last executing test programs: 5.007415188s ago: executing program 4 (id=4433): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r0, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a", 0x4e}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000040)="ec", 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e00000001000090500000000fdffffff6f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d28"], 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040) syz_emit_ethernet(0x7b, &(0x7f00000008c0)=ANY=[], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000500)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x42566000) 4.574332637s ago: executing program 1 (id=4436): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) nanosleep(&(0x7f0000000500), &(0x7f0000000540)) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000280)}}], 0x2, 0x24040800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r8}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0xac, r9, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x2b}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d4b461c9fa0e52f2242c28bef53a9c37c5f665a41a8482cb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c7155fbcc09610f95c6cb2e447f74917a7780472ffff99df"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8004090}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000000000006600000008000300", @ANYRES32=r12, @ANYBLOB="080026006e0900000800b700f9000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4.373158522s ago: executing program 4 (id=4439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000340)={0xfffffff9, {{0x2, 0x4e22, @loopback}}}, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x164, 0x24, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x9, 0xfff2}, {0xd}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe6, 0x9, 0x309, 0xffffffc0, 0x0, 0x8, 0x80000000, 0x1}}, {0x6, 0x2, [0x3a]}}]}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x9, 0xfffe, 0x8093, 0x1, 0x2000, 0x400, 0x8}}, {0x14, 0x2, [0x300, 0x6, 0x5, 0xfffd, 0x5c, 0x35c9, 0x7e1, 0x5]}}, {{0x1c, 0x1, {0x6, 0x5, 0x8, 0x1000, 0x1, 0x5, 0xba, 0x4}}, {0xc, 0x2, [0x8000, 0x2, 0x200, 0x9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}, @TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x6, 0x7, 0x7, 0x0, 0x7ff, 0x3, 0x7}}, {0x12, 0x2, [0xfffe, 0x80, 0x1, 0x6, 0x3, 0x8, 0x2]}}, {{0x1c, 0x1, {0x2, 0x4, 0x1, 0x4, 0x1, 0xb, 0x0, 0x5}}, {0xe, 0x2, [0xfffb, 0x3, 0x3, 0x7f, 0x6d23]}}, {{0x1c, 0x1, {0x0, 0x8, 0x656c, 0x3, 0x0, 0x81, 0x9, 0x3}}, {0xa, 0x2, [0x2, 0x101, 0x6]}}, {{0x1c, 0x1, {0x7, 0x31, 0x7f, 0xf, 0x2, 0x6, 0x0, 0x6}}, {0x10, 0x2, [0x8, 0x1ff, 0x7, 0x8, 0x8, 0x200]}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xf490}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048004}, 0x20008080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 4.301929211s ago: executing program 0 (id=4441): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000380)}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 4.148802415s ago: executing program 1 (id=4442): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000080)={0xe, 0xc208, 0x6, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) openat$cgroup_devices(r7, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r10, 0x58, &(0x7f0000000600)}, 0x10) 4.093440169s ago: executing program 4 (id=4443): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x7}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYBLOB="010379102c71950029a804"], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x40008d0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x160, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf7c9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe6a}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb5e5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdd5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x448a1}, 0x24000040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090325bd7000fcdbdf250800000008000300", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB="ff419179ee770d2b33d1acb4bd1a67260457d5fb041b997af0cf5b12c82cc815d7463af9195035bf8b2160690140449a6bd587693b2aeaaa7c957b2fc747eb50c006c9c3c86ccd2929c3e89d4ce108f45d45dce7491b5d9cee30411afb7a305e7b3e9f946b07d806b080e6871b8a9c97e5d4d7d781b610d1e6e86f1c452a41d875b4428a572c1a834c983c0e85c6906bb5e323ae064b600615c5f88e891bbd55d80290e6a684befc0fb184b889c8a1"], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x11, 0x0, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0xb080067e550ab67d) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ab0000000060a010400000000000000000a0000040900010073797a310000000038000480100001800c0001006e6f747261636b00240001800b0001006578746864720000140002800800064000000002080007400000000b0900020073797a32"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1108204}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)=@delsa={0x208, 0x11, 0x10, 0x70bd29, 0x25dfdbfc, {@in=@loopback, 0x4d4, 0x2, 0x3c}, [@iptfs_drop_time={0x8, 0x24, 0x101}, @algo_auth={0xad, 0x1, {{'sha3-512-generic\x00'}, 0x328, "12d6574973bb1ee248f6d295cff601adbd672a615285a38adf3959b684a0040ad19642604cb75784d44b77d2a8bce6e5ba5b7133b49404f917143e56cc58c3b5667a212bcc7b40de76178a913877ca1aa51312fbb91d3833eec5894d599afb1e29295d4777"}}, @policy_type={0xa}, @algo_comp={0x66, 0x3, {{'deflate\x00'}, 0xf0, "1595e1f8472d20405e517e2b43ed2dec7ae456dc819920a25bbf2e1a6079"}}, @algo_auth_trunc={0xac, 0x14, {{'blake2s-224-x86\x00'}, 0x300, 0x200, "3485625a72484e3194aaddce57f7fc5c04fa57c48d6db020f1568a2155d012a85bf040dd2674530a2afeb01248de1103335ebcc0ff00dbeee0e732a397fe8bd2be90646d5c6c87b7c24dc32f5955b3d77aadd4d4aff959d02fbf834d048748f5"}}, @replay_thresh={0x8, 0xb, 0x5}]}, 0x208}, 0x1, 0x0, 0x0, 0x8001}, 0x10) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x10000000, 0x88, 0x9c4}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x18000}, 0x10) r13 = socket(0xa, 0x3, 0x3a) getsockopt$inet_IP_XFRM_POLICY(r13, 0x3a, 0x11, 0x0, 0x0) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e0000000000000000000000050006003a0000000a00000400000000fc00000000000000000000000000000000000000000000000200010000000000000003180000000005000500000000000a"], 0x70}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x17c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x7, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x0, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x0, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @coaddr={0x14, 0xe, @in=@local}, @tfcpad={0x8, 0x16, 0x4}, @extra_flags={0x8, 0x18, 0xffffff77}]}, 0x17c}, 0x1, 0x0, 0x0, 0x880}, 0x200040c4) 3.456621957s ago: executing program 4 (id=4444): socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB="44000000100001045915aa0553d018fb00000000", @ANYRES32=r1, @ANYBLOB="0305000000000000240012800c0001006d6163766c616e001400028006000200000000000800010010"], 0x44}, 0x1, 0x0, 0x0, 0x200000a4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'batadv0\x00', 'gre0\x00'}, 0x0, 0x100, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x3, 0x0, 0x7, 0x3ff}, {0x4}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xfffd, 0x2, 0x0, 0x0, "1ca8cb60a1d8235bc6c25bb4f87a3bc0fd5f5508e8f4a9bf65cddc9b23c9d87a29a94942b3e6a6c9b05899bf3ac6b3d190bc8430552eeddb62273b536c87cd50"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x370) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x120, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x0, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xa, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2b8) 3.343495595s ago: executing program 3 (id=4445): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016800c0001"], 0x4c}}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x28011, r0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) unshare(0x26020480) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xee, 0x4000004) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="d8000000100081044e81f782db44b96d001d006a0f000000050000002900150006000e2603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de643ec0dd6e4edef76874fbe0f32b1608621e9e0", 0xd8}], 0x1}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d38000911171000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x0, 0x24, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8000, 0x0, 0x3}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r8, 0x25, 0x0, @void}, 0x10) 3.283092091s ago: executing program 2 (id=4446): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x28, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2b4}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x20008800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f00000004c0)=r6}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000080)=ANY=[], 0x0) socket(0x1a, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) unshare(0x2a020400) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "01a102e9493a5d5b"}}}}}}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x431}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 3.011796273s ago: executing program 0 (id=4447): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xffffffff000) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000400)=@generic={0x2, 0x7, 0x7ff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="44050000", @ANYRES16=r3, @ANYBLOB="00022bbd7000ffdbdf251d0000000c0099000300000033000000080003", @ANYRES32=r4, @ANYBLOB="08000100fdffffff0c009900300900006400000008000100800000"], 0x44}, 0x1, 0x0, 0x0, 0x1c0d1}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000082400000180100000020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f7ffffff8500000006000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x75, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf2510", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20008815}, 0x4008080) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="6002ffff90780000fe06e2d4c3d903030ffe08f989685e71d2080a000000180000000013124e605bf25192a300c2efcb6d690c8f93220213121d84e6a66d55953b1f80f150d3d20782000000"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x9, 0xfffffffa, 0xa, 0x0, 0xe0ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0xe0ff, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7f, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x573ecac7, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r9}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 2.943998405s ago: executing program 1 (id=4448): r0 = socket(0x2, 0x80805, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r3, &(0x7f0000000500)=""/4096, 0x1000) splice(r1, 0x0, r4, 0x0, 0x400000008000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x100, 0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=ANY=[@ANYBLOB="00010000036d0b"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003240)=@newtfilter={0x100, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x7}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc0, 0x2, [@TCA_BASIC_ACT={0xa0, 0x3, [@m_sample={0x30, 0x8, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_connmark={0x6c, 0x15, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x3, 0x10000000, 0x80, 0xfffffffb}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x6, 0x3, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}]}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x100}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x844) close(0x3) 2.007370311s ago: executing program 3 (id=4449): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r0, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a", 0x4e}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000040)="ec", 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e00000001000090500000000fdffffff6f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d28"], 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040) syz_emit_ethernet(0x7b, &(0x7f00000008c0)=ANY=[], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000500)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x42566000) 1.943045695s ago: executing program 0 (id=4450): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) nanosleep(&(0x7f0000000500), &(0x7f0000000540)) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000280)}}], 0x2, 0x24040800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r8}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x70, r9, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x2b}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "d4b461c9fa0e52f2242c28bef53a9c37c5f665a41a8482cb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "223b1201e034af5cc63095cd9179813f9a0f3a5c074d7c6a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "c7155fbcc09610f95c6cb2e447f74917a7780472ffff99df"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x0, 0xe8, @broadcast}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x9, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004090}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.90915834s ago: executing program 2 (id=4451): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa00000000000071106e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff000000000000000085100000020000008500000007"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x11, 0x2, 0x300, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r2, 0x0, 0x6, 0xb) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'sh\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x0, 0xfffffffe}, {@loopback, 0x4e21, 0x1, 0x1}}, 0x44) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 1.708091767s ago: executing program 4 (id=4452): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4000}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000ffc19cd11bfb922d6ab7c2f8e63502d622b1b83d9449e3e2cf8e47222ca8b619f46232c45afb3a8feb8db8ff"]) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="84020201"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x41}, 0x2}}}, &(0x7f0000000040)=0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f0000000440)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3b45d1032005eabe97b4de33a47d3a158da988cbce88726b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead340ee988f55c527e299f7f9c02030000000000000072d70992e2c017c79dd30838882d44b6a0f5fb766412a4077a1114b306510b8b098a19d0923182661fe2", 0x90}], 0x3, 0x0, 0x0, 0x40000}], 0x1, 0x40800) close(0x4) 1.644120568s ago: executing program 2 (id=4453): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) nanosleep(&(0x7f0000000500), &(0x7f0000000540)) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000280)}}], 0x2, 0x24040800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r8}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0xac, r9, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x2b}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d4b461c9fa0e52f2242c28bef53a9c37c5f665a41a8482cb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c7155fbcc09610f95c6cb2e447f74917a7780472ffff99df"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8004090}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000000000006600000008000300", @ANYRES32=r12, @ANYBLOB="080026006e0900000800b700f9000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.637687463s ago: executing program 1 (id=4454): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x7}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYBLOB="010379102c71950029a804"], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x40008d0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x160, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf7c9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe6a}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb5e5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdd5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x448a1}, 0x24000040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090325bd7000fcdbdf250800000008000300", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB="ff419179ee770d2b33d1acb4bd1a67260457d5fb041b997af0cf5b12c82cc815d7463af9195035bf8b2160690140449a6bd587693b2aeaaa7c957b2fc747eb50c006c9c3c86ccd2929c3e89d4ce108f45d45dce7491b5d9cee30411afb7a305e7b3e9f946b07d806b080e6871b8a9c97e5d4d7d781b610d1e6e86f1c452a41d875b4428a572c1a834c983c0e85c6906bb5e323ae064b600615c5f88e891bbd55d80290e6a684befc0fb184b889c8a1"], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x11, 0x0, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0xb080067e550ab67d) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ab0000000060a010400000000000000000a0000040900010073797a310000000038000480100001800c0001006e6f747261636b00240001800b0001006578746864720000140002800800064000000002080007400000000b0900020073797a32"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1108204}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)=@delsa={0x208, 0x11, 0x10, 0x70bd29, 0x25dfdbfc, {@in=@loopback, 0x4d4, 0x2, 0x3c}, [@iptfs_drop_time={0x8, 0x24, 0x101}, @algo_auth={0xad, 0x1, {{'sha3-512-generic\x00'}, 0x328, "12d6574973bb1ee248f6d295cff601adbd672a615285a38adf3959b684a0040ad19642604cb75784d44b77d2a8bce6e5ba5b7133b49404f917143e56cc58c3b5667a212bcc7b40de76178a913877ca1aa51312fbb91d3833eec5894d599afb1e29295d4777"}}, @policy_type={0xa}, @algo_comp={0x66, 0x3, {{'deflate\x00'}, 0xf0, "1595e1f8472d20405e517e2b43ed2dec7ae456dc819920a25bbf2e1a6079"}}, @algo_auth_trunc={0xac, 0x14, {{'blake2s-224-x86\x00'}, 0x300, 0x200, "3485625a72484e3194aaddce57f7fc5c04fa57c48d6db020f1568a2155d012a85bf040dd2674530a2afeb01248de1103335ebcc0ff00dbeee0e732a397fe8bd2be90646d5c6c87b7c24dc32f5955b3d77aadd4d4aff959d02fbf834d048748f5"}}, @replay_thresh={0x8, 0xb, 0x5}]}, 0x208}, 0x1, 0x0, 0x0, 0x8001}, 0x10) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x10000000, 0x88, 0x9c4}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x18000}, 0x10) r13 = socket(0xa, 0x3, 0x3a) getsockopt$inet_IP_XFRM_POLICY(r13, 0x3a, 0x11, 0x0, 0x0) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e0000000000000000000000050006003a0000000a00000400000000fc00000000000000000000000000000000000000000000000200010000000000000003180000000005000500000000000a"], 0x70}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x17c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x7, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x0, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x0, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @coaddr={0x14, 0xe, @in=@local}, @tfcpad={0x8, 0x16, 0x4}, @extra_flags={0x8, 0x18, 0xffffff77}]}, 0x17c}, 0x1, 0x0, 0x0, 0x880}, 0x200040c4) 1.575957593s ago: executing program 3 (id=4455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r10, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000080)={0xe, 0xc208, 0x6, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) openat$cgroup_devices(r9, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r12, 0x58, &(0x7f0000000600)}, 0x10) 1.493163089s ago: executing program 4 (id=4456): openat$rfkill(0xffffffffffffff9c, 0x0, 0xec601, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="2e9b5b00ace03dd6d1", 0x9}], 0x1) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) close(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf9a9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xae}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r1, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r1, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt(r1, 0x0, 0x488, 0x0, 0x0) setsockopt(r1, 0x0, 0x484, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/44, 0x2c) r2 = socket$kcm(0x29, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000003800)={0x86e, 0x8000000000000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0xb, 0x10000005, 0x8c45, 0xd73}, 0x5b, 0xf}, [{0x5c, 0x71e, 0x3, 0xfffffffe, 0x6, 0x1}, {0x5, 0x40, 0x2, 0xd, 0x401}, {0x5, 0xc, 0x8, 0xfffffffb, 0x3, 0xfffffffb}, {0x8, 0xfffffffc, 0x16, 0x9, 0x2, 0x9}, {0x20000000, 0x80000000, 0x3, 0x1, 0x76}, {0x10001, 0x459e, 0x0, 0xb8a5, 0x5, 0x8}, {0x8, 0x2, 0x1ff, 0xfffffffa, 0x8, 0x3}, {0x1b, 0x8, 0x900000, 0xfffffff8, 0x5, 0x8}, {0x9, 0x1, 0x9, 0x10, 0x4}, {0x0, 0xcc, 0x3, 0xffff, 0x7, 0x7}, {0x8, 0x6, 0xdc5, 0x3, 0x3, 0xfffffffa}, {0xa8, 0x5, 0x10000, 0xffffffff, 0x6b0c, 0x8e2}, {0x6, 0x8, 0x200, 0x1, 0x0, 0xffffffff}, {0x2, 0x3, 0x9, 0x0, 0x1, 0x8}, {0x7, 0x30000000, 0x4, 0xb, 0x5, 0x7}, {0x7fff, 0x6, 0x3, 0x6, 0x64, 0x6}, {0xa, 0x9, 0x6, 0x8, 0xfb}, {0xb1, 0xa37, 0xfffffeff, 0x100, 0x200, 0x7fff}, {0x100, 0x3, 0x8, 0x9, 0x7, 0x8}, {0x4e91, 0x7, 0xffffffff, 0x40f, 0x11, 0x1b}, {0xffff, 0x2, 0xfffffff0, 0x101, 0x7ff, 0x6}, {0x1, 0xb, 0x3, 0x5, 0xfffffffc, 0x5}, {0x2, 0x2, 0x400, 0x1a76, 0xa, 0x800}, {0xa578, 0x5, 0x5, 0x9c, 0x675, 0x88b}, {0xfffff221, 0x101, 0x5, 0xfffffff9, 0x80000000, 0x81}, {0x5, 0x0, 0x7, 0x0, 0xb, 0x3}, {0x3, 0xc11, 0x400, 0x6, 0x53f, 0x9}, {0x3, 0x7, 0x6, 0x4, 0x4, 0x4}, {0x5, 0x401, 0x1, 0x6, 0x4, 0x1ff}, {0xffffffff, 0x40089cf3, 0x5, 0x3, 0x9, 0x800}, {0x0, 0x2, 0x4, 0x9, 0x2}, {0x29f, 0xca, 0x0, 0x1, 0x5, 0xfffffffa}, {0x10001, 0x10001, 0x10, 0x4, 0x10000, 0x6}, {0xae7, 0x800, 0x80000001, 0xf, 0x6, 0x6}, {0x4, 0x4, 0x8, 0x2, 0x9, 0x4c}, {0x4, 0x1, 0xfffffff7, 0xcc, 0x7ff, 0xeb9a}, {0x8001, 0x3, 0x2bd2, 0x1621, 0x3, 0x2}, {0x8, 0xfffffe00, 0x9, 0xd5e, 0x5, 0xfffffffe}, {0x6, 0x4, 0x6, 0x11f, 0xc, 0x1}, {0x5, 0x101, 0x721, 0x100, 0x908, 0x8}, {0x2597, 0xa, 0x9, 0x8, 0x80000001, 0x4}, {0x3, 0x7fffffff, 0x200, 0x8ad, 0xd34e}, {0x7fff, 0x800, 0x6, 0x2, 0x7, 0xb2f6}, {0x4, 0xc7, 0x6c, 0xfffffd20, 0x7, 0x1}, {0x401, 0x5, 0x3, 0xdf, 0x8, 0x5}, {0x5, 0x1, 0xe, 0x2, 0x6, 0xa2fe}, {0xfffff685, 0xfff, 0x4, 0xa6c, 0x9, 0x5}, {0x10, 0xc771, 0x1, 0x37, 0xe3f, 0x3ff}, {0x7, 0x0, 0xa, 0x1000, 0x6, 0x401}, {0x5, 0x3ff, 0x5, 0xff, 0x10000, 0x3}, {0x2, 0x9, 0xafa5, 0x0, 0x1, 0x4}, {0x4, 0x40, 0x8, 0xa, 0x2, 0xfffffff7}, {0xb, 0x1, 0x3, 0x100, 0xb, 0x7}, {0x100, 0x995, 0x374e, 0x9, 0x1000, 0xffffdb76}, {0x3, 0x4, 0xa6de, 0x9bf4, 0x3, 0x6}, {0x7ff, 0x0, 0x9, 0x0, 0xfffffffa, 0x1}, {0x7, 0x929, 0x7f, 0xe0000, 0x2, 0x81}, {0x1, 0x34, 0x0, 0x5, 0xe22, 0x6}, {0xfffffffc, 0xaadf, 0xbc7, 0x6, 0x8, 0x2}, {0x6ef, 0x3, 0x9, 0x7, 0x4, 0x8000}, {0x2, 0x1, 0x2, 0xc3c1, 0x7, 0x4bbd}, {0x3ff, 0x4, 0xfffffffe, 0x100, 0x7fffffff, 0x3}, {0x7, 0x2, 0xff, 0x9, 0xb5a1, 0x2}, {0x9, 0x9, 0xffff, 0x100, 0xf8000000, 0x8000}, {0x0, 0xfff, 0x7, 0x7, 0xffffffff, 0xfffffffe}, {0x5, 0x9, 0x80, 0x9, 0x6, 0x9250}, {0x3, 0x5, 0x81, 0x4, 0x1, 0x6}, {0x6, 0x7fffffff, 0x0, 0x1b, 0x39, 0x4}, {0x5, 0x3ff, 0x40, 0x7, 0xffff, 0x5}, {0x24, 0x53956696, 0x81, 0x4, 0x3, 0x5}, {0x80000001, 0x7, 0xcdf6, 0x5, 0x2, 0x8001}, {0x10000, 0x400, 0x4, 0x1, 0x618, 0x1}, {0xf1, 0x5, 0xfffffbff, 0x5, 0x400, 0xa6}, {0x4, 0x7ff, 0x5, 0x8, 0x800, 0x8}, {0x8, 0x1, 0x1000, 0x100, 0x4, 0x45f2}, {0xd8, 0x8, 0x5, 0xf8b, 0x6, 0xb5}, {0x6, 0x7, 0xe9, 0x80, 0x5, 0xa}, {0x2, 0x0, 0x4, 0x400, 0x1, 0x6}, {0xfa9, 0x3, 0x0, 0xffff, 0x0, 0x3}, {0x99, 0x9, 0x6, 0x3, 0x5, 0x10000}, {0x7fff, 0x4, 0x6, 0x2, 0x48, 0x5}, {0xffffb1c7, 0x7, 0x80000001, 0x1, 0x800, 0xb54f}, {0x2, 0x1, 0x1000, 0x101, 0x9, 0xf7}, {0xfffff000, 0x7, 0x7, 0x6ba, 0x6}, {0x6, 0x0, 0x5, 0x6a79, 0x545, 0x7}, {0xfffffffc, 0x2c04, 0x7, 0x8000000, 0x4, 0x8000}, {0xffff, 0x7fff, 0x3, 0x3, 0x4, 0x8}, {0x100, 0x400, 0x4800000, 0x835, 0x4, 0xe09}, {0x4, 0x7b, 0xff, 0xfff, 0x1, 0x9}, {0x18000000, 0x9, 0x833b, 0xfffff251, 0x5, 0xa}, {0xf, 0x1, 0x8, 0x2, 0x5}, {0x40, 0xfffffffc, 0x4, 0x7f, 0x7, 0x3}, {0x2e, 0x80000001, 0x7fff, 0x3, 0x3, 0x401}, {0x9, 0xacc, 0xd, 0x1, 0x95e, 0x5}, {0x9c2, 0x6, 0x4, 0xffffffff, 0x1000}, {0x7b8, 0x5, 0xb, 0xa, 0x8, 0x200}, {0xf, 0xb7a, 0xe, 0x6, 0xc1, 0x7}, {0x7, 0x5f6b0af1, 0x6, 0x54, 0x0, 0x1000}, {0x78f6, 0x46000000, 0x0, 0x6, 0x8, 0xee96}, {0xfffffffe, 0x7, 0x80000001, 0xff, 0x0, 0x5}, {0x40, 0xf29, 0x9, 0xb, 0xcb, 0x1}, {0x91cb, 0x3, 0x0, 0x7, 0x3}, {0x9, 0xd0f, 0x8, 0xfffffffb, 0x8, 0x2}, {0x401, 0x7fffffff, 0x800, 0xfffff001, 0xc}, {0x6, 0x9, 0xc000, 0x0, 0x8000, 0x7fff}, {0x69, 0xffff, 0x1, 0x6, 0x80, 0x8}, {0x8c7, 0x2, 0xd0, 0x0, 0x4, 0x3}, {0x3ff, 0x4, 0x7, 0xffff, 0x1, 0xff}, {0x4, 0x1ff, 0xd, 0x9, 0x9, 0x2}, {0x7, 0x1, 0xc2, 0x7, 0x4}, {0x22b, 0x7, 0x704e, 0x3, 0x9, 0x6}, {0x80000001, 0x2, 0xffffd611, 0x8, 0x7}, {0x8000, 0x80, 0x9, 0xffff, 0x0, 0x2}, {0x6783edc, 0xaf2, 0x7, 0x8, 0x1, 0xff000000}, {0x7, 0x1, 0x140000, 0x4, 0xd, 0x200}, {0xb, 0x2, 0x8, 0xa, 0x1}, {0x7, 0x69a5, 0x100, 0x236, 0x4, 0x10001}, {0x3, 0xffff0000, 0x144, 0x2, 0x81, 0x8}, {0xde8, 0x2, 0x6, 0x9b, 0x88db, 0x401}, {0x0, 0x6, 0x40, 0x0, 0x9, 0xc9}, {0x2bd1272, 0x59, 0x3921, 0x57, 0x6, 0x80000000}, {0x3, 0x7, 0xb861, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x8, 0x9, 0x4, 0x8}, {0x0, 0x7, 0x80, 0xed2, 0x80000000, 0x8}, {0x2, 0xfffffc01, 0xfc3, 0x8d5, 0x8001, 0x3fffc000}, {0x8d, 0x6, 0x0, 0x5, 0x4, 0x1}, {0x6, 0x9, 0xeec6, 0x6, 0x7, 0x9}, {0x80000000, 0xd6187927, 0x1, 0x2a, 0xa, 0x7fffffff}], [{0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0xd716e616b6744d43}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0xb4d2ea9c256b621e}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xe270aa78089fc197}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r3}, 0x38) shutdown(r0, 0x1) 1.476447006s ago: executing program 0 (id=4457): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x27, 0x1, 0x2270bd24, 0xa5dfdbfe, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x4004010) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000080000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="1a1900000000000024001e8009000100766c616e000000001400028006000100020000000600050088a80037470fe2d7e602a116023211da0000000000", @ANYRES32=r5, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) clock_gettime(0x0, &(0x7f00000000c0)) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x80) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.016288997s ago: executing program 2 (id=4458): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x50, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x17, 0x6, "3e28d6dfe3c314bc7ecea1f05850d64d3edf34"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWTABLE={0x16c, 0x0, 0xa, 0xe02, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_USERDATA={0xe7, 0x6, "a072c18730bcfb2d53b96ef0a6d5969b1828436d185f8434684322262d9f06035d44ec2edd75bc08f255a5a478d0210b53c092bbece8aca62687a8c3095da24f58e28f778491d494f1b248cd12d9cc9752a3ca15bb7d16d10f37aaa8fdc5d47f4b04853ac329327a24df1f7299cdd2c5ab5acc91aa5be54389595377897548265e8ad75d39cb3f1b6b9f0db5f6da36ba8258589f87552e06d4b4dfef2146d6cd5b8c4763f4ed68eafbf351545cd2bca62524c5b2aa6ef12636f7b24d1b99d0a29c0141c11b0b4031e6fc3125eeeff5b9f78dda68d19e987b8574576729034de554b789"}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "1b06bbf85e2db5b7dff1c1c1636f1a6a86282733c887cba974073b2a2057d6f6dba3e0911e416378880cd17a9299a3e784c12b22f9409a9f77f71fa6ea605f7eff99cd5ea81f738de9889bd16cb61e1857922d271d87c1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2f0}, 0x1, 0x0, 0x0, 0x4040045}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001e000100bdfffffffedbdf2502000000", @ANYRES32=0x0, @ANYBLOB="000004"], 0x1c}, 0x1, 0x0, 0x0, 0x4004091}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 918.395994ms ago: executing program 1 (id=4459): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) nanosleep(&(0x7f0000000500), &(0x7f0000000540)) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)}}], 0x2, 0x24040800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r8}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x70, r9, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x2b}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "d4b461c9fa0e52f2242c28bef53a9c37c5f665a41a8482cb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "223b1201e034af5cc63095cd9179813f9a0f3a5c074d7c6a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "c7155fbcc09610f95c6cb2e447f74917a7780472ffff99df"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x0, 0xe8, @broadcast}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x9, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004090}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000000000006600000008000300", @ANYRES32=r12, @ANYBLOB="080026006e0900000800b700f9000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 864.549989ms ago: executing program 0 (id=4460): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket(0x1e, 0x4, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000001c0)=0x6310, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x56, 0x0, 0x0, &(0x7f0000000300), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000004500)={'gretap0\x00', 0x0}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x2342, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000000000000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0xda, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x3, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0xd, 0x3, 0x3, 0x8, 0xc, 0x5, 0x6, 0xd, 0xc, 0x4, 0xc, 0x8, 0x3, 0xa, 0x2, 0x2], 0x1, [0x7f, 0x6, 0x401, 0xff01, 0xd71a, 0x401, 0x2, 0x24, 0x92, 0x8, 0xa, 0x4, 0x0, 0x8, 0xd006, 0x8], [0xffff, 0x2, 0x10, 0x2, 0xab4, 0x1, 0x4, 0x8, 0xc5c, 0x3, 0x3ff, 0x138, 0x5, 0x9, 0x8, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 817.339342ms ago: executing program 3 (id=4461): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa00000000000071106e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x11, 0x2, 0x300, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r2, 0x0, 0x6, 0xb) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'sh\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x0, 0xfffffffe}, {@loopback, 0x4e21, 0x1, 0x1}}, 0x44) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 605.614576ms ago: executing program 3 (id=4462): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xc, 0x4, 0x280, 0xffffffff, 0x148, 0x0, 0x4000000, 0x98, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1000}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x3ff}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2000000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e20000008000700000003e80c00058008000100524153000c000d80080001007f000002"], 0x9c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000100)="280000010000007f00000106b7", 0xd, 0x0, &(0x7f0000000200)={0x2, 0x6b7, @loopback}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4c62, 0x7, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60000040) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r7, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115300000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x3, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'macvlan1\x00', {}, 0x3}) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002142, 0x0) 552.030774ms ago: executing program 2 (id=4463): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa00000000000071106e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff000000000000000085100000020000008500000007"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x11, 0x2, 0x300, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r2, 0x0, 0x6, 0xb) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'sh\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x0, 0xfffffffe}, {@loopback, 0x4e21, 0x1, 0x1}}, 0x44) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61126600000000006113300000000000bf300000000000002500070007ffffffbd2001000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 544.187585ms ago: executing program 1 (id=4464): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32, @ANYBLOB="00000000f0ff0000b7080000000000007b8af8ff00000000bfa200000000000004020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000040)={'wlan1\x00', @random="060000001000"}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x24040805) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r7, &(0x7f0000000240)=[{&(0x7f00000005c0)}], 0x1) readv(r7, &(0x7f00000006c0), 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e1beda0e604d"}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c011}, 0xe6ba9f9881837b58) 46.935019ms ago: executing program 2 (id=4465): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) nanosleep(&(0x7f0000000500), &(0x7f0000000540)) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000280)}}], 0x2, 0x24040800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r8}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0xac, r9, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x2b}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "223b1201e034af5cc63095cd9179813f9a0f3a5c074d7c6a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c7155fbcc09610f95c6cb2e447f74917a7780472ffff99df"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8004090}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000000000006600000008000300", @ANYRES32=r12, @ANYBLOB="080026006e0900000800b700f9000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4.630096ms ago: executing program 3 (id=4466): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r0, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a", 0x4e}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000040)="ec", 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e00000001000090500000000fdffffff6f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d28"], 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040) syz_emit_ethernet(0x7b, &(0x7f00000008c0)=ANY=[], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000500)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x42566000) 0s ago: executing program 0 (id=4467): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) nanosleep(&(0x7f0000000500), &(0x7f0000000540)) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000280)}}], 0x2, 0x24040800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r8}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x70, r9, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x2b}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "d4b461c9fa0e52f2242c28bef53a9c37c5f665a41a8482cb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "223b1201e034af5cc63095cd9179813f9a0f3a5c074d7c6a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "c7155fbcc09610f95c6cb2e447f74917a7780472ffff99df"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x0, 0xe8, @broadcast}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x9, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004090}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 151'. [ 469.647322][T14602] xt_TCPMSS: Only works on TCP SYN packets [ 469.814954][T14600] vlan4: left allmulticast mode [ 469.828348][T14600] vlan4: left promiscuous mode [ 469.829352][T14600] bridge0: port 3(vlan4) entered disabled state [ 469.848745][T14600] bridge_slave_1: left allmulticast mode [ 469.848774][T14600] bridge_slave_1: left promiscuous mode [ 469.849081][T14600] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.881608][T14600] bridge_slave_0: left allmulticast mode [ 469.881636][T14600] bridge_slave_0: left promiscuous mode [ 469.881873][T14600] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.974915][T14600] bridge0 (unregistering): left allmulticast mode [ 470.592710][T14617] netlink: 'syz.2.2159': attribute type 4 has an invalid length. [ 471.120543][T14626] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2161'. [ 471.199499][T14628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2162'. [ 471.313195][T14631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2161'. [ 471.313222][T14631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2161'. [ 471.369469][T14631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2161'. [ 471.425109][T14640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2163'. [ 471.531416][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2158'. [ 471.553406][T14629] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 471.896382][ T1157] net_ratelimit: 711 callbacks suppressed [ 471.896405][ T1157] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.896445][ T1157] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 472.016544][ T1157] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 472.016593][ T1157] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.066743][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 472.127652][ T1157] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.127704][ T1157] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 472.186220][T14656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 472.243741][ T1164] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 472.243824][ T1164] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.352123][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 472.362009][ T38] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.362148][ T38] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 472.546684][T14656] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 472.691138][T14656] hsr_slave_1 (unregistering): left promiscuous mode [ 473.098718][T14680] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 473.262178][T14692] nft_compat: unsupported protocol 0 [ 473.691994][T14705] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 473.692670][T14705] syzkaller1: entered promiscuous mode [ 473.692691][T14705] syzkaller1: entered allmulticast mode [ 474.101592][T14727] netlink: 'syz.4.2176': attribute type 1 has an invalid length. [ 474.199497][T14728] vlan3: entered promiscuous mode [ 474.199520][T14728] bridge0: entered promiscuous mode [ 474.246684][ T6562] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.246786][ T6562] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.246823][ T6562] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.347356][T14734] __nla_validate_parse: 4 callbacks suppressed [ 474.347376][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 474.378344][T14733] bridge2: port 1(erspan0) entered blocking state [ 474.378459][T14733] bridge2: port 1(erspan0) entered disabled state [ 474.378634][T14733] erspan0: entered allmulticast mode [ 474.383467][T14733] erspan0: entered promiscuous mode [ 474.473334][T14738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2182'. [ 474.580328][T14740] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 474.597799][T14719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.754848][T14744] wg2 speed is unknown, defaulting to 1000 [ 474.986216][T14753] netlink: 'syz.4.2185': attribute type 10 has an invalid length. [ 475.196270][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 475.361919][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'. [ 475.397963][T14766] netlink: 'syz.3.2187': attribute type 2 has an invalid length. [ 475.397984][T14766] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2187'. [ 475.404539][T14766] netlink: 'syz.3.2187': attribute type 10 has an invalid length. [ 476.019727][T14773] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 476.020622][T14780] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2190'. [ 476.494075][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2192'. [ 476.602891][T14790] syzkaller0: entered promiscuous mode [ 476.602915][T14790] syzkaller0: entered allmulticast mode [ 476.936010][ T1157] net_ratelimit: 126 callbacks suppressed [ 476.936031][ T1157] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 476.936744][ T1157] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 477.045928][ T7324] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 477.046183][ T7324] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.115395][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 477.160505][ T7323] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.160568][ T7323] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 477.267300][ T7325] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 477.267355][ T7325] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.386671][ T7323] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.386713][ T7323] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 477.555241][T14825] bond1: option mode: unable to set because the bond device has slaves [ 477.597701][T14825] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 477.617676][T14825] bond1 (unregistering): Released all slaves [ 477.747225][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 477.877579][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.877961][ T1144] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.878041][ T1144] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.878079][ T1144] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.991522][T14844] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 478.818588][T14844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.823207][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2204'. [ 479.023166][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2207'. [ 479.065212][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'. [ 479.076814][T14897] bridge6: port 1(erspan0) entered blocking state [ 479.077004][T14897] bridge6: port 1(erspan0) entered disabled state [ 479.077178][T14897] erspan0: entered allmulticast mode [ 479.100126][T14897] erspan0: entered promiscuous mode [ 479.780215][T14922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.905101][T14929] netlink: 'syz.1.2217': attribute type 1 has an invalid length. [ 479.905126][T14929] __nla_validate_parse: 2 callbacks suppressed [ 479.905139][T14929] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2217'. [ 480.070157][T14935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2217'. [ 480.312721][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2217'. [ 480.397071][T14925] wg2 speed is unknown, defaulting to 1000 [ 480.618309][T14944] lo: entered promiscuous mode [ 480.728940][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 480.788449][T14952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2219'. [ 480.838325][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 480.839849][T14952] erspan0: left allmulticast mode [ 480.839871][T14952] erspan0: left promiscuous mode [ 480.840111][T14952] bridge3: port 1(erspan0) entered disabled state [ 480.882658][T14952] bridge4: port 1(erspan0) entered blocking state [ 480.882762][T14952] bridge4: port 1(erspan0) entered disabled state [ 480.882868][T14952] erspan0: entered allmulticast mode [ 480.884827][T14952] erspan0: entered promiscuous mode [ 481.140696][T14956] xt_CT: No such helper "snmp" [ 481.278354][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'. [ 481.444800][T14964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.663617][T14975] tc_dump_action: action bad kind [ 481.965715][ T7324] net_ratelimit: 56 callbacks suppressed [ 481.965739][ T7324] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 481.965777][ T7324] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.092782][ T7324] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.092832][ T7324] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 482.196777][ T7325] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 482.196828][ T7325] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.336312][ T7325] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 482.360679][ T7324] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.505952][ T6562] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 482.506016][ T6562] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.610074][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2228'. [ 482.634797][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2228'. [ 483.035004][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'. [ 483.591339][T15047] Cannot find map_set index 2 as target [ 483.821421][T15053] bond7: option primary_reselect: invalid value (6) [ 483.842471][T15053] bond7 (unregistering): Released all slaves [ 484.173176][T15069] x_tables: duplicate entry at hook 1 [ 484.307307][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 484.491901][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'. [ 484.727078][T15069] netlink: 'syz.0.2237': attribute type 1 has an invalid length. [ 484.876187][T15086] block nbd0: server does not support multiple connections per device. [ 484.876748][T15086] block nbd0: shutting down sockets [ 485.921790][T15121] syzkaller0: entered promiscuous mode [ 485.921816][T15121] syzkaller0: entered allmulticast mode [ 486.003078][T15121] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 486.449106][T15142] gre0: entered promiscuous mode [ 486.449130][T15142] gre0: entered allmulticast mode [ 486.474548][T15143] netlink: 'syz.3.2252': attribute type 9 has an invalid length. [ 486.489065][T15142] __nla_validate_parse: 1 callbacks suppressed [ 486.489082][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2253'. [ 486.791965][T15142] vlan1: Caught tx_queue_len zero misconfig [ 487.048730][ T7324] net_ratelimit: 46 callbacks suppressed [ 487.048752][ T7324] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 487.049620][ T7324] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 487.136448][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2255'. [ 487.160446][ T7324] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 487.162775][ T7324] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 487.267699][ T1144] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 487.268699][ T1144] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 487.376983][ T1144] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 487.377659][ T6562] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 487.404333][T15170] syzkaller1: entered promiscuous mode [ 487.404357][T15170] syzkaller1: entered allmulticast mode [ 487.490374][ T7324] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 487.490421][ T7324] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 487.559781][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2257'. [ 487.818669][T15182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2258'. [ 488.584863][T15200] ipvlan0: Caught tx_queue_len zero misconfig [ 489.122695][ T31] audit: type=1800 audit(1790950178.345:7): pid=15203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2262" name=680B20 dev="tmpfs" ino=2430 res=0 errno=0 [ 489.927692][T15230] netlink: 'syz.2.2267': attribute type 9 has an invalid length. [ 490.063752][T15234] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2267'. [ 490.213332][T15238] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2268'. [ 490.414661][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2268'. [ 491.153660][T15249] netlink: 'syz.1.2270': attribute type 2 has an invalid length. [ 491.796684][T15258] IPVS: Scheduler module ip_vs_mh not found [ 491.900125][T15267] lo: Caught tx_queue_len zero misconfig [ 492.158062][ T1144] net_ratelimit: 63 callbacks suppressed [ 492.158087][ T1144] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 492.158125][ T1144] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 492.267381][ T1164] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 492.267513][ T1164] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 492.378846][ T3391] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 492.378894][ T3391] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 492.486283][ T38] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 492.486332][ T38] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 492.596912][ T6562] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 492.596963][ T6562] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.048223][T15295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2277'. [ 493.158635][T15303] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 493.359583][T15308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2281'. [ 493.386212][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 493.386236][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2280'. [ 493.501526][T15318] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 493.539193][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 493.539217][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2280'. [ 493.555886][ T1144] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.560570][ T3391] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.560693][ T3391] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.573395][T15314] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 494.128189][T15325] batman_adv: batadv0: Adding interface: macvtap1 [ 494.128220][T15325] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.128249][T15325] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 494.170363][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 494.256455][T15325] batman_adv: batadv0: Removing interface: macvtap1 [ 494.318722][T15327] netlink: 'syz.2.2284': attribute type 9 has an invalid length. [ 494.382692][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'. [ 494.422668][T15327] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2284'. [ 494.493881][T15338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 494.741769][T15348] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2288'. [ 494.790889][T15344] bridge4: port 1(erspan0) entered blocking state [ 494.791026][T15344] bridge4: port 1(erspan0) entered forwarding state [ 494.844884][T15344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.853958][T15344] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.979290][T15344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.983539][T15344] virt_wifi0: left promiscuous mode [ 494.985200][T15344] veth1_vlan: left promiscuous mode [ 495.009840][T15344] veth1_vlan: entered promiscuous mode [ 495.037219][T15344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.040336][T15344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.043008][T15344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.068734][T15344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.071543][T15344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.093771][T15344] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.107995][T15344] 8021q: adding VLAN 0 to HW filter on device bond5 [ 495.108705][T15344] virt_wifi0: entered promiscuous mode [ 495.110472][T15344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 495.147702][T15344] 8021q: adding VLAN 0 to HW filter on device bond6 [ 495.153128][T15344] geneve2: left promiscuous mode [ 495.286553][ T1144] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 495.286620][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.287697][ T59] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 495.287766][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.287902][ T59] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 495.287964][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.661456][ T25] wg2 speed is unknown, defaulting to 1000 [ 495.661528][ T25] syz2: Port: 1 Link ACTIVE [ 496.059908][T15369] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 496.680668][T15388] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.165649][ T7324] net_ratelimit: 49 callbacks suppressed [ 497.165672][ T7324] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.206592][ T59] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 497.311316][ T6562] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.328194][ T38] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 497.414739][T15408] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 497.417582][ T38] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.449933][ T38] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 497.453639][T15408] veth1_to_bond: Caught tx_queue_len zero misconfig [ 497.525653][ T6562] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.576806][ T7324] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 497.657124][ T3391] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.666141][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 499.672314][T15391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.689802][T15411] netlink: 'syz.3.2303': attribute type 1 has an invalid length. [ 499.689824][T15411] __nla_validate_parse: 4 callbacks suppressed [ 499.689837][T15411] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2303'. [ 501.432590][T15460] xt_hashlimit: size too large, truncated to 1048576 [ 501.609004][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.641747][T15454] xt_hashlimit: size too large, truncated to 1048576 [ 502.186254][ T59] net_ratelimit: 80 callbacks suppressed [ 502.186279][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.186381][ T59] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 502.298852][ T3391] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 502.299021][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.405936][ T3391] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.406039][ T3391] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 502.514106][T15471] ip6tnl2: entered allmulticast mode [ 502.523090][ T7324] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 502.523352][ T7324] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.626250][ T1144] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.626379][ T1144] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 502.883928][ T31] audit: type=1804 audit(1790950192.105:8): pid=15482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2320" name="/newroot/470/cgroup.controllers" dev="tmpfs" ino=2433 res=1 errno=0 [ 502.884287][ T31] audit: type=1800 audit(1790950192.105:9): pid=15482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2320" name="cgroup.controllers" dev="tmpfs" ino=2433 res=0 errno=0 [ 503.068372][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2320'. [ 503.347375][ T1164] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 503.347632][ T1164] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 503.376093][ T5728] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 503.785903][ T5728] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 503.786596][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 504.225922][ T5728] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 504.498708][T15527] netlink: 'syz.1.2333': attribute type 1 has an invalid length. [ 504.683294][T15527] 8021q: adding VLAN 0 to HW filter on device bond9 [ 504.705851][T15532] block nbd0: not configured, cannot reconfigure [ 504.853095][T15529] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 504.882339][T15529] bond9: (slave batadv2): making interface the new active one [ 504.897127][T15529] bond9: (slave batadv2): Enslaving as an active interface with an up link [ 504.992531][T15527] syzkaller1: entered promiscuous mode [ 504.992570][T15527] syzkaller1: entered allmulticast mode [ 505.016316][T15517] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2330'. [ 505.358210][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 505.509346][T15546] netlink: 'syz.1.2336': attribute type 1 has an invalid length. [ 505.738237][T15548] gretap2: entered allmulticast mode [ 505.752036][T15546] netlink: 'syz.1.2336': attribute type 1 has an invalid length. [ 505.770181][T15548] bond10: (slave gretap2): making interface the new active one [ 505.772666][T15548] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 506.097552][T15555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2337'. [ 506.723921][T15566] lo: left promiscuous mode [ 507.117927][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 507.185707][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 507.411708][T15576] bridge9: port 1(erspan0) entered blocking state [ 507.412035][T15576] bridge9: port 1(erspan0) entered disabled state [ 507.413154][T15576] erspan0: entered allmulticast mode [ 507.421476][T15576] erspan0: entered promiscuous mode [ 507.423777][T15576] bridge9: port 1(erspan0) entered blocking state [ 507.424025][T15576] bridge9: port 1(erspan0) entered forwarding state [ 507.450002][ T3391] net_ratelimit: 68 callbacks suppressed [ 507.450052][ T3391] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 507.450157][ T3391] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 507.756819][ T6562] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 507.758608][ T6562] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 507.894989][ T3391] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 507.895054][ T3391] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 507.996634][ T1164] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 507.996732][ T1164] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 508.105871][ T1157] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 508.105975][ T1157] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 508.659534][T15613] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2347'. [ 508.796718][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 508.863059][T15596] netlink: 'syz.0.2344': attribute type 1 has an invalid length. [ 508.879399][T15595] netlink: 'syz.1.2345': attribute type 4 has an invalid length. [ 508.893789][T15603] netlink: 'syz.4.2347': attribute type 9 has an invalid length. [ 509.504222][T15623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'. [ 509.531378][T15624] x_tables: duplicate underflow at hook 3 [ 509.577096][T15624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2351'. [ 509.781488][T15632] syzkaller0: entered promiscuous mode [ 509.781510][T15632] syzkaller0: entered allmulticast mode [ 510.521904][T15644] bridge7: port 1(erspan0) entered disabled state [ 510.653965][T15627] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 510.670760][T15627] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 511.222467][T15660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.665666][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 512.093064][T15644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.463735][T15644] batman_adv: batadv0: Interface deactivated: macvlan2 [ 513.558483][ T3391] net_ratelimit: 17 callbacks suppressed [ 513.558542][ T3391] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 513.657091][ T3391] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.657147][ T3391] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.833436][T15666] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 513.833483][T15666] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 513.833532][T15666] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 513.849809][ T6562] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.849954][ T6562] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 513.955971][ T3384] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.066968][ T7323] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.176041][ T38] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.285782][ T7323] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.399732][ T38] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.507449][ T38] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.617149][ T1144] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.727048][ T3391] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.834101][T15703] netlink: 'syz.0.2361': attribute type 9 has an invalid length. [ 514.947582][T15712] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2364'. [ 515.025714][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 515.101763][T15715] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2361'. [ 515.631685][T15727] netlink: 'syz.2.2365': attribute type 1 has an invalid length. [ 515.731090][T15727] bond8: option mode: invalid value (10) [ 515.762327][T15727] bond8 (unregistering): Released all slaves [ 515.825698][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 516.478549][T15746] nbd: must specify at least one socket [ 516.622251][T15746] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 517.719685][T15746] bond7 (unregistering): Released all slaves [ 517.870871][T15752] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 517.870975][T15752] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 517.871034][T15752] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 518.291897][T15769] bridge6: port 1(erspan0) entered disabled state [ 518.742564][T15769] tipc: Resetting bearer [ 519.641153][T15769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.068977][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 520.625977][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 520.807701][ T3391] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.807752][ T3391] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 520.909547][ T1144] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.909592][ T1144] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 520.910535][ T1144] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.910566][ T1144] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 521.021388][T15821] net_ratelimit: 12 callbacks suppressed [ 521.021411][T15821] netlink: zone id is out of range [ 521.023591][T15821] netlink: zone id is out of range [ 521.222819][T15827] xt_CT: No such helper "snmp" [ 521.329744][T15840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2380'. [ 521.358638][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2378'. [ 521.358661][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2378'. [ 521.544745][T15826] 8021q: adding VLAN 0 to HW filter on device bond7 [ 521.641597][T15826] netlink: 'syz.3.2378': attribute type 2 has an invalid length. [ 521.641621][T15826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2378'. [ 521.710358][T15838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.738439][T15838] bond7: (slave bond0): Enslaving as an active interface with a down link [ 521.777279][T15845] bond7 (unregistering): (slave bond0): Releasing active interface [ 521.796737][T15845] bond7 (unregistering): Released all slaves [ 521.922096][T15826] : entered promiscuous mode [ 521.937181][T15840] ±ÿ: renamed from lo [ 522.226133][T15867] syz.3.2385: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 522.226420][T15867] CPU: 1 UID: 0 PID: 15867 Comm: syz.3.2385 Not tainted syzkaller #0 PREEMPT(full) [ 522.226452][T15867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.226474][T15867] Call Trace: [ 522.226484][T15867] [ 522.226493][T15867] dump_stack_lvl+0xe8/0x150 [ 522.226529][T15867] warn_alloc+0x24d/0x270 [ 522.226553][T15867] ? kasan_save_track+0x4f/0x80 [ 522.226576][T15867] ? kasan_save_track+0x3e/0x80 [ 522.226603][T15867] ? __pfx_warn_alloc+0x10/0x10 [ 522.226622][T15867] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 522.226725][T15867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.226779][T15867] __vmalloc_node_range_noprof+0x127/0x1540 [ 522.226839][T15867] ? rcu_is_watching+0x16/0xb0 [ 522.226871][T15867] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 522.226905][T15867] ? __kmalloc_cache_noprof+0x321/0x600 [ 522.226928][T15867] ? __kmalloc_cache_noprof+0x14d/0x600 [ 522.226949][T15867] ? xskq_create+0x56/0x220 [ 522.227016][T15867] xskq_create+0x148/0x220 [ 522.227049][T15867] ? xsk_init_queue+0x8a/0xe0 [ 522.227079][T15867] xsk_init_queue+0x8a/0xe0 [ 522.227110][T15867] xsk_setsockopt+0x52a/0x960 [ 522.227141][T15867] ? __pfx_xsk_setsockopt+0x10/0x10 [ 522.227168][T15867] ? __pfx_aa_sk_perm+0x10/0x10 [ 522.227207][T15867] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 522.227234][T15867] ? __pfx_xsk_setsockopt+0x10/0x10 [ 522.227263][T15867] do_sock_setsockopt+0x17c/0x1b0 [ 522.227297][T15867] __x64_sys_setsockopt+0x13d/0x1b0 [ 522.227332][T15867] do_syscall_64+0x166/0x520 [ 522.227415][T15867] ? trace_irq_disable+0x3b/0x140 [ 522.227439][T15867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.227462][T15867] ? clear_bhb_loop+0x70/0xc0 [ 522.227490][T15867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.227518][T15867] RIP: 0033:0x7fe26119e159 [ 522.227544][T15867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.227563][T15867] RSP: 002b:00007fe261ff1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 522.227587][T15867] RAX: ffffffffffffffda RBX: 00007fe261425fa0 RCX: 00007fe26119e159 [ 522.227604][T15867] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 522.227618][T15867] RBP: 00007fe26123506b R08: 0000000000000004 R09: 0000000000000000 [ 522.227633][T15867] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.227648][T15867] R13: 00007fe261426038 R14: 00007fe261425fa0 R15: 00007ffe537855f8 [ 522.227684][T15867] [ 522.229642][T15867] Mem-Info: [ 522.229661][T15867] active_anon:8841 inactive_anon:0 isolated_anon:0 [ 522.229661][T15867] active_file:0 inactive_file:43814 isolated_file:0 [ 522.229661][T15867] unevictable:0 dirty:535 writeback:0 [ 522.229661][T15867] slab_reclaimable:11675 slab_unreclaimable:107140 [ 522.229661][T15867] mapped:32716 shmem:653 pagetables:1214 [ 522.229661][T15867] sec_pagetables:0 bounce:0 [ 522.229661][T15867] kernel_misc_reclaimable:0 [ 522.229661][T15867] free:1271171 free_pcp:13255 free_cma:0 [ 522.229751][T15867] Node 0 active_anon:35364kB inactive_anon:0kB active_file:0kB inactive_file:175056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130864kB dirty:2140kB writeback:0kB shmem:2612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14076kB pagetables:4716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 522.229825][T15867] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 522.229884][T15867] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.229958][T15867] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 522.230004][T15867] Node 0 DMA32 free:1118420kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35364kB inactive_anon:0kB active_file:0kB inactive_file:175056kB unevictable:0kB writepending:2140kB zspages:0kB present:3129332kB managed:2547104kB mlocked:0kB bounce:0kB free_pcp:53016kB local_pcp:30680kB free_cma:0kB [ 522.230075][T15867] lowmem_reserve[]: 0 0 0 0 0 [ 522.230113][T15867] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.230175][T15867] lowmem_reserve[]: 0 0 0 0 0 [ 522.230216][T15867] Node 1 Normal free:3950904kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.230281][T15867] lowmem_reserve[]: 0 0 0 0 0 [ 522.230323][T15867] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 522.230460][T15867] Node 0 DMA32: 3*4kB (E) 415*8kB (UE) 441*16kB (UE) 294*32kB (UME) 100*64kB (UME) 33*128kB (UME) 36*256kB (UME) 17*512kB (UME) 5*1024kB (UME) 4*2048kB (UME) 258*4096kB (UM) = 1118420kB [ 522.230646][T15867] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 522.230761][T15867] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 6*16kB (UM) 2*32kB (UM) 6*64kB (UM) 4*128kB (UM) 5*256kB (UM) 6*512kB (UM) 1*1024kB (M) 2*2048kB (U) 962*4096kB (M) = 3950904kB [ 522.230965][T15867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 522.230984][T15867] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 522.231002][T15867] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 522.231019][T15867] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 522.231036][T15867] 44463 total pagecache pages [ 522.231065][T15867] 0 pages in swap cache [ 522.231074][T15867] Free swap = 124996kB [ 522.231083][T15867] Total swap = 124996kB [ 522.231092][T15867] 2097051 pages RAM [ 522.231100][T15867] 0 pages HighMem/MovableOnly [ 522.231108][T15867] 428659 pages reserved [ 522.231116][T15867] 0 pages cma reserved [ 523.363080][T15887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2388'. [ 523.465051][T15898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2390'. [ 524.084836][ T52] block nbd0: Receive control failed (result -32) [ 524.085901][ T5629] block nbd0: Receive control failed (result -32) [ 524.226725][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 524.321315][T15934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2393'. [ 524.337128][T15934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2393'. [ 524.432694][T15937] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2393'. [ 524.462333][T15939] netlink: zone id is out of range [ 524.464317][T15939] netlink: zone id is out of range [ 524.663139][T15944] block nbd1: server does not support multiple connections per device. [ 524.663441][T15944] block nbd1: shutting down sockets [ 524.941133][T15956] netlink: 'syz.4.2396': attribute type 10 has an invalid length. [ 525.192471][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'. [ 525.327339][T15966] ip_tables: iptables: counters copy to user failed while replacing table [ 525.731298][T15979] syzkaller0: entered promiscuous mode [ 525.731334][T15979] syzkaller0: entered allmulticast mode [ 526.009618][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2405'. [ 526.049307][T15991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2405'. [ 526.132445][T15994] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 526.134677][T15994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2407'. [ 526.196341][T15994] x_tables: duplicate underflow at hook 1 [ 526.201325][T15994] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 526.367100][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2406'. [ 526.367451][T16000] netlink: 'syz.3.2410': attribute type 9 has an invalid length. [ 526.476478][T16005] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2410'. [ 526.706729][T16011] macvtap0: entered promiscuous mode [ 526.789471][T16009] netlink: 'syz.0.2411': attribute type 3 has an invalid length. [ 526.871199][T16022] netlink: 'syz.4.2415': attribute type 1 has an invalid length. [ 526.871224][T16022] netlink: 756 bytes leftover after parsing attributes in process `syz.4.2415'. [ 527.026965][T16018] netlink: zone id is out of range [ 527.026984][T16018] netlink: zone id is out of range [ 527.026993][T16018] netlink: zone id is out of range [ 527.027002][T16018] netlink: zone id is out of range [ 527.027012][T16018] netlink: zone id is out of range [ 527.027021][T16018] netlink: zone id is out of range [ 527.027034][T16018] netlink: zone id is out of range [ 527.027043][T16018] netlink: zone id is out of range [ 527.217077][T16032] syzkaller0: entered promiscuous mode [ 527.217101][T16032] syzkaller0: entered allmulticast mode [ 527.267377][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 527.293873][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2420'. [ 527.413077][T16037] bridge4: port 1(erspan0) entered disabled state [ 527.492249][T16037] tipc: Resetting bearer [ 527.493180][T16043] netlink: 'syz.4.2422': attribute type 1 has an invalid length. [ 527.993166][T16043] 8021q: adding VLAN 0 to HW filter on device bond7 [ 528.091377][T16047] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 528.095242][T16047] bond7: (slave batadv1): making interface the new active one [ 528.120484][T16047] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 528.120772][ T38] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.120806][ T38] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 528.120835][ T38] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.120905][ T38] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.120934][ T38] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 528.120961][ T38] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.121001][ T38] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.121030][ T38] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 528.121057][ T38] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.121112][T10850] wg2 speed is unknown, defaulting to 1000 [ 528.121146][T10850] syz2: Port: 1 Link DOWN [ 528.389313][T16050] syzkaller1: entered promiscuous mode [ 528.389339][T16050] syzkaller1: entered allmulticast mode [ 528.600022][T16080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2426'. [ 528.641569][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2424'. [ 528.767688][T16067] syzkaller0: entered promiscuous mode [ 528.767719][T16067] syzkaller0: entered allmulticast mode [ 530.291925][T16116] x_tables: duplicate underflow at hook 1 [ 531.675724][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 532.704524][T16100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.715193][T16100] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.774512][T16100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.801123][T16100] virt_wifi0: left promiscuous mode [ 532.804715][T16100] veth1_vlan: left promiscuous mode [ 532.818113][T16100] veth1_vlan: entered promiscuous mode [ 532.839505][T16100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.841145][T16100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.843387][T16100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.866333][T16100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 532.883161][T16100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.914342][T16100] 8021q: adding VLAN 0 to HW filter on device bond3 [ 532.935051][T16100] 8021q: adding VLAN 0 to HW filter on device bond5 [ 532.945718][T16100] virt_wifi0: entered promiscuous mode [ 532.948504][T16100] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.982572][T16137] __nla_validate_parse: 1 callbacks suppressed [ 532.982596][T16137] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2437'. [ 532.993531][T16100] net_ratelimit: 657 callbacks suppressed [ 532.993582][T16100] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 533.027013][T16120] syzkaller0: left promiscuous mode [ 533.027034][T16120] syzkaller0: left allmulticast mode [ 533.029200][ T7324] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 533.029236][ T7324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.029279][ T7324] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 533.029307][ T7324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.029357][ T7324] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 533.029384][ T7324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.213504][ T5735] wg2 speed is unknown, defaulting to 1000 [ 533.213548][ T5735] syz2: Port: 1 Link ACTIVE [ 533.240926][T16139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2437'. [ 533.269005][T16139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.554676][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2438'. [ 534.252939][T16182] macvtap0: left promiscuous mode [ 534.357847][T16183] netlink: zone id is out of range [ 534.357865][T16183] netlink: zone id is out of range [ 534.357874][T16183] netlink: zone id is out of range [ 534.357883][T16183] netlink: zone id is out of range [ 534.357893][T16183] netlink: zone id is out of range [ 534.357901][T16183] netlink: zone id is out of range [ 534.357914][T16183] netlink: zone id is out of range [ 534.357923][T16183] netlink: zone id is out of range [ 534.357932][T16183] netlink: zone id is out of range [ 534.524778][ T7323] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.537934][ T7323] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.538515][ T7323] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.563339][ T3391] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.925877][T16196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2445'. [ 535.014675][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2445'. [ 535.014702][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2445'. [ 535.274750][T16204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2446'. [ 535.314788][T16204] veth1_to_team: entered promiscuous mode [ 535.323428][T16204] veth0_to_team: entered promiscuous mode [ 535.358686][T16204] hsr1: entered promiscuous mode [ 535.771018][T16221] smc: net device lo applied user defined pnetid SYZ0 [ 535.895260][T16228] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2453'. [ 535.895286][T16228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2453'. [ 536.208434][T16228] tipc: Enabling of bearer rejected, failed to enable media [ 536.582450][T16241] wg2 speed is unknown, defaulting to 1000 [ 537.159778][T16257] syzkaller0: entered promiscuous mode [ 537.159802][T16257] syzkaller0: entered allmulticast mode [ 537.209465][T16262] netlink: 'syz.0.2461': attribute type 16 has an invalid length. [ 537.700850][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 538.288157][T16290] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 538.861797][T16285] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2471'. [ 538.934949][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'. [ 538.988423][T16313] netlink: 'syz.0.2476': attribute type 21 has an invalid length. [ 538.988445][T16313] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2476'. [ 539.050475][T16311] syzkaller0: left promiscuous mode [ 539.050499][T16311] syzkaller0: left allmulticast mode [ 539.068506][T16314] net_ratelimit: 495 callbacks suppressed [ 539.068527][T16314] netlink: zone id is out of range [ 539.068536][T16314] netlink: zone id is out of range [ 539.068544][T16314] netlink: zone id is out of range [ 539.068552][T16314] netlink: zone id is out of range [ 539.068560][T16314] netlink: zone id is out of range [ 539.068568][T16314] netlink: zone id is out of range [ 539.068579][T16314] netlink: zone id is out of range [ 539.068587][T16314] netlink: zone id is out of range [ 539.068594][T16314] netlink: zone id is out of range [ 539.068602][T16314] netlink: zone id is out of range [ 539.159685][T16313] netlink: 'syz.0.2476': attribute type 4 has an invalid length. [ 539.159724][T16313] netlink: 'syz.0.2476': attribute type 3 has an invalid length. [ 539.159738][T16313] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2476'. [ 539.817833][T16328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2479'. [ 539.892129][T16328] vxcan4: entered allmulticast mode [ 540.023051][T16344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2484'. [ 540.473817][T16356] syz.2.2488: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 540.473884][T16356] CPU: 0 UID: 0 PID: 16356 Comm: syz.2.2488 Not tainted syzkaller #0 PREEMPT(full) [ 540.473907][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.473919][T16356] Call Trace: [ 540.473927][T16356] [ 540.473935][T16356] dump_stack_lvl+0xe8/0x150 [ 540.473967][T16356] warn_alloc+0x24d/0x270 [ 540.473989][T16356] ? kasan_save_track+0x4f/0x80 [ 540.474008][T16356] ? kasan_save_track+0x3e/0x80 [ 540.474031][T16356] ? __pfx_warn_alloc+0x10/0x10 [ 540.474056][T16356] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 540.474083][T16356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.474122][T16356] __vmalloc_node_range_noprof+0x127/0x1540 [ 540.474174][T16356] ? rcu_is_watching+0x16/0xb0 [ 540.474203][T16356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 540.474233][T16356] ? __kmalloc_cache_noprof+0x321/0x600 [ 540.474253][T16356] ? __kmalloc_cache_noprof+0x14d/0x600 [ 540.474290][T16356] ? xskq_create+0x56/0x220 [ 540.474323][T16356] xskq_create+0x148/0x220 [ 540.474350][T16356] ? xsk_init_queue+0x8a/0xe0 [ 540.474379][T16356] xsk_init_queue+0x8a/0xe0 [ 540.474408][T16356] xsk_setsockopt+0x52a/0x960 [ 540.474436][T16356] ? __pfx_xsk_setsockopt+0x10/0x10 [ 540.474463][T16356] ? __pfx_aa_sk_perm+0x10/0x10 [ 540.474499][T16356] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 540.474526][T16356] ? __pfx_xsk_setsockopt+0x10/0x10 [ 540.474554][T16356] do_sock_setsockopt+0x17c/0x1b0 [ 540.474586][T16356] __x64_sys_setsockopt+0x13d/0x1b0 [ 540.474619][T16356] do_syscall_64+0x166/0x520 [ 540.474649][T16356] ? trace_irq_disable+0x3b/0x140 [ 540.474670][T16356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.474692][T16356] ? clear_bhb_loop+0x70/0xc0 [ 540.474717][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.474738][T16356] RIP: 0033:0x7f2186d9e159 [ 540.474757][T16356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.474775][T16356] RSP: 002b:00007f2187bca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 540.474797][T16356] RAX: ffffffffffffffda RBX: 00007f2187025fa0 RCX: 00007f2186d9e159 [ 540.474813][T16356] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 540.474826][T16356] RBP: 00007f2186e3506b R08: 0000000000000004 R09: 0000000000000000 [ 540.474840][T16356] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.474853][T16356] R13: 00007f2187026038 R14: 00007f2187025fa0 R15: 00007fffcc28cd48 [ 540.474888][T16356] [ 540.474896][T16356] Mem-Info: [ 540.474906][T16356] active_anon:5439 inactive_anon:0 isolated_anon:0 [ 540.474906][T16356] active_file:3 inactive_file:43714 isolated_file:0 [ 540.474906][T16356] unevictable:0 dirty:458 writeback:0 [ 540.474906][T16356] slab_reclaimable:11655 slab_unreclaimable:105751 [ 540.474906][T16356] mapped:29622 shmem:652 pagetables:1186 [ 540.474906][T16356] sec_pagetables:0 bounce:0 [ 540.474906][T16356] kernel_misc_reclaimable:0 [ 540.474906][T16356] free:1243740 free_pcp:20588 free_cma:0 [ 540.474959][T16356] Node 0 active_anon:21756kB inactive_anon:0kB active_file:12kB inactive_file:174656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118488kB dirty:1832kB writeback:0kB shmem:2608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13888kB pagetables:4604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 540.475017][T16356] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 540.475089][T16356] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 540.475159][T16356] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 540.475196][T16356] Node 0 DMA32 free:1008696kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21756kB inactive_anon:0kB active_file:12kB inactive_file:174656kB unevictable:0kB writepending:1832kB zspages:0kB present:3129332kB managed:2547104kB mlocked:0kB bounce:0kB free_pcp:82352kB local_pcp:61312kB free_cma:0kB [ 540.475256][T16356] lowmem_reserve[]: 0 0 0 0 0 [ 540.481267][T16356] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 540.481419][T16356] lowmem_reserve[]: 0 0 0 0 0 [ 540.481508][T16356] Node 1 Normal free:3950904kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 540.481641][T16356] lowmem_reserve[]: 0 0 0 0 0 [ 540.481742][T16356] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 540.482108][T16356] Node 0 DMA32: 2800*4kB (UM) 1455*8kB (UME) 437*16kB (UM) 80*32kB (UME) 8*64kB (ME) 6*128kB (UE) 23*256kB (ME) 17*512kB (UME) 4*1024kB (UME) 5*2048kB (UME) 231*4096kB (UM) = 1008776kB [ 540.482520][T16356] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 540.496676][T16356] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 6*16kB (UM) 2*32kB (UM) 6*64kB (UM) 4*128kB (UM) 5*256kB (UM) 6*512kB (UM) 1*1024kB (M) 2*2048kB (U) 962*4096kB (M) = 3950904kB [ 540.497143][T16356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 540.497188][T16356] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 540.497247][T16356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 540.497291][T16356] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 540.497331][T16356] 44365 total pagecache pages [ 540.497350][T16356] 0 pages in swap cache [ 540.497369][T16356] Free swap = 124996kB [ 540.497387][T16356] Total swap = 124996kB [ 540.497406][T16356] 2097051 pages RAM [ 540.497426][T16356] 0 pages HighMem/MovableOnly [ 540.497444][T16356] 428659 pages reserved [ 540.497464][T16356] 0 pages cma reserved [ 540.723692][T16362] netlink: 'syz.4.2487': attribute type 1 has an invalid length. [ 540.723748][T16362] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2487'. [ 541.193950][T16364] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2488'. [ 541.234702][T16356] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 541.488451][T16371] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2490'. [ 541.614530][T16375] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2492'. [ 541.731489][T16383] netlink: 'syz.3.2492': attribute type 3 has an invalid length. [ 541.903728][T16392] netlink: 'syz.2.2494': attribute type 1 has an invalid length. [ 542.173557][T16392] 8021q: adding VLAN 0 to HW filter on device bond8 [ 542.220816][T16395] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 542.257062][T16395] bond8: (slave batadv1): making interface the new active one [ 542.287994][T16395] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 542.361264][T16399] syzkaller1: entered promiscuous mode [ 542.361289][T16399] syzkaller1: entered allmulticast mode [ 542.377868][T16402] erspan0: left allmulticast mode [ 542.377889][T16402] erspan0: left promiscuous mode [ 542.378105][T16402] bridge7: port 1(erspan0) entered disabled state [ 542.678728][T16402] bridge8: port 1(erspan0) entered blocking state [ 542.678852][T16402] bridge8: port 1(erspan0) entered disabled state [ 542.678994][T16402] erspan0: entered allmulticast mode [ 542.685310][T16402] erspan0: entered promiscuous mode [ 543.184555][T16420] tipc: Resetting bearer [ 543.590308][ T8117] wg2 speed is unknown, defaulting to 1000 [ 543.981584][T16455] __nla_validate_parse: 10 callbacks suppressed [ 543.981604][T16455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2509'. [ 544.184085][T16462] net_ratelimit: 498 callbacks suppressed [ 544.184108][T16462] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 544.184137][T16462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.632760][T16479] syzkaller0: entered promiscuous mode [ 544.632783][T16479] syzkaller0: entered allmulticast mode [ 544.653100][T16479] tipc: Enabled bearer , priority 0 [ 544.667513][T16479] tipc: Resetting bearer [ 544.706198][T16478] tipc: Resetting bearer [ 544.818103][T16478] tipc: Disabling bearer [ 544.962051][T16489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2522'. [ 544.997860][T16482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2520'. [ 545.066121][T16493] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 545.339463][T16513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.543314][T16520] netlink: 'syz.3.2533': attribute type 9 has an invalid length. [ 545.646532][T16523] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2533'. [ 545.978737][T16530] tipc: Resetting bearer [ 546.022144][T16530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.130649][T16530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.134359][T16530] veth1_vlan: left promiscuous mode [ 546.150682][T16530] veth0_vlan: left promiscuous mode [ 546.152378][T16530] veth0_vlan: entered promiscuous mode [ 546.154709][T16530] veth1_vlan: entered promiscuous mode [ 546.188680][T16530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.189906][T16530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.191608][T16530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.217995][T16530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.220088][T16530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 546.221393][T16530] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 546.249802][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.250119][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.273670][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.273767][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.410715][ T3384] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.411920][ T3384] bond2: (slave geneve2): link status definitely down, disabling slave [ 546.507909][ T3384] bond2: now running without any active interface! [ 546.516713][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.520651][ T3403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.755945][T16570] netlink: 'syz.4.2548': attribute type 9 has an invalid length. [ 546.785420][T16570] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2548'. [ 546.853788][T16572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2544'. [ 547.118231][T16572] ±ÿ: renamed from lo (while UP) [ 547.299473][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'. [ 547.406017][T16602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2555'. [ 547.406045][T16602] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2555'. [ 547.587802][T16607] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2556'. [ 548.021121][T16629] netlink: 'syz.0.2562': attribute type 9 has an invalid length. [ 548.107269][T16636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 548.650250][T16660] openvswitch: netlink: IP tunnel dst address not specified [ 548.798120][T16669] netlink: 'syz.1.2576': attribute type 9 has an invalid length. [ 549.072279][T16682] __nla_validate_parse: 5 callbacks suppressed [ 549.072299][T16682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2578'. [ 549.843278][T16715] netlink: 'syz.4.2590': attribute type 9 has an invalid length. [ 549.860477][T16715] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2590'. [ 549.953120][T16723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2592'. [ 552.061986][T16824] x_tables: duplicate entry at hook 3 [ 552.165452][T16832] bridge0: port 1(gretap0) entered blocking state [ 552.167349][T16832] bridge0: port 1(gretap0) entered disabled state [ 552.167512][T16832] gretap0: entered allmulticast mode [ 552.170847][T16832] gretap0: entered promiscuous mode [ 552.566284][T16853] openvswitch: netlink: Duplicate or invalid key (type 0). [ 552.567107][T16852] ip6gre2: entered promiscuous mode [ 553.592247][T16903] netlink: 'syz.0.2659': attribute type 15 has an invalid length. [ 553.621261][T16904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2658'. [ 553.704640][T16907] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 554.483665][T16934] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 554.848252][T16957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2673'. [ 554.909604][T16958] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 555.190336][T16973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 555.190354][T16973] IPv6: NLM_F_CREATE should be set when creating new route [ 555.190382][T16973] IPv6: NLM_F_CREATE should be set when creating new route [ 555.770832][T16993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2686'. [ 555.837307][T17006] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 556.142323][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2695'. [ 556.369126][T17033] netlink: 'syz.0.2699': attribute type 9 has an invalid length. [ 556.546825][T17045] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2699'. [ 556.799825][T17056] hsr0: entered promiscuous mode [ 557.108425][T17070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2711'. [ 557.485440][T17085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.530441][T17090] netlink: 'syz.4.2721': attribute type 9 has an invalid length. [ 557.547577][T17090] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2721'. [ 557.938360][T17106] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 558.012145][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2723'. [ 558.383395][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2728'. [ 558.508530][T17125] vlan5: entered allmulticast mode [ 558.508552][T17125] bridge9: entered allmulticast mode [ 558.534392][T17129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2730'. [ 558.593064][T17131] netlink: 'syz.3.2732': attribute type 9 has an invalid length. [ 558.698565][T17135] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2732'. [ 559.024341][T17144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.713689][T17187] openvswitch: netlink: Flow key attr not present in new flow. [ 559.909914][T17193] netlink: 'syz.2.2755': attribute type 12 has an invalid length. [ 559.938952][T17197] __nla_validate_parse: 4 callbacks suppressed [ 559.938972][T17197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2757'. [ 559.940550][T17195] netlink: NAT attribute has 8 unknown bytes [ 559.940582][T17195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.264444][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2759'. [ 560.339261][T17215] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2761'. [ 560.714914][T17226] bond1 (unregistering): Released all slaves [ 561.060898][T17245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2771'. [ 562.072628][T17287] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.114790][T17290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2788'. [ 563.031521][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.097959][T17333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2800'. [ 563.113095][T17330] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2802'. [ 563.661838][T17334] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2801'. [ 563.980152][T17375] vlan0: entered promiscuous mode [ 564.013353][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2810'. [ 564.036896][T17376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.171820][T17382] netlink: zone id is out of range [ 564.171888][T17382] netlink: zone id is out of range [ 564.172032][T17382] netlink: zone id is out of range [ 564.172077][T17382] netlink: zone id is out of range [ 564.172086][T17382] netlink: zone id is out of range [ 564.172095][T17382] netlink: zone id is out of range [ 564.172104][T17382] netlink: zone id is out of range [ 564.172112][T17382] netlink: zone id is out of range [ 564.172121][T17382] netlink: zone id is out of range [ 564.172129][T17382] netlink: zone id is out of range [ 564.305449][T17386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2817'. [ 564.945688][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 565.459652][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2830'. [ 565.994641][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2834'. [ 566.264902][T17465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2841'. [ 566.461892][T17472] block nbd4: not configured, cannot reconfigure [ 566.915876][T17495] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.059440][T17502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2856'. [ 567.593387][T17521] tipc: New replicast peer: fe88:0000:0000:0000:0000:0000:0000:0101 [ 567.763022][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 567.894954][T17529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2868'. [ 568.207232][T17535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2869'. [ 568.374383][T17544] sch_tbf: burst 88 is lower than device veth17 mtu (1514) ! [ 568.668983][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2875'. [ 569.157899][T17557] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2877'. [ 569.679884][T17590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2883'. [ 569.915783][T17604] sch_tbf: burst 88 is lower than device veth19 mtu (1514) ! [ 569.963350][T17607] netlink: 'syz.3.2889': attribute type 3 has an invalid length. [ 570.139201][T17609] net_ratelimit: 56 callbacks suppressed [ 570.139223][T17609] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 570.455024][T17624] netlink: zone id is out of range [ 570.455077][T17624] netlink: zone id is out of range [ 570.455202][T17624] netlink: zone id is out of range [ 570.455244][T17624] netlink: zone id is out of range [ 570.455253][T17624] netlink: zone id is out of range [ 570.455261][T17624] netlink: zone id is out of range [ 570.455270][T17624] netlink: zone id is out of range [ 570.455278][T17624] netlink: zone id is out of range [ 570.455287][T17624] netlink: zone id is out of range [ 570.590809][T17630] __nla_validate_parse: 3 callbacks suppressed [ 570.590830][T17630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2898'. [ 571.038704][T17644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2902'. [ 571.176416][T17648] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 571.734403][T17672] vlan2: entered promiscuous mode [ 571.734424][T17672] bridge0: entered promiscuous mode [ 571.799004][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 573.782378][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 573.985313][T17791] No such timeout policy "s" [ 574.304362][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2961'. [ 575.210901][T17848] netlink: 'syz.3.2976': attribute type 9 has an invalid length. [ 575.211943][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2975'. [ 575.350414][T17852] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2976'. [ 575.795369][T17865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2979'. [ 575.933372][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'. [ 576.653367][T17891] net_ratelimit: 59 callbacks suppressed [ 576.653389][T17891] ip_tables: iptables: counters copy to user failed while replacing table [ 576.844814][T17893] netlink: 'syz.4.2989': attribute type 9 has an invalid length. [ 576.965345][T17897] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2989'. [ 577.125221][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2991'. [ 578.837058][T17943] tipc: Resetting bearer [ 579.383513][ T9371] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 579.411501][T17952] sctp: [Deprecated]: syz.0.3008 (pid 17952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 579.411501][T17952] Use struct sctp_sack_info instead [ 579.949375][T17976] ip_tables: iptables: counters copy to user failed while replacing table [ 580.146134][ T9371] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 580.484431][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3024'. [ 580.515217][T18001] ip6tnl0: Caught tx_queue_len zero misconfig [ 580.892234][T18019] netlink: 'syz.4.3032': attribute type 9 has an invalid length. [ 581.011553][T18028] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3032'. [ 581.092879][T18036] netlink: 'syz.1.3037': attribute type 1 has an invalid length. [ 581.092903][T18036] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3037'. [ 581.092936][T18036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3037'. [ 581.175117][T18037] netlink: zone id is out of range [ 581.175167][T18037] netlink: zone id is out of range [ 581.175300][T18037] netlink: zone id is out of range [ 581.175344][T18037] netlink: zone id is out of range [ 581.175353][T18037] netlink: zone id is out of range [ 581.175362][T18037] netlink: zone id is out of range [ 581.175371][T18037] netlink: zone id is out of range [ 581.175380][T18037] netlink: zone id is out of range [ 581.833359][T18069] veth0: Caught tx_queue_len zero misconfig [ 581.909408][T18073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3051'. [ 582.096628][T18082] net_ratelimit: 61 callbacks suppressed [ 582.096649][T18082] netlink: zone id is out of range [ 582.096697][T18082] netlink: zone id is out of range [ 582.096812][T18082] netlink: zone id is out of range [ 582.096852][T18082] netlink: zone id is out of range [ 582.096860][T18082] netlink: zone id is out of range [ 582.096868][T18082] netlink: zone id is out of range [ 582.096889][T18082] netlink: zone id is out of range [ 582.096898][T18082] netlink: zone id is out of range [ 582.096905][T18082] netlink: zone id is out of range [ 582.096913][T18082] netlink: zone id is out of range [ 582.128023][T18077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3050'. [ 582.343107][T18086] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 582.672369][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'. [ 582.719098][T18114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3066'. [ 583.121309][T18126] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3070'. [ 583.718673][T18155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3083'. [ 585.157686][T18216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'. [ 585.658817][T18241] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 585.761260][T18244] ipvlan0: Caught tx_queue_len zero misconfig [ 586.271447][T18271] __nla_validate_parse: 3 callbacks suppressed [ 586.271469][T18271] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3124'. [ 586.785899][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 587.663906][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'. [ 588.558423][T18368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3147'. [ 588.782901][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3154'. [ 589.498548][T18413] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3163'. [ 589.852940][T18428] net_ratelimit: 60 callbacks suppressed [ 589.852963][T18428] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 590.010395][T18437] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.010534][T18437] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.055843][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3171'. [ 590.294093][T18453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3173'. [ 590.501055][T18459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3177'. [ 591.299599][T18499] block nbd0: reconnected socket [ 591.302756][ T5634] block nbd0: Receive control failed (result -32) [ 592.254216][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'. [ 593.048617][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'. [ 593.048652][T18561] netlink: 'syz.4.3205': attribute type 20 has an invalid length. [ 593.048667][T18561] netlink: 'syz.4.3205': attribute type 21 has an invalid length. [ 593.309796][T18573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3212'. [ 593.802105][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'. [ 594.421578][T18636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3230'. [ 594.475122][T18639] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.726193][T18654] netlink: 'syz.0.3238': attribute type 9 has an invalid length. [ 594.759029][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3237'. [ 594.851245][T18662] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3238'. [ 595.859515][T18704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.907031][T18707] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 596.074833][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3261'. [ 596.250751][T18722] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3263'. [ 596.459747][T18735] netlink: 'syz.4.3267': attribute type 219 has an invalid length. [ 596.940830][T18760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3275'. [ 597.694145][T18789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3285'. [ 597.720157][T18789] vlan3: entered allmulticast mode [ 597.720178][T18789] bridge3: entered allmulticast mode [ 598.280392][T18809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3290'. [ 598.683298][T18820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 599.266701][T18851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3302'. [ 603.122187][T18889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3314'. [ 603.559540][T18921] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3326'. [ 604.269867][T18942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3332'. [ 604.430436][T18948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.518089][T18951] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3336'. [ 605.080785][T18982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3348'. [ 605.552737][T19004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3356'. [ 605.646052][T19006] sctp: [Deprecated]: syz.2.3357 (pid 19006) Use of int in maxseg socket option. [ 605.646052][T19006] Use struct sctp_assoc_value instead [ 606.262195][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3369'. [ 606.367578][T19036] netlink: zone id is out of range [ 606.367632][T19036] netlink: zone id is out of range [ 606.367748][T19036] netlink: zone id is out of range [ 606.367791][T19036] netlink: zone id is out of range [ 606.367801][T19036] netlink: zone id is out of range [ 606.367809][T19036] netlink: zone id is out of range [ 606.367817][T19036] netlink: zone id is out of range [ 606.367826][T19036] netlink: zone id is out of range [ 606.367834][T19036] netlink: zone id is out of range [ 606.995776][T19063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3377'. [ 607.141766][T19066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3379'. [ 607.985199][T19085] netlink: 'syz.2.3385': attribute type 1 has an invalid length. [ 607.985221][T19085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3385'. [ 608.416647][T19107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3393'. [ 608.766981][T19125] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3400'. [ 608.815394][T19128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3401'. [ 609.151572][T19144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.545186][T19161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 609.608240][T19161] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 609.608263][T19161] netlink: 'syz.2.3413': attribute type 2 has an invalid length. [ 610.894314][T19205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3432'. [ 611.040474][T19214] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 611.562199][T19237] ip6gre1: entered promiscuous mode [ 611.562268][T19237] ip6gre1: entered allmulticast mode [ 611.664656][T19240] geneve3: entered promiscuous mode [ 611.697863][ T3403] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 36234 - 0 [ 611.697910][ T3403] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 36234 - 0 [ 611.697948][ T3403] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 36234 - 0 [ 611.978264][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 613.361909][T19329] netlink: 'syz.1.3468': attribute type 1 has an invalid length. [ 613.405853][T19329] 8021q: adding VLAN 0 to HW filter on device bond11 [ 613.465066][T19329] bond11: (slave geneve2): making interface the new active one [ 613.476820][T19329] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 613.810245][T19350] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.974971][T19361] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.076778][T19364] nftables ruleset with unbound set [ 617.641549][T19468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 617.657567][T19467] netlink: 'syz.0.3516': attribute type 9 has an invalid length. [ 617.801260][T19475] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3516'. [ 618.063186][T19483] batman_adv: batadv0: Adding interface: macvtap1 [ 618.063210][T19483] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.063242][T19483] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 618.157667][T19486] batman_adv: batadv0: Removing interface: macvtap1 [ 619.122692][T19527] netlink: 'syz.4.3533': attribute type 9 has an invalid length. [ 619.215766][T19532] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3533'. [ 619.925176][T19556] batman_adv: batadv0: Adding interface: syzkaller0 [ 619.925392][T19556] batman_adv: batadv0: Interface activated: syzkaller0 [ 620.160563][T19564] bond2: (slave bridge3): Releasing backup interface [ 620.160602][T19564] bridge3 (unregistering): left allmulticast mode [ 620.400109][T19573] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.558822][T19585] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3554'. [ 620.951946][T19604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3560'. [ 620.971035][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3562'. [ 620.971067][T19605] netlink: 'syz.2.3562': attribute type 11 has an invalid length. [ 621.009513][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3562'. [ 621.009545][T19605] netlink: 'syz.2.3562': attribute type 11 has an invalid length. [ 621.020266][ T7323] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.020453][ T7323] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.020541][ T7323] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.619727][T19659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3578'. [ 622.621150][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3578'. [ 622.758444][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888079be1400: rx timeout, send abort [ 622.883851][T19671] netlink: 'syz.1.3581': attribute type 1 has an invalid length. [ 622.883875][T19671] netlink: 'syz.1.3581': attribute type 7 has an invalid length. [ 622.883888][T19671] netlink: 'syz.1.3581': attribute type 8 has an invalid length. [ 622.883901][T19671] netlink: 'syz.1.3581': attribute type 1 has an invalid length. [ 622.883915][T19671] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3581'. [ 623.131039][T19682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3583'. [ 623.194887][T19686] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 623.258686][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888079be1000: rx timeout, send abort [ 623.260015][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888079be1400: abort rx timeout. Force session deactivation [ 623.629091][T19701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3589'. [ 623.629128][T19701] netlink: 'syz.2.3589': attribute type 8 has an invalid length. [ 623.629142][T19701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3589'. [ 623.687921][T19704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3589'. [ 623.687955][T19704] netlink: 'syz.2.3589': attribute type 8 has an invalid length. [ 623.687970][T19704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3589'. [ 623.759515][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888079be1000: abort rx timeout. Force session deactivation [ 623.791054][T19705] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 623.863607][T19710] net_ratelimit: 129 callbacks suppressed [ 623.863629][T19710] ip_tables: iptables: counters copy to user failed while replacing table [ 624.062465][T19721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3595'. [ 624.168507][T19723] sch_tbf: burst 88 is lower than device veth17 mtu (1514) ! [ 624.258369][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3598'. [ 624.262301][T19730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3598'. [ 624.467150][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.564605][T19739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3601'. [ 625.214238][T19764] sch_tbf: burst 88 is lower than device veth19 mtu (1514) ! [ 625.236760][ T1164] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 625.438433][T19786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 625.457561][T19788] netlink: Unknown NAT attribute (type=1234, max=9) [ 625.457588][T19788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.763643][T19800] ip_tables: iptables: counters copy to user failed while replacing table [ 625.786079][T19800] syzkaller1: entered promiscuous mode [ 625.786099][T19800] syzkaller1: entered allmulticast mode [ 626.920031][T19831] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 627.383733][T19854] netlink: zone id is out of range [ 627.383786][T19854] netlink: zone id is out of range [ 627.383945][T19854] netlink: zone id is out of range [ 627.383990][T19854] netlink: zone id is out of range [ 627.384000][T19854] netlink: zone id is out of range [ 627.384009][T19854] netlink: zone id is out of range [ 628.147490][T19771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 628.591089][T19890] __nla_validate_parse: 3 callbacks suppressed [ 628.591111][T19890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3643'. [ 628.825337][T19904] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3645'. [ 630.123537][T19945] netlink: 'syz.0.3658': attribute type 10 has an invalid length. [ 630.139095][T19945] team0: Device veth0_vlan failed to register rx_handler [ 630.153866][T19946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3656'. [ 630.243181][T19950] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3657'. [ 630.588595][T19968] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3662'. [ 631.039305][T19981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3665'. [ 631.229076][T19993] net_ratelimit: 63 callbacks suppressed [ 631.229095][T19993] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 631.567590][T19999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3672'. [ 631.741457][T20008] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3673'. [ 632.102515][T20025] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3677'. [ 632.301935][T20037] ip_tables: iptables: counters copy to user failed while replacing table [ 632.390007][T20039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3683'. [ 633.803108][T20110] __nla_validate_parse: 3 callbacks suppressed [ 633.803129][T20110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3704'. [ 634.715704][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 636.130319][T20187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.926341][T20209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3731'. [ 639.323651][T20299] netlink: zone id is out of range [ 639.323704][T20299] netlink: zone id is out of range [ 639.323837][T20299] netlink: zone id is out of range [ 639.323880][T20299] netlink: zone id is out of range [ 639.323890][T20299] netlink: zone id is out of range [ 639.323898][T20299] netlink: zone id is out of range [ 639.323907][T20299] netlink: zone id is out of range [ 639.323916][T20299] netlink: zone id is out of range [ 639.323925][T20299] netlink: zone id is out of range [ 639.323934][T20299] netlink: zone id is out of range [ 641.743976][T20357] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.056177][T20373] netlink: 'syz.0.3771': attribute type 11 has an invalid length. [ 642.430421][T20397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3775'. [ 642.593189][T20405] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 645.258522][T20380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.484040][T20441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.115830][T20465] netlink: 'syz.2.3799': attribute type 5 has an invalid length. [ 646.452906][T20474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3802'. [ 646.716681][T20479] net_ratelimit: 129 callbacks suppressed [ 646.716706][T20479] openvswitch: netlink: IP tunnel TTL not specified. [ 646.716734][T20479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.171405][T20498] ip_tables: iptables: counters copy to user failed while replacing table [ 647.172562][T20498] netlink: 'syz.1.3807': attribute type 4 has an invalid length. [ 647.383565][T20502] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3808'. [ 647.383592][T20502] NCSI netlink: No device for ifindex 0 [ 647.464329][T20506] netlink: 976 bytes leftover after parsing attributes in process `syz.1.3810'. [ 647.464355][T20506] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 647.496324][T20506] netlink: 976 bytes leftover after parsing attributes in process `syz.1.3810'. [ 647.496349][T20506] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 647.610292][T20511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3811'. [ 647.649291][T20513] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 647.681649][T20511] 8021q: adding VLAN 0 to HW filter on device bond7 [ 647.702868][T20518] team0: Port device dummy0 removed [ 647.721977][T20518] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 647.740789][T20514] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 647.741516][T20514] batman_adv: batadv0: Adding interface: gretap3 [ 647.741530][T20514] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1536 would solve the problem. [ 647.741577][T20514] batman_adv: batadv0: Interface activated: gretap3 [ 647.851894][T20511] netlink: 'syz.3.3811': attribute type 10 has an invalid length. [ 647.851920][T20511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3811'. [ 647.925340][T20517] tipc: Enabled bearer , priority 0 [ 647.928236][T20511] dummy0: entered promiscuous mode [ 647.949588][T20511] bond7: (slave dummy0): Releasing backup interface [ 647.991181][T20521] syzkaller0: entered promiscuous mode [ 647.991208][T20521] syzkaller0: entered allmulticast mode [ 648.786112][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3823'. [ 648.921963][T20558] openvswitch: netlink: Unknown key attributes 1 [ 649.055979][T20561] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 649.212720][T20567] netlink: 'syz.0.3827': attribute type 4 has an invalid length. [ 649.267481][T20565] netlink: 'syz.0.3827': attribute type 4 has an invalid length. [ 649.642878][T20577] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 649.915886][T20587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3835'. [ 650.072081][T20588] sch_tbf: burst 88 is lower than device veth21 mtu (1514) ! [ 650.456379][T20606] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.456503][T20606] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.456672][T20606] bridge_slave_0: entered allmulticast mode [ 650.465356][T20606] bridge_slave_0: entered promiscuous mode [ 650.594553][T20606] bridge_slave_0: left allmulticast mode [ 650.594582][T20606] bridge_slave_0: left promiscuous mode [ 650.594811][T20606] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.301004][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3850'. [ 651.341612][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3850'. [ 651.352066][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3850'. [ 651.358140][ T3357] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.359304][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.359405][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.359499][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.938059][T20651] netlink: zone id is out of range [ 651.938110][T20651] netlink: zone id is out of range [ 651.938232][T20651] netlink: zone id is out of range [ 651.938275][T20651] netlink: zone id is out of range [ 651.938285][T20651] netlink: zone id is out of range [ 651.938294][T20651] netlink: zone id is out of range [ 651.938302][T20651] netlink: zone id is out of range [ 651.938311][T20651] netlink: zone id is out of range [ 651.938319][T20651] netlink: zone id is out of range [ 651.938328][T20651] netlink: zone id is out of range [ 652.016351][T20656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.592663][T20680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3864'. [ 652.692552][T20682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3866'. [ 652.798697][T20690] syzkaller1: entered promiscuous mode [ 652.798721][T20690] syzkaller1: entered allmulticast mode [ 652.870333][ T1157] nci: nci_ntf_packet: unsupported ntf opcode 0xf31 [ 653.112270][T20699] batman_adv: batadv0: Adding interface: macvtap1 [ 653.112289][T20699] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.112328][T20699] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 653.405742][T20708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 653.989131][T20722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3876'. [ 653.989154][T20722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3876'. [ 653.989166][T20722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3876'. [ 655.730751][T20684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.011211][T20746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3883'. [ 656.099752][T20756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3887'. [ 656.248405][T20756] 8021q: adding VLAN 0 to HW filter on device bond8 [ 656.630745][T20780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3893'. [ 656.744771][T20783] netlink: 'syz.0.3894': attribute type 11 has an invalid length. [ 657.255781][T20812] syzkaller1: entered promiscuous mode [ 657.255804][T20812] syzkaller1: entered allmulticast mode [ 657.339683][T20807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3900'. [ 657.632360][T20817] X25: received unknown 00 with LCI 000 [ 657.682275][T20823] syzkaller0: entered promiscuous mode [ 657.682295][T20823] syzkaller0: entered allmulticast mode [ 659.196211][T20893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3916'. [ 659.327619][T20893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 659.446068][T20895] macvlan4: entered promiscuous mode [ 659.446095][T20895] macvlan4: entered allmulticast mode [ 659.553146][T20901] syzkaller0: left promiscuous mode [ 659.553170][T20901] syzkaller0: left allmulticast mode [ 660.110280][T20922] 8021q: adding VLAN 0 to HW filter on device bond9 [ 660.123857][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3925'. [ 660.123881][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3925'. [ 660.474055][T20938] net_ratelimit: 61 callbacks suppressed [ 660.474078][T20938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.936664][T20950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3931'. [ 661.044452][T20959] sch_tbf: burst 88 is lower than device veth23 mtu (1514) ! [ 662.173084][T20999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 662.509944][T21010] syzkaller1: entered promiscuous mode [ 662.509969][T21010] syzkaller1: entered allmulticast mode [ 662.827872][T21017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3946'. [ 663.304099][T21028] syzkaller0: entered promiscuous mode [ 663.304124][T21028] syzkaller0: entered allmulticast mode [ 667.448755][T21090] tipc: Enabled bearer , priority 0 [ 667.544860][T21090] syzkaller0: entered promiscuous mode [ 667.544888][T21090] syzkaller0: entered allmulticast mode [ 667.557065][T21090] tipc: Resetting bearer [ 667.630005][T21088] tipc: Resetting bearer [ 670.989516][T21088] tipc: Disabling bearer [ 670.993184][T21096] syzkaller1: entered promiscuous mode [ 670.993199][T21096] syzkaller1: entered allmulticast mode [ 671.122849][T21125] syzkaller0: entered promiscuous mode [ 671.122873][T21125] syzkaller0: entered allmulticast mode [ 671.417608][T21143] pimreg9: entered allmulticast mode [ 672.766787][T21199] netlink: 'syz.0.3996': attribute type 16 has an invalid length. [ 672.766809][T21199] netlink: 'syz.0.3996': attribute type 17 has an invalid length. [ 672.766904][T21203] syzkaller1: entered promiscuous mode [ 672.766920][T21203] syzkaller1: entered allmulticast mode [ 673.112641][T21220] syzkaller0: entered promiscuous mode [ 673.112667][T21220] syzkaller0: entered allmulticast mode [ 673.610281][T21237] syzkaller0: left promiscuous mode [ 673.610308][T21237] syzkaller0: left allmulticast mode [ 674.563090][T21274] netlink: 'syz.3.4022': attribute type 9 has an invalid length. [ 674.652761][T21277] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4022'. [ 675.124944][T21293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4026'. [ 675.211319][T21293] bond9: entered promiscuous mode [ 675.211344][T21293] bond9: entered allmulticast mode [ 675.230030][T21299] netlink: 'syz.1.4028': attribute type 1 has an invalid length. [ 675.304936][T21299] bond12: entered promiscuous mode [ 675.305362][T21299] 8021q: adding VLAN 0 to HW filter on device bond12 [ 675.364552][T21299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4028'. [ 675.393910][T21306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4030'. [ 675.412231][T21299] 8021q: adding VLAN 0 to HW filter on device bond12 [ 675.414244][T21299] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 675.414267][T21299] bond12: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 675.478123][T21299] bond12: (slave wireguard0): making interface the new active one [ 675.478147][T21299] wireguard0: entered promiscuous mode [ 675.503334][T21299] bond12: (slave wireguard0): Enslaving as an active interface with an up link [ 675.641245][T21306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4030'. [ 675.727663][T21315] syzkaller0: entered promiscuous mode [ 675.727685][T21315] syzkaller0: entered allmulticast mode [ 675.764208][T21317] hsr0: entered promiscuous mode [ 675.876916][T21320] netlink: 'syz.4.4036': attribute type 9 has an invalid length. [ 675.947050][T21326] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4036'. [ 676.080657][T21316] hsr0: left promiscuous mode [ 676.346321][T21338] syzkaller0: entered promiscuous mode [ 676.346345][T21338] syzkaller0: entered allmulticast mode [ 676.429857][T21343] syzkaller0: entered promiscuous mode [ 676.429884][T21343] syzkaller0: entered allmulticast mode [ 677.415884][T21363] syzkaller0: entered promiscuous mode [ 677.415911][T21363] syzkaller0: entered allmulticast mode [ 678.222752][T21414] ip_tables: iptables: counters copy to user failed while replacing table [ 678.249872][T21414] ip_tables: iptables: counters copy to user failed while replacing table [ 678.412894][T21425] xt_NFQUEUE: number of total queues is 0 [ 678.495972][T21427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4056'. [ 678.542008][T21427] sch_tbf: burst 88 is lower than device veth23 mtu (1514) ! [ 678.644600][T21434] netlink: 'syz.1.4059': attribute type 1 has an invalid length. [ 678.657171][T21436] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 678.685928][T21434] bond13: entered promiscuous mode [ 678.686372][T21434] 8021q: adding VLAN 0 to HW filter on device bond13 [ 678.760600][T21434] ipvlan2: entered allmulticast mode [ 678.760624][T21434] bond13: entered allmulticast mode [ 678.762853][T21434] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 678.762879][T21434] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 678.762897][T21434] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 678.765002][T21434] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 679.054529][T21436] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 679.202739][T21441] xt_CT: No such helper "netbios-ns" [ 679.513274][T21454] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 679.741408][T21464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4069'. [ 679.828157][T21477] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 680.442216][T21489] netlink: zone id is out of range [ 680.442233][T21489] netlink: zone id is out of range [ 680.442242][T21489] netlink: zone id is out of range [ 680.442251][T21489] netlink: zone id is out of range [ 680.442259][T21489] netlink: zone id is out of range [ 680.442267][T21489] netlink: zone id is out of range [ 681.617823][T21526] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 682.901267][T21564] netlink: 'syz.2.4094': attribute type 9 has an invalid length. [ 683.017966][T21568] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4094'. [ 683.567316][T21592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4101'. [ 683.679638][ T5634] block nbd1: Receive control failed (result -1) [ 684.934649][T21637] netlink: 'syz.1.4110': attribute type 9 has an invalid length. [ 685.051429][T21642] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4110'. [ 685.842826][T21677] netlink: 'syz.1.4120': attribute type 1 has an invalid length. [ 685.910314][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.084253][T21677] bond14: entered promiscuous mode [ 686.084882][T21677] 8021q: adding VLAN 0 to HW filter on device bond14 [ 686.292222][T21686] veth25: entered allmulticast mode [ 686.328749][T21686] bond14: (slave veth25): making interface the new active one [ 686.328777][T21686] veth25: entered promiscuous mode [ 686.398936][T21686] bond14: (slave veth25): Enslaving as an active interface with an up link [ 686.524664][T21693] batman_adv: batadv0: Removing interface: macvtap1 [ 687.148575][T21726] syzkaller0: entered promiscuous mode [ 687.148601][T21726] syzkaller0: entered allmulticast mode [ 687.372387][T21736] netlink: 'syz.1.4131': attribute type 10 has an invalid length. [ 687.744740][T21751] syzkaller0: entered promiscuous mode [ 687.744764][T21751] syzkaller0: entered allmulticast mode [ 689.368529][T21783] syzkaller0: entered promiscuous mode [ 689.368553][T21783] syzkaller0: entered allmulticast mode [ 689.476463][T21789] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4144'. [ 689.476494][T21789] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4144'. [ 690.500157][T21824] syzkaller0: entered promiscuous mode [ 690.500183][T21824] syzkaller0: entered allmulticast mode [ 691.292542][T21846] tipc: Enabling of bearer rejected, already enabled [ 691.309705][T21846] net_ratelimit: 5 callbacks suppressed [ 691.309723][T21846] syzkaller0: mtu less than device minimum [ 692.180952][T21882] tipc: Enabling of bearer rejected, already enabled [ 692.463441][T21885] tipc: Enabling of bearer rejected, already enabled [ 692.600871][T21885] syzkaller0: mtu less than device minimum [ 692.697441][T21888] tipc: Enabled bearer , priority 0 [ 692.710384][T21888] syzkaller0: entered promiscuous mode [ 692.710438][T21888] syzkaller0: entered allmulticast mode [ 692.840337][T21888] tipc: Resetting bearer [ 692.854432][T21886] tipc: Resetting bearer [ 692.893673][T21886] tipc: Disabling bearer [ 692.916696][T21894] tipc: Enabling of bearer rejected, already enabled [ 692.924718][T21894] syzkaller0: mtu less than device minimum [ 693.252642][T21909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 693.274495][ T3384] nci: nci_rx_work: unknown MT 0x5 [ 693.548318][T21926] syzkaller0: entered promiscuous mode [ 693.548335][T21926] syzkaller0: entered allmulticast mode [ 693.743156][T21933] erspan0: left allmulticast mode [ 693.743183][T21933] erspan0: left promiscuous mode [ 693.743350][T21933] bridge6: port 1(erspan0) entered disabled state [ 693.751966][T21933] tipc: Resetting bearer [ 693.765954][T21933] bridge_slave_0: left allmulticast mode [ 693.766033][T21933] bridge_slave_0: left promiscuous mode [ 693.766748][T21933] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.793754][T21933] bridge_slave_1: left allmulticast mode [ 693.793773][T21933] bridge_slave_1: left promiscuous mode [ 693.793905][T21933] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.814534][T21933] bond0: (slave bond_slave_0): Releasing backup interface [ 693.828471][T21933] bond0: (slave bond_slave_1): Releasing backup interface [ 693.843193][T21933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.843243][T21933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.880681][T21933] bond2: (slave geneve2): Releasing active interface [ 693.894922][T21933] bond3: (slave gre1): Releasing backup interface [ 693.906704][T21933] bond4: (slave ip6gretap1): Releasing backup interface [ 693.906721][T21933] bond4: (slave ip6gretap1): the permanent HWaddr of slave - da:e5:1f:6d:be:b3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 693.908547][T21933] bond4: (slave veth3): Releasing backup interface [ 693.910644][T21933] bond8: (slave batadv1): Releasing active interface [ 696.165158][T21902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 696.448813][T21962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.567909][T21969] syzkaller0: left promiscuous mode [ 696.567933][T21969] syzkaller0: left allmulticast mode [ 696.821453][T21979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4192'. [ 696.837450][T21978] tipc: Enabling of bearer rejected, already enabled [ 696.842171][T21978] syzkaller0: entered promiscuous mode [ 696.842191][T21978] syzkaller0: entered allmulticast mode [ 696.892757][T21978] syzkaller0: mtu less than device minimum [ 698.831257][T22042] can: request_module (can-proto-0) failed. [ 698.976752][T22048] netlink: 'syz.3.4214': attribute type 9 has an invalid length. [ 699.078835][T22051] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4214'. [ 699.566953][T22070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4216'. [ 699.598232][T22070] geneve3: entered promiscuous mode [ 699.821622][T22074] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 700.374583][T22097] xt_nfacct: accounting object `' does not exist [ 700.775956][T22115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4227'. [ 700.775989][T22115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4227'. [ 702.255302][T22164] netlink: zone id is out of range [ 702.255345][T22164] netlink: zone id is out of range [ 702.259222][T22164] netlink: zone id is out of range [ 702.259345][T22164] netlink: zone id is out of range [ 702.259373][T22164] netlink: zone id is out of range [ 702.259393][T22164] netlink: zone id is out of range [ 702.260783][T22164] netlink: zone id is out of range [ 702.260806][T22164] netlink: zone id is out of range [ 702.260837][T22164] netlink: zone id is out of range [ 702.260856][T22164] netlink: zone id is out of range [ 702.554274][T22175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4243'. [ 702.680893][T22178] netlink: 'syz.0.4245': attribute type 10 has an invalid length. [ 702.698525][T22178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 702.704546][T22178] team0: Port device netdevsim1 added [ 702.768128][T22178] netlink: 'syz.0.4245': attribute type 10 has an invalid length. [ 702.810896][T22178] team0: Port device netdevsim1 removed [ 702.835311][T22178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 702.849136][T22178] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 704.032131][T22211] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 704.096949][T22214] tipc: Resetting bearer [ 704.384265][T22222] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 704.436867][T22222] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4256'. [ 705.083898][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4262'. [ 705.237291][T22243] tipc: Resetting bearer [ 705.341768][T22243] tipc: Disabling bearer [ 705.648004][T22251] xt_hashlimit: size too large, truncated to 1048576 [ 706.336634][T22281] syzkaller0: entered promiscuous mode [ 706.336669][T22281] syzkaller0: entered allmulticast mode [ 706.364531][T22281] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 706.627122][T22289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.130934][ T3384] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 708.263040][T22338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 708.473989][T22357] syzkaller0: entered promiscuous mode [ 708.474015][T22357] syzkaller0: entered allmulticast mode [ 708.498522][T22357] tc action pedit 'at' offset 5 out of bounds [ 708.888331][T22372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4286'. [ 708.888357][T22372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4286'. [ 709.005985][T22378] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 710.494893][T22432] netlink: 'syz.4.4296': attribute type 4 has an invalid length. [ 710.825722][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 711.060970][T22461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 711.681690][T22464] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.681904][T22464] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.682059][T22464] bridge_slave_0: entered allmulticast mode [ 711.694766][T22464] bridge_slave_0: entered promiscuous mode [ 711.801921][T22464] bridge_slave_0: left allmulticast mode [ 711.801952][T22464] bridge_slave_0: left promiscuous mode [ 711.802202][T22464] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.985082][T22469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4305'. [ 712.053764][T22469] hsr_slave_1 (unregistering): left promiscuous mode [ 712.179659][T22466] tc action pedit offset 132 out of bounds [ 712.254953][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4308'. [ 713.072758][T22524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.093185][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4325'. [ 714.325774][T22541] syzkaller0: entered promiscuous mode [ 714.325804][T22541] syzkaller0: entered allmulticast mode [ 717.830508][T22592] net_ratelimit: 200 callbacks suppressed [ 717.830530][T22592] openvswitch: netlink: Multiple metadata blocks provided [ 718.077107][T22600] syzkaller0: left promiscuous mode [ 718.077131][T22600] syzkaller0: left allmulticast mode [ 718.290492][T22612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4342'. [ 718.333042][T22608] bridge0: port 1(gretap0) entered blocking state [ 718.333171][T22608] bridge0: port 1(gretap0) entered forwarding state [ 718.570792][T22622] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4345'. [ 718.613609][T22608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.629644][T22608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 718.649792][T22608] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 718.878282][T22625] syzkaller0: entered promiscuous mode [ 718.878307][T22625] syzkaller0: entered allmulticast mode [ 718.910658][T22625] tipc: Enabled bearer , priority 0 [ 718.933486][T22625] tipc: Resetting bearer [ 718.967998][T22624] tipc: Resetting bearer [ 719.053828][T22624] tipc: Disabling bearer [ 719.305944][T22635] syzkaller0: entered promiscuous mode [ 719.305970][T22635] syzkaller0: entered allmulticast mode [ 719.484530][T22641] netlink: 'syz.4.4352': attribute type 1 has an invalid length. [ 719.548383][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4352'. [ 719.568680][T22641] bond10: entered promiscuous mode [ 719.569185][T22641] 8021q: adding VLAN 0 to HW filter on device bond10 [ 720.021206][T22659] syzkaller0: entered promiscuous mode [ 720.021229][T22659] syzkaller0: entered allmulticast mode [ 720.239774][T22668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4361'. [ 720.239799][T22668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4361'. [ 721.394909][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4368'. [ 721.429253][T22688] vlan3: entered promiscuous mode [ 721.429276][T22688] veth0: entered promiscuous mode [ 721.582471][T22692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.087015][T22713] netlink: 'syz.0.4373': attribute type 2 has an invalid length. [ 722.087042][T22713] netlink: 'syz.0.4373': attribute type 2 has an invalid length. [ 722.193071][T22721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4376'. [ 722.283608][T22724] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 722.302598][T22723] sch_tbf: burst 88 is lower than device veth27 mtu (1514) ! [ 722.539097][T22736] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 723.228758][T22759] xt_LOG: level 125 >= 8 [ 723.229384][T22759] netlink: 'syz.4.4388': attribute type 5 has an invalid length. [ 723.470750][T22765] syzkaller0: entered promiscuous mode [ 723.470776][T22765] syzkaller0: entered allmulticast mode [ 723.471870][T22769] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 723.606018][T22771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4389'. [ 723.692646][T22775] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 723.812273][T22778] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 723.934866][T22777] tipc: Enabling of bearer rejected, already enabled [ 724.181726][T22798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4396'. [ 724.201231][T22798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4396'. [ 724.289333][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4395'. [ 725.170758][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4404'. [ 725.356280][T22837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4405'. [ 725.583437][T22839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4406'. [ 725.777640][T22843] sch_tbf: burst 88 is lower than device veth25 mtu (1514) ! [ 725.906296][T22846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4407'. [ 725.978583][T22855] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 726.195168][T22863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4409'. [ 726.229372][T22863] bridge8: port 1(erspan0) entered blocking state [ 726.229502][T22863] bridge8: port 1(erspan0) entered forwarding state [ 726.277076][T22863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.558703][T22868] geneve1oup.kill: entered promiscuous mode [ 727.072366][T22898] nbd2: detected capacity change from 0 to 63 [ 727.167060][ T5634] block nbd2: Receive control failed (result -104) [ 728.446029][ T3357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.861221][T22949] openvswitch: netlink: Message has 5920 unknown bytes. [ 728.861271][T22949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.279576][T22973] netlink: 'syz.0.4431': attribute type 1 has an invalid length. [ 729.461453][T22973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 729.629258][T22973] bond4: (slave geneve2): making interface the new active one [ 729.655252][T22973] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 729.655365][T22982] netlink: 'syz.3.4432': attribute type 2 has an invalid length. [ 729.659195][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.703803][ T3357] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.703851][ T3357] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.716689][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.779526][T22982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4432'. [ 729.870815][T22999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4433'. [ 730.000309][T23003] sch_tbf: burst 88 is lower than device veth27 mtu (1514) ! [ 730.764700][T23040] netlink: 'syz.4.4443': attribute type 9 has an invalid length. [ 730.895112][T23046] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4443'. [ 731.385306][T23026] syzkaller1: entered promiscuous mode [ 731.385329][T23026] syzkaller1: entered allmulticast mode [ 731.488740][T23060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4445'. [ 731.607903][T23063] netlink: 'syz.3.4445': attribute type 4 has an invalid length. [ 731.607928][T23063] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4445'. [ 731.731020][T23067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4447'. [ 731.733649][T23067] ip6gre0: Caught tx_queue_len zero misconfig [ 731.733712][T23067] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 732.157397][T23076] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4448'. [ 732.593996][T23076] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 732.594024][T23076] batman_adv: batadv0: Removing interface: syzkaller0 [ 732.613989][T23076] batman_adv: batadv0: Interface deactivated: gretap3 [ 732.614015][T23076] batman_adv: batadv0: Removing interface: gretap3 [ 732.675247][T23076] batadv0 (unregistering): left allmulticast mode [ 732.824684][T23087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4449'. [ 732.985735][T23090] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 733.074998][T23092] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4452'. [ 733.113420][T23096] netlink: 'syz.1.4454': attribute type 9 has an invalid length. [ 733.332811][T23110] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4454'. [ 733.447495][T23114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4457'. [ 733.551399][T23123] netlink: 'syz.0.4457': attribute type 30 has an invalid length. [ 733.551423][T23123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4457'. [ 734.182249][T23141] nbd3: detected capacity change from 0 to 63 [ 734.184529][T23141] block nbd3: NBD_DISCONNECT [ 734.203165][T23141] block nbd3: Disconnected due to user request. [ 734.220509][ T2066] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 734.220671][ T2066] Buffer I/O error on dev nbd3, logical block 2, async page read [ 734.220930][ T2066] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 734.222192][ T2066] Buffer I/O error on dev nbd3, logical block 3, async page read [ 734.223021][T23141] block nbd3: shutting down sockets [ 734.248083][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 734.248481][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 734.250214][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 734.250427][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 734.251616][ T2066] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 734.251690][ T2066] Buffer I/O error on dev nbd3, logical block 0, async page read [ 734.251740][ T2066] Buffer I/O error on dev nbd3, logical block 1, async page read [ 734.251775][ T2066] Buffer I/O error on dev nbd3, logical block 2, async page read [ 734.251816][ T2066] Buffer I/O error on dev nbd3, logical block 3, async page read [ 734.264019][ T2066] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 734.264103][ T2066] Buffer I/O error on dev nbd3, logical block 0, async page read [ 734.264154][ T2066] Buffer I/O error on dev nbd3, logical block 1, async page read [ 734.266527][ T2066] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 734.266975][ T2066] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 734.267152][ T2066] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 734.267261][ T2066] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 734.274248][T22941] ldm_validate_partition_table(): Disk read failed. [ 734.281290][T22941] Dev nbd3: unable to read RDB block 0 [ 734.310352][T22941] nbd3: unable to read partition table [ 734.499171][T22941] ldm_validate_partition_table(): Disk read failed. [ 734.502407][T22941] Dev nbd3: unable to read RDB block 0 [ 734.515952][T22941] nbd3: unable to read partition table [ 734.667385][T22941] [ 734.669798][T22941] ====================================================== [ 734.676851][T22941] WARNING: possible circular locking dependency detected [ 734.683907][T22941] syzkaller #0 Not tainted [ 734.688341][T22941] ------------------------------------------------------ [ 734.695374][T22941] udevd/22941 is trying to acquire lock: [ 734.701058][T22941] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610 [ 734.710935][T22941] [ 734.710935][T22941] but task is already holding lock: [ 734.718336][T22941] ffffffff905f2dc0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 734.728986][T22941] [ 734.728986][T22941] which lock already depends on the new lock. [ 734.728986][T22941] [ 734.739417][T22941] [ 734.739417][T22941] the existing dependency chain (in reverse order) is: [ 734.748454][T22941] [ 734.748454][T22941] -> #8 (uevent_sock_mutex){+.+.}-{4:4}: [ 734.756315][T22941] __mutex_lock+0x19d/0x1550 [ 734.761538][T22941] kobject_uevent_net_broadcast+0x27e/0x560 [ 734.767985][T22941] kobject_uevent_env+0x566/0x9e0 [ 734.773561][T22941] device_add+0x544/0xb80 [ 734.778438][T22941] device_create+0x269/0x300 [ 734.783578][T22941] msr_device_create+0x33/0x50 [ 734.788885][T22941] cpuhp_invoke_callback+0x434/0x810 [ 734.794740][T22941] cpuhp_thread_fun+0x362/0x780 [ 734.800146][T22941] smpboot_thread_fn+0x565/0xa70 [ 734.805642][T22941] kthread+0x38b/0x480 [ 734.810288][T22941] ret_from_fork+0x514/0xb70 [ 734.815441][T22941] ret_from_fork_asm+0x1a/0x30 [ 734.820854][T22941] [ 734.820854][T22941] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 734.828453][T22941] cpuhp_thread_fun+0x127/0x780 [ 734.833856][T22941] smpboot_thread_fn+0x565/0xa70 [ 734.839339][T22941] kthread+0x38b/0x480 [ 734.843945][T22941] ret_from_fork+0x514/0xb70 [ 734.849089][T22941] ret_from_fork_asm+0x1a/0x30 [ 734.854412][T22941] [ 734.854412][T22941] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 734.862187][T22941] cpus_read_lock+0x42/0x160 [ 734.867333][T22941] static_key_slow_inc+0x12/0x30 [ 734.872903][T22941] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 734.879181][T22941] nbd_genl_foreach_sock+0x265/0x450 [ 734.885013][T22941] nbd_genl_reconfigure+0xbbb/0x1040 [ 734.890845][T22941] genl_family_rcv_msg_doit+0x233/0x340 [ 734.897058][T22941] genl_rcv_msg+0x614/0x7a0 [ 734.902131][T22941] netlink_rcv_skb+0x226/0x4a0 [ 734.907443][T22941] genl_rcv+0x28/0x40 [ 734.911987][T22941] netlink_unicast+0x7bd/0x940 [ 734.917377][T22941] netlink_sendmsg+0x813/0xb40 [ 734.922730][T22941] sock_sendmsg_nosec+0x14e/0x190 [ 734.928358][T22941] ____sys_sendmsg+0x54e/0x850 [ 734.933679][T22941] ___sys_sendmsg+0x2a5/0x360 [ 734.938925][T22941] __x64_sys_sendmsg+0x1b1/0x290 [ 734.944426][T22941] do_syscall_64+0x166/0x520 [ 734.949582][T22941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.956023][T22941] [ 734.956023][T22941] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 734.963707][T22941] __mutex_lock+0x19d/0x1550 [ 734.968861][T22941] nbd_queue_rq+0x373/0xff0 [ 734.974016][T22941] blk_mq_dispatch_rq_list+0x499/0x1990 [ 734.980114][T22941] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 734.987015][T22941] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 734.993721][T22941] blk_mq_run_work_fn+0x16c/0x300 [ 734.999310][T22941] process_scheduled_works+0xc3d/0x1630 [ 735.005410][T22941] worker_thread+0xa47/0xfb0 [ 735.010558][T22941] kthread+0x38b/0x480 [ 735.015183][T22941] ret_from_fork+0x514/0xb70 [ 735.020337][T22941] ret_from_fork_asm+0x1a/0x30 [ 735.025666][T22941] [ 735.025666][T22941] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 735.032927][T22941] __mutex_lock+0x19d/0x1550 [ 735.038060][T22941] nbd_queue_rq+0xc1/0xff0 [ 735.043014][T22941] blk_mq_dispatch_rq_list+0x499/0x1990 [ 735.049098][T22941] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 735.055987][T22941] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 735.062527][T22941] blk_mq_run_work_fn+0x16c/0x300 [ 735.068090][T22941] process_scheduled_works+0xc3d/0x1630 [ 735.074168][T22941] worker_thread+0xa47/0xfb0 [ 735.079327][T22941] kthread+0x38b/0x480 [ 735.083934][T22941] ret_from_fork+0x514/0xb70 [ 735.089083][T22941] ret_from_fork_asm+0x1a/0x30 [ 735.094412][T22941] [ 735.094412][T22941] -> #3 (set->srcu){.+.+}-{0:0}: [ 735.101554][T22941] __synchronize_srcu+0xc9/0x2f0 [ 735.107034][T22941] elevator_switch+0x1e8/0x7b0 [ 735.112348][T22941] elevator_change+0x2fa/0x480 [ 735.117654][T22941] elevator_set_default+0x375/0x440 [ 735.123384][T22941] blk_register_queue+0x3f3/0x4e0 [ 735.129125][T22941] __add_disk+0x6b8/0xdb0 [ 735.134003][T22941] add_disk_fwnode+0x100/0x3a0 [ 735.139301][T22941] nbd_dev_add+0x733/0xb60 [ 735.144247][T22941] nbd_init+0x168/0x1f0 [ 735.148936][T22941] do_one_initcall+0x250/0x870 [ 735.154242][T22941] do_initcall_level+0x10a/0x1a0 [ 735.159723][T22941] do_initcalls+0x59/0xa0 [ 735.164616][T22941] kernel_init_freeable+0x29d/0x3e0 [ 735.170354][T22941] kernel_init+0x22/0x1d0 [ 735.175224][T22941] ret_from_fork+0x514/0xb70 [ 735.180350][T22941] ret_from_fork_asm+0x1a/0x30 [ 735.185688][T22941] [ 735.185688][T22941] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 735.193519][T22941] __mutex_lock+0x19d/0x1550 [ 735.198653][T22941] elevator_change+0x1af/0x480 [ 735.203945][T22941] elevator_set_none+0xb5/0x140 [ 735.209327][T22941] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 735.215681][T22941] nbd_start_device+0x189/0xb30 [ 735.221065][T22941] nbd_genl_connect+0x167d/0x1cd0 [ 735.226622][T22941] genl_family_rcv_msg_doit+0x233/0x340 [ 735.232711][T22941] genl_rcv_msg+0x614/0x7a0 [ 735.237756][T22941] netlink_rcv_skb+0x226/0x4a0 [ 735.243056][T22941] genl_rcv+0x28/0x40 [ 735.247574][T22941] netlink_unicast+0x7bd/0x940 [ 735.252882][T22941] netlink_sendmsg+0x813/0xb40 [ 735.258210][T22941] sock_sendmsg_nosec+0x14e/0x190 [ 735.263776][T22941] ____sys_sendmsg+0x54e/0x850 [ 735.269080][T22941] ___sys_sendmsg+0x2a5/0x360 [ 735.274306][T22941] __x64_sys_sendmsg+0x1b1/0x290 [ 735.279830][T22941] do_syscall_64+0x166/0x520 [ 735.284963][T22941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.291390][T22941] [ 735.291390][T22941] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 735.300016][T22941] blk_alloc_queue+0x544/0x690 [ 735.305335][T22941] __blk_mq_alloc_disk+0x194/0x390 [ 735.310999][T22941] nbd_dev_add+0x494/0xb60 [ 735.315960][T22941] nbd_init+0x168/0x1f0 [ 735.320648][T22941] do_one_initcall+0x250/0x870 [ 735.325954][T22941] do_initcall_level+0x10a/0x1a0 [ 735.331430][T22941] do_initcalls+0x59/0xa0 [ 735.336295][T22941] kernel_init_freeable+0x29d/0x3e0 [ 735.342033][T22941] kernel_init+0x22/0x1d0 [ 735.346888][T22941] ret_from_fork+0x514/0xb70 [ 735.352028][T22941] ret_from_fork_asm+0x1a/0x30 [ 735.357330][T22941] [ 735.357330][T22941] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 735.364554][T22941] __lock_acquire+0x164c/0x2de0 [ 735.369941][T22941] lock_acquire+0x115/0x350 [ 735.374978][T22941] fs_reclaim_acquire+0x71/0x100 [ 735.380439][T22941] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 735.386790][T22941] __alloc_skb+0x27a/0x7a0 [ 735.391804][T22941] alloc_uevent_skb+0x7d/0x230 [ 735.397105][T22941] kobject_uevent_net_broadcast+0x2fa/0x560 [ 735.403534][T22941] kobject_uevent_env+0x566/0x9e0 [ 735.409092][T22941] nbd_config_put+0x2c8/0x7e0 [ 735.414302][T22941] nbd_release+0xfe/0x140 [ 735.419170][T22941] bdev_release+0x571/0x690 [ 735.424214][T22941] blkdev_release+0x15/0x20 [ 735.429256][T22941] __fput+0x418/0xa50 [ 735.433782][T22941] fput_close_sync+0x11f/0x240 [ 735.439080][T22941] __x64_sys_close+0x7e/0x110 [ 735.444298][T22941] do_syscall_64+0x166/0x520 [ 735.449436][T22941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.455853][T22941] [ 735.455853][T22941] other info that might help us debug this: [ 735.455853][T22941] [ 735.466102][T22941] Chain exists of: [ 735.466102][T22941] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 735.466102][T22941] [ 735.478811][T22941] Possible unsafe locking scenario: [ 735.478811][T22941] [ 735.486306][T22941] CPU0 CPU1 [ 735.491701][T22941] ---- ---- [ 735.497100][T22941] lock(uevent_sock_mutex); [ 735.501716][T22941] lock(cpuhp_state-up); [ 735.508579][T22941] lock(uevent_sock_mutex); [ 735.515719][T22941] lock(fs_reclaim); [ 735.519714][T22941] [ 735.519714][T22941] *** DEADLOCK *** [ 735.519714][T22941] [ 735.527877][T22941] locks held by udevd/22941: 3, last CPU#1: [ 735.533772][T22941] #0: ffff8880261d2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 735.543358][T22941] #1: ffff8880261cba60 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 735.554087][T22941] #2: ffffffff905f2dc0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 735.565078][T22941] [ 735.565078][T22941] stack backtrace: [ 735.570988][T22941] CPU: 1 UID: 0 PID: 22941 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 735.579949][T22941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.590028][T22941] Call Trace: [ 735.593326][T22941] [ 735.596272][T22941] dump_stack_lvl+0xe8/0x150 [ 735.600891][T22941] print_circular_bug+0x2e2/0x300 [ 735.605937][T22941] check_noncircular+0x12f/0x150 [ 735.610895][T22941] __lock_acquire+0x164c/0x2de0 [ 735.615936][T22941] ? blkdev_release+0x15/0x20 [ 735.620630][T22941] ? __x64_sys_close+0x7e/0x110 [ 735.625505][T22941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.631591][T22941] lock_acquire+0x115/0x350 [ 735.636101][T22941] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 735.642105][T22941] ? __alloc_skb+0x27a/0x7a0 [ 735.646711][T22941] fs_reclaim_acquire+0x71/0x100 [ 735.651667][T22941] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 735.657671][T22941] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 735.663511][T22941] ? __alloc_skb+0x18d/0x7a0 [ 735.668115][T22941] ? __alloc_skb+0x27a/0x7a0 [ 735.672738][T22941] ? __alloc_skb+0x18d/0x7a0 [ 735.677341][T22941] __alloc_skb+0x27a/0x7a0 [ 735.681793][T22941] alloc_uevent_skb+0x7d/0x230 [ 735.686572][T22941] kobject_uevent_net_broadcast+0x2fa/0x560 [ 735.692480][T22941] kobject_uevent_env+0x566/0x9e0 [ 735.697538][T22941] nbd_config_put+0x2c8/0x7e0 [ 735.702225][T22941] ? __pfx_nbd_config_put+0x10/0x10 [ 735.707540][T22941] ? do_raw_spin_unlock+0xf5/0x200 [ 735.712670][T22941] nbd_release+0xfe/0x140 [ 735.717017][T22941] ? __pfx_nbd_release+0x10/0x10 [ 735.721963][T22941] bdev_release+0x571/0x690 [ 735.726494][T22941] ? __pfx_blkdev_release+0x10/0x10 [ 735.731708][T22941] blkdev_release+0x15/0x20 [ 735.736250][T22941] __fput+0x418/0xa50 [ 735.740279][T22941] fput_close_sync+0x11f/0x240 [ 735.745058][T22941] ? __pfx_fput_close_sync+0x10/0x10 [ 735.750370][T22941] __x64_sys_close+0x7e/0x110 [ 735.755070][T22941] do_syscall_64+0x166/0x520 [ 735.759693][T22941] ? trace_irq_disable+0x3b/0x140 [ 735.764730][T22941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.770823][T22941] ? clear_bhb_loop+0x70/0xc0 [ 735.775514][T22941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.781415][T22941] RIP: 0033:0x7f2b129d1407 [ 735.785834][T22941] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 735.805624][T22941] RSP: 002b:00007ffe9d451a90 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 735.814068][T22941] RAX: ffffffffffffffda RBX: 00007f2b12945880 RCX: 00007f2b129d1407 [ 735.822072][T22941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 735.830057][T22941] RBP: 00007f2b129456e8 R08: 0000000000000000 R09: 0000000000000000 [ 735.838055][T22941] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 735.846044][T22941] R13: 000055604b946190 R14: 0000000000000008 R15: 000055604b94be20 [ 735.854038][T22941] [ 735.962930][T23157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4466'. [ 736.047270][T23157] sch_tbf: burst 88 is lower than device veth17 mtu (1514) !