec37ff23c8da10b6c704f83e9abbd2fcc489397fbfebe67d48a0db9", 0xeb, 0x2}, {0x3, 0x9, &(0x7f0000001b80)='.\x00', &(0x7f0000001bc0)="cc7de37d3f6856f1810da6039f0ac7379a929708afdcf16de7869a6bebc277ca42016b147eeb3158e03f5b76e8ddb70c7e37d2b32b26daa4016ddc6074a9c8c9872155bc7c603cfb16d40ded73d6", 0x4e, 0x30}, {0x3, 0x4, &(0x7f0000001c40)='[\x00', &(0x7f0000001c80)="0ec1c66021bd948df521f28cc947e27856ffe7deba443e199b875fd31ee20a831e365a4799a2fba69935948f494fdf0e9996870a6f704d68fdbfb4787da42e2bb2d02eb50d7109774f45a6b5912c740c8ea7040d6aac4aebf51bd6854102b80c6a5f6b1361f1cb4cf34982a82bf6e9219ef006b98b9f3a1570bec3c19c47f28e52b502fd3509d3518a43e097a50bc533e096f91c5c82295c0df6a70a0e90514a171b3ad6aa725541fa68af043088cdd565dbf28cda1cdccc4d8998dee26ef71e46213f65e7dcc8da27543bb8fffbe7aebe415d78066fdc0382ae20ea83", 0xdd}]}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000001f80), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, 0x0, 0x8000) (async) socket$l2tp(0x2, 0x2, 0x73) (async) recvmmsg(r6, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) (async) accept4(r6, &(0x7f0000000040)=@tipc=@id, 0x0, 0x0) 2.759435435s ago: executing program 3 (id=3773): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)={@val={0x1c, 0xf5}, @val, @mpls}, 0xe) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000004540)=0x1d, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000001c0)={r8, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="28cfc7998429c7281111020031880000280012800c0004000200000100c2800008000500", @ANYRES32=r9, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 2.569722681s ago: executing program 2 (id=3775): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1800, 0x40000, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000340)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="27031c0016001400020000000000000006e1f000000089fb00000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e4230482741bb5f641422cc4c64820ac2f2a5347abc11fb5664dc79199a73e", 0x55}, {&(0x7f0000000180)="a300000045000000008f65e3b6d6fc9a537cfe568b0bdc9d", 0x18}], 0x2}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYRESDEC=r4, @ANYRES32, @ANYRES32=r1], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffd}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r10, 0x0, 0xf3a, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000c40)=ANY=[@ANYBLOB="090000004fafc060c5a7919aba0b611c8a51e5609eb5503b0377b5cc556e8f4dbb31485c42a4ba3655045fdb5b7494ff4efcdf2a0093c772de239f32e618bd343de674e6573421d0a447ed6d73e46a0dc40d12d920c60c61c771", @ANYRESOCT=r8, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="24000000d1d9b85900000000000000b5b91a00f1", @ANYRES32=0x0, @ANYBLOB="000000000600050002000000"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000001100)={'vxcan1\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000040)={0x1d, r13, 0x8000000000000003}, 0x18) sendmsg$rds(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000000480)=""/107, 0x6b}], 0x2}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYRES64=r12, @ANYBLOB="7122137d99e543db8d59e44a7f24d42a74c056a0c925d082751bff9843dd1c6c657a15e7dc2d9a9d656b634322ecabbc652409653d8d5f89e13063a6fc1ddb6e3229e45ca44014d33425076de6d750d2c65d2af389c2b76bce9f26317f3d6d99"], 0x90}}, 0x0) 2.189764756s ago: executing program 4 (id=3778): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0xff7f, @multicast2}, 0xa) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001500)=[{&(0x7f00000002c0)="02044a00ea0e6000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8223f0ffff74c43824cee84400007ffe18c99e70d67b732f9b5702de81f5227339", 0x44}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d21609000a3164ae439862807a158983661a6d23", 0x17}, {&(0x7f0000000040)="df3b46a13300000000000000", 0xc}, {&(0x7f0000002340)="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", 0xe9a}], 0x5}, 0x40040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000166b1727370616e000018000280050016000200000006000e000000000004001200"], 0x48}}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r2, 0x8, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040), &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x10048, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a03000000000000000000000a"], 0x0, 0x3e}, 0x20) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf25160000000a000600080211000000000000000000ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x72ae890f0c7d995c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcac48dc4}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x68, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x2, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}]}}}}}}, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x20000300) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000e80)={{r1, &(0x7f0000000500)='syz1\x00', 0x2100, &(0x7f0000000540)={@align=0x9, {0x10, 0x2, 0x1, 0x2}}, 0x6, &(0x7f0000000580), &(0x7f00000005c0)=0x1}, 0x9, &(0x7f0000000d40)=[{0x2, 0x2, &(0x7f0000000600)='NET_DM\x00', &(0x7f0000000640)="a06a666c043d753e47b5a174b553e0e85cb995d5dbdb1926f5ef6ef463573a65c75994fa274225341fc76a424fe750fef6ef59d0be28ab3e4f421d23225f3c45b022cfcac552947d9bec1caf959e4b3b044cf22fac6e87dde732943cd3eb67a091711089f6a8a4a2b064b52c8906374a2286afa86b71973b198de2d73c7aea52bd3cff6499e4982e23332966d1b9bef73c7d2bdf0bd44ace2bca50b405089e4dd60e8635f323952948b5d7d33683a8f1432376d5f77a8f065e915117ea4746a34287f1b4fe5f907b5388bacb5247f6c985081ce0f203626258f7112c8aacb751097cff44a9eeab6f5236c0065ae6672d", 0xf0, 0x23}, {0x3, 0x6, &(0x7f0000000740)='\x00', &(0x7f0000000780)="3892dd860413bd8146be3ea026de94e7132450c11abee16f5c85cc7e21025424fb3d7614c75c1cc501492abe634994807111040812874a286f25a3b0b65ed8e76c9c3b13e56a4e7ae1ca822ea0d91ca9ef815ec1a137e2931285b06d930dfe26a4a2f0c1814ba734f72100fbb3226e8ade1a49099222f59902c3", 0x7a, 0xa}, {0x3, 0x1, &(0x7f0000000800)='#$/\'\x00', &(0x7f0000000840)="0ba11da62c6278f12ab8d748ddfd63098aab7fa6396d4692359695", 0x1b, 0x2}, {0x0, 0x8001, &(0x7f0000000880)='nl802154\x00', &(0x7f00000008c0)="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", 0xfe, 0x20}, {0x2, 0x6, &(0x7f00000009c0)='--\x00', &(0x7f0000000a00)="80be4326cc6e1c819c7a31688807ae7b324a1ffebcdfe675957737c33367490e349b9239546d0095b3e7780c2b6e986a6a33c359dcf7dcfc99def1ea4f7d1d458d346f80ae46ce756aef7ea4e3c48b4b3234", 0x52, 0x40}, {0x3, 0xfffffffa, &(0x7f0000000a80)='nl802154\x00', &(0x7f0000000ac0)="f033338190f8fb6fa83e894b5b6701c7a64a21634659c336a153dc00e341b937d3b54a2fc1381665fca394d999f8d638e56f4379b79da231ac6b93d7", 0x3c, 0x30}, {0x1, 0x0, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="43e8f1cab493c9ef4ad677da5bf03586c5f750751fae73a19ec245509cc59291c2439a4003ae6e19aafe8e7636a9e8a6a1ed7c62ea2e4114a0278d22ee387804cb602129c68e840c5baec0311e377eda", 0x50, 0x2}, {0x3, 0xfffffffe, &(0x7f0000000bc0)='@\xa5:\x00', &(0x7f0000000c00)="9427c473f881c16eb20e827c7b2ec8d0ea2248e68b44c5bdc86334ed6cc3fef66adddac76c4c27b1e83ee44b36d5ff905c987a7b0926d24c56578795226a8c556e872a099a568e157bb53a8faeee50c3b660d14cae5be8a71f9338bf5b369f449dd008e883f8f825c1cd0c3d5493491c2c3f60dcf8015939b6e0df7b7af6dc2b021a71170faadbd3fd628ff585b6f10dd2e1ff807be3a2e2c09dfa1638765f223383870fa1a58df0cfddec4c867df12cca7c26a7d72f", 0xb6, 0x12}, {0x3, 0xac, &(0x7f0000000cc0)='\x00', &(0x7f0000000d00)="48e5f2aa9241d2e2b4e3575c841cf1b25ff085cf", 0x14, 0x12}]}) read$nci(r10, &(0x7f0000003200)=""/4096, 0x1000) recvmmsg(r0, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000fc0)=""/127, 0x7f}, {&(0x7f0000001040)=""/105, 0x69}], 0x2}, 0x324}], 0x1, 0x40002022, 0x0) 1.972450858s ago: executing program 1 (id=3780): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@gettfilter={0x2c, 0x2e, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x4, 0xc}, {0xa, 0xfff3}, {0x10, 0x3}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.893788659s ago: executing program 0 (id=3781): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2tp, &(0x7f0000000140)=0x80, 0x800) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 'wg2\x00'}}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x5, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @loopback}, 0x1c, 0x0}}], 0x1, 0xc040) 1.893505744s ago: executing program 1 (id=3782): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500220f6e27708d9b000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100000a, @local, 0x4}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001680)="1a", 0x1}], 0x1}}], 0x1, 0x931766f6159e6d55) shutdown(r1, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="af000000ffff000000000000ffffffff18150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x4, 0x3}, &(0x7f00000002c0)=0x90) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)=0x3) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) (async) unshare(0x2c020400) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0x3) 1.838429372s ago: executing program 0 (id=3783): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) r4 = socket(0x1, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) recvmmsg(r5, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)}, 0x9}], 0x1, 0x40000020, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000077abcba2b66a570afcdf60c861264c3372a8a2abda4b443e7919ece37268729177b07f2f061f95771a0f5e0cc1f459f1d187acf8cdc11b9b1214272bd885c3f3d58f43d0335ea1d78ba25502b9d9c2aa937b9b7462331dea2622bb290a03d4b44b9688000000000000000000", @ANYRES16=r8, @ANYBLOB="000125bd7000fddbdf250a000000060028000000000005002d000100000005003000010000000800310008000000050029000100000005002e000000000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="000309bd7000fbdbdf251400000018000e007d7bd2f690303d7833"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) 1.799696244s ago: executing program 1 (id=3784): socket$inet(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfbfffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x140100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8880}, 0x40) r1 = socket$nl_crypto(0x10, 0x3, 0x15) syz_emit_ethernet(0x342, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x30c, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x5a, 0x1, 0x5, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0xa, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f425"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d220600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r2, 0x0, 0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f6669736829"], 0xe8}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x3f, 0x8d, 0xbf, 0x800, 0xa, @dev={0xfe, 0x80, '\x00', 0x17}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x700, 0x700, 0xfffffff9, 0x9}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000300000000000002050000000900000000ff0000000000000b000000000000100c000000003e5f2e2e2e3000"], &(0x7f0000000bc0)=""/232, 0x44, 0xe8, 0x816, 0x0, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{0x1}, &(0x7f0000000d80), &(0x7f0000000dc0)=r0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe9", 0x2a}], 0x2, 0x0, 0x0, 0x8000000}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0xfffffffffffffe0a, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/1, 0x1}, {&(0x7f0000000f40)=""/137, 0x89}], 0x2}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0801030c", @ANYRES32=0x0, @ANYBLOB="06009800ce2700000800dc00010001000a00f500696ed3408ad50000"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x40) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000400006803c0004"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000e40)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="022000000400000008000000010000ec7f000000", @ANYRES32=0x1, @ANYBLOB="df00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000500"/28], 0x50) 1.442997828s ago: executing program 3 (id=3785): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x0, 0x5, 0x4, 0x10}, @generic={0x8, 0x2, 0x2, 0xd4, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xb}, {0x0, 0x5, 0x5, 0xc}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000840)={r1, r4}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28", 0xa6}], 0x1}}], 0x2, 0x2090) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(0x3) 1.426323788s ago: executing program 4 (id=3786): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x0, 0x5, 0x4, 0x10}, @generic={0x8, 0x2, 0x2, 0xd4, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xb}, {0x0, 0x5, 0x5, 0xc}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000840)={r1, r4}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28", 0xa6}], 0x1}}], 0x2, 0x2090) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x70}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(0x3) 1.34853284s ago: executing program 1 (id=3787): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x0, 0x5, 0x4, 0x10}, @generic={0x8, 0x2, 0x2, 0xd4, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xb}, {0x0, 0x5, 0x5, 0xc}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000840)={r1, r4}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28", 0xa6}], 0x1}}], 0x2, 0x2090) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x70}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(0x3) 1.075645556s ago: executing program 4 (id=3788): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x2, 0xc}, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f00000000c0)=0x3, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xad5, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x40001) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) 1.065543798s ago: executing program 3 (id=3789): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async) listen(r2, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) (async) close(r3) (async) accept4(r2, &(0x7f0000000180)=@xdp, &(0x7f0000000100)=0x80, 0x80800) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0xfffffffffffffe88) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0xfffffffc, @loopback, 0x3}, 0x1c) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, 0x0, 0x30, 0x0, @val=@kprobe_multi=@syms={0x1, 0x8, &(0x7f00000006c0)=[&(0x7f0000000280)='+*\x00', &(0x7f0000000340)='GPL\x00', &(0x7f0000000380)='OPL\x00', &(0x7f0000000480)='+%:\'-@\x00', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='GPL\x00', &(0x7f0000000540)='\x00', &(0x7f0000000640)='GPL\x00'], 0x0, 0xfffffffffffffff9}}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x23, 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) (async) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 870.647606ms ago: executing program 3 (id=3790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x64, r1, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7b4cd07ec3ee777de774fc7987cca41989b780a81e3e33c965476aa1c04ad77b73"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x80a4) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000d40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x1ac, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3600}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7249}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff3}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6f7e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x65e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x99}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb3a6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x58}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ac5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcc13}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xa001}, 0x20000000) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) unshare(0x20020600) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES16=r0, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f0000000580)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x8, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f00000001c0)=[{0x2, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0xf132, 0xffffffffffffffff, 0xa4fdf000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x3, 0x10001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno', 0xa) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e22, @remote}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0xff, 0x3, 0x2, 0x4}, &(0x7f0000000240)=0x20) sendmmsg(r4, &(0x7f0000000000), 0x0, 0x0) sendto(r0, &(0x7f0000000140)="9b77ad594b37a11832195f455f90b5fc78709b80fb1002ff16c123a9a35de9a2894f650ef1b53097aa6b1f1d0171355ae8474e7195eb82e3327ecb32e4801ead837c88a6d65097da8082e22ce6c8d091b84037ca51f3ce1815e9151d1aa48137724e8f23c319f31d9850ae63410a58cffa2a315b5a1b3858562bb8b56806049c00be0064681b875734dc65cb30f1b6627dcc935eca454f29c7e5", 0x9a, 0x80, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x0, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000480), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x0, 0xffffff00, 'ip6gretap0\x00', '\x00', {0xff}, {0xff}, 0x21, 0x1, 0xa}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@addrtype={{0x30}, {0xa40, 0x100}}, @common=@unspec=@limit={{0x48}, {0x3, 0x0, 0x1, 0x8, 0x0, 0xeb, 0xffffffffffffff5a}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x8000, 0xd, [0x25, 0x3a, 0x29, 0xe, 0x9, 0x25, 0x1a, 0x34, 0x21, 0x32, 0x13, 0x19, 0x2d, 0x9, 0x3d, 0x24], 0x0, 0x1b5, 0x9}}}, {{@ip={@multicast1, @empty, 0xff000000, 0xffffff00, 'nicvf0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x5c, 0x0, 0x4}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x4, "e51e", 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x9, 0xf, [0x2d, 0x2d, 0x17, 0xb, 0x10, 0x1e, 0x25, 0x34, 0x23, 0x6, 0x37, 0x3f, 0x2b, 0x4, 0x22, 0x2e], 0x2, 0x1, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x14, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x4800) r7 = socket$inet6(0xa, 0xa, 0xfffffffe) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f00000005c0)={0x801, {{0xa, 0x4e23, 0x1b, @mcast1}}, {{0xa, 0x4e23, 0x855f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}}}, 0x108) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e000000140002800800040000000020060002003000000008001f000500000008000400c2"], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) 868.35194ms ago: executing program 1 (id=3791): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_FIOGETOWN(r0, 0x80108907, 0x0) r1 = getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f00000001c0)="1119", 0x2}], 0x1}}], 0x1, 0x4000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x22, 0x4, 0x6}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r2, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r3}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000)={r10, 0x6}, &(0x7f0000000180)=0x8) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) recvmmsg(r3, &(0x7f0000000040), 0x400006a, 0x40001140, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/user\x00') 782.431674ms ago: executing program 4 (id=3792): r0 = socket(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4841) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000007400)=ANY=[@ANYBLOB="c4240000", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32, @ANYBLOB="d4008480440000800a0001000202020202020000140006800800030004000000080001000010000011000100b17650dcfa1ad97cb0cbc6e7f60000000a0005"], 0x24c4}}, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x20050800) 524.245497ms ago: executing program 3 (id=3793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000000000907020000000000008007050000", @ANYRES32=0x0, @ANYBLOB="0c000180060002000f000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x4c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xdc}}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}, @TCA_RATE={0x6, 0x5, {0x76, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x18cb}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001800dd8d00000000fbdbdf25020000100000000500000000060015000200000014001680100008800c00018005"], 0x38}}, 0x0) bind$inet(r5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) pread64(r4, &(0x7f0000000340)=""/129, 0x81, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r10 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r10, 0x29, 0x1e, 0x0, 0x15) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r11 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r11, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) 469.582112ms ago: executing program 1 (id=3794): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, r5, 0x25, 0x4, @void}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000600)=[{0x7f, 0x8, 0x7f, 0x10001}]}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x4c84c000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 288.264476ms ago: executing program 4 (id=3795): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x568f70f1176ee2a9, 0x32, 0xffffffffffffffff, 0x852a9000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002020100851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000fdff006600020080ffffff18000000fffffffe00000000000000109500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 0s ago: executing program 4 (id=3796): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0xff7f, @multicast2}, 0xa) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001500)=[{&(0x7f00000002c0)="02044a00ea0e6000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8223f0ffff74c43824cee84400007ffe18c99e70d67b732f9b5702de81f5227339", 0x44}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d21609000a3164ae439862807a158983661a6d23", 0x17}, {&(0x7f0000000040)="df3b46a13300000000000000", 0xc}, {&(0x7f0000002340)="b72abab9439ca41f5cf14d643508a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67a6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f83fd548e872bc197d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceeb2c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbf303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87beca6aae023c9571b8e389ff3f4c692b6fb1acc53da3ca629686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e33305000000000000004892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d0c6dfaab30bb997fd7b71c2e0bf02b408c3b0b85f8ca7cec3376", 0xe9a}], 0x5}, 0x40040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000166b1727370616e000018000280050016000200000006000e000000000004001200"], 0x48}}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r2, 0x8, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040), &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x10048, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a03000000000000000000000a"], 0x0, 0x3e}, 0x20) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf25160000000a000600080211000000000000000000ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x72ae890f0c7d995c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcac48dc4}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x68, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x2, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}]}}}}}}, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x20000300) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000e80)={{r1, &(0x7f0000000500)='syz1\x00', 0x2100, &(0x7f0000000540)={@align=0x9, {0x10, 0x2, 0x1, 0x2}}, 0x6, &(0x7f0000000580), &(0x7f00000005c0)=0x1}, 0x9, &(0x7f0000000d40)=[{0x2, 0x2, &(0x7f0000000600)='NET_DM\x00', &(0x7f0000000640)="a06a666c043d753e47b5a174b553e0e85cb995d5dbdb1926f5ef6ef463573a65c75994fa274225341fc76a424fe750fef6ef59d0be28ab3e4f421d23225f3c45b022cfcac552947d9bec1caf959e4b3b044cf22fac6e87dde732943cd3eb67a091711089f6a8a4a2b064b52c8906374a2286afa86b71973b198de2d73c7aea52bd3cff6499e4982e23332966d1b9bef73c7d2bdf0bd44ace2bca50b405089e4dd60e8635f323952948b5d7d33683a8f1432376d5f77a8f065e915117ea4746a34287f1b4fe5f907b5388bacb5247f6c985081ce0f203626258f7112c8aacb751097cff44a9eeab6f5236c0065ae6672d", 0xf0, 0x23}, {0x3, 0x6, &(0x7f0000000740)='\x00', &(0x7f0000000780)="3892dd860413bd8146be3ea026de94e7132450c11abee16f5c85cc7e21025424fb3d7614c75c1cc501492abe634994807111040812874a286f25a3b0b65ed8e76c9c3b13e56a4e7ae1ca822ea0d91ca9ef815ec1a137e2931285b06d930dfe26a4a2f0c1814ba734f72100fbb3226e8ade1a49099222f59902c3", 0x7a, 0xa}, {0x3, 0x1, &(0x7f0000000800)='#$/\'\x00', &(0x7f0000000840)="0ba11da62c6278f12ab8d748ddfd63098aab7fa6396d4692359695", 0x1b, 0x2}, {0x0, 0x8001, &(0x7f0000000880)='nl802154\x00', &(0x7f00000008c0)="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", 0xfe, 0x20}, {0x2, 0x6, &(0x7f00000009c0)='--\x00', &(0x7f0000000a00)="80be4326cc6e1c819c7a31688807ae7b324a1ffebcdfe675957737c33367490e349b9239546d0095b3e7780c2b6e986a6a33c359dcf7dcfc99def1ea4f7d1d458d346f80ae46ce756aef7ea4e3c48b4b3234", 0x52, 0x40}, {0x3, 0xfffffffa, &(0x7f0000000a80)='nl802154\x00', &(0x7f0000000ac0)="f033338190f8fb6fa83e894b5b6701c7a64a21634659c336a153dc00e341b937d3b54a2fc1381665fca394d999f8d638e56f4379b79da231ac6b93d7", 0x3c, 0x30}, {0x1, 0x0, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="43e8f1cab493c9ef4ad677da5bf03586c5f750751fae73a19ec245509cc59291c2439a4003ae6e19aafe8e7636a9e8a6a1ed7c62ea2e4114a0278d22ee387804cb602129c68e840c5baec0311e377eda", 0x50, 0x2}, {0x3, 0xfffffffe, &(0x7f0000000bc0)='@\xa5:\x00', &(0x7f0000000c00)="9427c473f881c16eb20e827c7b2ec8d0ea2248e68b44c5bdc86334ed6cc3fef66adddac76c4c27b1e83ee44b36d5ff905c987a7b0926d24c56578795226a8c556e872a099a568e157bb53a8faeee50c3b660d14cae5be8a71f9338bf5b369f449dd008e883f8f825c1cd0c3d5493491c2c3f60dcf8015939b6e0df7b7af6dc2b021a71170faadbd3fd628ff585b6f10dd2e1ff807be3a2e2c09dfa1638765f223383870fa1a58df0cfddec4c867df12cca7c26a7d72f", 0xb6, 0x12}, {0x3, 0xac, &(0x7f0000000cc0)='\x00', &(0x7f0000000d00)="48e5f2aa9241d2e2b4e3575c841cf1b25ff085cf", 0x14, 0x12}]}) read$nci(r10, &(0x7f0000003200)=""/4096, 0x1000) recvmmsg(r0, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000fc0)=""/127, 0x7f}, {&(0x7f0000001040)=""/105, 0x69}], 0x2}, 0x324}], 0x1, 0x40002022, 0x0) kernel console output (not intermixed with test programs): configured! [ 436.267596][T15418] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 436.312001][T16384] netlink: 'syz.4.2715': attribute type 1 has an invalid length. [ 436.390801][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2717'. [ 436.808525][T15418] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 437.158048][T16412] syzkaller1: entered promiscuous mode [ 437.181356][T16412] syzkaller1: entered allmulticast mode [ 437.356856][ T36] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 437.567970][T16422] gre0: entered promiscuous mode [ 437.583311][T16422] gre0: entered allmulticast mode [ 437.608373][T16423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2727'. [ 437.721474][T16433] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2728'. [ 437.734901][T16435] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2730'. [ 437.749444][T16437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2726'. [ 437.911623][T16446] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2731'. [ 437.936433][T15418] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 438.049500][T16453] netlink: 'syz.4.2729': attribute type 8 has an invalid length. [ 438.125504][T16453] netlink: 'syz.4.2729': attribute type 1 has an invalid length. [ 438.251811][T16467] netlink: 'syz.3.2735': attribute type 49 has an invalid length. [ 438.499868][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 438.807829][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 439.094628][T16515] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 439.410652][T16538] netlink: 'syz.3.2750': attribute type 10 has an invalid length. [ 439.671367][T16558] veth0: entered promiscuous mode [ 439.693848][T16563] netlink: 'syz.2.2758': attribute type 13 has an invalid length. [ 439.702037][T16563] netlink: 'syz.2.2758': attribute type 17 has an invalid length. [ 439.702888][T16557] veth0: left promiscuous mode [ 439.779645][T16563] gre0: left promiscuous mode [ 439.817217][T16563] gre0: left allmulticast mode [ 439.879746][T16563] veth1_to_batadv: left allmulticast mode [ 439.922121][T16575] net_ratelimit: 3 callbacks suppressed [ 439.922137][T16575] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 439.934040][T16563] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 439.956541][T15418] bond9: (slave batadv0): link status up again after 0 ms [ 439.998411][ T5727] lo speed is unknown, defaulting to 1000 [ 440.003259][T15418] bond9: (slave batadv0): failed to get link speed/duplex [ 440.025966][T16575] netlink: 'syz.0.2763': attribute type 6 has an invalid length. [ 440.136709][T15400] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 440.157233][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 440.286720][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 440.436682][T15400] bond9: (slave batadv0): failed to get link speed/duplex [ 440.557983][T15410] bond9: (slave batadv0): failed to get link speed/duplex [ 440.572224][T16588] netlink: 'syz.3.2768': attribute type 1 has an invalid length. [ 440.594183][T16588] netlink: 'syz.3.2768': attribute type 2 has an invalid length. [ 440.609148][T16588] __nla_validate_parse: 10 callbacks suppressed [ 440.609167][T16588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2768'. [ 440.634838][T16588] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2768'. [ 440.678523][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2767'. [ 440.694346][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2767'. [ 440.706626][T15418] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 440.731030][T16588] bond0 (unregistering): Released all slaves [ 441.145216][T16619] ip6gre1: entered promiscuous mode [ 441.151369][T16619] ip6gre1: entered allmulticast mode [ 441.280823][T16629] FAULT_INJECTION: forcing a failure. [ 441.280823][T16629] name failslab, interval 1, probability 0, space 0, times 0 [ 441.320298][T16629] CPU: 0 UID: 0 PID: 16629 Comm: syz.3.2776 Not tainted syzkaller #0 PREEMPT(full) [ 441.320323][T16629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.320332][T16629] Call Trace: [ 441.320339][T16629] [ 441.320346][T16629] dump_stack_lvl+0xe8/0x150 [ 441.320371][T16629] should_fail_ex+0x412/0x560 [ 441.320395][T16629] should_failslab+0xa8/0x100 [ 441.320413][T16629] __kmalloc_noprof+0xe8/0x760 [ 441.320434][T16629] ? security_sk_alloc+0x52/0x360 [ 441.320456][T16629] security_sk_alloc+0x52/0x360 [ 441.320476][T16629] sk_prot_alloc+0x101/0x210 [ 441.320491][T16629] ? sk_alloc+0x27/0x390 [ 441.320509][T16629] sk_alloc+0x3a/0x390 [ 441.320528][T16629] bpf_prog_test_run_skb+0x415/0x2260 [ 441.320564][T16629] ? __fget_files+0x3a0/0x420 [ 441.320582][T16629] ? __fget_files+0x2a/0x420 [ 441.320603][T16629] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 441.320620][T16629] bpf_prog_test_run+0x2c7/0x340 [ 441.320641][T16629] __sys_bpf+0x643/0x950 [ 441.320665][T16629] ? __pfx___sys_bpf+0x10/0x10 [ 441.320713][T16629] ? ksys_write+0x242/0x270 [ 441.320736][T16629] ? __pfx_ksys_write+0x10/0x10 [ 441.320761][T16629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.320778][T16629] __x64_sys_bpf+0x7c/0x90 [ 441.320798][T16629] do_syscall_64+0x174/0x580 [ 441.320815][T16629] ? trace_irq_disable+0x3b/0x140 [ 441.320836][T16629] ? clear_bhb_loop+0x40/0x90 [ 441.320856][T16629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.320872][T16629] RIP: 0033:0x7fd4c239ce59 [ 441.320889][T16629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.320902][T16629] RSP: 002b:00007fd4c32b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.320920][T16629] RAX: ffffffffffffffda RBX: 00007fd4c2615fa0 RCX: 00007fd4c239ce59 [ 441.320931][T16629] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 441.320940][T16629] RBP: 00007fd4c32b9090 R08: 0000000000000000 R09: 0000000000000000 [ 441.320950][T16629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.320959][T16629] R13: 00007fd4c2616038 R14: 00007fd4c2615fa0 R15: 00007fff29ea86a8 [ 441.320986][T16629] [ 441.612246][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.745402][T16635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2779'. [ 442.111713][T16658] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2781'. [ 442.793800][T16692] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2791'. [ 442.947293][T16696] lo speed is unknown, defaulting to 1000 [ 443.033674][T16702] tipc: Enabling of bearer rejected, already enabled [ 443.554549][T16729] xt_hl: Unknown Hop Limit match mode: 206 [ 443.668828][T16729] bond0: option xmit_hash_policy: invalid value (10) [ 443.713253][T16729] bond0 (unregistering): Released all slaves [ 443.795584][T16732] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2800'. [ 443.822790][T16726] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2800'. [ 443.839456][T16743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2803'. [ 443.854218][T16722] syzkaller1: entered promiscuous mode [ 443.862060][T16722] syzkaller1: entered allmulticast mode [ 444.010133][T16748] netlink: 'syz.3.2805': attribute type 1 has an invalid length. [ 444.096192][T16748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.198950][T16748] bond0 (unregistering): Released all slaves [ 444.378287][T16753] bridge0: port 3(batadv2) entered blocking state [ 444.394767][T16753] bridge0: port 3(batadv2) entered disabled state [ 444.436861][T16753] batadv2: entered allmulticast mode [ 444.458620][T16753] batadv2: entered promiscuous mode [ 444.635416][T16769] bond9: option all_slaves_active: invalid value (124) [ 444.786492][T15400] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 444.797928][T15400] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 444.857248][T16786] netlink: 'syz.2.2814': attribute type 11 has an invalid length. [ 444.905192][T16793] netlink: 'syz.4.2817': attribute type 3 has an invalid length. [ 444.939694][T16791] net_ratelimit: 30 callbacks suppressed [ 444.939711][T16791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.007386][T15400] bond9: (slave batadv0): failed to get link speed/duplex [ 445.146542][T15400] bond9: (slave batadv0): failed to get link speed/duplex [ 445.293093][T16812] xt_hashlimit: max too large, truncated to 1048576 [ 445.354018][T16814] netlink: 'syz.2.2820': attribute type 29 has an invalid length. [ 445.365630][ T1120] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 445.405719][T16804] ÿ: entered promiscuous mode [ 445.411234][T16804] ÿ: entered allmulticast mode [ 445.473266][T16803] bond12: entered promiscuous mode [ 445.482281][T16803] 8021q: adding VLAN 0 to HW filter on device bond12 [ 445.518917][T16811] bridge14: entered promiscuous mode [ 445.528659][T16811] bond12: (slave bridge14): Enslaving as an active interface with an up link [ 445.688845][T16811] bond12 (unregistering): (slave bridge14): Releasing backup interface [ 445.722541][T16811] bridge14: left promiscuous mode [ 445.764662][T16811] bond12 (unregistering): Released all slaves [ 445.886798][ T1160] bond9: (slave batadv0): failed to get link speed/duplex [ 445.896090][ T1120] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 445.969245][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 445.991657][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 446.003917][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 446.029460][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 446.041363][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 446.056604][ T1120] bond9: (slave batadv0): failed to get link speed/duplex [ 446.131251][ T5651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 446.138902][ T5651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 446.148594][ T5651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 446.166887][T15418] bond9: (slave batadv0): failed to get link speed/duplex [ 446.187327][ T5651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 446.199659][ T5651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 446.436555][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 446.500056][ T1160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 446.899121][ T5637] syz_tun (unregistering): left allmulticast mode [ 446.981024][T16860] __nla_validate_parse: 11 callbacks suppressed [ 446.981044][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'. [ 447.004910][T16882] netlink: 'syz.3.2836': attribute type 1 has an invalid length. [ 447.022226][T16882] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2836'. [ 447.050997][T16866] lo speed is unknown, defaulting to 1000 [ 447.272481][T16894] xt_hashlimit: size too large, truncated to 1048576 [ 447.319964][T15410] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 60343 - 0 [ 447.361392][T16901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 447.381309][T15410] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 447.437133][T15410] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 447.723299][T15410] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 60343 - 0 [ 447.748115][T15410] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 447.760404][T15410] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 447.781956][T16836] lo speed is unknown, defaulting to 1000 [ 447.877048][T16918] veth0: entered promiscuous mode [ 447.902297][T15410] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 60343 - 0 [ 447.916894][T15410] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 447.929725][T15410] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 448.021919][T16918] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 448.125058][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 448.170417][T15410] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 60343 - 0 [ 448.181257][T15410] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 448.192674][T15410] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 448.223474][T16915] veth0: left promiscuous mode [ 448.246527][ T5651] Bluetooth: hci5: command tx timeout [ 448.339952][T16937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2844'. [ 448.370507][T16934] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2843'. [ 448.678571][T16934] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 448.879806][ T1160] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 449.064677][ T57] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 449.245643][T15400] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 449.294380][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'. [ 449.365727][T16988] netlink: 'syz.3.2856': attribute type 1 has an invalid length. [ 449.414386][T15400] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 449.517058][T16988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.709504][T16992] bond0: (slave veth9): Enslaving as an active interface with a down link [ 449.760691][T16996] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 449.777597][T16996] bond0: (slave batadv2): making interface the new active one [ 449.787883][T16996] batadv2: entered promiscuous mode [ 449.794997][T16996] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 449.819447][T15410] batadv2: left allmulticast mode [ 449.825120][T15410] batadv2: left promiscuous mode [ 449.837638][T15410] bridge0: port 3(batadv2) entered disabled state [ 449.852655][T15410] batadv1: left allmulticast mode [ 449.863712][T15410] batadv1: left promiscuous mode [ 449.872649][T15410] bridge0: port 2(batadv1) entered disabled state [ 449.983106][T15410] bridge_slave_0: left allmulticast mode [ 449.997790][T15410] bridge_slave_0: left promiscuous mode [ 450.019960][T15410] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.102281][T15410] pimreg: left allmulticast mode [ 450.156539][T15418] net_ratelimit: 13 callbacks suppressed [ 450.156559][T15418] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 450.340198][ T5651] Bluetooth: hci5: command tx timeout [ 450.565903][T15410] bond5 (unregistering): (slave geneve4): Releasing active interface [ 450.727010][T15418] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 450.746702][T15410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.760371][T15410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.774168][T15410] bond0 (unregistering): Released all slaves [ 450.784466][T15410] bond1 (unregistering): left allmulticast mode [ 450.791695][T15410] bond1 (unregistering): left promiscuous mode [ 450.801289][T15410] team0: Port device macvlan2 removed [ 450.812194][T15410] bond1 (unregistering): Released all slaves [ 450.827081][T15410] bond2 (unregistering): Released all slaves [ 450.841218][T15410] bond3 (unregistering): Released all slaves [ 450.856327][T15410] bond4 (unregistering): Released all slaves [ 450.874161][T15410] bond5 (unregistering): Released all slaves [ 450.898456][T15410] bond6 (unregistering): Released all slaves [ 450.916684][T15410] bond7 (unregistering): Released all slaves [ 450.943359][T16988] bond0 (unregistering): (slave veth9): Releasing active interface [ 450.962615][T16988] bond0 (unregistering): (slave batadv2): Releasing active interface [ 450.977639][T16988] bond0 (unregistering): Released all slaves [ 451.018741][T16836] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.042264][T16836] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.052183][T16836] bridge_slave_0: entered allmulticast mode [ 451.060447][T16836] bridge_slave_0: entered promiscuous mode [ 451.077230][T16970] lo speed is unknown, defaulting to 1000 [ 451.091537][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 451.124708][T16836] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.154188][T16836] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.179936][T16836] bridge_slave_1: entered allmulticast mode [ 451.234576][T16836] bridge_slave_1: entered promiscuous mode [ 451.259274][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 451.324651][T15410] tipc: Disabling bearer [ 451.335414][T15410] tipc: Left network mode [ 451.376071][T17036] netlink: 'syz.3.2865': attribute type 10 has an invalid length. [ 451.391790][T16836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.411056][T17037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2863'. [ 451.439658][T16836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.526530][T15418] bond9: (slave batadv0): failed to get link speed/duplex [ 451.549366][T17044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2865'. [ 451.647341][T17040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2863'. [ 451.674142][T15418] bond9: (slave batadv0): failed to get link speed/duplex [ 451.698746][T16836] team0: Port device team_slave_0 added [ 451.797541][T16836] team0: Port device team_slave_1 added [ 451.818394][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 452.188491][T16836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.198275][T16836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.230819][T16836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.358759][T15428] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 452.407070][ T5651] Bluetooth: hci5: command tx timeout [ 452.442273][T16836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.451260][T16836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.479926][T16836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.622361][T15428] bond9: (slave batadv0): failed to get link speed/duplex [ 452.665719][T17071] syzkaller0: entered promiscuous mode [ 452.673790][T17071] syzkaller0: entered allmulticast mode [ 452.860741][T16836] hsr_slave_0: entered promiscuous mode [ 452.872467][T16836] hsr_slave_1: entered promiscuous mode [ 452.941287][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 453.063067][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 453.117345][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 453.139875][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'. [ 453.260067][T17094] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.272973][T17094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.305977][T17094] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 453.323342][T17094] veth1_macvtap: left promiscuous mode [ 453.331216][T17094] veth1_macvtap: entered promiscuous mode [ 453.343898][T17094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.356822][T17094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.365860][T17094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.375852][T17094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.388822][T17094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.403242][T17094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.412683][T17094] 8021q: adding VLAN 0 to HW filter on device bond3 [ 453.422237][T17094] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.432173][T17094] 8021q: adding VLAN 0 to HW filter on device bond5 [ 453.447860][T17094] 8021q: adding VLAN 0 to HW filter on device bond6 [ 453.525410][T15400] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.549732][T15400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.561269][T15400] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.572636][T15400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.600702][T15400] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.627702][T15400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.639242][T15400] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.650543][T15400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.758285][T15410] hsr_slave_0: left promiscuous mode [ 453.764277][T15410] hsr_slave_1: left promiscuous mode [ 453.775723][T15410] veth1_vlan: left promiscuous mode [ 453.786101][T15410] veth0_vlan: left promiscuous mode [ 453.895036][T15410] pim6reg (unregistering): left allmulticast mode [ 454.014119][T15410] team0 (unregistering): Port device team_slave_1 removed [ 454.069237][T15410] team0 (unregistering): Port device team_slave_0 removed [ 454.277915][T15428] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 454.288192][T15428] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 454.306513][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 454.334786][T16836] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 454.399421][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 454.473503][T16836] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 454.486568][ T5651] Bluetooth: hci5: command tx timeout [ 454.638441][T16836] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 454.680272][T15410] IPVS: stop unused estimator thread 0... [ 454.710549][T16836] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 454.777018][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 455.236392][T15410] net_ratelimit: 12 callbacks suppressed [ 455.236411][T15410] bond9: (slave batadv0): failed to get link speed/duplex [ 455.366829][T15410] bond9: (slave batadv0): failed to get link speed/duplex [ 455.407343][T17072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.469043][T16836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 455.545790][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 455.571756][T16836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 455.625912][T16836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 455.661378][T16836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 455.691939][T16836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 455.724604][T16836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 455.745589][T16836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 455.790853][T16836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 455.800223][T17134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2884'. [ 455.880698][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2884'. [ 456.056569][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2884'. [ 456.066512][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 456.117159][ T1120] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 456.267228][T16836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.378990][T15400] bond9: (slave batadv0): failed to get link speed/duplex [ 456.474690][T16836] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.533337][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.541800][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.659576][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.669165][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.680942][ T1120] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 456.702869][T15400] bond9: (slave batadv0): failed to get link speed/duplex [ 456.732142][T17189] netlink: 'syz.1.2891': attribute type 3 has an invalid length. [ 456.828133][ T1120] bond9: (slave batadv0): failed to get link speed/duplex [ 456.922137][T17195] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2892'. [ 456.965107][T17195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.037063][T15410] bond9: (slave batadv0): failed to get link speed/duplex [ 457.497735][T17220] netlink: 'syz.1.2895': attribute type 2 has an invalid length. [ 457.536622][T17225] netlink: 'syz.0.2896': attribute type 6 has an invalid length. [ 457.985815][T17251] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2899'. [ 458.273969][T16836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.486860][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 458.800541][T17285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2903'. [ 458.835316][T17290] syzkaller0: entered promiscuous mode [ 458.860502][T17290] syzkaller0: entered allmulticast mode [ 459.218781][T16836] veth0_vlan: entered promiscuous mode [ 459.282348][T17309] netlink: 'syz.1.2909': attribute type 26 has an invalid length. [ 459.301495][T16836] veth1_vlan: entered promiscuous mode [ 459.308854][T17309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2909'. [ 459.582171][T16836] veth0_macvtap: entered promiscuous mode [ 459.647302][T16836] veth1_macvtap: entered promiscuous mode [ 459.800596][T16836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.843184][T16836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.894843][T15400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.974143][T15400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.990162][T15400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.011286][T15400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.221835][T15400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.250970][T15400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.377028][ T36] net_ratelimit: 25 callbacks suppressed [ 460.377044][ T36] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 460.485226][T17351] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 460.577707][T17351] bond1 (unregistering): Released all slaves [ 460.588200][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 460.754544][T15400] bond9: (slave batadv0): failed to get link speed/duplex [ 460.846670][T17355] lo speed is unknown, defaulting to 1000 [ 460.848219][T15400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.905588][T15400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.917349][T15410] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 460.919924][ T1120] bond9: (slave batadv0): failed to get link speed/duplex [ 461.092116][T17367] lo speed is unknown, defaulting to 1000 [ 461.511567][T15428] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 461.838717][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 461.996788][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 462.107351][T15410] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 462.125369][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 462.220593][T17440] tipc: Enabling of bearer rejected, failed to enable media [ 462.382180][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 462.536608][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2939'. [ 462.557566][T17455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2939'. [ 462.577363][T17452] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2938'. [ 462.598345][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2939'. [ 462.626853][T17455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2939'. [ 462.706755][T17463] syzkaller1: entered promiscuous mode [ 462.723635][T17463] syzkaller1: entered allmulticast mode [ 463.413168][T17503] tipc: Enabling of bearer rejected, failed to enable media [ 463.648411][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 463.663565][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 463.674526][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 463.693565][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 463.702166][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 463.981060][T17515] lo speed is unknown, defaulting to 1000 [ 464.477085][T17537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2958'. [ 464.644109][T17512] lo speed is unknown, defaulting to 1000 [ 464.683648][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2954'. [ 464.734933][T17510] netlink: 'syz.3.2954': attribute type 4 has an invalid length. [ 464.752842][T17547] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 464.762108][T17510] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2954'. [ 464.771708][T17547] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2961'. [ 464.783998][T17547] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2961'. [ 464.802879][T17547] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2961'. [ 464.939527][T17553] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 464.951241][T17553] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2961'. [ 464.963876][T17553] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2961'. [ 464.974337][T17553] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2961'. [ 465.021455][T17557] Bluetooth: MGMT ver 1.23 [ 465.282015][T17566] netlink: 'syz.4.2962': attribute type 1 has an invalid length. [ 465.429990][T17573] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2962'. [ 465.503558][T17576] Cannot find del_set index 0 as target [ 465.587903][T15410] net_ratelimit: 21 callbacks suppressed [ 465.587923][T15410] bond9: (slave batadv0): failed to get link speed/duplex [ 465.729358][ T296] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 465.766992][ T5651] Bluetooth: hci1: command tx timeout [ 465.801717][T17578] veth11: entered promiscuous mode [ 465.896407][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 466.082593][T17512] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.096663][T17512] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.105362][T17512] bridge_slave_0: entered allmulticast mode [ 466.114137][T17512] bridge_slave_0: entered promiscuous mode [ 466.125715][T17512] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.133531][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.141387][T17512] bridge_slave_1: entered allmulticast mode [ 466.150123][T17512] bridge_slave_1: entered promiscuous mode [ 466.207777][T17512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.222170][T17512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.285615][ T5651] block nbd1: Receive control failed (result -1) [ 466.289099][ T1120] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 466.407151][T17512] team0: Port device team_slave_0 added [ 466.457044][T15410] bond9: (slave batadv0): failed to get link speed/duplex [ 466.500344][T17512] team0: Port device team_slave_1 added [ 466.719417][T17512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.728754][T17624] netlink: 'syz.1.2969': attribute type 1 has an invalid length. [ 466.751059][T17624] netlink: 'syz.1.2969': attribute type 2 has an invalid length. [ 466.754366][T17512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.791741][T17512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.853378][T17512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.876025][T17512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.913146][ T36] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 466.944533][T17512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.966963][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 467.011085][T17633] netlink: 'syz.3.2973': attribute type 1 has an invalid length. [ 467.052779][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 467.180137][T17512] hsr_slave_0: entered promiscuous mode [ 467.200387][T17512] hsr_slave_1: entered promiscuous mode [ 467.221103][T17512] debugfs: 'hsr0' already exists in 'hsr' [ 467.247358][T17512] Cannot create hsr debugfs directory [ 467.337161][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 467.469295][T15428] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 467.486046][T17648] lo speed is unknown, defaulting to 1000 [ 467.535581][T17655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.788853][T17668] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 467.846413][ T5651] Bluetooth: hci1: command tx timeout [ 467.890097][T17512] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.934732][T17664] lo speed is unknown, defaulting to 1000 [ 467.974902][T17512] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.059501][T17653] xt_CONNSECMARK: invalid mode: 0 [ 468.125398][T17512] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.343306][T17512] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.811117][T17703] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 468.903259][T17703] bond17: (slave lo): Enslaving as an active interface with an up link [ 469.182920][T17721] netlink: 'syz.3.2992': attribute type 4 has an invalid length. [ 469.938030][ T5651] Bluetooth: hci1: command tx timeout [ 469.981949][T17512] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 470.077926][T17512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.154829][T17512] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 470.202477][T17512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.211925][T17779] __nla_validate_parse: 14 callbacks suppressed [ 470.211944][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3005'. [ 470.276766][T17512] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 470.323677][T17779] netlink: 'syz.4.3005': attribute type 1 has an invalid length. [ 470.335733][T17512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.348831][T17512] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 470.375478][T17512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.487151][T17776] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.523104][T17776] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.656809][T15410] net_ratelimit: 16 callbacks suppressed [ 470.656828][T15410] bond9: (slave batadv0): failed to get link speed/duplex [ 470.675863][T17771] lo speed is unknown, defaulting to 1000 [ 470.702577][T17789] syzkaller0: entered promiscuous mode [ 470.718387][T17789] syzkaller0: entered allmulticast mode [ 470.732922][T17789] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3008'. [ 470.808719][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 470.986820][T15428] bond9: (slave batadv0): failed to get link speed/duplex [ 471.027000][T17813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3011'. [ 471.088321][ T1120] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 471.117605][T15418] bond9: (slave batadv0): failed to get link speed/duplex [ 471.306507][ T13] bond9: (slave batadv0): failed to get link speed/duplex [ 471.432877][T17512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.452374][ T1120] bond9: (slave batadv0): failed to get link speed/duplex [ 471.460020][T17835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3016'. [ 471.617177][T17512] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.656873][T15428] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 471.672443][T15410] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.680111][T15410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.703807][T15428] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.712518][T15428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.892202][T17512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.946429][ T1120] bond9: (slave batadv0): failed to get link speed/duplex [ 472.006911][ T5651] Bluetooth: hci1: command tx timeout [ 472.022157][T17858] tipc: Enabling of bearer rejected, failed to enable media [ 472.130346][T17854] lo speed is unknown, defaulting to 1000 [ 472.158242][T15410] bond9: (slave batadv0): failed to get link speed/duplex [ 472.196899][T15410] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 472.434778][T17889] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 472.502919][T17889] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3026'. [ 472.725479][T17880] lo speed is unknown, defaulting to 1000 [ 473.405234][T17512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.425900][T17926] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 473.443723][T17926] pim6reg0: persist disabled [ 473.833943][T17950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3038'. [ 474.035243][T17512] veth0_vlan: entered promiscuous mode [ 474.120657][T17512] veth1_vlan: entered promiscuous mode [ 474.230621][T17970] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3044'. [ 474.262876][T17512] veth0_macvtap: entered promiscuous mode [ 474.393420][T17512] veth1_macvtap: entered promiscuous mode [ 474.429342][T17978] tipc: Invalid UDP bearer configuration [ 474.429390][T17978] tipc: Enabling of bearer rejected, failed to enable media [ 474.531492][T17512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.617098][T17512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.679570][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.703726][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.742203][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.754072][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.950747][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.972009][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.032525][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.043932][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.500629][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 475.518693][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 475.529973][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 475.546193][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 475.559229][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 475.676605][T15428] net_ratelimit: 24 callbacks suppressed [ 475.676626][T15428] bond9: (slave batadv0): failed to get link speed/duplex [ 475.813648][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3056'. [ 475.822835][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 475.856469][T15400] bond9: (slave batadv0): failed to get link speed/duplex [ 476.159234][T15400] bond9: (slave batadv0): failed to get link speed/duplex [ 476.330269][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.336959][ T296] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 476.342700][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.420639][T15400] bond9: (slave batadv0): failed to get link speed/duplex [ 476.528609][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.563083][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.687529][T15400] bond9: (slave batadv0): failed to get link speed/duplex [ 476.758190][T18015] lo speed is unknown, defaulting to 1000 [ 476.858215][T18056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3064'. [ 476.869878][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 476.888865][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.910423][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.998296][T18073] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 477.022406][T18057] syzkaller0: entered promiscuous mode [ 477.028443][T18057] syzkaller0: entered allmulticast mode [ 477.088191][T18075] tipc: Started in network mode [ 477.094532][T18075] tipc: Node identity 8a539cbbc3e3, cluster identity 4711 [ 477.104047][T18075] tipc: Enabled bearer , priority 0 [ 477.155061][T18073] 8021q: adding VLAN 0 to HW filter on device bond12 [ 477.189921][T18055] tipc: Resetting bearer [ 477.254364][T18055] tipc: Disabling bearer [ 477.309321][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3072'. [ 477.331733][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.353764][T18088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3072'. [ 477.357091][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.379260][T15400] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 477.420347][T15400] bond9: (slave batadv0): failed to get link speed/duplex [ 477.453492][T18095] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3073'. [ 477.607104][ T50] Bluetooth: hci3: command tx timeout [ 477.887698][T15400] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 477.979225][T18112] tipc: Enabling of bearer rejected, failed to enable media [ 478.110596][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3080'. [ 478.153094][T15428] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 478.260054][T15400] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 478.420306][ T1120] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 478.499961][ T13] batadv1: left allmulticast mode [ 478.519337][ T13] batadv1: left promiscuous mode [ 478.535582][ T13] bridge0: port 3(batadv1) entered disabled state [ 478.629744][ T13] dvmrp0: left allmulticast mode [ 478.636830][T18146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3084'. [ 478.901514][T18158] netlink: 'syz.4.3085': attribute type 3 has an invalid length. [ 478.931528][T18158] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3085'. [ 479.115133][ T13] bond3 (unregistering): (slave gretap1): Releasing active interface [ 479.363591][ T13] bond1 (unregistering): Released all slaves [ 479.391849][ T13] bond2 (unregistering): Released all slaves [ 479.417235][ T13] bond3 (unregistering): Released all slaves [ 479.434171][ T13] bond4 (unregistering): Released all slaves [ 479.455043][ T13] bond5 (unregistering): Released all slaves [ 479.473500][ T13] bond6 (unregistering): Released all slaves [ 479.489923][ T13] bond7 (unregistering): (slave veth5): Releasing active interface [ 479.502316][ T13] bond7 (unregistering): Released all slaves [ 479.524096][T18136] gretap1: entered allmulticast mode [ 479.653896][T18153] kthread_run failed with err -4 [ 479.677505][T18163] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3086'. [ 479.693244][ T50] Bluetooth: hci3: command tx timeout [ 479.707256][T18163] ksmbd: Unknown IPC event: 1, ignore. [ 479.792275][T18015] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.801746][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.811253][T18015] bridge_slave_0: entered allmulticast mode [ 479.821541][T18015] bridge_slave_0: entered promiscuous mode [ 479.845404][ T13] tipc: Disabling bearer [ 479.911724][ T13] tipc: Left network mode [ 479.912220][T18015] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.937929][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.961711][T18015] bridge_slave_1: entered allmulticast mode [ 479.998339][T18015] bridge_slave_1: entered promiscuous mode [ 480.205027][T18015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.333649][T18015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.681079][T18015] team0: Port device team_slave_0 added [ 480.707030][T18180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3088'. [ 480.742028][T18015] team0: Port device team_slave_1 added [ 480.787980][ T1160] net_ratelimit: 13 callbacks suppressed [ 480.787998][ T1160] bond9: (slave batadv0): failed to get link speed/duplex [ 480.987739][ T1160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 481.106506][T15428] bond9: (slave batadv0): failed to get link speed/duplex [ 481.141242][T18015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.168484][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.265433][T18015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.315068][T18229] netlink: 'syz.0.3096': attribute type 1 has an invalid length. [ 481.412904][T18015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.476192][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.564891][T18015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.579208][ T1160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 481.766543][ T50] Bluetooth: hci3: command tx timeout [ 482.003618][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 482.106695][T15428] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 482.404997][T18015] hsr_slave_0: entered promiscuous mode [ 482.412927][T18015] hsr_slave_1: entered promiscuous mode [ 482.424549][T18015] debugfs: 'hsr0' already exists in 'hsr' [ 482.431900][T18015] Cannot create hsr debugfs directory [ 482.611925][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'. [ 482.666738][T15428] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 482.716341][ T1120] bond9: (slave batadv0): failed to get link speed/duplex [ 482.752146][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3106'. [ 482.964092][T18279] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 483.115592][T18279] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3107'. [ 483.126494][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 483.237687][T15400] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 483.425046][T18300] xt_CONNSECMARK: invalid mode: 0 [ 483.863031][ T50] Bluetooth: hci3: command tx timeout [ 484.891952][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 485.846966][ T1160] net_ratelimit: 4 callbacks suppressed [ 485.846985][ T1160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 486.382070][T15428] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 486.906899][T15418] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 487.446092][T15418] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 487.828396][ T1160] bond9: (slave batadv0): failed to get link speed/duplex [ 487.861729][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 487.977162][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 487.989771][T15418] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 488.118701][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 488.195345][T18333] tipc: Invalid UDP bearer configuration [ 488.195406][T18333] tipc: Enabling of bearer rejected, failed to enable media [ 488.517910][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3115'. [ 488.541457][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3115'. [ 488.546399][ T1160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 488.596692][T18342] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3115'. [ 488.633281][T18015] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 488.746754][ T1160] bond9: (slave batadv0): failed to get link speed/duplex [ 488.780569][ T13] IPVS: stop unused estimator thread 0... [ 488.903220][T18015] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 489.119439][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3123'. [ 489.314995][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3124'. [ 489.334940][T18378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3124'. [ 489.414868][T18358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.427186][T18358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.141693][T18364] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 490.244363][ T57] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.334343][T18015] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 490.361455][ T57] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.377443][ T57] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.387851][T18387] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.3126'. [ 490.411582][ T57] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.567105][T18015] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 490.946693][T15418] net_ratelimit: 10 callbacks suppressed [ 490.946714][T15418] bond9: (slave batadv0): failed to get link speed/duplex [ 491.050105][T18396] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3130'. [ 491.086339][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 491.146488][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 491.207154][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 491.336350][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 491.470373][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 491.634176][T18427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3136'. [ 491.697923][ T296] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 491.718125][T18427] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3136'. [ 491.797648][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 491.929695][ T13] bond9: (slave batadv0): failed to get link speed/duplex [ 492.252111][ T296] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 492.488970][T18463] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 492.884998][T18015] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 492.924285][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.935602][T18015] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 492.953050][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 492.972765][T18015] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 493.004693][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.023641][T18015] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 493.062494][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.086699][T18491] netlink: 'syz.2.3147': attribute type 21 has an invalid length. [ 493.357484][T18015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.430231][T18015] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.449281][T15418] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.456937][T15418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.554151][T18518] bridge1: port 1(gretap1) entered blocking state [ 493.574309][T18518] bridge1: port 1(gretap1) entered disabled state [ 493.588002][T18518] gretap1: entered allmulticast mode [ 493.608134][T18518] gretap1: entered promiscuous mode [ 493.763044][T18528] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 493.801092][T18533] ip6erspan1: entered allmulticast mode [ 493.814832][T18534] tipc: Enabled bearer , priority 0 [ 493.853687][T18532] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 493.900146][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.907467][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.946912][T18527] syzkaller0: entered promiscuous mode [ 493.961036][T18527] syzkaller0: entered allmulticast mode [ 494.023957][T18534] tipc: Resetting bearer [ 494.069703][T18544] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 494.098182][T18544] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 494.218930][T18524] tipc: Resetting bearer [ 494.295461][T18524] tipc: Disabling bearer [ 494.331863][T18553] tipc: Enabling of bearer rejected, failed to enable media [ 494.772132][T18574] __nla_validate_parse: 4 callbacks suppressed [ 494.772151][T18574] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3163'. [ 495.367413][T18606] syzkaller0: entered promiscuous mode [ 495.379354][T18606] syzkaller0: entered allmulticast mode [ 495.395050][T18610] tipc: Enabling of bearer rejected, failed to enable media [ 495.532520][T18613] syzkaller1: entered promiscuous mode [ 495.539180][T18613] syzkaller1: entered allmulticast mode [ 495.741538][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3174'. [ 495.762261][T18015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.882646][T18632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3176'. [ 495.909638][T18015] veth0_vlan: entered promiscuous mode [ 495.928847][T18015] veth1_vlan: entered promiscuous mode [ 495.993024][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3177'. [ 496.057415][T18636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3178'. [ 496.096174][T18015] veth0_macvtap: entered promiscuous mode [ 496.138193][T18015] veth1_macvtap: entered promiscuous mode [ 496.223318][T18645] tipc: Enabling of bearer rejected, failed to enable media [ 496.260159][T18648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3184'. [ 496.291160][T18015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.356460][ T296] net_ratelimit: 23 callbacks suppressed [ 496.356479][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 496.397136][ T296] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 496.435798][T18015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.557003][ T1160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.572877][ T1160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.594207][ T1160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.616148][ T1160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.698084][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 496.856637][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 496.878943][T15418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.906192][T15418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.917600][ T296] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 497.003905][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.031662][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.040905][T15428] bond9: (slave batadv0): failed to get link speed/duplex [ 497.156980][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 497.242574][T18682] netlink: 193 bytes leftover after parsing attributes in process `syz.3.3054'. [ 497.260819][T18682] netlink: 'syz.3.3054': attribute type 83 has an invalid length. [ 497.289435][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 497.347324][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 497.417951][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 497.466707][ T296] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 497.805598][ T5651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 497.820839][T18698] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 497.833112][ T5651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 497.846081][ T5651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 497.859813][ T5651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 497.869771][ T5651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 498.467265][T18712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3200'. [ 498.495583][T18712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'. [ 498.590329][T18715] nbd: illegal input index -1113835520 [ 498.969374][T18695] lo speed is unknown, defaulting to 1000 [ 499.301840][T18744] 0ªî{X¹¦: entered promiscuous mode [ 499.311698][T18744] vlan2: entered promiscuous mode [ 499.834960][T18784] __nla_validate_parse: 2 callbacks suppressed [ 499.834977][T18784] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3212'. [ 499.929326][ T5651] Bluetooth: hci4: command tx timeout [ 499.960328][T18695] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.993461][T18695] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.013020][T18695] bridge_slave_0: entered allmulticast mode [ 500.032520][T18695] bridge_slave_0: entered promiscuous mode [ 500.071018][T18695] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.094816][T18695] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.115202][T18695] bridge_slave_1: entered allmulticast mode [ 500.148879][T18695] bridge_slave_1: entered promiscuous mode [ 500.238904][T18695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.279544][T18695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.345011][T18695] team0: Port device team_slave_0 added [ 500.354397][T18695] team0: Port device team_slave_1 added [ 500.398254][T18695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.407731][T18695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.439062][T18804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3216'. [ 500.445825][T18695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.520905][T18695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.543391][T18695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.583595][T18695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.632909][T18815] tipc: Enabling of bearer rejected, failed to enable media [ 500.669813][T18695] hsr_slave_0: entered promiscuous mode [ 500.677090][T18695] hsr_slave_1: entered promiscuous mode [ 500.683661][T18695] debugfs: 'hsr0' already exists in 'hsr' [ 500.690904][T18695] Cannot create hsr debugfs directory [ 500.831072][T18824] netlink: 'syz.3.3221': attribute type 6 has an invalid length. [ 500.847106][T18824] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3221'. [ 501.242199][T18695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.288221][T18695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.326724][T18845] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3226'. [ 501.426418][ T1160] net_ratelimit: 23 callbacks suppressed [ 501.426437][ T1160] bond9: (slave batadv0): failed to get link speed/duplex [ 501.626501][T15418] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 501.651722][T18695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.668280][T18695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.699440][ T5727] IPVS: starting estimator thread 0... [ 501.707251][T18861] IPVS: lc: FWM 3 0x00000003 - no destination available [ 501.761217][T18856] IPVS: Error connecting to the multicast addr [ 501.788640][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 501.808730][T18862] IPVS: using max 35 ests per chain, 84000 per kthread [ 501.963456][T18695] team0: Port device netdevsim1 removed [ 501.974745][T18695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.988018][T18695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.008329][T18870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.016764][ T5651] Bluetooth: hci4: command tx timeout [ 502.025729][T18870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.083445][T18695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.097122][T18695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.136583][ T1160] bond9: (slave batadv0): failed to get link speed/duplex [ 502.169632][T18879] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3233'. [ 502.181270][ T1160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 502.249647][ T1160] bond9: (slave batadv0): failed to get link speed/duplex [ 502.382264][T18893] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3237'. [ 502.406562][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 502.536496][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 502.656520][ T13] bond9: (slave batadv0): failed to get link speed/duplex [ 502.810092][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.114564][T18905] syzkaller0: entered promiscuous mode [ 503.121933][T18905] syzkaller0: entered allmulticast mode [ 504.089936][ T5651] Bluetooth: hci4: command tx timeout [ 505.315525][T18885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.381040][T18695] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 505.414574][T18914] netlink: 'syz.3.3242': attribute type 1 has an invalid length. [ 505.441711][T18695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.493248][T18917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3243'. [ 505.513664][T18914] bond1 (unregistering): Released all slaves [ 505.569527][T18695] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 505.653586][T18695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.667524][T18927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3247'. [ 505.671803][T18695] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 505.692196][T18695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.720498][T18695] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 505.733460][T18695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.813730][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3249'. [ 505.889249][T18942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3249'. [ 505.943316][T18949] netlink: 'syz.2.3249': attribute type 3 has an invalid length. [ 506.079976][T18695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.142060][T18695] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.164515][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.171744][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.184976][ T5651] Bluetooth: hci4: command tx timeout [ 506.221558][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.228888][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.477147][T15418] net_ratelimit: 37 callbacks suppressed [ 506.477167][T15418] bond9: (slave batadv0): failed to get link speed/duplex [ 506.626561][ T1160] bond9: (slave batadv0): failed to get link speed/duplex [ 506.643956][T18975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3259'. [ 506.673861][T18978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3261'. [ 506.695963][T18975] netlink: 'syz.2.3259': attribute type 6 has an invalid length. [ 506.748968][ T1160] bond9: (slave batadv0): failed to get link speed/duplex [ 506.797639][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 506.805244][T18988] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3262'. [ 506.853743][T18987] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3262'. [ 506.877065][T15418] bond9: (slave batadv0): failed to get link speed/duplex [ 506.989781][T15418] bond9: (slave batadv0): failed to get link speed/duplex [ 507.117090][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 507.136456][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3264'. [ 507.145757][T19003] veth1_to_batadv: entered allmulticast mode [ 507.187553][T18695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.237376][T15418] bond9: (slave batadv0): failed to get link speed/duplex [ 507.261753][T19008] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3265'. [ 507.311241][T18695] veth0_vlan: entered promiscuous mode [ 507.358796][T15400] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 507.377098][T15418] bond9: (slave batadv0): failed to get link speed/duplex [ 507.388879][T18695] veth1_vlan: entered promiscuous mode [ 507.441069][T18695] veth0_macvtap: entered promiscuous mode [ 507.459090][T18695] veth1_macvtap: entered promiscuous mode [ 507.524548][T19017] netlink: 'syz.0.3269': attribute type 1 has an invalid length. [ 507.630446][T19017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.693760][T19023] bond1: (slave veth0_to_bond): making interface the new active one [ 507.708216][T19023] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 507.734271][T18695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.798508][T18695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.829254][T19017] macvlan2: entered promiscuous mode [ 507.834622][T19017] macvlan2: entered allmulticast mode [ 507.842232][T19017] bond1: entered promiscuous mode [ 507.854763][T19017] veth0_to_bond: entered promiscuous mode [ 507.863992][T19017] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 507.872343][T19017] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 507.888983][T19017] bond1: left promiscuous mode [ 507.893942][T19017] veth0_to_bond: left promiscuous mode [ 507.913015][T19019] macvlan2: entered promiscuous mode [ 507.918633][T19019] macvlan2: entered allmulticast mode [ 507.924724][T19019] bond1: entered promiscuous mode [ 507.935624][T19019] veth0_to_bond: entered promiscuous mode [ 507.942919][T19019] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 507.951971][T19019] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 507.970424][T19019] bond1: left promiscuous mode [ 507.975417][T19019] veth0_to_bond: left promiscuous mode [ 508.009596][T15418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.019067][T15418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.050510][T15418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.082299][T15418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.358357][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.369430][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.413043][T19043] Cannot find set identified by id 0 to match [ 508.451462][ T296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.474359][ T296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.958474][T19082] netlink: 'syz.4.3283': attribute type 7 has an invalid length. [ 509.262295][T19093] netlink: 'syz.3.3288': attribute type 11 has an invalid length. [ 509.749522][T19109] syzkaller1: entered promiscuous mode [ 509.803662][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.819932][T19109] syzkaller1: entered allmulticast mode [ 509.825716][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.835611][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.855349][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.868093][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.230211][T19127] netlink: 'syz.0.3296': attribute type 3 has an invalid length. [ 510.549698][T19148] __nla_validate_parse: 14 callbacks suppressed [ 510.549717][T19148] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3302'. [ 510.759528][T19156] netlink: 'syz.3.3303': attribute type 4 has an invalid length. [ 510.811267][T19158] netlink: 'syz.3.3303': attribute type 4 has an invalid length. [ 510.822095][T19112] lo speed is unknown, defaulting to 1000 [ 510.954690][T19163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3305'. [ 510.987177][T19163] Bluetooth: MGMT ver 1.23 [ 510.988750][T19165] bridge0: port 3(syz_tun) entered blocking state [ 511.027509][T19165] bridge0: port 3(syz_tun) entered disabled state [ 511.042831][T19165] syz_tun: entered allmulticast mode [ 511.078758][T19165] syz_tun: entered promiscuous mode [ 511.087967][T19165] bridge0: port 3(syz_tun) entered blocking state [ 511.094655][T19165] bridge0: port 3(syz_tun) entered forwarding state [ 511.291549][T19190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3308'. [ 511.315780][T19190] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3308'. [ 511.362381][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3312'. [ 511.497838][ T296] net_ratelimit: 32 callbacks suppressed [ 511.497856][ T296] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 511.608266][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 511.816526][ T296] bond9: (slave batadv0): failed to get link speed/duplex [ 511.930737][ T5651] Bluetooth: hci0: command tx timeout [ 512.032603][ T1160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 512.063743][T19210] syzkaller0: entered promiscuous mode [ 512.091336][T19210] syzkaller0: entered allmulticast mode [ 512.108206][T19224] tipc: Started in network mode [ 512.121284][T19224] tipc: Node identity 00000000000000004000000000000001, cluster identity 4711 [ 512.146337][T19224] tipc: Enabling of bearer rejected, failed to enable media [ 512.156765][T19210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3315'. [ 512.167544][ T1160] bond9: (slave batadv0): failed to get link speed/duplex [ 512.217626][T19213] lo speed is unknown, defaulting to 1000 [ 512.305531][T19217] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3316'. [ 512.337780][T19112] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.359627][T19112] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.393167][T19112] bridge_slave_0: entered allmulticast mode [ 512.411682][T19112] bridge_slave_0: entered promiscuous mode [ 512.436092][T19241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3320'. [ 512.449204][T19240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3321'. [ 512.476845][T19112] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.485107][T19112] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.498679][T19112] bridge_slave_1: entered allmulticast mode [ 512.518871][T19112] bridge_slave_1: entered promiscuous mode [ 512.556404][ T296] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 512.572841][T19247] netlink: 'syz.1.3321': attribute type 10 has an invalid length. [ 512.591242][ T1160] bond9: (slave batadv0): failed to get link speed/duplex [ 512.608871][T19247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3321'. [ 512.680761][T19112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.700393][T19112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.757949][T19247] dummy0: entered promiscuous mode [ 512.806770][ T1160] bond9: (slave batadv0): failed to get link speed/duplex [ 512.964905][T19264] netlink: 'syz.0.3326': attribute type 9 has an invalid length. [ 513.140106][T15400] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 513.201684][T19112] team0: Port device team_slave_0 added [ 513.218691][T19112] team0: Port device team_slave_1 added [ 513.357320][T19264] netlink: 'syz.0.3326': attribute type 9 has an invalid length. [ 513.589932][T19264] netlink: 'syz.0.3326': attribute type 9 has an invalid length. [ 513.676868][ T1160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 513.699609][T19264] netlink: 'syz.0.3326': attribute type 9 has an invalid length. [ 513.710264][T19112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.721489][T19112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.774297][T19112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.806904][T19289] netlink: 'syz.1.3330': attribute type 10 has an invalid length. [ 513.851155][T19289] team0 (unregistering): Port device team_slave_0 removed [ 513.874107][T19289] team0 (unregistering): Port device team_slave_1 removed [ 513.880724][T19274] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 514.007288][ T5651] Bluetooth: hci0: command tx timeout [ 514.043708][T19112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.051308][T19112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.081460][T19112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.276484][T19112] hsr_slave_0: entered promiscuous mode [ 514.291137][T19112] hsr_slave_1: entered promiscuous mode [ 514.313683][T19112] debugfs: 'hsr0' already exists in 'hsr' [ 514.328579][T19112] Cannot create hsr debugfs directory [ 514.582164][T19318] bridge_slave_0: left allmulticast mode [ 514.591055][T19318] bridge_slave_0: left promiscuous mode [ 514.614356][T19318] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.640206][T19318] bridge_slave_1: left allmulticast mode [ 514.649699][T19318] bridge_slave_1: left promiscuous mode [ 514.656025][T19318] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.690119][T19318] bond0: (slave bond_slave_0): Releasing backup interface [ 514.704946][T19318] bond0: (slave bond_slave_1): Releasing backup interface [ 514.743499][T19318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.775226][T19318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.827496][T19318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.843965][T19318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.973230][T19322] tipc: Enabling of bearer rejected, failed to enable media [ 515.059767][T19336] xfrm1: entered allmulticast mode [ 515.272678][T19336] hsr_slave_0: left promiscuous mode [ 515.285056][T19336] hsr_slave_1: left promiscuous mode [ 515.511374][T19112] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.525283][T19112] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.626513][T19370] __nla_validate_parse: 3 callbacks suppressed [ 515.626531][T19370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3348'. [ 515.670385][T19112] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.681122][T19112] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.803414][T19112] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.840741][T19112] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.949077][T19393] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3353'. [ 515.966899][T19112] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.980917][T19112] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.086666][ T5651] Bluetooth: hci0: command tx timeout [ 516.128343][T19395] pimreg9: entered allmulticast mode [ 516.328173][T19112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 516.353440][T19112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.375276][T19112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 516.408984][T19112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.448010][T19112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 516.468290][T19112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.480165][T19112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 516.502397][T19112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.597863][T15415] net_ratelimit: 12 callbacks suppressed [ 516.597880][T15415] bond9: (slave batadv0): failed to get link speed/duplex [ 516.758215][T19355] bond9: (slave batadv0): failed to get link speed/duplex [ 516.786888][T15415] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 516.829076][T19112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.861468][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3363'. [ 516.912589][T19112] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.963203][T15415] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.970580][T15415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.982651][T19428] lo speed is unknown, defaulting to 1000 [ 517.020428][T15415] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.028054][T15415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.253801][T19440] tipc: Started in network mode [ 517.267711][T19440] tipc: Node identity 86ecada0398a, cluster identity 4711 [ 517.279610][T19440] tipc: Enabled bearer , priority 0 [ 517.288196][T19438] lo speed is unknown, defaulting to 1000 [ 517.326537][T15399] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 517.377593][T19440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'. [ 517.446766][T19448] syzkaller0: entered promiscuous mode [ 517.453756][T19448] syzkaller0: entered allmulticast mode [ 517.462518][T19448] tipc: Resetting bearer [ 517.698626][T19355] tipc: Resetting bearer [ 517.753527][T19439] tipc: Resetting bearer [ 517.856461][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 518.172597][ T5651] Bluetooth: hci0: command tx timeout [ 518.386464][T15404] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 518.907008][T15404] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 519.454369][T19353] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 519.988984][T19353] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 520.089446][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 520.512578][T19354] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 520.993678][T19439] tipc: Disabling bearer [ 521.143878][T19459] bridge_slave_0: left allmulticast mode [ 521.150409][T19459] bridge_slave_0: left promiscuous mode [ 521.158923][T19459] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.173558][T19459] bridge_slave_1: left allmulticast mode [ 521.180400][T19459] bridge_slave_1: left promiscuous mode [ 521.188052][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3374'. [ 521.199519][T19459] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.216864][T19459] bond0: (slave bond_slave_0): Releasing backup interface [ 521.230687][T19459] bond0: (slave bond_slave_1): Releasing backup interface [ 521.253699][T19459] team0: Port device team_slave_0 removed [ 521.268278][T19459] team0: Port device team_slave_1 removed [ 521.277259][T19459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.286021][T19459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.299233][ T5762] tipc: Node number set to 3211177376 [ 521.606407][ T57] net_ratelimit: 5 callbacks suppressed [ 521.606425][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 521.634233][T19489] tipc: Enabling of bearer rejected, failed to enable media [ 521.738064][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 521.867239][T15404] bond9: (slave batadv0): failed to get link speed/duplex [ 521.986487][T15404] bond9: (slave batadv0): failed to get link speed/duplex [ 522.058952][T15404] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 522.075139][T19508] lo speed is unknown, defaulting to 1000 [ 522.106449][T15415] bond9: (slave batadv0): failed to get link speed/duplex [ 522.200213][T19517] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3385'. [ 522.294122][T19112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.458184][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 522.517511][T19112] veth0_vlan: entered promiscuous mode [ 522.538483][T19112] veth1_vlan: entered promiscuous mode [ 522.608272][T19112] veth0_macvtap: entered promiscuous mode [ 522.614273][T15415] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 522.652707][T19112] veth1_macvtap: entered promiscuous mode [ 522.686960][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 522.721038][T19112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.745292][T19543] netlink: 'syz.1.3393': attribute type 21 has an invalid length. [ 522.768241][T19542] netlink: 'syz.3.3392': attribute type 4 has an invalid length. [ 522.776455][T19543] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3393'. [ 522.781638][T19112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.793435][T19544] netlink: 'syz.1.3393': attribute type 2 has an invalid length. [ 522.819449][T19548] netlink: 'syz.3.3392': attribute type 4 has an invalid length. [ 522.875230][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.899363][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.918732][T15415] bond9: (slave batadv0): failed to get link speed/duplex [ 522.954908][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.989967][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.209863][T19559] syzkaller0: entered promiscuous mode [ 523.215604][T19559] syzkaller0: entered allmulticast mode [ 523.222931][T19561] netlink: 'syz.4.3398': attribute type 6 has an invalid length. [ 523.227797][T19559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3397'. [ 523.233141][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.248694][T19561] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3398'. [ 523.261578][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.266494][T19559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3397'. [ 523.345213][T19565] netlink: 5252 bytes leftover after parsing attributes in process `syz.4.3398'. [ 523.381680][T19353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.406257][T19353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.547382][T19488] udevd[19488]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 523.658391][T19578] : option downdelay: invalid value (18446744073709547007) [ 523.667621][T19578] : option downdelay: allowed values 0 - 2147483647 [ 523.675795][T19578]  (unregistering): Released all slaves [ 523.763264][T19589] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3403'. [ 524.005490][T19601] netlink: 'syz.3.3408': attribute type 4 has an invalid length. [ 524.049285][T19601] netlink: 'syz.3.3408': attribute type 4 has an invalid length. [ 524.382019][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3412'. [ 524.918905][T19654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3418'. [ 525.099387][T19650] dummy0: left promiscuous mode [ 525.186113][T19669] netlink: 'syz.0.3423': attribute type 4 has an invalid length. [ 525.237517][T19670] netlink: 'syz.0.3423': attribute type 4 has an invalid length. [ 525.569068][T19675] Bluetooth: MGMT ver 1.23 [ 526.322663][T19733] __nla_validate_parse: 2 callbacks suppressed [ 526.322680][T19733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'. [ 526.417167][T19737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3435'. [ 526.719912][T19756] netlink: 'syz.1.3440': attribute type 3 has an invalid length. [ 526.737579][T19756] netlink: 594 bytes leftover after parsing attributes in process `syz.1.3440'. [ 526.738403][T15405] net_ratelimit: 30 callbacks suppressed [ 526.738416][T15405] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 526.807186][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 526.941282][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 527.070597][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 527.206816][T15408] bond9: (slave batadv0): failed to get link speed/duplex [ 527.316534][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 527.357672][T15405] bond9: (slave batadv0): failed to get link speed/duplex [ 527.499979][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 527.687883][T15408] bond9: (slave batadv0): failed to get link speed/duplex [ 527.848217][T15408] bond9: (slave batadv0): failed to get link speed/duplex [ 528.074376][T19838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3457'. [ 528.100068][T19833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3453'. [ 528.118799][T19837] validate_nla: 2 callbacks suppressed [ 528.118816][T19837] netlink: 'syz.1.3457': attribute type 1 has an invalid length. [ 528.172283][T19833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3453'. [ 528.734287][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3459'. [ 528.740876][T19837] bond1: entered promiscuous mode [ 528.786829][T19837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.868026][T19840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.882005][T19840] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 528.894724][T19840] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 528.912197][T19840] bond1: (slave gre1): making interface the new active one [ 528.919669][T19840] gre1: entered promiscuous mode [ 528.929001][T19840] bond1: (slave gre1): Enslaving as an active interface with an up link [ 529.029776][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.056341][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.083010][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.105376][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.134311][T19830] lo speed is unknown, defaulting to 1000 [ 529.755552][T19906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3472'. [ 529.782167][T19906] netlink: 'syz.0.3472': attribute type 1 has an invalid length. [ 529.804834][T19906] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3472'. [ 529.809383][T19910] netlink: 'syz.1.3473': attribute type 4 has an invalid length. [ 530.003614][T19921] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.3477'. [ 530.052051][T19926] tipc: Enabling of bearer rejected, failed to enable media [ 530.370555][T19941] netlink: 'syz.3.3483': attribute type 4 has an invalid length. [ 530.418119][T19943] netlink: 'syz.3.3483': attribute type 4 has an invalid length. [ 530.625147][T19936] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 530.664364][T19936] bond2: (slave lo): Enslaving as an active interface with an up link [ 531.313554][T19971] netlink: 'syz.3.3490': attribute type 1 has an invalid length. [ 531.554822][T19988] tipc: Enabling of bearer rejected, failed to enable media [ 531.801152][ T57] net_ratelimit: 26 callbacks suppressed [ 531.801172][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 531.939207][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 531.967785][T19354] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 532.018536][T20017] netlink: 'syz.3.3500': attribute type 4 has an invalid length. [ 532.031137][T20017] netlink: 'syz.3.3500': attribute type 4 has an invalid length. [ 532.066970][T19354] bond9: (slave batadv0): failed to get link speed/duplex [ 532.186413][T15408] bond9: (slave batadv0): failed to get link speed/duplex [ 532.388838][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 532.516707][T15405] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 532.547055][T20051] __nla_validate_parse: 2 callbacks suppressed [ 532.547072][T20051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3507'. [ 532.548357][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 532.589549][T20052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'. [ 532.680717][T20057] netlink: 'syz.0.3510': attribute type 1 has an invalid length. [ 532.703411][T20059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3511'. [ 532.719665][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3511'. [ 532.795692][T20064] netlink: 'syz.1.3512': attribute type 4 has an invalid length. [ 532.813102][T20057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.827187][T15408] bond9: (slave batadv0): failed to get link speed/duplex [ 532.936573][T15408] bond9: (slave batadv0): failed to get link speed/duplex [ 533.054274][T20075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3514'. [ 533.058838][T20069] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 533.124118][T20072] lo speed is unknown, defaulting to 1000 [ 533.194823][T20080] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3516'. [ 533.278640][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3517'. [ 533.964169][T20130] validate_nla: 1 callbacks suppressed [ 533.964188][T20130] netlink: 'syz.2.3526': attribute type 4 has an invalid length. [ 534.048248][T20133] netlink: 'syz.2.3526': attribute type 4 has an invalid length. [ 534.347919][T20144] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3530'. [ 534.617954][T20172] netlink: 'syz.2.3539': attribute type 4 has an invalid length. [ 534.635104][T20173] netlink: 'syz.3.3540': attribute type 7 has an invalid length. [ 534.648006][T20176] netlink: 'syz.1.3538': attribute type 1 has an invalid length. [ 534.669822][T20181] netlink: 'syz.2.3539': attribute type 4 has an invalid length. [ 534.682798][T20174] bond3: option resend_igmp: invalid value (2878) [ 534.689380][T20180] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3541'. [ 534.689690][T20179] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3541'. [ 534.709891][T20174] bond3: option resend_igmp: allowed values 0 - 255 [ 534.719304][T20174] bond3 (unregistering): Released all slaves [ 534.761676][T20176] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 534.983309][T20173] lo speed is unknown, defaulting to 1000 [ 535.087642][T20200] set match dimension is over the limit! [ 535.091536][T20194] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.108742][T20194] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.518316][T20212] syzkaller0: entered promiscuous mode [ 535.532226][T20212] syzkaller0: entered allmulticast mode [ 535.768429][ T8335] IPVS: starting estimator thread 0... [ 535.836121][T20240] xt_hashlimit: size too large, truncated to 1048576 [ 535.904006][T20238] IPVS: using max 31 ests per chain, 74400 per kthread [ 536.738629][T20282] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 536.856992][T15404] net_ratelimit: 26 callbacks suppressed [ 536.857013][T15404] bond9: (slave batadv0): failed to get link speed/duplex [ 536.937680][T20303] netlink: zone id is out of range [ 536.960816][T20303] netlink: zone id is out of range [ 536.977498][T20303] netlink: zone id is out of range [ 536.989802][T20303] netlink: zone id is out of range [ 536.995194][T20303] netlink: zone id is out of range [ 537.007914][T15404] bond9: (slave batadv0): failed to get link speed/duplex [ 537.022956][T20303] netlink: zone id is out of range [ 537.136434][T15404] bond9: (slave batadv0): failed to get link speed/duplex [ 537.176360][T15408] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 537.219750][T20317] bridge_slave_0: left allmulticast mode [ 537.229985][T20317] bridge_slave_0: left promiscuous mode [ 537.237369][T20317] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.289943][T20317] bridge_slave_1: left allmulticast mode [ 537.305930][T20317] bridge_slave_1: left promiscuous mode [ 537.314926][T20317] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.382144][T20317] bond0: (slave bond_slave_0): Releasing backup interface [ 537.458949][T20317] bond0: (slave bond_slave_1): Releasing backup interface [ 537.509611][T20317] team0: Port device team_slave_0 removed [ 537.543876][T20317] team0: Port device team_slave_1 removed [ 537.567583][T20317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.585674][T20317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.622109][T20317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.645018][T20317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.713327][T20329] tipc: Started in network mode [ 537.734569][T20329] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 537.778758][T20329] tipc: Enabled bearer , priority 0 [ 537.877273][T20340] __nla_validate_parse: 14 callbacks suppressed [ 537.877294][T20340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3573'. [ 537.923377][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3573'. [ 538.130696][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3574'. [ 538.646714][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 539.765903][T15154] tipc: Node number set to 11578026 [ 539.782705][T19354] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.838218][T19354] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.858048][T19354] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.911482][T19354] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.347629][T20415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3585'. [ 540.374272][T20415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'. [ 540.463962][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3587'. [ 540.557474][T20421] lo speed is unknown, defaulting to 1000 [ 540.559263][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3589'. [ 540.979646][T20440] netlink: 'syz.4.3591': attribute type 6 has an invalid length. [ 541.034011][T20440] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3591'. [ 541.108648][T20447] netlink: 5252 bytes leftover after parsing attributes in process `syz.4.3591'. [ 541.565553][T20470] netlink: 'syz.0.3594': attribute type 4 has an invalid length. [ 541.617331][T20473] netlink: 'syz.0.3594': attribute type 4 has an invalid length. [ 541.986353][ T57] net_ratelimit: 18 callbacks suppressed [ 541.986370][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 542.107209][T20491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3600'. [ 542.158547][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 542.270421][T20501] xt_connbytes: Forcing CT accounting to be enabled [ 542.339686][T19354] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 542.466375][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 542.539753][T20519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.607546][T15405] bond9: (slave batadv0): failed to get link speed/duplex [ 542.644396][T20531] netlink: 'syz.2.3607': attribute type 1 has an invalid length. [ 542.676165][T20533] netlink: 'syz.3.3609': attribute type 4 has an invalid length. [ 542.737514][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 542.740037][T20533] netlink: 'syz.3.3609': attribute type 4 has an invalid length. [ 542.825036][T20532] nft_compat: unsupported protocol 1 [ 542.852597][T20537] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.879073][T20548] netlink: Unknown conntrack attr (type=12807, max=9) [ 542.906712][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 542.999934][T20548] nbd: socks must be embedded in a SOCK_ITEM attr [ 543.047208][T15408] bond9: (slave batadv0): failed to get link speed/duplex [ 543.064457][T20548] block nbd5: shutting down sockets [ 543.078191][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 543.242431][T20547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 543.295119][T20567] __nla_validate_parse: 5 callbacks suppressed [ 543.295135][T20567] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3615'. [ 543.404227][T20560] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3613'. [ 543.483667][T20571] nbd: socks must be embedded in a SOCK_ITEM attr [ 543.805472][T20547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.004218][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3619'. [ 544.041331][T20547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.281600][T20547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.309418][T20613] bridge0: port 3(batadv1) entered blocking state [ 544.334845][T20613] bridge0: port 3(batadv1) entered disabled state [ 544.359488][T20613] batadv1: entered allmulticast mode [ 544.382489][T20613] batadv1: entered promiscuous mode [ 544.611683][T20627] netlink: 'syz.0.3625': attribute type 1 has an invalid length. [ 544.750602][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.808743][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 544.818531][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 544.871801][T20631] bond3: (slave geneve2): making interface the new active one [ 544.909603][T20649] netlink: 'syz.1.3628': attribute type 32 has an invalid length. [ 544.927481][T20631] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 544.937866][T20650] netlink: 'syz.1.3628': attribute type 32 has an invalid length. [ 545.014647][T20631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3625'. [ 545.069965][T20636] netlink: 'syz.0.3625': attribute type 49 has an invalid length. [ 545.090503][T15405] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 545.102246][T15405] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 545.145067][T20631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 545.301264][T15405] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 545.330896][T15405] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 545.359694][T15405] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.590464][T15405] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.600216][T15405] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.815669][T20683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'. [ 546.127103][T20688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3635'. [ 546.138583][T20688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3635'. [ 546.367655][T20694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3636'. [ 546.434943][T20698] netlink: 'syz.4.3637': attribute type 89 has an invalid length. [ 546.474824][T20694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 546.541710][T20699] bond3: (slave veth3): Enslaving as an active interface with an up link [ 546.601258][T20702] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 546.614171][T20702] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 546.821050][T20717] netlink: 'syz.4.3641': attribute type 3 has an invalid length. [ 547.024225][T15405] net_ratelimit: 22 callbacks suppressed [ 547.024245][T15405] bond9: (slave batadv0): failed to get link speed/duplex [ 547.056855][T20605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.058779][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 547.243392][T19354] bond9: (slave batadv0): failed to get link speed/duplex [ 547.375143][T20723] block nbd4: NBD_DISCONNECT [ 547.380299][T19354] bond9: (slave batadv0): failed to get link speed/duplex [ 547.488946][T15405] bond9: (slave batadv0): failed to get link speed/duplex [ 547.616684][T19354] bond9: (slave batadv0): failed to get link speed/duplex [ 547.635841][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3645'. [ 547.687232][T15404] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 547.737813][T15404] bond9: (slave batadv0): failed to get link speed/duplex [ 547.846792][T15405] bond9: (slave batadv0): failed to get link speed/duplex [ 547.869466][T20759] netlink: 'syz.0.3652': attribute type 1 has an invalid length. [ 547.925298][T20759] bond4: entered promiscuous mode [ 547.931773][T20759] bond4: entered allmulticast mode [ 547.939485][T20759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 547.982216][T20769] netlink: 'syz.3.3650': attribute type 9 has an invalid length. [ 547.989724][T20766] erspan1: entered allmulticast mode [ 547.999050][T20769] netlink: 160896 bytes leftover after parsing attributes in process `syz.3.3650'. [ 548.043294][T20766] bond4: (slave erspan1): making interface the new active one [ 548.071560][T20766] erspan1: entered promiscuous mode [ 548.117432][T20766] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 548.177850][T15404] bond9: (slave batadv0): failed to get link speed/duplex [ 548.313653][ T5651] block nbd4: Receive control failed (result -104) [ 548.313660][ T50] block nbd4: Receive control failed (result -32) [ 548.315001][T16837] block nbd4: Receive control failed (result -32) [ 548.373543][T20777] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 548.395385][T20777] syzkaller1: linktype set to 769 [ 548.438402][T20794] __nla_validate_parse: 1 callbacks suppressed [ 548.438418][T20794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3659'. [ 548.455182][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3658'. [ 548.455589][T20794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3659'. [ 548.467823][T20796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3660'. [ 548.839696][T20815] netlink: 'syz.4.3663': attribute type 4 has an invalid length. [ 548.897695][T20815] netlink: 'syz.4.3663': attribute type 4 has an invalid length. [ 549.112580][T20832] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3667'. [ 549.156104][T20838] syzkaller0: entered promiscuous mode [ 549.172080][T20838] syzkaller0: entered allmulticast mode [ 549.525969][T20861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3674'. [ 549.715675][T20874] xt_l2tp: v2 sid > 0xffff: 8388608 [ 549.830695][T20878] netlink: 'syz.4.3677': attribute type 5 has an invalid length. [ 549.940942][T20881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3678'. [ 550.035024][T20889] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3682'. [ 550.199918][T20897] lo speed is unknown, defaulting to 1000 [ 550.220716][T20894] netlink: 'syz.3.3683': attribute type 4 has an invalid length. [ 550.433742][T20906] nbd: must specify at least one socket [ 550.760724][T20924] netlink: 'syz.2.3691': attribute type 7 has an invalid length. [ 550.895949][T20927] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3692'. [ 551.010587][T20934] netlink: 'syz.2.3694': attribute type 1 has an invalid length. [ 551.020632][T20934] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3694'. [ 551.261733][T19354] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.290833][T19354] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.315493][T19354] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.336810][T19354] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.886786][T20978] m1Ie5nè‹Ò: entered promiscuous mode [ 552.095152][ T57] net_ratelimit: 36 callbacks suppressed [ 552.095172][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 552.103287][T20988] validate_nla: 5 callbacks suppressed [ 552.103305][T20988] netlink: 'syz.3.3711': attribute type 1 has an invalid length. [ 552.155199][T20988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 552.205053][T20988] vlan2: entered promiscuous mode [ 552.213638][T20988] bond2: entered promiscuous mode [ 552.221820][T20988] vlan2: entered allmulticast mode [ 552.234978][T20988] bond2: entered allmulticast mode [ 552.327139][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 552.367618][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 552.431475][T20998] tipc: Enabling of bearer rejected, failed to enable media [ 552.496387][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 552.616940][T19354] bond9: (slave batadv0): failed to get link speed/duplex [ 552.693735][T21009] netlink: 'syz.0.3716': attribute type 4 has an invalid length. [ 552.715937][T21009] netlink: 'syz.0.3716': attribute type 4 has an invalid length. [ 552.737418][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 552.856348][T15404] bond9: (slave batadv0): failed to get link speed/duplex [ 552.865665][T19354] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 552.997843][T15404] bond9: (slave batadv0): failed to get link speed/duplex [ 553.071927][T21028] macsec1: entered allmulticast mode [ 553.092175][T21028] bond0: entered allmulticast mode [ 553.126926][T21028] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 553.169786][T21028] bond0: left allmulticast mode [ 553.305781][T21036] tipc: Enabling of bearer rejected, failed to enable media [ 553.408196][T19354] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 553.433342][T21025] netlink: 'syz.4.3720': attribute type 11 has an invalid length. [ 554.011434][T21072] gretap0: entered promiscuous mode [ 554.037251][T21072] macvlan2: entered promiscuous mode [ 554.062314][T21072] gretap0: left promiscuous mode [ 554.122658][T21081] netlink: 'syz.4.3732': attribute type 11 has an invalid length. [ 554.188034][T21085] __nla_validate_parse: 10 callbacks suppressed [ 554.188054][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3732'. [ 554.374278][T21084] lo speed is unknown, defaulting to 1000 [ 554.611911][T21097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3734'. [ 554.651768][T21097] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3734'. [ 554.681144][T21097] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3734'. [ 554.700931][T21097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3734'. [ 555.252616][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3743'. [ 555.262471][T21130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3743'. [ 555.404037][T21136] netlink: 'syz.0.3744': attribute type 9 has an invalid length. [ 555.482576][T21139] netlink: 'syz.0.3744': attribute type 1 has an invalid length. [ 555.685548][T21136] vlan2: entered promiscuous mode [ 555.705768][T21139] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3744'. [ 555.722767][T21136] macvlan0: entered promiscuous mode [ 555.754080][T21136] vlan2: entered allmulticast mode [ 555.788411][T21136] macvlan0: entered allmulticast mode [ 555.806456][T21136] veth1_vlan: entered allmulticast mode [ 555.867095][T21157] netlink: 'syz.4.3750': attribute type 11 has an invalid length. [ 555.899198][T21164] netlink: 'syz.2.3752': attribute type 15 has an invalid length. [ 555.933515][T21164] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3752'. [ 556.044741][T21164] bond1: entered promiscuous mode [ 556.051150][T21164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 556.089022][T21164] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3752'. [ 556.142119][T21171] lo speed is unknown, defaulting to 1000 [ 556.272340][T21182] netlink: 'syz.0.3756': attribute type 4 has an invalid length. [ 556.343409][T21182] netlink: 'syz.0.3756': attribute type 4 has an invalid length. [ 556.426080][T21189] netlink: 'syz.4.3759': attribute type 1 has an invalid length. [ 556.622160][T16837] block nbd5: Receive control failed (result -32) [ 557.207659][ T36] net_ratelimit: 29 callbacks suppressed [ 557.207679][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 557.370747][T21234] lo speed is unknown, defaulting to 1000 [ 557.387140][T15405] bond9: (slave batadv0): failed to get link speed/duplex [ 557.409467][T21241] netlink: 'syz.2.3771': attribute type 2 has an invalid length. [ 557.557020][T19354] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 557.747442][T21231] lo speed is unknown, defaulting to 1000 [ 558.137930][T19355] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 558.686526][ T36] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 558.825389][T21322] netlink: 'syz.4.3786': attribute type 4 has an invalid length. [ 558.839265][T21298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.852351][T21324] netlink: 'syz.3.3785': attribute type 4 has an invalid length. [ 558.864910][T21298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 558.877817][T21326] netlink: 'syz.4.3786': attribute type 4 has an invalid length. [ 558.899738][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 558.903418][T21319] netlink: 'syz.3.3785': attribute type 4 has an invalid length. [ 558.931095][T21328] netlink: 'syz.1.3787': attribute type 4 has an invalid length. [ 558.970664][T21323] netlink: 'syz.1.3787': attribute type 4 has an invalid length. [ 559.094163][T21298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.135005][T21298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.241896][T15404] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 559.495399][T21298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.519595][T21345] nbd6: detected capacity change from 0 to 127 [ 559.521006][T21298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.560028][T16837] block nbd6: Receive control failed (result -32) [ 559.590808][T20402] block nbd6: Dead connection, failed to find a fallback [ 559.622037][T20402] block nbd6: shutting down sockets [ 559.652775][T20402] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.669990][T20402] Buffer I/O error on dev nbd6, logical block 0, async page read [ 559.679643][T20402] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.684297][T21359] __nla_validate_parse: 7 callbacks suppressed [ 559.684315][T21359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3793'. [ 559.696408][T20402] Buffer I/O error on dev nbd6, logical block 1, async page read [ 559.719330][T20402] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.736523][T15404] bond9: (slave batadv0): failed to get link speed/duplex [ 559.746785][T20402] Buffer I/O error on dev nbd6, logical block 2, async page read [ 559.756187][T20402] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.782045][T19354] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 559.782369][T20402] Buffer I/O error on dev nbd6, logical block 3, async page read [ 559.864539][T20402] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.911867][T20402] Buffer I/O error on dev nbd6, logical block 0, async page read [ 559.938897][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3793'. [ 559.952448][T20402] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.976671][T20402] Buffer I/O error on dev nbd6, logical block 1, async page read [ 560.029048][T20402] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.043605][T20402] Buffer I/O error on dev nbd6, logical block 2, async page read [ 560.072287][T20402] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.095350][T20402] Buffer I/O error on dev nbd6, logical block 3, async page read [ 560.119284][T20402] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.140543][T20402] Buffer I/O error on dev nbd6, logical block 0, async page read [ 560.159340][T20402] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 560.177351][T20402] Buffer I/O error on dev nbd6, logical block 1, async page read [ 560.190341][T21298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.202794][T20402] ldm_validate_partition_table(): Disk read failed. [ 560.222470][T21298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 560.235517][T20402] Dev nbd6: unable to read RDB block 0 [ 560.274309][T20402] nbd6: unable to read partition table [ 560.302234][T21298] [ 560.304667][T21298] ====================================================== [ 560.311994][T21298] WARNING: possible circular locking dependency detected [ 560.320674][T21298] syzkaller #0 Not tainted [ 560.325079][T21298] ------------------------------------------------------ [ 560.334030][T21298] syz.0.3783/21298 is trying to acquire lock: [ 560.340828][T21298] ffff88801be8d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 560.351365][T21298] [ 560.351365][T21298] but task is already holding lock: [ 560.359185][T21298] ffffffff8f390060 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 560.368151][T21298] [ 560.368151][T21298] which lock already depends on the new lock. [ 560.368151][T21298] [ 560.378718][T21298] [ 560.378718][T21298] the existing dependency chain (in reverse order) is: [ 560.388033][T21298] [ 560.388033][T21298] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 560.396704][T21298] __mutex_lock+0x1a3/0x1550 [ 560.402872][T21298] get_device_parent+0x16f/0x3a0 [ 560.408780][T21298] device_add+0x2e1/0xbb0 [ 560.413638][T21298] device_create+0x269/0x300 [ 560.418746][T21298] msr_device_create+0x33/0x50 [ 560.424109][T21298] cpuhp_invoke_callback+0x445/0x860 [ 560.429992][T21298] cpuhp_thread_fun+0x36b/0x780 [ 560.435362][T21298] smpboot_thread_fn+0x541/0xa50 [ 560.440811][T21298] kthread+0x389/0x470 [ 560.445390][T21298] ret_from_fork+0x514/0xb70 [ 560.450748][T21298] ret_from_fork_asm+0x1a/0x30 [ 560.456463][T21298] [ 560.456463][T21298] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 560.464097][T21298] cpuhp_thread_fun+0x127/0x780 [ 560.469499][T21298] smpboot_thread_fn+0x541/0xa50 [ 560.475210][T21298] kthread+0x389/0x470 [ 560.479793][T21298] ret_from_fork+0x514/0xb70 [ 560.485022][T21298] ret_from_fork_asm+0x1a/0x30 [ 560.490313][T21298] [ 560.490313][T21298] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 560.498120][T21298] cpus_read_lock+0x42/0x160 [ 560.503223][T21298] static_key_slow_inc+0x12/0x30 [ 560.508674][T21298] ipv6_flowlabel_opt+0x1b94/0x29c0 [ 560.514391][T21298] do_ipv6_setsockopt+0xd9f/0x3150 [ 560.520014][T21298] ipv6_setsockopt+0x59/0x170 [ 560.525290][T21298] do_sock_setsockopt+0x17c/0x1b0 [ 560.530824][T21298] __x64_sys_setsockopt+0x13d/0x1b0 [ 560.536531][T21298] do_syscall_64+0x174/0x580 [ 560.541648][T21298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.548069][T21298] [ 560.548069][T21298] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 560.555796][T21298] lock_sock_nested+0x41/0x100 [ 560.561102][T21298] inet_shutdown+0x6a/0x390 [ 560.566121][T21298] nbd_mark_nsock_dead+0x2e9/0x560 [ 560.571748][T21298] recv_work+0x1c2e/0x1d40 [ 560.576691][T21298] process_scheduled_works+0xb5d/0x1860 [ 560.582744][T21298] worker_thread+0xa53/0xfc0 [ 560.587839][T21298] kthread+0x389/0x470 [ 560.593045][T21298] ret_from_fork+0x514/0xb70 [ 560.598146][T21298] ret_from_fork_asm+0x1a/0x30 [ 560.603614][T21298] [ 560.603614][T21298] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 560.611912][T21298] __mutex_lock+0x1a3/0x1550 [ 560.617665][T21298] nbd_queue_rq+0x37b/0x1100 [ 560.622914][T21298] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 560.629356][T21298] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 560.636756][T21298] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 560.643970][T21298] blk_mq_run_hw_queue+0x348/0x4f0 [ 560.651546][T21298] blk_mq_dispatch_list+0xd16/0xe10 [ 560.658056][T21298] blk_mq_flush_plug_list+0x48d/0x570 [ 560.664142][T21298] __blk_flush_plug+0x3ed/0x4d0 [ 560.669618][T21298] __submit_bio+0x28d/0x580 [ 560.675435][T21298] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 560.682205][T21298] block_read_full_folio+0x599/0x830 [ 560.688447][T21298] filemap_read_folio+0x137/0x3b0 [ 560.694554][T21298] do_read_cache_folio+0x358/0x590 [ 560.700293][T21298] read_part_sector+0xb6/0x2b0 [ 560.706008][T21298] adfspart_check_ICS+0xb1/0x960 [ 560.711466][T21298] bdev_disk_changed+0x817/0x1770 [ 560.717129][T21298] blkdev_get_whole+0x380/0x510 [ 560.722501][T21298] bdev_open+0x31e/0xd30 [ 560.727258][T21298] blkdev_open+0x470/0x610 [ 560.732202][T21298] do_dentry_open+0x822/0x13a0 [ 560.737475][T21298] vfs_open+0x3b/0x340 [ 560.742139][T21298] path_openat+0x2e08/0x3860 [ 560.747248][T21298] do_file_open+0x23e/0x4a0 [ 560.752259][T21298] do_sys_openat2+0x113/0x200 [ 560.757442][T21298] __x64_sys_openat+0x138/0x170 [ 560.762829][T21298] do_syscall_64+0x174/0x580 [ 560.767948][T21298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.775003][T21298] [ 560.775003][T21298] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 560.782207][T21298] __mutex_lock+0x1a3/0x1550 [ 560.787313][T21298] nbd_queue_rq+0xc6/0x1100 [ 560.792332][T21298] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 560.798405][T21298] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 560.805244][T21298] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 560.811757][T21298] blk_mq_run_hw_queue+0x348/0x4f0 [ 560.817381][T21298] blk_mq_dispatch_list+0xd16/0xe10 [ 560.823088][T21298] blk_mq_flush_plug_list+0x48d/0x570 [ 560.828973][T21298] __blk_flush_plug+0x3ed/0x4d0 [ 560.834331][T21298] __submit_bio+0x28d/0x580 [ 560.839389][T21298] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 560.845529][T21298] block_read_full_folio+0x599/0x830 [ 560.851325][T21298] filemap_read_folio+0x137/0x3b0 [ 560.857380][T21298] do_read_cache_folio+0x358/0x590 [ 560.863436][T21298] read_part_sector+0xb6/0x2b0 [ 560.868706][T21298] adfspart_check_ICS+0xb1/0x960 [ 560.874174][T21298] bdev_disk_changed+0x817/0x1770 [ 560.879704][T21298] blkdev_get_whole+0x380/0x510 [ 560.885066][T21298] bdev_open+0x31e/0xd30 [ 560.889820][T21298] blkdev_open+0x470/0x610 [ 560.894746][T21298] do_dentry_open+0x822/0x13a0 [ 560.900014][T21298] vfs_open+0x3b/0x340 [ 560.904593][T21298] path_openat+0x2e08/0x3860 [ 560.909699][T21298] do_file_open+0x23e/0x4a0 [ 560.914737][T21298] do_sys_openat2+0x113/0x200 [ 560.919925][T21298] __x64_sys_openat+0x138/0x170 [ 560.925458][T21298] do_syscall_64+0x174/0x580 [ 560.930656][T21298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.937108][T21298] [ 560.937108][T21298] -> #5 (set->srcu){.+.+}-{0:0}: [ 560.944256][T21298] __synchronize_srcu+0xca/0x300 [ 560.950051][T21298] elevator_switch+0x1e8/0x7a0 [ 560.955408][T21298] elevator_change+0x2cc/0x450 [ 560.960948][T21298] elevator_set_default+0x36c/0x430 [ 560.966673][T21298] blk_register_queue+0x3e9/0x4e0 [ 560.972333][T21298] __add_disk+0x677/0xd50 [ 560.977192][T21298] add_disk_fwnode+0xfb/0x480 [ 560.982471][T21298] nbd_dev_add+0x72c/0xb50 [ 560.987492][T21298] nbd_init+0x168/0x1f0 [ 560.992165][T21298] do_one_initcall+0x250/0x870 [ 560.997748][T21298] do_initcall_level+0x104/0x190 [ 561.003203][T21298] do_initcalls+0x59/0xa0 [ 561.008650][T21298] kernel_init_freeable+0x2a6/0x3e0 [ 561.014481][T21298] kernel_init+0x1d/0x1d0 [ 561.019593][T21298] ret_from_fork+0x514/0xb70 [ 561.024964][T21298] ret_from_fork_asm+0x1a/0x30 [ 561.033628][T21298] [ 561.033628][T21298] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 561.041563][T21298] __mutex_lock+0x1a3/0x1550 [ 561.046794][T21298] elevator_change+0x1b3/0x450 [ 561.052336][T21298] elevator_set_none+0xb5/0x140 [ 561.057726][T21298] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 561.064910][T21298] nbd_start_device+0x17f/0xb10 [ 561.070360][T21298] nbd_genl_connect+0x165b/0x1cf0 [ 561.077046][T21298] genl_family_rcv_msg_doit+0x22a/0x330 [ 561.083501][T21298] genl_rcv_msg+0x61c/0x7a0 [ 561.088738][T21298] netlink_rcv_skb+0x232/0x4b0 [ 561.094166][T21298] genl_rcv+0x28/0x40 [ 561.098685][T21298] netlink_unicast+0x75c/0x8e0 [ 561.104242][T21298] netlink_sendmsg+0x813/0xb40 [ 561.109917][T21298] ____sys_sendmsg+0x972/0x9f0 [ 561.115203][T21298] ___sys_sendmsg+0x2a5/0x360 [ 561.120572][T21298] __x64_sys_sendmsg+0x1bd/0x2a0 [ 561.126020][T21298] do_syscall_64+0x174/0x580 [ 561.131120][T21298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.137542][T21298] [ 561.137542][T21298] -> #3 (&q->q_usage_counter(io)#69){++++}-{0:0}: [ 561.146148][T21298] blk_alloc_queue+0x546/0x680 [ 561.151440][T21298] __blk_mq_alloc_disk+0x197/0x390 [ 561.157082][T21298] nbd_dev_add+0x499/0xb50 [ 561.162017][T21298] nbd_genl_connect+0x962/0x1cf0 [ 561.167476][T21298] genl_family_rcv_msg_doit+0x22a/0x330 [ 561.173551][T21298] genl_rcv_msg+0x61c/0x7a0 [ 561.178574][T21298] netlink_rcv_skb+0x232/0x4b0 [ 561.183855][T21298] genl_rcv+0x28/0x40 [ 561.188347][T21298] netlink_unicast+0x75c/0x8e0 [ 561.193619][T21298] netlink_sendmsg+0x813/0xb40 [ 561.198894][T21298] ____sys_sendmsg+0x972/0x9f0 [ 561.204167][T21298] ___sys_sendmsg+0x2a5/0x360 [ 561.209352][T21298] __x64_sys_sendmsg+0x1bd/0x2a0 [ 561.214799][T21298] do_syscall_64+0x174/0x580 [ 561.219896][T21298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.226302][T21298] [ 561.226302][T21298] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 561.233512][T21298] fs_reclaim_acquire+0x71/0x100 [ 561.238966][T21298] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 561.245195][T21298] alloc_inode+0xb8/0x1b0 [ 561.250034][T21298] iget_locked+0x131/0x6a0 [ 561.255314][T21298] kernfs_get_inode+0x4f/0x780 [ 561.260593][T21298] kernfs_get_tree+0x5cd/0x980 [ 561.265866][T21298] sysfs_get_tree+0x46/0x110 [ 561.271053][T21298] vfs_get_tree+0x92/0x2a0 [ 561.275996][T21298] do_new_mount+0x341/0xd30 [ 561.281009][T21298] __se_sys_mount+0x31d/0x420 [ 561.286191][T21298] do_syscall_64+0x174/0x580 [ 561.291303][T21298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.297708][T21298] [ 561.297708][T21298] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 561.305688][T21298] down_write+0x96/0x200 [ 561.310442][T21298] kernfs_remove_by_name_ns+0x4e/0x140 [ 561.316417][T21298] device_links_driver_bound+0x54f/0x14e0 [ 561.322656][T21298] driver_bound+0xd8/0x2e0 [ 561.327599][T21298] really_probe+0x789/0xaf0 [ 561.332609][T21298] __driver_probe_device+0x1ef/0x380 [ 561.338399][T21298] driver_probe_device+0x4f/0x240 [ 561.344099][T21298] __device_attach_driver+0x279/0x430 [ 561.350005][T21298] bus_for_each_drv+0x258/0x2f0 [ 561.355367][T21298] __device_attach+0x2c5/0x450 [ 561.360639][T21298] device_initial_probe+0xa1/0xd0 [ 561.366166][T21298] bus_probe_device+0x12a/0x220 [ 561.371523][T21298] device_add+0x7e9/0xbb0 [ 561.376398][T21298] faux_device_create_with_groups+0x189/0x290 [ 561.382989][T21298] regulator_dummy_init+0x19/0x40 [ 561.388535][T21298] regulator_init+0xca/0x110 [ 561.393637][T21298] do_one_initcall+0x250/0x870 [ 561.398913][T21298] do_initcall_level+0x104/0x190 [ 561.404358][T21298] do_initcalls+0x59/0xa0 [ 561.409197][T21298] kernel_init_freeable+0x2a6/0x3e0 [ 561.414906][T21298] kernel_init+0x1d/0x1d0 [ 561.419747][T21298] ret_from_fork+0x514/0xb70 [ 561.424848][T21298] ret_from_fork_asm+0x1a/0x30 [ 561.430119][T21298] [ 561.430119][T21298] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 561.438702][T21298] __lock_acquire+0x15a5/0x2cf0 [ 561.444061][T21298] lock_acquire+0x106/0x350 [ 561.449071][T21298] down_read+0x47/0x2e0 [ 561.453828][T21298] kernfs_remove+0x35/0x80 [ 561.458752][T21298] __kobject_del+0xe1/0x330 [ 561.463765][T21298] kobject_del+0x45/0x60 [ 561.468515][T21298] cleanup_glue_dir+0x1a3/0x220 [ 561.473875][T21298] device_del+0x780/0x8f0 [ 561.478712][T21298] unregister_netdevice_many_notify+0x1b5a/0x20c0 [ 561.485645][T21298] unregister_netdevice_queue+0x31f/0x360 [ 561.491893][T21298] nsim_destroy+0x26d/0x7f0 [ 561.497039][T21298] __nsim_dev_port_del+0x14f/0x200 [ 561.502683][T21298] nsim_dev_reload_destroy+0x288/0x490 [ 561.508656][T21298] nsim_dev_reload_down+0x8a/0xc0 [ 561.514230][T21298] devlink_reload+0x1eb/0x8c0 [ 561.519598][T21298] devlink_nl_reload_doit+0xaaa/0xc80 [ 561.525485][T21298] genl_family_rcv_msg_doit+0x22a/0x330 [ 561.532865][T21298] genl_rcv_msg+0x61c/0x7a0 [ 561.537898][T21298] netlink_rcv_skb+0x232/0x4b0 [ 561.544141][T21298] genl_rcv+0x28/0x40 [ 561.549366][T21298] netlink_unicast+0x75c/0x8e0 [ 561.554847][T21298] netlink_sendmsg+0x813/0xb40 [ 561.560684][T21298] ____sys_sendmsg+0x972/0x9f0 [ 561.566619][T21298] ___sys_sendmsg+0x2a5/0x360 [ 561.571921][T21298] __x64_sys_sendmsg+0x1bd/0x2a0 [ 561.578437][T21298] do_syscall_64+0x174/0x580 [ 561.583553][T21298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.590060][T21298] [ 561.590060][T21298] other info that might help us debug this: [ 561.590060][T21298] [ 561.600286][T21298] Chain exists of: [ 561.600286][T21298] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 561.600286][T21298] [ 561.613675][T21298] Possible unsafe locking scenario: [ 561.613675][T21298] [ 561.621127][T21298] CPU0 CPU1 [ 561.626674][T21298] ---- ---- [ 561.632024][T21298] lock(gdp_mutex); [ 561.636877][T21298] lock(cpuhp_state-up); [ 561.643738][T21298] lock(gdp_mutex); [ 561.651252][T21298] rlock(&root->kernfs_supers_rwsem); [ 561.656733][T21298] [ 561.656733][T21298] *** DEADLOCK *** [ 561.656733][T21298] [ 561.665834][T21298] 5 locks held by syz.0.3783/21298: [ 561.671031][T21298] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 561.679215][T21298] #1: ffff888079cef128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 561.690792][T21298] #2: ffff888079ce9258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 561.702128][T21298] #3: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0 [ 561.711550][T21298] #4: ffffffff8f390060 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 561.720756][T21298] [ 561.720756][T21298] stack backtrace: [ 561.727509][T21298] CPU: 1 UID: 0 PID: 21298 Comm: syz.0.3783 Not tainted syzkaller #0 PREEMPT(full) [ 561.727531][T21298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 561.727541][T21298] Call Trace: [ 561.727551][T21298] [ 561.727559][T21298] dump_stack_lvl+0xe8/0x150 [ 561.727578][T21298] print_circular_bug+0x2e1/0x300 [ 561.727597][T21298] check_noncircular+0x12e/0x150 [ 561.727614][T21298] __lock_acquire+0x15a5/0x2cf0 [ 561.727635][T21298] ? kernfs_remove+0x35/0x80 [ 561.727650][T21298] lock_acquire+0x106/0x350 [ 561.727674][T21298] ? kernfs_remove+0x35/0x80 [ 561.727694][T21298] down_read+0x47/0x2e0 [ 561.727708][T21298] ? kernfs_remove+0x35/0x80 [ 561.727724][T21298] kernfs_remove+0x35/0x80 [ 561.727739][T21298] __kobject_del+0xe1/0x330 [ 561.727756][T21298] kobject_del+0x45/0x60 [ 561.727770][T21298] cleanup_glue_dir+0x1a3/0x220 [ 561.727784][T21298] device_del+0x780/0x8f0 [ 561.727797][T21298] ? __pfx_device_del+0x10/0x10 [ 561.727809][T21298] ? netdev_unregister_kobject+0x344/0x450 [ 561.727827][T21298] unregister_netdevice_many_notify+0x1b5a/0x20c0 [ 561.727849][T21298] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 561.727871][T21298] unregister_netdevice_queue+0x31f/0x360 [ 561.727887][T21298] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 561.727905][T21298] nsim_destroy+0x26d/0x7f0 [ 561.727926][T21298] __nsim_dev_port_del+0x14f/0x200 [ 561.727940][T21298] nsim_dev_reload_destroy+0x288/0x490 [ 561.727955][T21298] nsim_dev_reload_down+0x8a/0xc0 [ 561.727969][T21298] devlink_reload+0x1eb/0x8c0 [ 561.728129][T21298] ? __pfx_devlink_reload+0x10/0x10 [ 561.728145][T21298] ? devlink_resources_validate+0xa7/0xd0 [ 561.728162][T21298] ? devlink_resources_validate+0xa7/0xd0 [ 561.728178][T21298] devlink_nl_reload_doit+0xaaa/0xc80 [ 561.728196][T21298] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 561.728212][T21298] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 561.728230][T21298] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 561.728249][T21298] genl_family_rcv_msg_doit+0x22a/0x330 [ 561.728265][T21298] ? __asan_memcpy+0x40/0x70 [ 561.728283][T21298] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 561.728304][T21298] ? bpf_lsm_capable+0x9/0x20 [ 561.728315][T21298] ? security_capable+0x7e/0x2c0 [ 561.728334][T21298] genl_rcv_msg+0x61c/0x7a0 [ 561.728352][T21298] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.728366][T21298] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 561.728380][T21298] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 561.728394][T21298] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 561.728409][T21298] ? __pfx_ref_tracker_free+0x10/0x10 [ 561.728426][T21298] netlink_rcv_skb+0x232/0x4b0 [ 561.728439][T21298] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.728454][T21298] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.728472][T21298] ? down_read+0x270/0x2e0 [ 561.728486][T21298] ? genl_rcv+0xd/0x40 [ 561.728502][T21298] genl_rcv+0x28/0x40 [ 561.728516][T21298] netlink_unicast+0x75c/0x8e0 [ 561.728532][T21298] netlink_sendmsg+0x813/0xb40 [ 561.728548][T21298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.728563][T21298] ? aa_sock_msg_perm+0xf1/0x1b0 [ 561.728581][T21298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.728599][T21298] ____sys_sendmsg+0x972/0x9f0 [ 561.728613][T21298] ? __might_fault+0xaf/0x130 [ 561.728631][T21298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.728647][T21298] ? import_iovec+0x73/0xa0 [ 561.728662][T21298] ___sys_sendmsg+0x2a5/0x360 [ 561.728674][T21298] ? __lock_acquire+0x6b5/0x2cf0 [ 561.728695][T21298] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.728710][T21298] ? futex_wake+0x4ac/0x580 [ 561.728743][T21298] ? __fget_files+0x2a/0x420 [ 561.728758][T21298] ? __fget_files+0x3a0/0x420 [ 561.728775][T21298] __x64_sys_sendmsg+0x1bd/0x2a0 [ 561.728789][T21298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.728805][T21298] ? rcu_is_watching+0x15/0xb0 [ 561.728822][T21298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.728835][T21298] do_syscall_64+0x174/0x580 [ 561.728848][T21298] ? trace_irq_disable+0x3b/0x140 [ 561.728865][T21298] ? clear_bhb_loop+0x40/0x90 [ 561.728878][T21298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.728891][T21298] RIP: 0033:0x7ffadbd9ce59 [ 561.728905][T21298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.728917][T21298] RSP: 002b:00007ffadcc77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.728932][T21298] RAX: ffffffffffffffda RBX: 00007ffadc015fa0 RCX: 00007ffadbd9ce59 [ 561.728941][T21298] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 561.728949][T21298] RBP: 00007ffadbe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 561.728957][T21298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.728965][T21298] R13: 00007ffadc016038 R14: 00007ffadc015fa0 R15: 00007fff63ec91a8 [ 561.728979][T21298] [ 562.218796][T20402] ldm_validate_partition_table(): Disk read failed. [ 562.231431][ T36] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 562.253332][T20402] Dev nbd6: unable to read RDB block 0 [ 562.302305][T20402] nbd6: unable to read partition table [ 562.345262][T21376] ieee80211 phy103: Selected rate control algorithm 'minstrel_ht' [ 562.376335][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 562.430002][T19354] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 562.445690][T19354] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 562.478580][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 562.487518][ T57] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 562.502776][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 562.513068][ T57] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 562.525999][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 562.535472][ T57] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 562.549292][T19354] bond9: (slave batadv0): failed to get link speed/duplex [ 562.666433][T15405] bond9: (slave batadv0): failed to get link speed/duplex [ 562.776358][T15405] bond9: (slave batadv0): failed to get link speed/duplex [ 562.806501][T19354] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 562.886654][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 562.996375][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 563.106378][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 563.216500][T19354] bond9: (slave batadv0): failed to get link speed/duplex [ 564.247625][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.336598][ T36] net_ratelimit: 44 callbacks suppressed [ 567.336629][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 567.436446][ T36] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 567.459067][T19354] bond9: (slave batadv0): failed to get link speed/duplex [ 567.576987][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 567.686792][T15405] bond9: (slave batadv0): failed to get link speed/duplex [ 567.796720][ T57] bond9: (slave batadv0): failed to get link speed/duplex [ 567.916400][ T36] bond9: (slave batadv0): failed to get link speed/duplex [ 567.966521][T19354] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 568.026568][T19354] bond9: (slave batadv0): failed to get link speed/duplex [ 568.146554][ T57] bond9: (slave batadv0): failed to get link speed/duplex