last executing test programs: 40.946869788s ago: executing program 2 (id=3005): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000000)=0x10200, 0x4) setsockopt$inet_int(r2, 0x0, 0xd, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05000000e86b5c116310aa509d1ce22ca968dfcc5f1e0b9f118427ebc46f2109bd3b8751870d908d1bc80356d02dbfbab27396345bd2120f49be5145b4c5226ffb20ddfbab89b2", @ANYRES16=r4, @ANYBLOB="20002cbd7000ffdbdf25040000000800030003000000080003005a910000050006000400000014000100fc0100000000000000000000000000000800030000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, r0}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ip6erspan0\x00', &(0x7f00000002c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x2, 0x3, 0x80000, 0x6, 0xfff, 0x7, 0x3, 0x0, 0xc, 0xc69, 0x10001, 0x3, 0x3, 0x9, 0x9, 0x3, 0xe, 0x0, 0xfff, 0x8, 0x7, 0x5, 0xffffffff, 0x0, 0x80, 0x101, 0x60, 0x3, 0x3, 0x200, 0x40, 0x3, 0x0, 0x95, 0xfffffff9, 0x7, 0x9, 0x10, 0xffffff50, 0x6, 0x8fc8, 0x3, 0x80000000, 0x1, 0xfff, 0x3, 0x7, 0x2, 0xffffffff, 0xa79a, 0x9, 0x0, 0xc3, 0x0, 0x8, 0xc, 0x9, 0x8, 0x9, 0x2, 0x3, 0x3, 0x18, 0x100000, 0x8, 0x6, 0xe0, 0x6, 0x0, 0x10001, 0xffff, 0xb442, 0x400, 0x4, 0x9, 0xf86, 0x0, 0x13737152, 0x8, 0x2, 0x6, 0xfffffffc, 0x3, 0x42, 0x2, 0x0, 0x8, 0x9, 0x100, 0x9, 0x6, 0x27f8, 0x5, 0x9, 0xba7, 0x8, 0x4, 0xa6c, 0x2d0, 0x6, 0x8, 0x8, 0x7bd3, 0x0, 0x4, 0x1, 0xf, 0x6, 0x5, 0x5, 0xc4, 0x8, 0x7, 0x2, 0x2, 0x4, 0xc, 0xc, 0x7, 0xc0ba, 0x3, 0x2, 0x6, 0xffffffff, 0x7, 0x5, 0x2, 0x9069], "36e1fa5f47e5faf29167eab1164631ca9d480a2864dbdfce7472c50c4cb991fbb0e56a90c6874ea4c59aa4a5"}}) 40.875977179s ago: executing program 2 (id=3007): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 40.728040129s ago: executing program 2 (id=3009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x7fdd, {0x0, 0x1, 0x3}, 0x2}, 0x18) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x300}}]}, 0x24}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x4, @remote, 0x2d29}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="c4acfd5a52f1039913a628fbddf803cb615db3cc", 0x14}, {&(0x7f00000000c0)="bf4b463d814b24e1b6aeeaa9e929dcd9270952eacb86b6c6f51ef6f4976f46868108194a8bfc21b4e6a60e88273d43ef8a871cf811492d6ea2d7bf0fd7857e23b52fc78518190125c1b8ad12b7d98c8e4ed607083e8f1db7", 0x58}, {&(0x7f0000000180)="4a49b70aec1af8167230d2ab4a1508c3f8da85b54ec427d63b2e2eaaaf8b9182969d77b8b5da226b3d800739e4b6d57bee1b92133852da65b4eaa4c687067eac59d023d09aacb5ec7cf23e460655b3ee6351760d38ac0d9b2b7d8234f181e090be1871fca525e292e2", 0x69}], 0x3}}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r5, 0x0, 0x20000800) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x16, 0xe, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000091) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = socket(0x10, 0x80002, 0x0) sendmmsg(r9, &(0x7f0000001b40)=[{{&(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbf8, 0x8000}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000140)="78c60ff48b00bdf1a5600ef1f09a7e34f5d2e82f68316a82fda4c44fcfd7f5f46b3036d96cf23077843dc675b07d5d7ce2d57215378d8703739770500e5ccc7b51a1b486b509d367bc65c6a8738a42fb3532fcdd79d68b39286d5fd754f40fd60c6ceb55a1", 0x65}, {&(0x7f0000000580)="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", 0x1bb}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x208}}, {{0x0, 0x0, &(0x7f0000001740)=[{0x0}, {&(0x7f0000001680)="df4334a77664102f5a8caf10562be26700f4c6873633f6d1ff9b33bec6363e58ed9ccf89dabc9710a543f19bec7606bab45b59d8386ecc74e4c8dd6a8ada5ced6c74534e1b8256d9c3e5827940dffa100e1092990f3a9dcb18371f6929729e5cd32d78d4bd76577873b4e7c5e7fa12cf2a3005a5c5116948ec8a75294fa0", 0x7e}], 0x2}}], 0x2, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000000000050420f01630c02000000000000000000000d000000b3875719002e3d53c0d8ed70db8ffd319a00f5a39a84593c"], 0x0, 0x34}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240500d4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 40.357229124s ago: executing program 2 (id=3013): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r1}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe}], &(0x7f0000000340)='GPL\x00', 0x9, 0xdc, &(0x7f0000000380)=""/220, 0x40f00, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x9, 0x4, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000500)=[0x1, 0x1, 0x1], &(0x7f0000000540)=[{0x2, 0x2, 0x6, 0xa}, {0x0, 0x1, 0x4, 0xa}, {0x2, 0x1, 0x0, 0xa}], 0x10, 0xa98}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@map=r4, r2, 0x1c, 0x4, r3, @void, @value=r5}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 24.642772787s ago: executing program 2 (id=3017): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xa6}]}}]}, 0x3c}}, 0x44080) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 24.47524622s ago: executing program 2 (id=3146): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) (async) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FREEZING\x00', 0x9) 9.297709642s ago: executing program 32 (id=3146): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) (async) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FREEZING\x00', 0x9) 2.108157921s ago: executing program 1 (id=3373): r0 = socket$inet(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000100)="0817b984558c9db4d1c1e379ce093a756f", 0x11) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.903219398s ago: executing program 1 (id=3376): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a430fe0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x20000003}, 0x10}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 1.831642645s ago: executing program 3 (id=3378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x64, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}]}}]}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.706508183s ago: executing program 1 (id=3379): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000100)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1d}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.651956362s ago: executing program 3 (id=3381): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_cred(r10, 0x1, 0x11, 0x0, &(0x7f0000002880)) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r12 = accept$alg(r11, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="171abdb5d25446463f74d3740a70f6e0249ca79eab57d2457df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e", 0x60}, {&(0x7f0000000680)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9741bbefa08e31c991acb6c96a9b97d507ab4d9d9c6f66e11a31e528df5570aa43e0275fae14ceeaed60847c23360b0ee4ac087abc7def3979bd64d3745f8dfa3ca", 0xb0}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0x44854) recvmsg(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000500)=""/184, 0xb8}], 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0xfffffffffffffc38) 1.195812778s ago: executing program 3 (id=3385): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64, @ANYRES8], 0x0, 0x4}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x40, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x79000000}}], 0x18}, 0x40080) 1.17237526s ago: executing program 4 (id=3386): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0xd1a}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b062dbd7000004000003000000005003300f70000000a0001007770616e3000000005003300ac0000000500360000000000"], 0x38}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) 614.96922ms ago: executing program 3 (id=3387): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000)=0x54, 0x4) 614.232819ms ago: executing program 4 (id=3388): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x2}, {0xfff1}, {0xffe0, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$can_bcm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x0, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r9, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) (async) close(0x3) 606.569474ms ago: executing program 0 (id=3390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {0x37}, [{{@pci, {0x8, 0x73}}}]}, 0x3c}}, 0x0) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@migrate={0x138, 0x21, 0x1, 0x0, 0x10000, {{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, 0x6e6bb2, 0x2}, [@sec_ctx={0xe5, 0x8, {0xe1, 0x8, 0x1, 0x4, 0xd9, "7bbcd900470717cb8d1707c412169b8bc3fd0abfd71f78f92fd263e64a29edbcaae33ab7e098a7f448da989a96d07f757b64da0ab170ac021e64566142f8343d050e8343f7287fdd8aa1e8d19b4f471a9a80d32c58a5b6fee6671cab537e4dd88e9127fac30384833cfa75364c628f039a1a7b54c4db78fc8bd80a92f2e3e1c76e19f42c439100f213b2fa99c35a49a707a9eb8490e841eac166b301a8c4975b0a4b1a1ef44ebea165785199ccaf474b9ca95f4b071b8c0e7c63d1bedf014f194d342fe9997437a03a23509c93dc871e75cab1a93199d6cc7a"}}]}, 0x138}}, 0x0) 605.014474ms ago: executing program 5 (id=3310): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2, 0x10000, 0x1, 0xa7ef, 0x800, 0x6}) (async) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x80000) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000640)={@empty, @loopback, 0x0}, &(0x7f0000000680)=0xc) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000140)="3e39d37e371f55c9cda8c662cd948d16ed8529ace20ea2bb270471259d521208dc76a7755ae4a72ca2a5316cb54c722daffe217f570b79763a43234f4744173eb33fde2e38e9100c45063e85029f15d4f04b", 0x52}, {&(0x7f00000001c0)="5c9dcb5e79f347054447e3e95d82025f8b2bcc0fa9c34d45c3c758ed2e0a250ab7d1ff4c8c02692a5c4cb9fb571c12caa0ee1a790583b999eacd62e0a5240dab9458ec33b0ca8478ee61d5f65029c130a53e13a58a2cf47920f16cbedd19de837000be19a02b2bff3770b17807e9c9432f385e53c47996c601babb9ccbf74eea94060f91f12df24ef9881306aa7bb1b33daaff16dfc77f7c82d4d6e414782c91a6390bd8b9b79a7f3594c91553bada06b86ff67cb5", 0xb5}, {&(0x7f0000000280)="0d83997c5d2396f1ae21ffef4cb70d57b6fd0695625ba5415bed6712ebb870ce5a9189ca26164852d8d87dac0fd9be845dac1cbada9f5c2852d19f5e6fb64176610e64a0dc79fa20e36f453d50fee068f27d00e83555d431b4208f00298b201aea40d83e4f585fbb1ce4f2bcf11feb5fb0f2bc4221f127773a81557ce3de5a61ecf9dd941d7e3de2c0c7ba361b45063da740b7847f7ed681dffa0574a50211b3dbad12e37d3abd0679835178778fcf11a88be4505f03f92f958b41b6855f076d1c598c5a92ba5d512946caedee3bd65c57e7430cfcc9", 0xd6}, {&(0x7f0000000380)="f9afc8bc30fa16ff8143ddede8180dde5fa427224ace3b5bfc2227d8b5981012fe502b1afe840ca963d780289f8c1bd70672e54b", 0x34}, {&(0x7f00000003c0)="565aef0ff82b2ec60ff6104e61e9af1af523c3a4cc1da4244750e9bf4d7e420c56a9588c9293923a8c98bd935d5a6a2bcc50bc539fa6f4e5a01209808c1f769e70b44d9d745ab01a76ac3cee03b3cb75f6086b8611e137e3d36f4893724e28732df31c4ee6c5b34362488797ed5dd538d1dea1bb63a14832f0b0bc98a033259e792aad1d724bb627f3cd0cc175a047a5537b310361e233321faa597f67ec0856fbbe966f66809949324692fa3bc5d592d90079", 0xb3}, {&(0x7f0000000480)="0db00095d7cdb9ee8a64bad555e376a584fd3f44bfcf71a7d5c12ab9c8e8300974acf0212c609341a9e877d5779407af19be4bf1052e5317c3ef2dc8bbff40b6390911d018f05746fdbc7d5adcdf6af2e2bb533559365ee2c8926e11f7bb074715c3cd1f87027b5337a8a2092a6e1f7ed0e1cf4767c887cdfac5e02c8e6d05bf25397397", 0x84}, {&(0x7f0000000540)="f8da9fc09565100d79adac54968ebf3be2f684220a30aac10b4c5f3c759c89a6110b8272fd9dcde2b72393d03b81334be21c8304b6bd43652f178b1be0f59671ace233e4ee997c5abfc99a", 0x4b}], 0x7, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x38}, 0x8000) (async, rerun: 32) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x284f, 0x0, 0x0, 0x0, 0x34}, [@ldst={0x3, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffe0, 0xfffffffffffffff0}, @ringbuf_query, @ldst={0x1, 0x1, 0x6, 0x7, 0x4, 0x0, 0x1}]}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x72, &(0x7f0000000800)=""/114, 0x41100, 0x8a, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0xb, 0x7fffffff, 0xffffffff}, 0x10, 0xbb94, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x101}, 0x94) (rerun: 32) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000a00)=r3, 0x4) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xdc, 0x12, 0x300, 0x70bd27, 0x25dfdbff, {0x28, 0x0, 0x7, 0xa9, {0x4e24, 0x4e24, [0x5, 0x1, 0xd8bb, 0x9bcb], [0x9, 0x9, 0x10000, 0x2], r2, [0x5, 0x9]}, 0x4, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x90, 0x1, "dac36eef6cec2c131ec58450c1ee95ef48f768d9429b4ffdf9cbcf6be9dd7b85dc5ee20da27aeec66ff6d7a046a2c2a1d644351f7d02951c5da6e10850b51ad2738d81dedf7880809255e8bb0cfddabc8a5e055ed7cc2170ebb39f7bdd4f3f51aafecf09cfa5c0e9bb68aab24a82829cac53cfa0bbca480ffd32dd3b9450c04bcc7b9944e8b24fb2d0fbfa01"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x54}, 0x10000000) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000c00)={0x2, 'ip_vti0\x00', {0xb314}, 0x7}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000d40)={r0, &(0x7f0000000c40)='+*+.^){\x00', 0x2000, &(0x7f0000000c80)={@_ha_fsid={[0x0, 0x800]}, {0x6, 0x3, 0xd, 0x100000000}}, 0x7, &(0x7f0000000cc0), &(0x7f0000000d00)=0xfffffe01}) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000d80)=r3) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000dc0)={0x0, r6, r1, 0x5, 0x2, '\x00', {0x800, 0x1, 0xc, 0xb2, 0x5, 0xbe5c, 0x6, 0xb1, {0x0, 0x8}, {0x3, 0x5f}, {0x4021, 0x4}, 0x8000000000000000, 0x401, 0x6, 0xa, 0xa000, 0x9, 0x722a, 0x1, 0x8, 0x3, '\x00', 0x7, 0x401, 0x5, 0x8}}) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000e80)) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000fc0)={r1, &(0x7f0000000ec0)='syzkaller\x00', 0x301802, &(0x7f0000000f00)={@_ha_fsid={[0x2, 0x6]}, {0x1, 0x200, 0xfffffffe, 0x5dd}}, 0x0, &(0x7f0000000f40), &(0x7f0000000f80)=0x46ed}) accept4$bt_l2cap(r7, &(0x7f0000001000), &(0x7f0000001040)=0xe, 0x800) (async) getpeername$packet(r5, &(0x7f00000010c0)={0x11, 0x0, 0x0}, &(0x7f0000001100)=0x14) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000001440)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4820}, 0xc, &(0x7f0000001400)={&(0x7f0000001140)={0x28c, 0x13, 0x10, 0x70bd2c, 0x25dfdbfc, {0x21, 0x3, 0x5, 0x2, {0x4e21, 0x4e23, [0x80000000, 0x6, 0x6, 0x6], [0x7, 0x9, 0x2, 0x7], r8, [0x6, 0x3ff]}, 0x1, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "0571d096da23a74cb5d7ff005df4a93a9668dca2aa4b59134d81ba2d21ff4ef0dc46b3fa29c7406a81e6e63a6d377f4412d0103cf468fec472437d0594bbd15b65035b2668bcadf3684e5cc0097fc9192ecc948ab5009ef76d991ac66c8ff21e1e8df8f4ba844109aa30e53227cbc0cefd6fb665bb7d6e0fd7665d4292a2d26fd72607cc1e2658305dfbd7efc6a0fd9498c7bab5f881197d00ad9ca6542151987de4a31639fd23c1070cb7647a922b6e27bf15b422ca41aedb215b2adb584177c6f4cea95c9379c8c35dc3abbc24bc939637ef0e2f67ccc451d168cbd09f549c51d66bfce213ef5c4ad2166a1457a96c54d1aa25be"}, @INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "c2165ce2001cfca1e01445e35a01401205fa6030eca3c6eee625f43735766915947b8a103637a686bd71cd9775c5c01f0574640725f781635c7b45b6a14fdf15d908edb4e66f10c4577afddd716a596ab4cb8ec641f02d91ff8c6bd06087c37006389c51d81274a8c0c8bb1022d03efeeca9398017f84929c0476d063c4cee1609ef64b911ebee3781a05cabcc8f384eb30d064e59c2e3512fe1b92e002089b80e8d2d5c140bf40176cd58ad263b2ddc555bf0b285e6f01ea290e4178f6527729e732b538f4934cac5bb18660f5d8e8b0762f1122a086b479f253cd06e46d4d5830cec320582af2c6452e86e30496d2334941bab73"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "278e4c1603f5198046f57744938f9b2a92c55416657e0162e7a33ed753bad34f64b5895feaeefdef9f61fd5d8545b8406c512277e8759ae26acb3e1106e4f0ebee"}]}, 0x28c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000001480)={0x1, 0x0, 0x1, r8, 0x5}, 0xc) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000001500), r7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001540)={'wg0\x00', 0x0}) sendmsg$FOU_CMD_GET(r5, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x58, r9, 0x208, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4000084) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{r7, 0xffffffffffffffff}, &(0x7f0000001680), &(0x7f00000016c0)=r7}, 0x20) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r5) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x2c, r12, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x34}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xaf72}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)={0xffffffffffffffff}) ioctl$XFS_IOC_GETPARENTS(r13, 0xc028583e, &(0x7f0000001980)={{[0x8, 0x2, 0x10001, 0x1]}, 0x0, 0x0, 0x8, 0x0, &(0x7f00000018c0)=[{{@_ha_fsid={[0xf1ab, 0x73]}, {0x7, 0x8, 0xfffffffd, 0x1488db76}}, 0xc, 0x0, '\x00'}, {{@align=0x2, {0x4, 0x7ff, 0x5, 0xc}}, 0xd47a, 0x0, 'syzkaller\x00'}, {{@_ha_fsid={[0xe, 0x2]}, {0x5, 0xebf, 0x1}}, 0x9, 0x0, '}\'\x00'}, {{@align=0x2, {0x1ff, 0x4, 0x3}}, 0x8, 0x0, 'nl80211\x00'}, {{@_ha_fsid={[0x1, 0xdba]}, {0x3, 0x7, 0x58, 0x8}}, 0x9, 0x0, '+*+.^){\x00'}]}) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x20, r12, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c001}, 0x4080) (async) ioctl$XFS_IOC_INUMBERS(r11, 0x80405880, &(0x7f0000001ac0)={{0x700000, 0x1, 0x1, 0x1, 0x3}, [{0xf3, 0x6, 0x5c, 0x5}, {0x40, 0x401, 0x8, 0x5}, {0x4, 0x2, 0x68, 0xc}, {0x138, 0x3, 0xff, 0xb5}]}) 602.150706ms ago: executing program 5 (id=3391): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a000000000000000800060001"], 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x5, 0x0, 0xfffffffe}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x18}}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x400c880) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000001000000420000004000000000000000", @ANYRES32=0x1, @ANYBLOB="0000006181b1917999adc6000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r4, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x158, r6, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc38c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x157b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ea}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x4c000) ioctl$FIOCLEX(r5, 0x5451) 599.654737ms ago: executing program 4 (id=3392): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9599, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xa, 0x51f86d74, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000240)=[r1, r1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0x2}, {0x5, 0x4, 0xd, 0x3}, {0x0, 0x1, 0xd}, {0x5, 0x2, 0xa, 0x8}, {0x5, 0x3, 0x10, 0x8}, {0x1, 0x4, 0x3, 0x2}]}, 0x94) splice(r1, &(0x7f0000000080), r2, &(0x7f00000003c0)=0x2, 0x10000, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x40, 0x700, 0x9, 0x4, {{0x22, 0x4, 0x1, 0xb, 0x88, 0x67, 0x0, 0xf2, 0x4, 0x0, @broadcast, @local, {[@cipso={0x86, 0x29, 0x0, [{0x1, 0xb, "bc339c68b455a29d3c"}, {0x7, 0x5, "ff3fec"}, {0x7, 0xc, "123b12f5be06c1929c8f"}, {0x7, 0x7, "e105aaaeea"}]}, @rr={0x7, 0x1f, 0xa6, [@empty, @multicast2, @multicast2, @local, @loopback, @loopback, @private=0xa010100]}, @generic={0x7, 0x12, "ab746f2f2e91fa9d98cc78e868ccab76"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x41, 0x3, 0x7, [{@multicast2, 0x80000}, {@loopback, 0x1}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0xffff, 0x0}, 0x8) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x23, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x2, 0x2, 0x6, 0x4, 0x5, 0xfffffffffffffffe, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @ldst={0x2, 0x0, 0x3, 0x4, 0x5, 0x0, 0x10}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0xa, 0x4, 0x7, 0xfffffffffffffffe, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0xbe, &(0x7f0000000580)=""/190, 0x41100, 0xb, '\x00', r3, 0x1b, r1, 0x8, &(0x7f0000000740)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x0, 0x8, 0xffffffff}, 0x10, r4, 0x0, 0x2, 0x0, &(0x7f0000000800)=[{0x2, 0x4, 0xd, 0x8}, {0x1, 0x1, 0x4, 0x5}], 0x10, 0xff}, 0x94) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000900), 0x4) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000940), &(0x7f0000000980)=0x4) (async) r6 = socket$netlink(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6gre0\x00', r3, 0x2f, 0x7, 0x4, 0x3e00, 0x17, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20, 0x8000, 0x80, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl2\x00', r3, 0x10, 0x40, 0x0, 0x4b, {{0xf, 0x4, 0x2, 0x9, 0x3c, 0x64, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010100, {[@ssrr={0x89, 0xb, 0x83, [@local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x1c, 0x9c, 0x3, 0xc, [{@empty, 0x6}, {@empty, 0x8000}, {@rand_addr=0x64010102, 0x1877}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000c40)={'ip6_vti0\x00', &(0x7f0000000bc0)={'ip6gre0\x00', r3, 0x4, 0x1, 0x8, 0x5, 0x4, @remote, @private2, 0x700, 0x7, 0x6, 0xe}}) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000d80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xa8, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x400c0d4) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000dc0)={'ipvlan0\x00', @remote}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000e00)={0x0, 0x0, 0xfffffffffffffffa, 0x6}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000e40)={r2, 0x4, 0x8000, 0x6}) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x9c, r12, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffff0f6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4044000}, 0x200000c4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000041c0)=0x0, &(0x7f0000004200)=0x4) sendmmsg$inet6(r11, &(0x7f0000005140)=[{{&(0x7f0000001040)={0xa, 0x4e24, 0xfffffe01, @private2, 0xfffffcc7}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000001080)="a202d4512f12c1360731afacbe221c317417ea56ffe2114a2ba310715c3cde9f0324f07f18605b45de5e1d611932cf6c86aaf40ab6713e4883ae292ebc76c36ab5ef9622d7c36bf6c364d2224cb159de328c9d33ec862bcd2e094571f16f29", 0x5f}, {&(0x7f0000001100)="8eeac9ba8117dc98a6ea461a304825cc22ee1ae53991fe14b3ffffabb4650b7a8200a815a3237159c80f3b2ef9db2475e3812465302f0ba1d4c9a53eb689a516e95f249f", 0x44}, {&(0x7f0000001180)="51395034abe3c9994b8c23900498bae52bf9c608bf76fc466b9d6b13a057d246002afcf64aaed81180f04059f46b5d2e611797322615dcf0638fbe20520e4bea9b541da15f8b98281890e8074a824b111ebc18a32a65ba6cb243198338843a4eb3", 0x61}, {&(0x7f0000001200)="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", 0xff}], 0x4, &(0x7f0000001340)=[@dstopts={{0x30, 0x29, 0x37, {0x21, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x8}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x3ff}}], 0x60}}, {{&(0x7f00000013c0)={0xa, 0x4e24, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001400)="594728d793a3d88681458a8e0db598c97d334a1ce7d2e862ee6683821a551c839c1be0a408e7d292d9f72b393eaf64a9b11daa839892caca56381830888d5590429a871c2d6ca7f769c2dc7dfc9ec299cc89087483092f380a5a04ca9f7872fe32068914daec96fbc8846213e199", 0x6e}, {&(0x7f0000001480)="6731761765c0374c309c36e929ecd03926ca4eae7e4a975dc9aec8c845d3c1bb89e1ab0bb66d17702bf1be011c26fb01a79a2b399ee628d359bb1711b2561be827e0bb148ab4fc275152634555b3765483365ec591157bc2254345b391832c7c7e8654", 0x63}, {&(0x7f0000001500)="1242178fcc0a25cf3c90efe3e05ecb4b83069a1f783d27526da8719b8b58adc0c1fb981130e0eecbf572ce39325f60046233e40319cbc5b4b0f191cb63264696408688631dba", 0x46}, {&(0x7f0000001580)="07dc3713fd6606b5e6cecd0b0dcd8bc3b72bd76148b737bacada1d1a9583bc10b56c11f0ae84f5ff398e8b682b661ddb879e020d4a8c0a1412982d8f4173ece322b269a9ad3939739f5a0042fbcc15abce8ce3cdd6fa69514762bfed870b3334", 0x60}, {&(0x7f0000001600)="642480a1c57f10327f976eb514180dd188cc772b96b070105df53f399a5e384986", 0x21}, {&(0x7f0000001640)="16c35b97de92cc62a75948537c7cc274fb615ad410ffe34c03ca4862acd56190cb691614af2c2774f4071134a0f65cef327625e20e9674a4f76a0418e3f8914c420a25f4360f840212a58c1de0f2bdf966889406bbe5f8ebdbeeb524d40603a1663094441a5632b34b9316ad9f4e151a6a2e7c", 0x73}, {&(0x7f00000016c0)="8c2f93df73d4e27e3b9363207a8108fdb6928fd78b0ca147ea3a7abf821a91cebc55aa50f799eacded1170406291f355a2ef40c79cbb5239f814ae9d97ec9fd9c2d57622b07595b122128b599c263a45d93c6a176dcf517c969b27da22dd1b98184fb1c7af31ecb5a98d4249729bfd9cebb5e452b725b9f6ee4af7fe9740ba0cecfef8ae9f29fff4746e94598ded0cfcb7d9052467accd8f365a7d71c725365604cb95ade35d2d6812bd3d80c36eb6aa76a0b06afbbe79119599dcfb054dfdd818f7ad1bd260e21f41f34dfb25eeaa536a365f814baf249966a8bc6efbe4f652368003ba3fb8567fd9e5ccbf43ac186d3b13d303ce70395ebb00c9b883f78a", 0xff}, {&(0x7f00000017c0)}, {&(0x7f0000001800)="7572306390dd9072c204bb83b9ac1165c75cfac44dd57bb0478c2dccf2237ebb6c6b6c936d4115dffa57b82129fd1ceb82f1988eae0c08519271e22197610e01ce1bb33d5a4793a1b0b7658e73c708ee149cdb47629914bcbae195da3a43474e80ccb7834b81f5a72eeae923dc07dd9f1079a3ec64581d678d318059fc6a5163a8d33debed84858aff6b2029c88696b0ac748bff88802d861d2f7fe99bfcb78d115a06c8aafad8720a21026bb0992291b13328d263059f3fb0f5c2ddabac528c60e3fab35b18ec2e85", 0xc9}, {&(0x7f0000001900)="2d0fbaec5a2d594ad8a4bd0b82e3ea8c059597cbd2b7460d7d6c1805d977c2b4ddd94c0dbc3418f3d547279454abfbba3ede1c657b469aee8669e0cd3324b1e4ffb11903696ccf20960703728059795f7b23b12a49c0ed470757fb70e657102fdf98b09b9b5e2865f9f6d51b9adf50a3fc17b241c089f539f5dfa04d6be9a4956c2a78bca11c30cea889c4e4ca", 0x8d}], 0xa, &(0x7f0000001a80)=[@hopopts_2292={{0x70, 0x29, 0x36, {0x62, 0xa, '\x00', [@hao={0xc9, 0x10, @private2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xff}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @mcast1}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2c, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x10, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00']}}}], 0xc8}}, {{&(0x7f0000001b80)={0xa, 0x4e24, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001bc0)="c2fd63774556d145aa59b02ce891d26a85dcafe4eb4fa1c8df3131ab187f9bc49229fc449861eea08bee333e3c307c8e4a8bbda93b2546d631560a954bfe229b6aa9dadadf8cdc33cb826f2dcb0b3da9911a837ae589adc36d922cf11dd4c3b0bffd6f604ee32796047553df66388e903399d768f21a38", 0x77}, {&(0x7f0000001c40)="3a8134081a647700e6237a1f44f502ad6398d7dbf34e9d3bf3ee2fd280c1ab38fb86e98634fd4133b80239cc57254427335b21f283894ce9cd3bbf5b5a243312e9fe68f11ecf3ce9188168216c15c165f64d203d046bd1a8c5d527691f26992d2ccd298f68a1bda8d94ba921a5f9379e9fd734563d43ff9b01e95396103b22e62c4b9f76c51659fa1759cd2153420d3114056cbea6dde213610b4b8242bfc930e4af9809bb9af11c8d5c58764e2a480db74fda976836c04a", 0xb8}, {&(0x7f0000001d00)="9f2a989b63613e603f9c2c286c1c6edd63f7a9dbd095bb8b0ddccd48bc353abed93f374cb7b0f41337996ab84c06dda73fd485672b9eaed50860c84556c8411894f0a4021c7b2d5729ed6b6a80a7949c0a0e0d55594d8e2d30c3594393656169150ecb5fe27b96bd89bff2ffb63e5d5afff216c8afab7cdf62e5b020f25d02c226135f7d3f971ab332226321fc846999e8c1531a082e84ddb8941be7ef2a", 0x9e}, {&(0x7f0000001dc0)="5b61f561b36137c5d271964a6567f25737c8af5d12f77e6d2489f3f784aade8190507d4b34648fcc7fa756ceeff0b00a880e4626f6644845b592435871a13734d6b0e7c8e06fe9402e40a2e81f17ec17d4dc4ae6a30d89c6ff5b852829", 0x5d}, {&(0x7f0000001e40)="14d80c666078b1e453bde929d1969b8e411a1db818eee09a92b9a470c09ad5bb190c57530cd3096c849ecbab347b918f1eea91fce49986e5a21f466830f22c4907b3b799d7b62e71ccf2f1429b61a306357b93365ab85ed3b737f7282ae3bae2e13f6360ef988d50cc2e031e6e45ed4548d94ece1046a2fa32510d823024e608c260a9f4a1c850a312a4ae8f53ace5e9bd17d5d11ffe5241c255fdf9647784d2f6f30c548a638df81d0b1bcd12a4f850535e0f58fa8a3d2a1370ac8a3894397219e300abe4fb7db26a65bdacf9be7635a6d477b1a656561355cb90240aaf4c0b2fbb2130245e556615f17c5bdad9c2", 0xef}, {&(0x7f0000001f40)="16dd1501acedabffe967be47810c3d6e0a77b3cc9df167bc045f73d2f45fe94c77ac3e95cfee275258eb12252cacca64004904b865a6b0ebb3bcca8dbc29fd263d6b597991b04a66b22db780fdd34fe81b75ac7ca2417f943cd3c489697a7450c06fe8b14d97a78c3da8503900cd9fd1dff475baf8fa00dfa314960846b18cbc10f91c7ba5691e14eb39592c1e2d7d9591fec2237e3c64", 0x97}, {&(0x7f0000002000)="5fd864ba8e2a8c47a376d0b06b58fb76d16b41d5", 0x14}, {&(0x7f0000002040)="51ff76273fad2dd6a48e018193df4c4d59e3b8935152619e812e7cb9061bb2418befb713fd1d1327ebe793932b89e193ac27c35e", 0x34}], 0x8, &(0x7f0000002100)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x1, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}]}}}], 0x28}}, {{&(0x7f0000002140)={0xa, 0x4e24, 0xa5, @remote, 0x7}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000003180)="e613230e9285a9146f1dbcb5b763d78f6d59c41074c65941e726467c731fe7964ccce589ff46f20af9f5901c3102595643279728d70b234f8c0d3be6259f78308140f7631cede6225dc69b784db83ebd3ead1406808897b50feb71d674add3596872b8730d9f3efa631b85c2c986f3b545e6a3d09ab7a7b0628bd1479f8cb304bcc5e8c4ddda1e81fd9167f1c80c7a2abb92037872fdf8edae1838ab0f27f33cbb105bcaba5c522305198a58b152f99012aa4dda0c503878da67df213969a8fabcc5625ac2e29d933ab6d68eae94fe21a4fba83347ecfaf3f0b97fa8d17a3553440b55d989bada1cb85ce6b6588216904a9362c5c27cfffc47cf235222670169574262e503a3ba4691c08cbe1e71ad4a06ebb3230985b905907c3f889971cf19416cb0d0b22bb850044043556164b30c21970cb8206f0283a9bf4bc53fdd5f87ccafd264db50788bcc493145e4032267614937388620ddcd369f5348395390cfe453642e5fdd632be4b8e771783a564a9f863fb2652935f5a60bd1f18c31753e056b1f6b85d2dc2d38410989e8a2bf7494a8e828914ef3d20761fc3a977bc3304f2d7b9c86bc483ecf5ddebaf976f7736ac54e1faaeddcfa20b1ff9644b3592c46be595bbbece52a68f9eb014d9f23f72f4b2ad6f7599bdc171ae5a59d06a9aeedfde7ae05d5030b2f0dfd190a6c47af0e3e87b4b001c7d87060e82d212aaf34cab4a7fdaa472ac5f92f0094773a2ac503c87e5a034ee778d7a40a869743c02758515e487bb40541b368a46800082c44ae27f085231af7da48aa7e6561a808ed0c4dc6ead8a32c1a6aae1aa57406d71ca60fe4365e04ff6d98abe8e41527f8097a8558cabe2f354cebf3550bac11e2fd28a964d9f5b81f4b512b345b9160d0a31684103ff857332feb362702f4e587b9659c94f777a822693b74272f2861d240b58c0c051578715198a3da49f3d63901de6434fc241d72582a41345268cdd05fe622395bbfe8e83f15a673c91c37689f12e98ef313629c47b53a418b8e00a4dfbc171008b115db996e7f0caeb218316540f07559abfdc3b12368b90c41fda802c06a0942100225cdf1fab99a801bbbc1df188eb44ee2c0052cd85039fd2035e78b6623403ca1e1222ead32b91b966565230084a53475a7f5fb331176e3355c715004007a3ffd36af362f61d6e7773953806f128966d89f74ea8e013d0d756f2f5f08f4e7da194a912e25690755c372fef42ea8624f7734c5c92a7bef7c7b2a246ad9791605ad08238c958096bf446cf13a223c30affbdbddee36fc67e0536d546838017047f033efb36db90c324bc8348aecc49225f246a8f0ebeb149c84a51d55439293d98849561011b2ad8cbf176fe625d49e84f4de8e4be697fffa91766d0a315514c6f090d589bfc42a2e4d743988a53fa156a5e7e2fa6abaa42a76498193bc8dfb16f43c920f0122b382387113c80e89b42fedfc467ef191fd4dd947017f387449a0330c29ff18da9dd920186433b63c1a9ad87df93d1453d0bfc54452620aae897b3880d603f84d1ce32ae56ab0d8b8b17c06d6a7101f5d820197ac0407286dbcd0919d99a3ea227978373b73f8de62f836c291223539ac004a15eaca505376231655b8e82e6d937bf7a9c0d94b5a5e9d31fd8851cd0afae23ec831793e010c15d4db15468c09db706db77013634c6e5f74475dcc9a9b51cf342b5543b9e2b782c25a3f319b46f698257f82cec7b91c874bf8d39a82456c430d5c622df4f665cdf6b823c9c573e98ce5824adb0a9f29ccbce959cc49b0eeec8b018e29c594aa551ac8f68086d5b4ad7a637827e5c7b8b119894c66d444548b80539857360169499c182d11ecf2baad34b67859eb0e2c87ac3d7bc26440a4699e7d00d57b43beee2f7571ec7849c306e8f12a8543d7645a873eeaa43ebc048f198c2da5d4b91ac9b3a1d3c8a1c9badd9dbc588b1c95dcbb9e9196ca72f323209aad1fc6d91b1f9f9917e4bfd067f2c796af7b0dcad4f9ab99be4bb31c40e476b1531a10dd4cd49e9a68acbf812fe1e259781bb1e9518a73ee744fffd48e47e9e6dde6d01c58344978bfd88cf103a2a792a62a4a71614507faf720085b1635731350a3eca841cf2235541c5f2f03dc2c887a4e9d50302614c8d1961200c1dac9e052d7b3130b0f70bdefd80c3902bd2138543518168a27cf486070e76c72e950312081cd6b775a923a62e05d7887f1e14a97c27e7c0ba0ee3d7ba678f884f1b53faa24838b4022f2773c120481286bd2b613b7887abbe5159317586c5632eded7d3172bd42d0d37a4ec3d1faa6617087c88a9ff5b45e6d4ab6b0e852b932c608b7e4bed8c390df7deeabba95e34d91fc41b212527c1635b977171021d42438b28cdb02dd18795e74e41a954eac695cc7a196becbe996fd51a5710fbddedeb1e279067c23d9560e5b048c0df2e9f707bf212251deae7e506a0b0ae10dc59d04ecbd7d707a9de8855c5cb2df4e76ef922c1cd329ee4706de011fbda6ea692ae51bf5b9f48c9e5d46faefdd18221bdc32488051653a00826b83b81abb72a78ad1f14c8d98eefbcd0cea2a87920b2d630a0fd0b4ee488687ffa68b0dfc62a3e4cafe3eadc5b675e1d897a761456cebe111d6388a862e22b40ddedbd1085bb57014f7d3443d7d1d2410ffdd8a98df420ae06850f5595784fa82ec039b2aa53efbedf0da60e1d6f71ea70a62e3c1d54474e0fbbe2f3ea9e7ef188bbb696d1ed687b62f7a41878e963b04652fe903886b972b20a4b76145b47cd3e5b3cebed30bb1f87553ce3b9285035fb0f27839b18698bb4f9fd29199b9b611adec9b5680e60d17a16d40e82afacd1ee982f0cab275b8659b9c388b3b4e96931f1aa766fb8e5a66437f36e4063a1ca57969cb7c28194a0c3f93106addde29d0346f3eddecb063c519256721819235cce44290a7ad764932649876d70a5040d406e14a8fee2262d61d5f74a0968956a934fba76d2c657f1152798c4b15e79bf6a0693d74452dc5aaf1280f3e9a393125caceb4dd425d72914d4c085d530745f459604d7104512c5b1188d1c2c4cfdf8dbc4ee3f8a22c2fdc37889dde5ee1980ce586095cb959352a20a6e2b3c9e90ae28fc8cd6def4642596c4332ca01497b50987d88565abb5884a8521675a31688f722a985c865357b39c000f3c4eff1f24d1660dbcbf3e34da073345daa552998340058a73039cd770a59547f9365402f87950192119ed6ad6af2779e15a3b5ac0b773aaff51365eb2107da3d02cd9c386d4aea79895b06ca2d864510344434ec85d5c07c31c7e4b822e63b7646cf00e3a0d7ee249d6d4a7b36efe109f075f2d69d31b9c19906ddb48ff2f18962e79d6757c8f2a291d7574a9a060c6d19e9732e96e57e816090215f0d2b428e4a3f1ca4b5dde5892685cd2f64dedae4f75821132f1fe0f2589f675b3b2bc67719494ccf8618ca4b469c87f72e1be54d545440b92fb347cb75479a6a0c62ab2d10d67ef6e9be61d129225f5b392db180afe8265a7b2e22156798649bc1d49eab6ef99e9974fbbdd42b0760226b1421e2c9bc0d99fdb0fa22b00f67c4495fa2720792444124ef69c6c507c083a7849bdb0d29a04595b67f041b7c3501ce0ea9d8e4ca1f8992bf46f88301c45e6075d615d087d1fce860c3242a10f4c21acc58d6a9edfa4599727017fd17d4fc5a902724a1409c1ecd22c7b8d61325b017d3276c443f0b86f5b7d820bd286043f80f29d68f9d0442e0c1946ecaab21638a2e17774bf713446306245b6e10f3e7793392630fdd74e988f86d8c369dcfff93fd54b2ee4899f619116970e07a023e789b9f660ea29ff60482bf3778ab1b984aa7a730633bf0365a99f1bb11a30c455c3571e9c74a08a3c1b7723e138795f1a885360ed4b62d1bb3db7c941ab8c4bfad49a661703ed92b55c3deb67658363c5af3b1ff41aa551a7f83b956dc0a4591e4ef41563cf09c27d1ecbdd7b60b4a1af0eab665dd57a5f1dd123fd55ed6d5b9aa20251f7bfb5217ab3c450f5db97cfd1e61689b05c27a1e12493b8e170d5d94354e2a032cd2862e46f219a151ca8fde55ae0fba89e17024b4ceb4d956adc090a28e723d10faec17fe2f67ce332213824ad24d2ba42cd5718dcb3a1ec9d1764fe9cf3e4bbb7fe499192482562352c916cdb4aad93310c014c0771d0bfa811906ee75064527e11e3628d3d20376bd2f91306a24024eab0af7bff624510ecff6b69e5615c01ad66a861cd91a514c32021a709ec3bb28e4eebd80a64199c4e0b7facf836a2e67f6c95d3a94cdd4338113ffeb73c1bfaabc0d5f43200f2552fe4f655740410554816485cec64f2f9e777452f38f1c522cbae785e532bde7fa15678347a16b654d04b220200028a66dc371968e48cc93181994c61269117016bedbe8113f443258135c77cf0d6cec9d7ed2a7f4d8c131957114aa1eb0b9dea8124e3763f0891de32a2705da33d3d0568cae8e9f4c66560730837fd74528eacff78174f821e81eb27528bed250ef642ebd94901b42a6e839b6c57e0b893b806ef74f23a6f4d84b19d02e8d37882ff41e203230d916e24b85336813ee00f3902bd70027a15a40b3a052eeebb85364effc303380e5b6cd60b82e1bcd8d413588623f1a7c4d0302d3989dcd77b6ee33783693e04af72435587600ede36ea404ae4f35bf8c9a8bd9cf624ab211e2035887d16e969a0dff70a54144b8bf1ebf8260d2abbcd0876579e49c345ea93d5771d16e90070f097eb03f1b7b1f65fb9c95425f31831ee034a93cd2f245e98af11f87c84cfa36dcc33f85dcad2edbfb896448f6e210b797352efd223298e697dc886feaf32c3e221a566774881c04181a0832a62b4659afc46be15159472fbb1c5486a44cf59fd660bcede12c943b080dde06728c52c9de4645d2bbbfe50b71242a8d4afed6a4d1b6ae622c8af4e25bec6286a1dfb0d5be4b53f245714a664355cf26b33f594bfaee85e4df75c47bb6f2722ec0727f1d50240189e09dc734f10f9758db2b55e730f7dc35e358b28eeed3f92dfa4f99cfc0fe6a5c3a943715b641a77a6b7fc7f0f7be8d287b6c41710706556657c72435f122c08b7baccbd5983811ce93d5c52d6f4b20a2c88bf2de4f7ef036b1258ad69373ac1735e5d85afac971c8c473316e92a1f453f8df5289099916718518b252761ec993064132fca14bb802bf6a340447b4885bb70ab87d1954c38285517674e08d80a36b26a83c0541c075f518c2d5a17b5884fbe5205998cc8c6a447f3507df1a9314013da4634874f97b85443346a29f77da43cf6903bb2a03d39f99353a945bd3928c538fcf152fbcb813506e502224a25b22c9f021ab6c409f1e34b3526de20d385a083496cca556a0ec54039b5ff70c3b3fa51bd2bd2d9006502a4ffcdc0942f60512e6e9161ec7184e2c7f73e5a249ef8fa2a82516aad1d3526ca7694a37722d7b6a58fac56cf552978b480aebbf8379b996795816cdc1730ead511330711fb9409502a9cd83f727ca927082fac8cc221822c947fefe77c1fe8400ccf96b71579eabf0348c6121e7df1cb3bf51e7c30ad7bf0051bc24ab8aae7c3bbc69c098249016b3f5d58b2631138c617ff391cd9c1e8b8ca4d89a831fa77937a3094ab72a7740cfaa4ab75455b73fb612ca1f9f70c22f18a0ecadbcef5e95fbca7cd19d9a0ddbb601df439aedc6ccd75855ebc2481ba858a8e91e6163e359a91e148d06f3b469f8ac3efff2e4ec13d389b329d0ee65ee433ca4aaacc82c3e1ee2e1a4c9c7fa24", 0x1000}], 0x2, &(0x7f0000004240)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r13}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hopopts={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x6}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1a32}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x21, 0x6, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x8, [0xfffffffffffffffc]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0x10, [0x0, 0x2]}}, @pad1, @enc_lim={0x4, 0x1, 0xf}, @enc_lim={0x4, 0x1, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdrdstopts={{0x88, 0x29, 0x37, {0x29, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xc5, 0x63, "4793d9e7c944fe9eb009c9c9d9446129da6d69912c3093b3a6b1f52bbaeba5af7c5a9299427f052d55a4c559cf55a3c61f3f3d41b8e5d58e2e6ec3e55ee9aa94577ba62e4a996d1202d9d5c29179ca6a3664211ab3a4463ed12b09528cb09e25310d60"}]}}}], 0x1a0}}, {{&(0x7f0000004400)={0xa, 0x4e24, 0xffffffff, @mcast1, 0xfffffff7}, 0x1c, &(0x7f0000004600)=[{&(0x7f0000004440)="719231b8b9674f236260", 0xa}, {&(0x7f0000004480)="51fcb458bb84efb9c6fe25846509765ad7d6b2b443d8870bc8b307903b28880832538898f7b475c8ee60718a4e04ad14f8dc3a1044e0ff1df6d747d3ca54b4a860754e2a5a7acb50e72fbf2efdb50f571cdae26530346004", 0x58}, {&(0x7f0000004500)="64658b2bd630faab674b4100ecb187d91d2743a3f6b32cc2866bec8b6ac8205ebdbec1c1254b3ee584e40a62cb93a5e135b6553d5bfafe563b664808f720", 0x3e}, {&(0x7f0000004540)="f39e8b65b246e8de96305ef8964f0303172abd6b", 0x14}, {&(0x7f0000004580)="5b7cd5d9aca1bc3449b371adbafb68bdf96cca3bd0b349389550978a43a9800d49cd1f22761a33e4d343b6010043", 0x2e}, {&(0x7f00000045c0)="6d8d84c7082b02921ff38ce94d6508b051e882254b92b64f3ecf39a01cb9b229d2f61412638563b16954492051fe3ab44aa071028d50b14f54", 0x39}], 0x6, &(0x7f0000004680)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0xff}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x70}}, {{&(0x7f0000004700)={0xa, 0x4e22, 0x3, @mcast1, 0x6}, 0x1c, &(0x7f0000004880)=[{&(0x7f0000004740)="098987904b4f584f3e2ac71a00e7f978ac913d2badc8a1aba19b625a8de8e064813392e7c42956961aa4a889375c63f0cbf9a0c3e2c579115dcbc78bfec84b29408a3069c9a3191d78f3393804dff70d49c50af58632552efa4cd0b6d1d590d1a141578d6678da40605b2ff41c542c770f96afd3f2b6f3", 0x77}, {&(0x7f00000047c0)="d5075cb45d14b87c8e363401a1530c82c46e72a88d8c0747647886e967f62cfe95e4e9e9e816604aaa07bf749852431dbbab777128bf6704788bde6d3efd857aa25cbd2971bb41ae1ed0c46c2e1ee3e377051f8105921d40f4f78d257f78b82ac418829219664beb2cee2c679a87d52676452cac46f3fefb8a9a1aee81957014ac", 0x81}], 0x2, &(0x7f00000048c0)=[@dstopts={{0x130, 0x29, 0x37, {0x29, 0x22, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0x4, 0xea, "9854752e0dec99c2aa2f26f0de0bf287f3c22cb421785435d1d3fe2a345a0e03b1cfc5f3bee1eb723e4e7355b5ed69367a5ac712cc6b17976ed986abf52106c918335800b92d1ed9fb35f85b586a6d65e3ef1b872a6f80b1088629a5b31bf7d2c241597b5f7ed10a6f8d6c22e19ae0a8bef5976d546e95b4db3ee38506ba12bf80f0ba99b1448c715c9c5163be2bb77b9faeb5eb5b5717114f1a3c14dc2c1447e27e66634dc2327de0f00d71783780501ec97c9b4d2bfd8b27396543730f26f9f9240479436f684eafd79ff02c452541f71fc6021438ad8f25c322f76431a6065922914e7e4ce2b951e8"}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x5c, 0xd, '\x00', [@pad1, @generic={0x2, 0x4b, "5f3e0406c71aef4c29ec25a5267e614008274843a14d3f18f84d1d6cc1617c7b77e28b93499b872dc89f48ded9f0b49f7019488926096a9b4234998f5d9333c4ce271f2576dff001944021"}, @jumbo={0xc2, 0x4, 0xe86}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0xb}]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff7}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r3}}}, @hopopts={{0x20, 0x29, 0x36, {0x1d, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x218}}, {{0x0, 0x0, &(0x7f0000004ec0)=[{&(0x7f0000004b00)="e8a58ed58f8a9cc20aaf88e874bfe0e28a6c3f4a660dcbae01a41983c0bdf1b43a0cbd404b3c65958badc82e602b6e40e1f130c7bb3a4ad0c3840eb1a193b077710aa1bb5a645f9fedb3cdff672a7a9a22158551c1b7dc4d1b8f1db96c3c563dc17a0b9405a8894d3a556e3996fd402936a8501418f080fba8adb4", 0x7b}, {&(0x7f0000004b80)="82b86d797e22e77dcc397051bc09669a1e0c86bf80df7207b9cfd1315e980999b08de415ffb7b10a8ec83374bb9e4468740aa220058a5d356cedd9038281dc2754a95277d6b386ca2397da9ae9b650cacd2ac727a64e2a3ecb68e045290945a3d2070c0af55cd355e60e43b5a7fc3733cd4e96e67614dfe703164e729e609bbaa349cea2e84be5ffcc18ce9a9041c134182154e4da8630e8f50927ee9fa46f9e2f619392f269f01928c280c4e673ff203bc2bea99a2a622cd7463e49a35f9cb49a04f4bd30144cc1f55c904474c84b52d83de8cda6f31f188f161b8c6182ebc38291ac71", 0xe4}, {&(0x7f0000004c80)="9de3f095fd0e831dbafe88baa16a18067edf099e591eead4e4293eb55de2b6588c00a7f4a2d2b93bbc54ea061c511d1314c2f27b6871830b7ad2cc9bab82a2d7d63960d62a53efe687e6924735fdec9588d2bb77060640529032de5e31be53ae9ab4a8e759", 0x65}, {&(0x7f0000004d00)="d029a008917bdc7aa0b970c1c7c08fddce2b0d32ee6fe9ef777ee3602d6396cba71f4d7fef9689a56fdd14d7e3fe85d627e86d", 0x33}, {&(0x7f0000004d40)="ff3ae8529f59830b2dbd2eee6817f6c20ec2c4efceac0ebc4d21523996987d1e3a46a6414670057e20fe22756883f1", 0x2f}, {&(0x7f0000004d80)="ef5a2d9bb7085c5f6144e3e95f33cc400f45cf8ad6d29198cdebce13b9f73abf5ec677ba7804efb34ecec0e277a3367ebbda99c5a475d542cba50cfeecbb96cf304ce595af80cf400f6f389478e1b5556b136bb766877e1643240a2fe6259df1a25cc42b0353734cec34c5f5a8d8ab8172b4b0a54968d9ae8615f4e220fd445ab32454eff3e4c02c3cc5a70d52c903941ed60d10e5409d3e93b96887af46d6442e965c559c1b482cb588961a86b3625a47da2ac27ed0272afbdab2cdb3cee2f1a9474f15bfc56c2f7b3503637fa7479333371188928143ee4a328a8dc33a8c35a6d62ba3db05e85512d741dfeda948d8e55cca68", 0xf4}, {&(0x7f0000004e80)="17ee7c00bd3ecc4879110f21", 0xc}], 0x7, &(0x7f0000004f40)=[@dontfrag={{0x14, 0x29, 0x3e, 0xc63c}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x4, 0x10, '\x00', [@generic={0x22, 0x43, "25944129376e4c3c16ba71fb05dc398c7694124bb9c624cb7022a5bdfdd41f73c502876549e474722d399ef155abb0f8f3cca97c2280ef7bd12de22ea344e22db252b4"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xa2}, @jumbo={0xc2, 0x4, 0x8000000}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x18, {0x2, 0x4, 0xc5, 0x0, [0x1, 0x74a4]}}, @enc_lim={0x4, 0x1, 0x9}]}}}, @hopopts={{0x18}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x84, 0x19, '\x00', [@ra={0x5, 0x2, 0xc192}, @generic={0xfc, 0xaf, "acf4160e7c39616b3ccf66efae178fd3d4d4202990bc4c17e927ea4ebd85722438b87eb2e0d25bc924e991561d912825a2da43fcafef2d28bcc0f7f4704fef2fda6be21eaa720902f27f47f0d581e2c88a67789a6e8bf95faefb07e37e174d57f49d3ba42db03309c7a1295a22a3cf99db185e6108a0c3f8447b60ba350706854707e9dbb02adb064a9b0a258f84b2d982e1335ebb8c15fbe35328fc3c2887ec5ef11e805bd2bf9abad0255eba650d"}, @enc_lim, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0xffff}]}}}], 0x1e8}}], 0x7, 0x4) (async) openat$cgroup_ro(r1, &(0x7f0000005300)='cgroup.events\x00', 0x0, 0x0) (async) ioctl$FIBMAP(r5, 0x1, &(0x7f0000005340)) (async) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000005380), 0x4) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000053c0), 0x40000, 0x0) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r11, &(0x7f0000005540)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005500)={&(0x7f0000005440)={0x84, r12, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000d0}, 0x8004) ioctl$TUNSETDEBUG(r14, 0x400454c9, &(0x7f0000005580)=0x4000000) (async) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f00000055c0)={'veth1_virt_wifi\x00', @multicast}) 590.879384ms ago: executing program 0 (id=3393): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x50) r3 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4) pwrite64(r3, &(0x7f0000000100)='b', 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fe000, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x7, 0x9, 0x5, 0xffffffffffffffff, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x50) (async) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4) (async) pwrite64(r3, &(0x7f0000000100)='b', 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fe000, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x7, 0x9, 0x5, 0xffffffffffffffff, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 588.038722ms ago: executing program 4 (id=3394): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x10000000, 0x6, 0x6}, 0x63}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x2c, r4, 0x5, 0x1000000, 0xff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x3a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x48094}, 0x4014005) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) (async, rerun: 64) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r7, 0x2000) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x112, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071108500000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 586.873453ms ago: executing program 0 (id=3395): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8d", @ANYRES32=r1, @ANYRES16=r2, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x808f5a75203b992d) r3 = socket(0x26, 0x6, 0x10001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = socket(0x10, 0x3, 0x0) bind$802154_dgram(r0, &(0x7f0000000500)={0x24, @none={0x0, 0x1}}, 0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000001c0)=0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1f, &(0x7f0000000540)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000640)='syzkaller\x00', 0x80, 0x1000, &(0x7f0000000940)=""/4096, 0x41000, 0xb, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xe, 0x7fff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[{0x3, 0x4, 0xc, 0x9}], 0x10, 0xa}, 0x94) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001f00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x1ac, 0x12, 0x800, 0x70bd2d, 0x25dfdbfe, {0x29, 0x7, 0x9, 0x8, {0x4e22, 0x4e22, [0xc2a8, 0x5, 0x6, 0xffffffff], [0x8, 0x2, 0x8, 0xfff], 0x0, [0x9db, 0x6]}, 0x81, 0x80000000}, [@INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "9f2390232b906aba690c5f1b550125d0ef25da13c21ca35948b77e524763e49d68f65b247f68490937ec728d8366245fdf04de44fb215af550ee006c622fb36e1615080f126a7d9c4c445c90fb30bbeffc536940a4ca8816221a08405f7373e54a0960bd172ef4130f10bb4bd591c0c53a652fcc93c9a0aa953eb62a0a4887cb244bfed2d7a8e5f6bb7dadcf61aace72e699963dafe7d830c38d50b50230cc899604792c8af6a43b771c8ffb0611"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "4d3ef1ad71d08b125ccaada5feed9b91c3ff2bce6f3c68f5b7f69f08fa07e6a7dc5aabfb71a4951a188d4ad0eff59dfe6f5c22a65a76dd2ba615ba5a0bcbf497cab7640d65e5a53f08cf2ac1f03a12a8f759627530c3fd63e21ea49316456a5a96840e3867da75c418c966ac5920012f00f720cf36056228a7dc577e6feb2d8871de90afd76e571403e93cdf18263b77a5645a6a3879eff4de5759cfe2ab9ea1958a24e4f402ba"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendto(r3, &(0x7f0000002080)="b4f952599711fbb8716fbd1aecec9beba25839730f4f37206a5ec3ee2dc1d4ec47d450063f58da510cf9bbb363a46e758df76ece5f8b20ecbb2083fcedb84e5bf75a348454fcda6562a44d8973c0b043e81776f0a3d5980b27095e6a940524e532482867fec205f8f273cfca32ff448ef0541d0fc95f4f02ebb7666b86ed829f51a6d552fdbeb264c635529fdc40ae3064aaa04070de3d41eb40e80742a08d70bf7419bfde18ddc1a4d7", 0xaa, 0x80, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000001f40)=0x400, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, 0x0, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0xe, &(0x7f0000001940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @alu={0x4, 0x0, 0x1, 0x2, 0x8, 0x20, 0x4}]}, &(0x7f00000019c0)='GPL\x00', 0x0, 0xed, &(0x7f0000001a00)=""/237, 0x40f00, 0x40, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xaeb8, 0xffffffffffffffff, 0x5, &(0x7f0000001b40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000001b80)=[{0x5, 0x2, 0x0, 0x9}, {0x2, 0x1, 0x4, 0x1}, {0x4, 0x3, 0x3, 0x6}, {0x0, 0x3, 0x1, 0x1}, {0x2, 0x4, 0x2, 0xa40386faa4fd7648}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002140)=ANY=[@ANYRES32=r9, @ANYRES32=r7, @ANYBLOB='\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="b554c8115f5e9bf0c850afbbe799e6a1fef5c9736920897abc13bf1581b70c13fd373632af8f16917e5a58ba0e7b625383cfb1c0d34d7e24b6b8d3bf1ddb30f09cb764aac8a81b24cd9410d60b76b5a52ca52da8fc5e8716c744f4596a24cdf45882170a58dd9a0cbb2e6a953ebcf4360e05f086ed588f4329b0ca07fcde61d559f3a0970e0f9fdf192211875ca95c0fe2581ef25810", @ANYRES64=0x0], 0x20) 584.97515ms ago: executing program 1 (id=3396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r0, 0x11}, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 584.475539ms ago: executing program 4 (id=3397): r0 = socket$inet6(0xa, 0x6, 0xf) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0x82, &(0x7f0000000180)={0x2}, &(0x7f0000000280)=0x20) (async) listen(r1, 0x50) (async) r3 = socket$inet6(0xa, 0x5, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r4, 0x80000000) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r3, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000000000000500ee06040000000f000000080000000b000000000000000e0000000000000002001b68b61b80272825000008000000005f009bbde02ff080455202cb2fbfcd0ccf6dfbfa1d32eebdc0b41281ef2c958169424630ec039a6622fa7665ecab08bae064f8789856a177a8334a1162e68a32a8e260c2fd1897bd76ab88429b1f74fe1137c68eafe52a374a319034227860af4e5b7be117b743d0c8f396c2eae2e3"], &(0x7f0000000140)=""/78, 0x4f, 0x4e, 0x0, 0x2, 0x10000}, 0x28) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r9}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02080000c35c86021bf352c20100000080000000", @ANYRES32=r6, @ANYBLOB="0500"/20, @ANYRESDEC=r7, @ANYRES32=r7, @ANYBLOB="04000000000000000300"/28], 0x50) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) 576.444167ms ago: executing program 5 (id=3398): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0xd6, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async, rerun: 32) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001240)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5974675aab371324}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7f, 0x2, 0x3, 0x8, 0xe34, 0x5}, {0x9, 0x2, 0xac09, 0xb, 0x9, 0x80}, 0x3c, 0x4, 0x1a1f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa7b75d7f98ad2793}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r4) (async) write$cgroup_int(r4, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x12, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1a1}]}}, 0x0, 0x26, 0x0, 0x0, 0xfffffffd}, 0x28) 500.402875ms ago: executing program 0 (id=3399): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @ethernet={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, @isdn={0x22, 0x8, 0x5, 0x1, 0x2}, 0x7, 0x0, 0x0, 0x0, 0xc, 0x0, 0x7ff, 0x1, 0xac33}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5}, 0x18) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18) (async) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) (async) recvmsg$can_j1939(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000380)=0x4a1b, 0x4) (async) close(0xffffffffffffffff) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) (async) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000003a40)=""/4107, 0x100b}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000680)=""/106, 0x6a}, {&(0x7f0000000700)=""/87, 0x57}], 0x7}, 0x12062) (async) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000140001002bbd7000fddbdf2500000000000000000000000000000000fe8000000000000000000000000000bb4e2400024e2200000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000ff0000000a0002000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 428.812543ms ago: executing program 0 (id=3400): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005d00)={@map, 0xffffffffffffffff, 0x1c}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb0"}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, r6}, 0xc) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r8) readv(r4, &(0x7f0000000080)=[{0x0, 0x20}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x2) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400000000ffff7fff00000000", @ANYRES32=0x0, @ANYBLOB="00000000ec400000200012800f000100626f6e645f736c2b000000000c008efc7d5d964d9ad80000"], 0x40}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) 422.633905ms ago: executing program 1 (id=3401): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000000a0601010000000000200000070000090900020073797a310000000005000100070000000800094000000005100008800c"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @multicast2}, 0x1, 0x1, 0x4, 0x4}}, 0x80) (async) bind(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @multicast2}, 0x1, 0x1, 0x4, 0x4}}, 0x80) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000000)=0x20, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0x98}}, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14}}], 0x30}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000ffffffff1801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300004000000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r5, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x200040c1) 254.543402ms ago: executing program 5 (id=3402): r0 = socket(0x23, 0x80001, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x401}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x88}, 0x1, 0x0, 0x0, 0x200808c4}, 0x4334477141dbb125) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x7800, 0x20, 0x7, 0x2, {{0x36, 0x4, 0x0, 0x37, 0xd8, 0x64, 0x0, 0x1, 0x4, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x7, 0xcc, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x4a, 0x3, [{0x5, 0x3, '/'}, {0x7, 0x11, "280d20ec8f7151455e2aaa7dd2071d"}, {0x1, 0x8, "dbf64f9510de"}, {0x0, 0xa, "8ef09c0f363b9a0c"}, {0x5, 0x10, "57d5406ff9c122d052215afab610"}, {0x1, 0xe, "bfc2a386e2ea6f461e5b2dc2"}]}, @ssrr={0x89, 0xb, 0x68, [@multicast2, @multicast1]}, @lsrr={0x83, 0x7, 0x8f, [@rand_addr=0x64010100]}, @generic={0x94, 0x6, "76cd0ac4"}, @timestamp_addr={0x44, 0x54, 0x85, 0x1, 0xb, [{@loopback}, {@remote, 0x2}, {@loopback, 0x3}, {@multicast2, 0x9}, {@remote, 0x7}, {@local, 0x81}, {@local, 0x7f}, {@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfd8}, {@multicast1}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@newtclass={0x4c, 0x28, 0x300, 0x70bd2d, 0x5, {0x0, 0x0, 0x0, r4, {0xfff2, 0xe}, {0xfff3, 0x5}, {0x4, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x95, 0x2}}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_RATE={0x6, 0x5, {0xef, 0x4}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x22000000) writev(r3, &(0x7f0000000880)=[{&(0x7f0000000580)="b564c3096bc1f7d98215d0c1a2819c3fa593253a0774d39139e9455197f8424c1f14f5181588d24b417762b7832cebb327eda633be857b232d6f64a2091df79388a50461c02a5d66c7b2729043c3a973e88295575c0e644cfe64f8023f34d852d01a43b963cc7e9d708dd460dc8a26f3824f", 0x72}, {&(0x7f0000000600)="7a120c5d6b877692e929e8eaa5e25d2fef0e545552b50ad9f057112fa0b440aa6b042195a0788c4bdec94256bb7c76e40750b8011033f6388df10ab0349a3c0c704e8dbc839de460831c5a70c038b86ccdd700a82c2d06ecb902f7bd11e68601f60959fe9dafbdc5b05f69e6d21ea33a42a6930c3b1fa863e9d7443b802d7c773f54baad02da69c8758865a9239ec66c68d2ff2e4735a173dd3d00c24b", 0x9d}, {&(0x7f00000006c0)="0c6979dc5f635eb23e90d37b3fa0d8ad95da2ffdf2401a9206f1046eef6717730f3fe3d475f7", 0x26}, {&(0x7f0000000700)="6fab75ca74881e2ecb9a7f5b323f75c22d75abd1e8454d8a937f0df141ccfe5435614276bd6b97bfb1517bb58e17781ee1ba9747e84d7d26049420a69396a3dfffbdf89f5fe0cf108326ebe42513db0941eddf2841a8b6c024baa22d2469e480a27cde741234dbbc1e7fa14e7535057ef6729ce6fe9660788c9555a74574ec2d0c85e9974831070d21a7a8f10fd81a4c12824b686a966cf5923c114f78a76a21734d395b248aad9f0eb58912926475deebce68f4a5691e361c63a097ddb8c3aef6c13df6af6aab3cacc0a03450e6d9fbb8e24c130bfb0cef6f4e481f71a076aadf8907", 0xe3}, {&(0x7f0000000800)="9367bfc8a7581deb396fa4a7a9b2dc", 0xf}, {&(0x7f0000000840)="78dd63c0586bc7da122c879b2997b42894349d50affb0ce72e689fbe64d53d857a5393454934a17e35e3d96eda540645641695ddb3e44d9b94daf567b1c5", 0x3e}], 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x9e3973b567dc24e7, &(0x7f0000000940)={@remote, 0x0}, &(0x7f0000000980)=0x14) sendmsg$nl_route(r5, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@bridge_setlink={0x28, 0x13, 0x224, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x4101}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4275b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40044}, 0x40408c4) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001014}, 0x40) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r9, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4041) sendto$packet(r8, &(0x7f0000000d00)="170022788b143162f2cc36a35b39b2be28", 0x11, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000d40)={'pimreg\x00', {0x2, 0x0, @private}}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001600)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000dc0)={0x7c4, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x2b4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {}, {0x0, 0x6}, {0x4, 0x4}, {0x2, 0x8}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x9}, {0x3}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x1, 0x3}, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0xa}, {0x4}, {0x0, 0x3}, {0x0, 0x3}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x1}, {}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x4}, {0x3, 0xa}, {}, {0x0, 0x1}, {0x7}, {0x5, 0x9}, {0x3, 0x6}, {0x4}, {0x2, 0x7}, {0x7, 0x1}, {0x2, 0x9}, {0x3, 0x2}, {0x1, 0x7}, {0x3, 0x7}, {0x4, 0x4}, {0x4}, {0x3}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x6}, {0x6, 0x9}, {0x3, 0x9}, {0x7, 0x3}, {0x4, 0x4}, {0x0, 0x6}, {0x7, 0x5}, {0x7, 0x3}, {0x3, 0x6}, {0x7, 0x9}, {0x7}, {0x5, 0x4}, {0x3, 0x5}, {0x3, 0xa}, {0x6, 0x9}, {0x4, 0x5}, {0x1, 0x9}, {0x3}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x2}, {0x7, 0x2}, {0x4, 0x9}, {0x2, 0x8}, {0x4}, {0x4, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1d6, 0x6, 0x4, 0x1, 0xe, 0xe, 0x3]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x7}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x5, 0x7}, {0x5, 0x5}, {0x5, 0xa}, {0x4, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x4}, {0x4, 0x9}, {0x6, 0xa}, {0x1, 0x4}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x7, 0x6}, {0x2, 0x7}, {0x7, 0xa}, {0x2, 0x2}, {0x3, 0xa}, {0x0, 0x7}, {0x1, 0x1}, {0x3, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x6}, {0x5, 0xa}, {0x2, 0xa}, {0x7, 0x6}, {0x6, 0x6}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x0, 0x1}, {0x7, 0x6}, {0x5, 0x9}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x7, 0xa}, {0x6, 0x9}, {0x5, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x3, 0x8}, {0x4, 0x1}, {0x6, 0x4}, {0x6, 0x3}, {0x3, 0x6}, {0x2, 0xa}, {0x0, 0x4}, {0x2, 0x8}, {0x3, 0x8}, {0x1, 0x8}, {0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x4}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x6}, {0x7, 0x6}, {0x2, 0x8}, {0x5, 0x8}, {0x6}, {0x3, 0x6}, {0x5, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x4, 0x10, 0x24, 0x5, 0x4, 0x5, 0xc, 0x1b, 0x2, 0x6c, 0x2, 0x18, 0x16, 0x6c, 0x5, 0x24, 0x18, 0x48]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ace, 0x1ff, 0x8, 0x9, 0x101, 0x9, 0x9, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xa, 0x5, 0x8001, 0x4, 0xffff, 0x5, 0x7]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x2}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x3, 0x4}, {0x7}, {0x5, 0x4}, {0x0, 0xa}, {0x4, 0x6}, {}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x7, 0x4}, {0x3, 0x8}, {0x3, 0x7}, {0x0, 0x4}, {0x5, 0x3}, {0x2, 0x5}, {0x2, 0xa}, {0x3}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x6, 0x5}, {0x7, 0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x5}, {0x1, 0x1}, {0x6, 0x6}, {0x7, 0x3}, {0x6, 0x6}, {0x3, 0x9}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x118, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x2}, {0x0, 0x5}, {0x4, 0x5}, {0x1, 0x9}, {0x7, 0x1}, {0x4, 0x8}, {0x7, 0x1}, {0x1, 0xa}, {0x1, 0x9}, {0x5, 0xa}, {0x2, 0x5}, {0x4, 0x1}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0x2}, {0x3}, {0x0, 0x5}, {0x7, 0x9}, {0x2, 0x3}, {0x0, 0x1}, {0x2}, {0x2}, {0x7, 0x9}, {0x3, 0xa}, {}, {0x2, 0x2}, {0x4, 0x1}, {0x5, 0x9}, {0x4, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x1}, {0x1, 0x3}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x6, 0x5}, {0x0, 0x4}, {0x3}, {0x0, 0x5}, {0x6, 0xa}, {0x5, 0x7}, {0x4, 0x7}, {0x7}, {0x4, 0x6}, {0x6}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x5}, {0x6, 0x1}, {0x1, 0x9}, {0x2, 0x6}, {0x3, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x7}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0xa}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x7fff, 0x7, 0x81, 0x7, 0x4, 0x10]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x2}, {0x7, 0x6}, {0x3, 0x6}, {0x7, 0x9}, {0x7, 0x4}, {0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x6, 0x4}, {0x7}, {0x4, 0xa}, {0x2}, {0x0, 0x3}, {0x5, 0x5}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x7}, {0x0, 0x2}, {0x2, 0x1}, {0x7, 0x1}, {0x6}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x9}, {0x4, 0x5}, {0x7, 0x3}, {0x4}, {0x2, 0x9}, {0x3, 0x9}, {0x7, 0x7}, {0x7, 0x1}, {0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0x4}, {0x6, 0x5}, {0x2, 0x9}, {0x2}, {0x6, 0x2}, {0x4, 0x6}, {0x3, 0x4}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x7}, {0x3, 0x5}, {0x3, 0x1}, {0x6, 0x5}, {0x4}, {0x5, 0x5}, {0x6, 0x7}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0x9}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x4}, {0x2, 0x2}, {0x5, 0x6}, {0x0, 0x5}, {0x0, 0x1}, {0x6}, {0x0, 0x3}, {0x6, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0x2, 0x4}, {0x1, 0x1}, {0x1}, {0x7, 0x9}, {0x1}, {0x6, 0x2}, {0x5, 0x2}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x7, 0x8}, {0x5, 0x7}, {0x4, 0x1}, {0x1, 0x9}, {0x6, 0x3}, {0x0, 0x3}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x4}, {0x5, 0x5}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0x8}, {0x6, 0x4}, {0x4, 0xa}, {0x3, 0x1}, {0x2, 0xa}, {0x2}, {0x0, 0x6}, {0x6, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0x9}, {0x6}, {0x4, 0x8}, {0x4, 0x9}, {0x0, 0x9}, {0x3, 0x3}, {0x2, 0x5}, {0x5, 0x2}, {0x4, 0x8}, {0x6, 0x1}, {0x3, 0x6}, {0x2, 0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x2}, {0x2, 0xa}, {0x7}, {0x6, 0x3}, {0x5, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x2, 0x1b, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd2a, 0x9, 0x5, 0x100, 0x9, 0xef33, 0x3, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x8, 0xa, 0x5, 0x1, 0x1, 0x28]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x425, 0x0, 0x8c2, 0x9, 0x5, 0x2, 0xffff, 0x6f]}}]}]}, @NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x0, 0xde, 0x0, 0x5, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x0, 0x2, 0x1b, 0x1, 0x1, 0x24, 0x6, 0x1, 0xc, 0x6, 0x1, 0x4, 0x30, 0x3d, 0x12, 0x16, 0x24, 0x48, 0x36, 0x30, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0xfffe, 0x1, 0xe8, 0x4, 0x3, 0x1]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x27, 0x1b, 0x9]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x2}, {0x6, 0x9}, {0x1, 0x4}, {0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x3}, {0x5, 0xa}, {0x6, 0x4}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x6, 0x3}, {0x7, 0x8}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x6}, {0x5, 0x3}, {0x5, 0x2}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x5}, {0x1, 0x4}, {0x2, 0x8}, {0x1, 0x5}, {0x0, 0x8}, {0x3, 0x6}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x6, 0x1}, {0x3, 0x2}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x234, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x1, 0x5d, 0x3c, 0x9, 0x4]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x60, 0x6c, 0x30, 0x30, 0x36, 0x3, 0x1, 0xb, 0x36, 0x6, 0x48, 0x60, 0x5, 0x4, 0x2, 0x36, 0x60, 0x6c, 0xc, 0x5, 0x6, 0xb, 0x1, 0x2, 0x0, 0x12, 0x16, 0x36, 0x4, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0xffff, 0x1, 0x6, 0x5, 0x6, 0x9, 0x9]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0xa}, {0x3, 0x3}, {0x4, 0x9}, {0x1, 0x1}, {0x5, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x2}, {0x1, 0x4}, {0x7, 0x9}, {0x1}, {0x5, 0x7}, {0x1, 0x4}, {0x4, 0x6}, {0x1, 0x18}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0x5}, {0x7, 0x7}, {0x1, 0x9}, {0x0, 0x6}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x5, 0x2}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x1, 0x8}, {0x6, 0xa}, {0x0, 0x7}, {0x5, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x1}, {0x7, 0x7}, {0x4, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x6}, {0x7}, {0x4, 0x4}, {0x0, 0x9}, {0x5, 0x3}, {0x3, 0x4}, {0x6, 0x7}, {0x2, 0x9}, {0x0, 0x2}, {0x1}, {0x7}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x9}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x9}, {0x4, 0x3}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0xa}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfff8, 0x8f, 0x8, 0x3, 0x4, 0x0, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x44, 0x4, 0x7, 0xffff, 0xe, 0x7, 0x4f8e, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xf0b4, 0xa, 0x7, 0x1000, 0x7, 0x6, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x6, 0x60, 0x0, 0x16, 0x1c, 0x60, 0x3, 0x9, 0x4, 0x24, 0xb, 0x24, 0x24, 0x30, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x17, 0x36, 0x24, 0x3, 0x22, 0x36, 0x30, 0x60, 0x36, 0x6c, 0x48, 0x5, 0x30, 0x16, 0x1, 0x5]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x5}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0x8}, {0x2, 0x2}, {0x4, 0x4}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x8}, {0x3, 0x2}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x7}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x1, 0x9}, {0x2, 0x4}, {0x6, 0x3}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x4}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x86, 0x9, 0x5, 0xe3, 0x23, 0x74a0, 0x8, 0x5ead]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x400, 0x5, 0x61, 0xfff, 0x6, 0x0, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x6, 0xef, 0x6, 0x5, 0x7, 0x100]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x8, 0x200, 0x1, 0xf, 0x700, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb11, 0xeec7, 0x2, 0x0, 0x4, 0x5, 0x6, 0xd4a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x48, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0xe, 0x1b, 0x60, 0x74, 0x17, 0x6c, 0x3, 0x3, 0x42, 0x1b, 0x30, 0x5, 0x16, 0x4, 0x6c, 0x48, 0x2, 0x6, 0x36]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x4, 0x1, 0x3, 0x5, 0xc, 0x30, 0x1, 0xc, 0x30, 0x4e, 0x9, 0x48, 0x48, 0x2, 0x24, 0x2, 0x30, 0x48, 0x2, 0x1, 0x5, 0x3, 0x60, 0xc, 0xb, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x1e0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xd, 0x5, 0x14b1, 0x1800, 0x2, 0xd, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x1, 0x5, 0x8, 0xf, 0x1, 0xcfa]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x1b, 0x6, 0x2, 0x4, 0x16, 0x11, 0x18, 0x18, 0x30, 0x0, 0x6c, 0x6c, 0x3, 0x24, 0xc, 0x9, 0xb, 0xb, 0xc, 0x9, 0x6, 0x60, 0xc, 0x5, 0x3, 0x2, 0x6, 0x48, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xba26, 0x2, 0x4, 0x4, 0x5, 0x7, 0x3, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x81, 0x2, 0x7, 0x200, 0x3, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x11, 0x10, 0x91, 0x1, 0xe030, 0x1, 0x5374]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x1}, {0x2, 0x4}, {0x5, 0x5}, {0x7, 0x8}, {0x4, 0x8}, {0x7, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x7, 0x7}, {0x7, 0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x2}, {0x3, 0x1}, {0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x7}, {0x6, 0x6}, {0x6, 0x1}, {0x5, 0x8}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x8}, {0x3, 0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x4, 0xa}, {0x6, 0x8}, {0x1, 0xa}, {0x6, 0x5}, {0x3, 0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x7}, {0x7, 0x2}, {0x7, 0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x1, 0x7}, {0x7, 0x3}, {0x2, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x5, 0x2}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x6, 0x9, 0x2, 0x4, 0x9, 0x7]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7fff, 0x4, 0x0, 0x9, 0x6, 0xffff, 0x6218]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x2, 0x5, 0x8, 0x2, 0x1, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x5, 0x2, 0x7, 0x1, 0x2, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x0, 0xc, 0x8, 0x0, 0x7fff, 0xf000, 0x985]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x7c4}, 0x1, 0x0, 0x0, 0x4000810}, 0x840) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000001640)={0x0, "0697ad93ceab0fb75069f654dda48d5c"}) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000002640)={0x0, "08fd18e8b21590e76655fcaa0f10aa97"}) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000003640)={0x0, "c2a792114dbea69f1f315c245e0964fd"}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000004640)={0x9, 0x2, {0x8000000000000001, @struct={0x261, 0xb769}, r10, 0xd24c, 0x7, 0x79c0b3a, 0x29ce6feb, 0x0, 0x95, @struct={0x80, 0x18000000}, 0xfff, 0x4, [0x6, 0x7, 0x0, 0x9, 0x40, 0x5]}, {0x1000, @struct={0x7f, 0x6ed6}, r11, 0x5, 0x8, 0xd, 0x3, 0x8001, 0x440, @struct={0xaafc, 0x10000}, 0x10000, 0x0, [0x1, 0x2879de26, 0x5, 0x3a87, 0x80, 0x2]}, {0x1, @usage=0xffffffffffffff00, r12, 0x5, 0x5cc6, 0x8, 0x0, 0x2, 0x41, @usage=0x9, 0xfff, 0x2, [0x1, 0x10001, 0xb800000000000000, 0x90, 0xbae7, 0x5]}, {0x3ff, 0x400, 0x6}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r13, &(0x7f0000004b40)={&(0x7f0000004a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004b00)={&(0x7f0000004a80)={0x5c, r9, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x5c}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000005000)={r7, 0x20, &(0x7f0000004fc0)={&(0x7f0000004e40)=""/221, 0xdd, 0x0, &(0x7f0000004f40)=""/78, 0x4e}}, 0x10) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005040)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3f, '\x00', r6, r8, 0x2, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000005140)={0xb, 0x1b, &(0x7f0000004b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe75f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@alu={0x7, 0x1, 0x9, 0x9, 0x7, 0x4, 0x4}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x1c, 0x0, 0x8, 0x50, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004c80)='syzkaller\x00', 0x2, 0xfb, &(0x7f0000004cc0)=""/251, 0x41100, 0x28, '\x00', r6, @fallback=0x34, r8, 0x8, &(0x7f0000004dc0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000004e00)={0x2, 0xc, 0x3, 0xfffffe01}, 0x10, r14, r8, 0x2, &(0x7f00000050c0)=[r15, r7, r7, r7, r8, r8, r7, r8, r8], &(0x7f0000005100)=[{0x3, 0x4, 0x10, 0x6}, {0x4, 0x4, 0xb, 0x9}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005400)={r8, 0x0, 0xbc, 0xad, &(0x7f0000005200)="bf17b3663a395a5d3cb58b0262841f4375b144e1612ab405d4359c064dd5d5946524ae17cad5c4cf394715c245a526c57262a0c645282e1f75f066b90555576049f50b0d690feb75772a9bf376121944b838b3172d89fde8546ccd178eed7e8a14b6f4e056efb28793cacb94beb1f1d17f1740ff4211ecdd6de413fd2e686e48629ac762e68a52c416f2f6bad54d4a2a267aa54fa8b0b9f50967637266e9dff13b1782e42a2f0cf60fff2798557333696842e08abef88b40d698bd6c", &(0x7f00000052c0)=""/173, 0x4, 0x0, 0xc, 0x2e, &(0x7f0000005380)="8b3e0e239490c0a03c84f7ce", &(0x7f00000053c0)="6705b0550f08afbb1fd7e0c7e18d45a51b1db2c1e9dde97c67049b0ae692216b19986a285f4a95cd0f95778b0eb3", 0x9, 0x0, 0xd95}, 0x50) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000005580)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005540)={&(0x7f00000054c0)={0x80, r2, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "a305c4a5d1181f30"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "40f07a3fb80af710bb1409adab"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8014b732f2"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "75235110f5"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) 252.758673ms ago: executing program 4 (id=3403): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040000, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, 0x0}, 0x20008060) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0xd02, 0x0, 0x0, {0x7, 0x0, 0x5}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150920100000000", @ANYRES32=r1, @ANYRES8=r0], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe6, 0x8}, {0x9, 0x10}, {0xe, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 225.484247ms ago: executing program 3 (id=3404): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="00022a009e0201000800cb57", @ANYRES32=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 151.666739ms ago: executing program 1 (id=3405): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400000a90367bb3dba7bea8a4600000000001c00128019000100626f6e64000000000c00028008000a00ddffffff5d5e56ee"], 0x3c}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x89fb, &(0x7f0000000040)={'bond0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) r3 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bind$nfc_llcp(r3, 0xfffffffffffffffe, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f00000001c0)='%\x00', 0x8480, &(0x7f0000000200)={@_ha_fsid={[0xfffffffd, 0x30000]}, {0xfffc, 0x9a4, 0x5, 0x7fff}}, 0xe, &(0x7f0000000280), &(0x7f00000002c0)=0x4}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x8, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xe, 0xfff1}, {0xffff, 0x9}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x15, 0x8}}]}, 0x2c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x22, 0x36, &(0x7f0000000000)="378303076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r8) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xfffffefe, 0xffffff00]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 149.486765ms ago: executing program 5 (id=3406): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980), 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) 128.952903ms ago: executing program 3 (id=3407): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYRESDEC], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x70, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = accept4(r3, 0x0, 0x0, 0x180000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x5e25c000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x5e25c000) close(0x4) (async) close(0x4) sendto$inet(r4, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r4, 0x0, 0x0, 0x800) (async) accept4$tipc(r4, 0x0, 0x0, 0x800) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0x1, 0x0, 0x3, {0x3}}, 0x14}}, 0x4090) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x26) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000140)={@empty, @initdev, 0x0}, &(0x7f0000000180)=0xc) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000640)={r4, &(0x7f00000001c0)='\xfe.\x96+!\x00', 0x40082, &(0x7f0000000200)={@align=0x86f3, {0x7, 0x3, 0x600, 0xb42a}}, 0x101, &(0x7f00000005c0), &(0x7f0000000600)=0x3}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000640)={r4, &(0x7f00000001c0)='\xfe.\x96+!\x00', 0x40082, &(0x7f0000000200)={@align=0x86f3, {0x7, 0x3, 0x600, 0xb42a}}, 0x101, &(0x7f00000005c0), &(0x7f0000000600)=0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1d, 0x8318cf6, 0xffffffff, 0x80, 0x40001, r7, 0x8000, '\x00', r8, r9, 0x4, 0x1, 0x3}, 0x50) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x194, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6d}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x174, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x8c, 0x2, "9b0029a39444341ec4f7c7a10d324c2e7d9746a96dfe778f97ea943969beca891b46517529a5e2e5322890629abb69154051c412fdce149d52215277a314e105272f02e72d7079dfb5c2a057b2d05a8626ffd7306c46d313da53cf36dc981e742dd90a8a75713052c85069e905692efe8e59f2bda55e449230187581a4289b92251b6544baec14dc"}}, {0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x2c, 0x1, "a88e43a1d6d30ca4949267985f1e50037dbeb94acc6f8aa17663e73a9193a415a9df3183577b40b9"}}, {0xb0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa9, 0x1, "34f889def0204163ad9bdc0a5122c86940eef4dc9533ab17673b2c8d9fa70ef38e60ad269fff42c16390e4b7fa21ccaeda52afe8f78a74e27023ac286b47b5bef0b2726a85307b76dc3d1ecfbdcda339dc9f0e7e7f5ccd5aa72b82e182ff4dd7f29580f45685d846af18ca9a68df1e43fc6d6404633aa495595ec009a951b45fd03b90b726b04ec580315f156475f3d32238f3a7de72bae715b3c269259b73c3eaa4dd941d"}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000081c}, 0x200080c4) ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f0000000740)="0ca583a8e682e97a5ed8f6859c0b55f013d84ce8c34bd651e3bb3a7cbac311a506a6177047c851ebc6fe030f0aa47ec1cee885361a6b7f4a485c9b4f0e6794b0fc483f447d57d29b7c013e680ee92aee799feaa30e8c017b19ba52ce") 79.326662ms ago: executing program 0 (id=3408): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfb9, &(0x7f0000001c00)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfab, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf97, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfff8}, [@CTA_LABELS_MASK={0x20, 0x17, [0x9, 0x1, 0xc, 0x10, 0x4, 0x8000, 0x5]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8df6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) recvmmsg(r2, &(0x7f0000000200)=[{{&(0x7f0000000240)=@l2, 0x80, 0x0}, 0x6}], 0x1, 0x102, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r4, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x7}}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xffff}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4000}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4020050}, 0x40841) 0s ago: executing program 5 (id=3409): sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c003f80110001"], 0x7c}}, 0x800) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_emit_ethernet(0x9a, &(0x7f0000002340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {0x0, 0x0, 0x44, 0x0, @wg=@response={0x3a, 0x0, 0x0, "82f63de6653e630000674ab1080000240000005100", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040600"}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): (UME) 2863*8kB (UM) 1581*16kB (UM) 251*32kB (UME) 25*64kB (U) 94*128kB (UME) 171*256kB (UME) 123*512kB (UME) 85*1024kB (UM) 50*2048kB (UM) 235*4096kB (UM) = 1342672kB [ 265.252181][T12737] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 265.269751][T12765] xt_policy: output policy not valid in PREROUTING and INPUT [ 265.301103][T12737] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 12*16kB (UME) 14*32kB (UME) 6*64kB (UME) 6*128kB (UME) 4*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 960*4096kB (M) = 3942684kB [ 265.319610][T12737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.335658][T12763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.336739][T12737] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.373078][T12737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.387620][T12737] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.398279][T12763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.409840][T12737] 44054 total pagecache pages [ 265.415126][T12737] 0 pages in swap cache [ 265.419570][T12737] Free swap = 124996kB [ 265.428137][T12737] Total swap = 124996kB [ 265.444470][T12737] 2097051 pages RAM [ 265.448314][T12737] 0 pages HighMem/MovableOnly [ 265.475308][T12737] 427002 pages reserved [ 265.485420][T12737] 0 pages cma reserved [ 265.567591][T12768] syzkaller0: entered promiscuous mode [ 265.573209][T12768] syzkaller0: entered allmulticast mode [ 265.618009][T12763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.630412][T12763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.721995][T12791] openvswitch: netlink: Flow actions attr not present in new flow. [ 265.835320][T12801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1909'. [ 265.965713][T12807] netlink: 'syz.2.1910': attribute type 1 has an invalid length. [ 267.129126][T12763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.142660][T12763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.165329][T12807] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 267.214381][T12814] IPVS: ip_vs_add_dest(): server weight less than zero [ 267.230298][ T796] IPVS: starting estimator thread 0... [ 267.231010][T12818] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 267.272755][T12763] batman_adv: batadv0: Removing interface: netdevsim0 [ 267.297208][T12763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.331017][T12816] IPVS: using max 36 ests per chain, 86400 per kthread [ 267.347448][T12763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.407529][T12820] netlink: 'syz.0.1913': attribute type 1 has an invalid length. [ 267.474958][T12820] bond4: entered promiscuous mode [ 267.484495][T12820] bond4: entered allmulticast mode [ 267.490849][T12820] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.501081][T12833] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 267.574414][T12833] bond5: entered promiscuous mode [ 267.582745][T12833] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.648511][T12836] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.667455][T12845] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 267.683327][T12845] bond5: (slave macvlan2): Enslaving as an active interface with a down link [ 267.822233][T12856] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 267.849546][T12856] bond6 (unregistering): Released all slaves [ 267.893588][T12845] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:689c:5aff:fe9f:738f error=-28 [ 267.914110][ T64] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.935733][ T64] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.979386][ T64] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.004488][ T64] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.062089][ T64] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.077509][ T64] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.078303][T12870] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 268.098349][T12873] netlink: 'syz.2.1927': attribute type 1 has an invalid length. [ 268.121023][ T64] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.168529][ T64] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.426869][T12870] bond4: (slave bridge5): making interface the new active one [ 268.468325][T12870] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 268.558994][T12884] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 268.587839][T12845] infiniband syz0: set down [ 268.610560][T12845] infiniband syz0: added bond0 [ 268.628397][T12845] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 268.634367][T12845] infiniband syz0: Couldn't open port 1 [ 268.778722][T12845] RDS/IB: syz0: added [ 268.794034][T12845] smc: adding ib device syz0 with port count 1 [ 268.810846][T12845] smc: ib device syz0 port 1 has no pnetid [ 268.844325][T12919] IPVS: rr: FWM 3 0x00000003 - no destination available [ 269.028389][T12933] lo: Caught tx_queue_len zero misconfig [ 269.073640][T12933] netlink: 'syz.0.1938': attribute type 126 has an invalid length. [ 269.171745][T12937] __nla_validate_parse: 4 callbacks suppressed [ 269.171762][T12937] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1940'. [ 269.505460][T12961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1948'. [ 269.746568][T12976] s5ÿÿø: renamed from vlan1 (while UP) [ 270.055194][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 270.084549][T12991] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1954'. [ 270.111189][T12991] netlink: 'syz.1.1954': attribute type 5 has an invalid length. [ 270.166520][T12998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1957'. [ 270.339821][T13013] netlink: 'syz.0.1962': attribute type 16 has an invalid length. [ 270.384894][T13013] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1962'. [ 270.820523][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1971'. [ 271.015287][T13052] tipc: Can't bind to reserved service type 1 [ 271.252560][T13064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1976'. [ 271.371375][T13076] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1978'. [ 271.385273][T13072] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1980'. [ 271.394333][T13077] xt_hashlimit: size too large, truncated to 1048576 [ 271.627091][T13093] netlink: 'syz.3.1983': attribute type 1 has an invalid length. [ 271.654235][T13091] geneve0: entered promiscuous mode [ 271.696625][T13091] bond8: entered promiscuous mode [ 271.702607][T13091] bond8: entered allmulticast mode [ 271.708151][T13091] 8021q: adding VLAN 0 to HW filter on device bond8 [ 271.733586][T13093] bond6: entered promiscuous mode [ 271.739069][T13093] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.765974][T13089] geneve0: left promiscuous mode [ 271.779790][T13093] netlink: 'syz.3.1983': attribute type 83 has an invalid length. [ 272.418053][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.649256][T13158] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 272.672714][T13158] netlink: 'syz.4.2001': attribute type 2 has an invalid length. [ 272.701376][T13158] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 272.970360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.979053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.982179][T13189] netlink: 'syz.4.2010': attribute type 3 has an invalid length. [ 272.987452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.010595][T13189] netlink: 'syz.4.2010': attribute type 2 has an invalid length. [ 273.568417][T13232] Cannot find add_set index 4 as target [ 273.604983][T13211] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 273.652410][T13211] bond5 (unregistering): Released all slaves [ 273.690726][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.700722][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.709532][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.075218][T13264] x_tables: duplicate underflow at hook 1 [ 274.216488][T13267] validate_nla: 1 callbacks suppressed [ 274.216506][T13267] netlink: 'syz.4.2031': attribute type 33 has an invalid length. [ 274.235517][T13267] __nla_validate_parse: 14 callbacks suppressed [ 274.235536][T13267] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2031'. [ 274.435465][T13269] netlink: 'syz.4.2032': attribute type 13 has an invalid length. [ 274.449766][T13271] syzkaller0: entered promiscuous mode [ 274.453989][T13269] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2032'. [ 274.467695][T13271] syzkaller0: entered allmulticast mode [ 274.695218][T13279] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2035'. [ 274.704559][T13279] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2035'. [ 274.852491][T13285] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 274.880473][T13287] netlink: 'syz.3.2038': attribute type 11 has an invalid length. [ 275.118680][T13297] syzkaller0: entered promiscuous mode [ 275.125002][T13297] syzkaller0: entered allmulticast mode [ 275.149019][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2040'. [ 275.203246][T13303] syzkaller0: entered promiscuous mode [ 275.208761][T13303] syzkaller0: entered allmulticast mode [ 275.595834][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 275.624054][T13308] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2043'. [ 275.684609][T13315] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2043'. [ 276.653793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.662107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.670442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.678716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.998433][T13308] bridge0: port 3(team0) entered disabled state [ 277.005058][T13308] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.012335][T13308] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.062041][T13315] bridge0: port 3(team0) entered blocking state [ 277.068465][T13315] bridge0: port 3(team0) entered forwarding state [ 277.075303][T13315] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.082489][T13315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.090000][T13315] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.097152][T13315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.116122][T13315] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2043'. [ 277.127765][T13315] bridge0: port 3(team0) entered disabled state [ 277.134342][T13315] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.141610][T13315] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.185433][T13323] syzkaller0: entered promiscuous mode [ 277.204252][T13323] syzkaller0: entered allmulticast mode [ 277.556816][T13349] netlink: 'syz.3.2056': attribute type 17 has an invalid length. [ 277.574953][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 277.601422][T13349] gretap0: entered promiscuous mode [ 277.631937][T13349] gretap0: left promiscuous mode [ 277.821573][T13362] tipc: New replicast peer: 255.255.255.255 [ 277.841563][T13362] tipc: Enabled bearer , priority 10 [ 278.006819][T13360] netlink: 'syz.2.2058': attribute type 30 has an invalid length. [ 278.060615][T13360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.258867][T13390] netlink: 'syz.0.2062': attribute type 9 has an invalid length. [ 278.290215][T13390] netlink: 'syz.0.2062': attribute type 6 has an invalid length. [ 278.524807][T13398] netlink: 'syz.2.2064': attribute type 5 has an invalid length. [ 278.915263][T13442] netlink: 'syz.3.2071': attribute type 12 has an invalid length. [ 278.960801][ T5967] tipc: Node number set to 196665076 [ 279.388784][T13471] __nla_validate_parse: 3 callbacks suppressed [ 279.388800][T13471] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2079'. [ 279.437838][T13469] netlink: 'syz.1.2078': attribute type 1 has an invalid length. [ 279.454573][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.463531][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.476134][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.492054][T13476] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2078'. [ 279.547212][T13483] netlink: 'syz.1.2078': attribute type 1 has an invalid length. [ 279.547697][T13469] 8021q: adding VLAN 0 to HW filter on device bond9 [ 279.594445][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 279.837843][T13497] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2085'. [ 280.064332][T13485] º: left allmulticast mode [ 280.135149][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 280.149766][T13510] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2088'. [ 280.183955][ T1156] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.200415][ T1156] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 36548 - 0 [ 280.209445][ T1156] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.218925][ T1156] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 36548 - 0 [ 280.358898][ T1156] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.406972][ T1156] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 36548 - 0 [ 280.417662][ T1156] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.438050][ T1156] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 36548 - 0 [ 280.465915][T13524] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 280.493021][T13531] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2093'. [ 280.650212][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.658590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.707402][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'. [ 280.750298][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2098'. [ 281.075929][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2102'. [ 281.139757][T13580] netlink: 'syz.4.2106': attribute type 39 has an invalid length. [ 281.157210][T13571] openvswitch: netlink: Flow actions attr not present in new flow. [ 281.165927][T13571] openvswitch: netlink: Flow actions attr not present in new flow. [ 281.174272][T13571] openvswitch: netlink: Flow actions attr not present in new flow. [ 281.202859][T13576] 8021q: adding VLAN 0 to HW filter on device bond7 [ 281.220633][T13576] netlink: 'syz.3.2105': attribute type 1 has an invalid length. [ 281.614669][ T5837] Bluetooth: hci4: link tx timeout [ 281.622476][ T5837] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 282.590694][T13672] netlink: 'syz.0.2125': attribute type 1 has an invalid length. [ 282.710527][T13678] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.722718][T13678] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.733297][T13678] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 282.746358][T13678] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 282.820896][T13678] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.830941][T13678] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.840985][T13678] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 282.878856][T13678] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 282.929130][T13678] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.939268][T13678] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.949947][T13678] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 282.960949][T13678] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 283.034983][T13678] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.045228][T13678] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.076987][T13678] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 283.100687][T13678] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 283.248090][ T35] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.258682][ T35] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.274015][ T35] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 283.290597][T13694] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 283.300499][ T35] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 283.399928][T13702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.423359][ T35] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.443221][ T35] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.453447][ T35] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 283.462371][ T35] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 283.550855][ T35] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.559074][ T35] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.580755][ T35] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 283.589152][ T35] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 283.599453][ T35] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.607888][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.616855][ T35] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 283.625510][ T35] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 283.699908][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 283.850170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.873807][T13725] netlink: 'syz.3.2142': attribute type 29 has an invalid length. [ 283.918138][T13725] netlink: 'syz.3.2142': attribute type 29 has an invalid length. [ 284.084376][T13738] netlink: 'syz.3.2145': attribute type 1 has an invalid length. [ 284.181021][T13739] bond10 (unregistering): Released all slaves [ 284.736324][T13775] __nla_validate_parse: 14 callbacks suppressed [ 284.736345][T13775] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2150'. [ 284.981454][T13779] tipc: Enabled bearer , priority 0 [ 285.085589][T13779] syzkaller0: entered promiscuous mode [ 285.156213][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2153'. [ 285.172872][T13779] syzkaller0: entered allmulticast mode [ 285.193964][T13779] tipc: Resetting bearer [ 285.220877][ T290] net_ratelimit: 3 callbacks suppressed [ 285.220894][ T290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.237948][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.247810][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.334724][T13806] netlink: 'syz.3.2158': attribute type 39 has an invalid length. [ 285.450837][T13777] tipc: Resetting bearer [ 285.569686][T13823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2161'. [ 285.631099][T13831] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.2161'. [ 285.666335][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 285.683488][T13831] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 285.707852][T13831] netlink: 212312 bytes leftover after parsing attributes in process `syz.3.2161'. [ 287.140692][T13777] tipc: Disabling bearer [ 287.152853][ T796] tipc: Node number set to 2892623388 [ 287.324278][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'. [ 287.361760][T13881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'. [ 287.575028][T13895] netlink: 'syz.0.2171': attribute type 1 has an invalid length. [ 287.742369][T13905] netlink: 'syz.1.2173': attribute type 4 has an invalid length. [ 287.962395][T13921] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 288.014829][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2177'. [ 288.035190][T13929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.045674][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2177'. [ 288.265324][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.327519][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.351189][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.471196][T13943] netlink: 'syz.2.2182': attribute type 1 has an invalid length. [ 288.473402][T13950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.512835][T13962] netlink: 'syz.0.2187': attribute type 5 has an invalid length. [ 288.736545][T13973] netlink: 'syz.0.2191': attribute type 7 has an invalid length. [ 288.765627][T13973] netlink: 'syz.0.2191': attribute type 8 has an invalid length. [ 288.782522][T13979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.796814][T13978] x_tables: duplicate entry at hook 3 [ 289.588296][T13993] xt_hashlimit: max too large, truncated to 1048576 [ 289.781726][T14008] __nla_validate_parse: 8 callbacks suppressed [ 289.781745][T14008] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2199'. [ 289.843223][T14008] ip6gre1: entered promiscuous mode [ 289.848477][T14008] ip6gre1: entered allmulticast mode [ 289.909826][T14008] netlink: 'syz.1.2199': attribute type 4 has an invalid length. [ 290.652473][T14050] syzkaller0: entered promiscuous mode [ 290.657997][T14050] syzkaller0: entered allmulticast mode [ 290.700489][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2207'. [ 290.952097][T14075] ªªªªª9oïß+Œü4€: renamed from lo [ 290.971738][ T290] net_ratelimit: 7 callbacks suppressed [ 290.971757][ T290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.991383][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.012406][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.152046][T14088] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 291.256100][T14087] xt_CT: No such helper "snmp_trap" [ 291.278614][T14089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2217'. [ 291.357026][T14099] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 291.614745][T14094] bond5: (slave ip6gretap1): making interface the new active one [ 291.630144][T14094] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.666149][T14094] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.684976][T14094] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 291.858922][T14131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2225'. [ 292.072167][T14149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2229'. [ 292.085574][T14147] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2230'. [ 292.148648][T14161] openvswitch: netlink: IP tunnel dst address not specified [ 292.190680][T14161] tunl0: Caught tx_queue_len zero misconfig [ 292.211188][T14161] Bluetooth: MGMT ver 1.23 [ 292.316406][T14167] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2233'. [ 292.554900][T14182] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2237'. [ 293.027189][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'. [ 293.061578][T14209] 8021q: VLANs not supported on gre0 [ 293.261733][T14216] bond10: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 293.304979][T14216] bond10 (unregistering): Released all slaves [ 293.354066][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 293.609071][T14249] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 293.643197][T14250] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 293.685253][T14263] xt_TPROXY: Can be used only with -p tcp or -p udp [ 293.719008][T14258] netlink: 'syz.1.2251': attribute type 1 has an invalid length. [ 293.761395][T14249] syzkaller0: entered promiscuous mode [ 293.770189][T14249] syzkaller0: entered allmulticast mode [ 293.792477][T14258] netlink: 'syz.1.2251': attribute type 1 has an invalid length. [ 293.806048][T14249] tipc: Enabled bearer , priority 0 [ 293.859620][T14248] tipc: Resetting bearer [ 293.917438][T14248] tipc: Disabling bearer [ 294.595270][T14326] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig [ 294.633787][T14326] syzkaller0: entered promiscuous mode [ 294.639298][T14326] syzkaller0: entered allmulticast mode [ 294.683424][T14326] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 294.730167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.738549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.746934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.755293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.180894][T14371] sctp: [Deprecated]: syz.4.2280 (pid 14371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.180894][T14371] Use struct sctp_sack_info instead [ 295.190975][T14372] __nla_validate_parse: 1 callbacks suppressed [ 295.190992][T14372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2282'. [ 295.218289][T14372] bond0: Caught tx_queue_len zero misconfig [ 295.228671][T14372] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2282'. [ 295.332142][T14385] bond5: option mode: unable to set because the bond device has slaves [ 295.387323][T14385] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 295.400110][T14385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.474774][T14380] openvswitch: netlink: Invalid VLAN frame [ 295.512292][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2284'. [ 295.573511][T14399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2288'. [ 296.032683][T14440] netlink: 'syz.4.2300': attribute type 1 has an invalid length. [ 296.063161][T14440] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2300'. [ 296.091037][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.101041][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.111864][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.124466][T14451] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2300'. [ 296.175224][T14444] netlink: 'syz.4.2300': attribute type 1 has an invalid length. [ 296.206252][T14457] sock: sock_set_timeout: `syz.3.2302' (pid 14457) tries to set negative timeout [ 296.270126][T14444] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2300'. [ 296.421935][T14465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.464403][T14472] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2305'. [ 296.571998][T14478] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2309'. [ 296.590504][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2308'. [ 296.609366][T14481] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 296.731008][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 296.744027][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.790011][T14483] : entered promiscuous mode [ 297.164983][T14526] sysfs: cannot create duplicate filename '/class/ieee80211/KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' [ 297.210192][T14526] CPU: 1 UID: 0 PID: 14526 Comm: syz.4.2319 Not tainted syzkaller #0 PREEMPT(full) [ 297.210221][T14526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.210234][T14526] Call Trace: [ 297.210242][T14526] [ 297.210251][T14526] dump_stack_lvl+0xe8/0x150 [ 297.210285][T14526] sysfs_warn_dup+0x8e/0xa0 [ 297.210312][T14526] sysfs_do_create_link_sd+0xc0/0x110 [ 297.210342][T14526] device_add_class_symlinks+0x1cf/0x240 [ 297.210377][T14526] device_add+0x475/0xb70 [ 297.210410][T14526] wiphy_register+0x1d73/0x2d50 [ 297.210454][T14526] ? __pfx_wiphy_register+0x10/0x10 [ 297.210479][T14526] ? __pfx_netdev_run_todo+0x10/0x10 [ 297.210510][T14526] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 297.210538][T14526] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 297.210569][T14526] ieee80211_register_hw+0x3571/0x4220 [ 297.210599][T14526] ? ieee80211_register_hw+0x1441/0x4220 [ 297.210629][T14526] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 297.210668][T14526] ? __hrtimer_setup+0x181/0x200 [ 297.210694][T14526] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 297.210720][T14526] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 297.210782][T14526] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 297.210807][T14526] ? kstrndup+0xbf/0x160 [ 297.210841][T14526] hwsim_new_radio_nl+0xf35/0x1bd0 [ 297.210895][T14526] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 297.210935][T14526] ? rcu_is_watching+0x15/0xb0 [ 297.210963][T14526] ? trace_kmalloc+0x2a/0x110 [ 297.210989][T14526] ? __nla_parse+0x40/0x60 [ 297.211018][T14526] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 297.211064][T14526] genl_family_rcv_msg_doit+0x22a/0x330 [ 297.211102][T14526] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 297.211145][T14526] ? bpf_lsm_capable+0x9/0x20 [ 297.211170][T14526] ? security_capable+0x7e/0x2c0 [ 297.211198][T14526] genl_rcv_msg+0x61c/0x7a0 [ 297.211233][T14526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.211261][T14526] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 297.211291][T14526] ? __lock_acquire+0x6b5/0x2cf0 [ 297.211328][T14526] netlink_rcv_skb+0x232/0x4b0 [ 297.211352][T14526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.211382][T14526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.211424][T14526] ? down_read+0x272/0x2e0 [ 297.211442][T14526] ? genl_rcv+0xd/0x40 [ 297.211471][T14526] genl_rcv+0x28/0x40 [ 297.211496][T14526] netlink_unicast+0x80f/0x9b0 [ 297.211526][T14526] ? __pfx_netlink_unicast+0x10/0x10 [ 297.211544][T14526] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 297.211566][T14526] ? netlink_sendmsg+0x650/0xb40 [ 297.211587][T14526] ? skb_put+0x11b/0x210 [ 297.211617][T14526] netlink_sendmsg+0x813/0xb40 [ 297.211651][T14526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.211678][T14526] ? aa_sock_msg_perm+0xf1/0x1b0 [ 297.211702][T14526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.211725][T14526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.211747][T14526] ____sys_sendmsg+0xa68/0xad0 [ 297.211773][T14526] ? futex_unqueue+0x211/0x240 [ 297.211804][T14526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.211842][T14526] ? import_iovec+0x73/0xa0 [ 297.211872][T14526] ___sys_sendmsg+0x2a5/0x360 [ 297.211907][T14526] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.211942][T14526] ? futex_wait+0x29a/0x380 [ 297.211999][T14526] ? __fget_files+0x2a/0x420 [ 297.212024][T14526] ? __fget_files+0x3a0/0x420 [ 297.212068][T14526] __x64_sys_sendmsg+0x1bd/0x2a0 [ 297.212100][T14526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.212137][T14526] ? rcu_is_watching+0x15/0xb0 [ 297.212177][T14526] do_syscall_64+0x14d/0xf80 [ 297.212204][T14526] ? trace_irq_disable+0x3b/0x150 [ 297.212232][T14526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.212251][T14526] ? clear_bhb_loop+0x40/0x90 [ 297.212275][T14526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.212294][T14526] RIP: 0033:0x7f3fcc59c629 [ 297.212313][T14526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.212330][T14526] RSP: 002b:00007f3fcd3ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.212352][T14526] RAX: ffffffffffffffda RBX: 00007f3fcc815fa0 RCX: 00007f3fcc59c629 [ 297.212366][T14526] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 297.212379][T14526] RBP: 00007f3fcc632b39 R08: 0000000000000000 R09: 0000000000000000 [ 297.212391][T14526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.212403][T14526] R13: 00007f3fcc816038 R14: 00007f3fcc815fa0 R15: 00007ffdff4fac68 [ 297.212436][T14526] [ 297.932769][T14559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.941724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.072678][T14564] syzkaller0: entered promiscuous mode [ 298.078233][T14564] syzkaller0: entered allmulticast mode [ 298.273270][T14576] tipc: Enabling of bearer rejected, already enabled [ 298.346178][T14591] openvswitch: netlink: IP tunnel dst address not specified [ 298.426507][T14591] bond8 (unregistering): Released all slaves [ 298.457024][T14598] geneve2: entered promiscuous mode [ 298.462610][T14598] geneve2: entered allmulticast mode [ 298.552545][T14602] tun0: tun_chr_ioctl cmd 1074025675 [ 298.557893][T14602] tun0: persist disabled [ 298.835539][T14621] syzkaller0: entered allmulticast mode [ 298.855548][T14620] syzkaller0: left allmulticast mode [ 298.931632][T14627] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 298.943799][T14627] bond7 (unregistering): Released all slaves [ 298.964742][T14628] netlink: 'syz.3.2345': attribute type 1 has an invalid length. [ 299.680971][T14681] netlink: 'syz.3.2363': attribute type 1 has an invalid length. [ 299.691704][T14685] sctp: [Deprecated]: syz.0.2362 (pid 14685) Use of int in maxseg socket option. [ 299.691704][T14685] Use struct sctp_assoc_value instead [ 299.808770][T14693] sctp: [Deprecated]: syz.1.2365 (pid 14693) Use of int in maxseg socket option. [ 299.808770][T14693] Use struct sctp_assoc_value instead [ 300.287901][T14733] __nla_validate_parse: 8 callbacks suppressed [ 300.287920][T14733] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2377'. [ 300.411816][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 300.535090][ T29] audit: type=1804 audit(1771780624.236:2): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2382" name="/newroot/459/cgroup.controllers" dev="tmpfs" ino=2353 res=1 errno=0 [ 300.639191][ T29] audit: type=1800 audit(1771780624.246:3): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2382" name="cgroup.controllers" dev="tmpfs" ino=2353 res=0 errno=0 [ 300.687535][T14763] wg1: entered promiscuous mode [ 300.697457][T14763] wg1: entered allmulticast mode [ 301.132391][T14794] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2392'. [ 301.161130][T14794] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2392'. [ 301.193635][T14794] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2392'. [ 301.212450][ T1156] net_ratelimit: 7 callbacks suppressed [ 301.212468][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.227123][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.238045][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.255034][T14798] netlink: 'syz.3.2394': attribute type 25 has an invalid length. [ 301.291150][T14798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2394'. [ 301.337080][T14798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.381343][T14798] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2394'. [ 301.764445][T14817] syzkaller0: entered promiscuous mode [ 301.771769][T14817] syzkaller0: entered allmulticast mode [ 301.870398][T14830] netlink: 'syz.2.2401': attribute type 33 has an invalid length. [ 301.878245][T14830] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2401'. [ 301.921543][T14832] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2401'. [ 303.354406][T14835] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 303.717730][T14879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.932709][T14890] netlink: 'syz.0.2412': attribute type 1 has an invalid length. [ 303.942990][T14890] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2412'. [ 304.973847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.982337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.990695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.998937][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.151234][T14899] netlink: 'syz.1.2414': attribute type 11 has an invalid length. [ 305.335620][T14910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2417'. [ 305.511024][T14917] tc_dump_action: action bad kind [ 305.636557][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2423'. [ 305.826619][T14946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2428'. [ 305.954596][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2428'. [ 305.964981][T14947] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.972256][T14947] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.021997][T14952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2429'. [ 306.038614][T14954] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2430'. [ 306.071760][T14956] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2431'. [ 306.087872][T14956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2431'. [ 306.099289][T14956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2431'. [ 306.111132][T14956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.119841][T14956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.559677][T14975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.569040][T14975] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.585977][T14975] net_ratelimit: 1 callbacks suppressed [ 306.585995][T14975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.843067][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2442'. [ 306.971336][ T3022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.985301][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.995437][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.185110][T15080] team_slave_1: Caught tx_queue_len zero misconfig [ 308.203696][T15080] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 308.318569][T15092] netlink: 'syz.0.2466': attribute type 1 has an invalid length. [ 308.335089][T15092] netlink: 'syz.0.2466': attribute type 1 has an invalid length. [ 308.399303][T15092] 8021q: adding VLAN 0 to HW filter on device bond5 [ 308.503365][T15098] geneve4: entered promiscuous mode [ 308.527010][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 54270 - 0 [ 308.546275][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 54270 - 0 [ 308.562219][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 54270 - 0 [ 308.580119][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 54270 - 0 [ 308.650333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.658711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.073704][T15108] syzkaller0: entered promiscuous mode [ 309.079338][T15108] syzkaller0: entered allmulticast mode [ 310.476370][T15128] syzkaller0: entered promiscuous mode [ 310.481564][T15126] __nla_validate_parse: 8 callbacks suppressed [ 310.481582][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2476'. [ 310.482076][T15128] syzkaller0: entered allmulticast mode [ 310.488045][T15126] netlink: 'syz.3.2476': attribute type 13 has an invalid length. [ 310.511144][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2476'. [ 310.602841][T15143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2478'. [ 310.819814][T15159] Bluetooth: MGMT ver 1.23 [ 310.835913][T15154] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 310.853189][T15154] bond6 (unregistering): Released all slaves [ 310.884256][T15159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.011089][T15171] netlink: 'syz.1.2489': attribute type 4 has an invalid length. [ 311.025382][T15171] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2489'. [ 311.036825][T15168] bond6 (unregistering): Released all slaves [ 311.066379][T15177] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2489'. [ 311.103139][T15171] delete_channel: no stack [ 311.234524][T15191] x_tables: duplicate underflow at hook 1 [ 311.240151][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2493'. [ 311.265615][T15194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2495'. [ 311.405738][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'. [ 311.632424][T15214] syzkaller0: entered promiscuous mode [ 311.648242][T15214] syzkaller0: entered allmulticast mode [ 311.659932][T15221] netlink: 'syz.0.2501': attribute type 3 has an invalid length. [ 311.722127][T15214] tipc: Enabled bearer , priority 0 [ 311.733378][T15211] tipc: Resetting bearer [ 311.766320][T15211] tipc: Disabling bearer [ 311.977713][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2508'. [ 312.002382][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2508'. [ 312.237160][T15250] dvmrp0: entered allmulticast mode [ 312.276803][T15253] netlink: 'syz.1.2511': attribute type 29 has an invalid length. [ 312.296638][T15254] netlink: 'syz.1.2511': attribute type 29 has an invalid length. [ 312.308384][T15206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 312.318961][T15206] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 312.426695][T15206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 312.467123][T15206] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 312.539924][T15206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 312.561302][T15206] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 312.605600][T15206] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 312.627023][T15206] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 312.650218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.658610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.765269][T15342] batadv_slave_1: entered promiscuous mode [ 313.779546][T15342] sch_fq: defrate 0 ignored. [ 313.865353][T15347] 8021q: adding VLAN 0 to HW filter on device bond10 [ 313.874081][T15341] batadv_slave_1: left promiscuous mode [ 313.931903][T15350] nbd: couldn't find a device at index 0 [ 314.533076][T15389] syzkaller0: entered promiscuous mode [ 314.547388][T15389] syzkaller0: entered allmulticast mode [ 314.564714][T15403] veth0_to_team: Caught tx_queue_len zero misconfig [ 315.780211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.788817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.797149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.144280][T15416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.261488][T15436] netlink: 'syz.3.2551': attribute type 16 has an invalid length. [ 316.310164][T15436] __nla_validate_parse: 6 callbacks suppressed [ 316.310180][T15436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2551'. [ 316.310216][T15437] netlink: 'syz.3.2551': attribute type 16 has an invalid length. [ 316.356096][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2553'. [ 316.371677][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2553'. [ 316.380847][T15442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.381015][T15442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.381052][T15442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.407821][T15437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2551'. [ 316.484251][T15440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2553'. [ 316.563900][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2556'. [ 316.575508][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.639617][T15464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2557'. [ 316.667652][T15464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2557'. [ 316.750855][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2558'. [ 316.794349][T15471] netlink: 'syz.2.2561': attribute type 11 has an invalid length. [ 316.802805][T15471] netlink: 'syz.2.2561': attribute type 4 has an invalid length. [ 316.825182][T15471] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.2561'. [ 317.025343][T15488] netlink: 'syz.2.2563': attribute type 1 has an invalid length. [ 317.036639][T15488] netlink: 'syz.2.2563': attribute type 7 has an invalid length. [ 317.052060][T15488] netlink: 'syz.2.2563': attribute type 8 has an invalid length. [ 317.066713][T15488] NCSI netlink: No device for ifindex 65584 [ 317.237278][T15507] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 317.364888][T15507] bond6: entered promiscuous mode [ 317.384271][T15507] 8021q: adding VLAN 0 to HW filter on device bond6 [ 317.459056][T15508] bond6: (slave bridge7): making interface the new active one [ 317.469320][T15508] bridge7: entered promiscuous mode [ 317.495138][T15508] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 317.587666][T15539] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 317.737151][T15546] netlink: 'syz.3.2573': attribute type 13 has an invalid length. [ 318.103158][T15553] net_ratelimit: 3 callbacks suppressed [ 318.103177][T15553] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 318.179159][T15570] veth0: entered promiscuous mode [ 318.207786][T15570] veth0: left promiscuous mode [ 318.232798][T15574] netlink: 'syz.0.2579': attribute type 4 has an invalid length. [ 318.270097][T15571] syzkaller0: Caught tx_queue_len zero misconfig [ 318.531187][T15593] syzkaller0: entered promiscuous mode [ 318.550318][T15593] syzkaller0: entered allmulticast mode [ 319.942387][T15682] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 319.965153][T15686] openvswitch: netlink: Invalid VLAN frame [ 320.037155][T15682] syzkaller0: entered promiscuous mode [ 320.059459][T15682] syzkaller0: entered allmulticast mode [ 320.141969][T15700] netlink: 'syz.4.2614': attribute type 2 has an invalid length. [ 320.339346][T15720] openvswitch: netlink: Flow key attr not present in new flow. [ 320.716516][T15732] bond7: entered promiscuous mode [ 320.721774][T15732] bond7: entered allmulticast mode [ 320.727459][T15732] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.827095][T15748] tipc: Enabled bearer , priority 10 [ 321.391388][T15795] validate_nla: 3 callbacks suppressed [ 321.391407][T15795] netlink: 'syz.3.2635': attribute type 29 has an invalid length. [ 321.491262][T15798] netlink: 'syz.3.2635': attribute type 29 has an invalid length. [ 321.557906][T15798] __nla_validate_parse: 11 callbacks suppressed [ 321.557926][T15798] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2635'. [ 322.251505][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'. [ 322.280231][T15841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2642'. [ 322.338762][T15841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2642'. [ 322.398938][T15848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2646'. [ 322.418860][T15835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2642'. [ 322.543002][T15850] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 322.594281][T15857] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 322.629538][T15850] bond8 (unregistering): Released all slaves [ 322.644345][T15862] netlink: 'syz.1.2650': attribute type 13 has an invalid length. [ 322.689297][T15862] netlink: 'syz.1.2650': attribute type 17 has an invalid length. [ 322.795078][T15870] xt_hashlimit: size too large, truncated to 1048576 [ 322.807812][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2654'. [ 322.830558][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2654'. [ 322.954572][T15874] siw: device registration error -23 [ 323.231820][T15903] vlan1: entered allmulticast mode [ 323.237276][T15903] veth0_vlan: entered allmulticast mode [ 323.253840][T15902] bond0: entered promiscuous mode [ 323.273281][T15902] bond_slave_0: entered promiscuous mode [ 323.294704][T15902] bond_slave_1: entered promiscuous mode [ 323.312128][T15902] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 323.312628][T15913] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2662'. [ 323.798354][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 323.814194][T15947] ip6tnl0: Caught tx_queue_len zero misconfig [ 323.851146][T15949] openvswitch: netlink: IP tunnel dst address not specified [ 324.134460][T15970] netlink: 'syz.2.2674': attribute type 13 has an invalid length. [ 324.163897][T15970] netlink: 'syz.2.2674': attribute type 17 has an invalid length. [ 324.224307][T15970] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.231548][T15970] bridge0: port 2(bridge_slave_1) entered listening state [ 324.238950][T15970] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.246148][T15970] bridge0: port 1(bridge_slave_0) entered listening state [ 324.270146][T15970] : left promiscuous mode [ 324.274843][T15970] bond_slave_0: left promiscuous mode [ 324.281385][T15970] bond_slave_1: left promiscuous mode [ 324.287853][T15970] 8021q: adding VLAN 0 to HW filter on device  [ 324.297725][T15970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.393411][T15979] bond6: Removing last ns target with arp_interval on [ 324.413189][T15988] syzkaller0: entered promiscuous mode [ 324.418731][T15988] syzkaller0: entered allmulticast mode [ 324.448783][T15991] team_slave_1: Caught tx_queue_len zero misconfig [ 325.546541][T16071] netlink: 'syz.3.2702': attribute type 22 has an invalid length. [ 325.560799][T16071] netlink: 'syz.3.2702': attribute type 22 has an invalid length. [ 325.701029][T16095] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 325.753738][T16105] IPVS: length: 144 != 24 [ 326.094150][T16129] bond0: Caught tx_queue_len zero misconfig [ 326.358396][T16143] netlink: 'syz.0.2722': attribute type 1 has an invalid length. [ 326.517424][T16151] dvmrp8: entered allmulticast mode [ 326.528444][T16163] netlink: 'syz.2.2728': attribute type 30 has an invalid length. [ 326.551071][T16156] dvmrp8: left allmulticast mode [ 326.591399][T16163] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 326.920392][T16196] __nla_validate_parse: 21 callbacks suppressed [ 326.920413][T16196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2737'. [ 326.992007][T16196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2737'. [ 327.019237][T16196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2737'. [ 327.029522][T16196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2737'. [ 327.096150][T16196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2737'. [ 327.106662][T16196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2737'. [ 327.118641][T16196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2737'. [ 327.129110][T16196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2737'. [ 327.156823][T16201] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 327.165878][T16196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2737'. [ 327.185329][T16203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2739'. [ 327.432927][T16224] netlink: 'syz.2.2745': attribute type 1 has an invalid length. [ 327.816024][T16248] netlink: 'syz.3.2751': attribute type 3 has an invalid length. [ 327.835933][T16248] netlink: 'syz.3.2751': attribute type 1 has an invalid length. [ 327.864408][T16248] NCSI netlink: No device for ifindex 813332851 [ 328.163699][T16268] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 328.291406][T16277] team0 (unregistering): Port device team_slave_0 removed [ 328.317815][T16277] team0 (unregistering): Port device team_slave_1 removed [ 328.390341][T16285] tipc: Enabling of bearer rejected, media not registered [ 328.399804][T16285] syzkaller1: entered promiscuous mode [ 328.416203][T16285] syzkaller1: entered allmulticast mode [ 328.679201][T16306] openvswitch: netlink: Flow key attr not present in new flow. [ 328.937850][T16331] netlink: 'syz.4.2774': attribute type 4 has an invalid length. [ 329.150897][T16352] netlink: 'syz.2.2780': attribute type 5 has an invalid length. [ 329.749725][T16394] netlink: 'syz.2.2789': attribute type 12 has an invalid length. [ 330.191102][T16425] syzkaller0: entered promiscuous mode [ 330.204932][T16425] syzkaller0: entered allmulticast mode [ 330.337856][T16428] bond0: (slave rose0): Error: Device can not be enslaved while up [ 330.423266][T16430] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.713374][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.723222][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.736650][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.763236][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.780331][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.863109][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.878388][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.887161][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.898531][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.908642][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.239449][T16460] bridge0: entered promiscuous mode [ 331.260232][T16460] macsec2: entered promiscuous mode [ 331.265645][T16460] macsec2: entered allmulticast mode [ 331.295413][T16460] bridge0: entered allmulticast mode [ 331.301578][T16460] bridge0: port 2(macsec2) entered blocking state [ 331.310210][T16460] bridge0: port 2(macsec2) entered disabled state [ 331.322984][T16460] bridge0: left allmulticast mode [ 331.328208][T16460] bridge0: left promiscuous mode [ 331.411843][T16468] netlink: 'syz.2.2807': attribute type 1 has an invalid length. [ 331.419624][T16468] netlink: 'syz.2.2807': attribute type 1 has an invalid length. [ 331.534499][T16457] gre0: entered promiscuous mode [ 331.539498][T16457] gre0: entered allmulticast mode [ 331.568923][T16476] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20002 [ 331.644588][T16479] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 331.817744][T16492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.867017][T16442] chnl_net:caif_netlink_parms(): no params data found [ 331.885426][T16495] xt_hashlimit: size too large, truncated to 1048576 [ 332.224810][T16507] syzkaller0: entered promiscuous mode [ 332.231207][T16507] syzkaller0: entered allmulticast mode [ 332.241468][T16507] ipt_REJECT: TCP_RESET invalid for non-tcp [ 332.544686][T16518] netlink: 'syz.2.2820': attribute type 2 has an invalid length. [ 332.561566][T16518] netlink: 'syz.2.2820': attribute type 5 has an invalid length. [ 332.590420][T16524] __nla_validate_parse: 38 callbacks suppressed [ 332.590442][T16524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2820'. [ 332.640528][T16442] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.647682][T16442] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.675148][T16442] bridge_slave_0: entered allmulticast mode [ 332.693358][T16442] bridge_slave_0: entered promiscuous mode [ 332.714262][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2822'. [ 332.735666][T16442] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.751884][T16442] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.777845][T16442] bridge_slave_1: entered allmulticast mode [ 332.795165][T16442] bridge_slave_1: entered promiscuous mode [ 332.855037][T16545] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 332.865707][T16545] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2827'. [ 332.875103][T16545] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 332.882996][T16545] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2827'. [ 332.892740][T16545] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 332.902675][T16442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.906297][T16545] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2827'. [ 332.916413][T16442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.923799][T16545] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 332.940082][T16545] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2827'. [ 332.949382][T16545] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 332.957884][T16545] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2827'. [ 332.973142][T16442] team0: Port device team_slave_0 added [ 332.975699][ T51] Bluetooth: hci5: command tx timeout [ 332.982695][T16442] team0: Port device team_slave_1 added [ 332.986908][T16547] netlink: 1156 bytes leftover after parsing attributes in process `syz.3.2828'. [ 333.009579][T16545] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 333.020440][T16545] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2827'. [ 333.025913][T16442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.037027][T16442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.038657][T16545] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 333.064546][T16442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.066413][T16442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.093240][T16442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.102229][T16545] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2827'. [ 333.124576][T16442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.129925][T16545] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 333.207446][T16442] hsr_slave_0: entered promiscuous mode [ 333.215484][T16442] hsr_slave_1: entered promiscuous mode [ 333.222395][T16442] debugfs: 'hsr0' already exists in 'hsr' [ 333.228430][T16442] Cannot create hsr debugfs directory [ 333.405434][T16556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.506145][T16442] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.651198][T16442] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.767732][T16442] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.873861][T16442] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.909034][T16584] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 334.203788][T16442] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 334.213673][T16442] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.064388][ T51] Bluetooth: hci5: command tx timeout [ 335.663329][T16442] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 335.674743][T16602] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 335.674993][T16442] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 336.287902][T16650] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 336.302237][T16650] bond7 (unregistering): Released all slaves [ 336.348404][T16442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.386456][T16442] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.406668][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.413871][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.429761][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.436992][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.859095][T16442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.044879][T16694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.134821][ T51] Bluetooth: hci5: command tx timeout [ 337.164193][T16694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.398792][T16442] veth0_vlan: entered promiscuous mode [ 337.437705][T16442] veth1_vlan: entered promiscuous mode [ 337.528212][T16442] veth0_macvtap: entered promiscuous mode [ 337.544202][T16442] veth1_macvtap: entered promiscuous mode [ 337.604215][T16442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.632616][T16442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.710231][ T290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.744693][ T290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.816778][ T290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.843678][ T290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.912259][T16752] macvtap1: entered allmulticast mode [ 337.940276][T16752] veth0_macvtap: entered allmulticast mode [ 338.235022][T13387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.277241][T13387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.421550][T16770] validate_nla: 28 callbacks suppressed [ 338.421567][T16770] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 338.430519][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.436563][T16776] syzkaller0: Caught tx_queue_len zero misconfig [ 338.443883][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.452956][T16770] __nla_validate_parse: 69 callbacks suppressed [ 338.452970][T16770] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2885'. [ 338.476396][T16770] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2885'. [ 338.523356][T16774] netlink: 576 bytes leftover after parsing attributes in process `syz.0.2886'. [ 338.544867][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 338.556669][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 338.572559][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 338.591796][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 338.605846][T16785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2798'. [ 338.636434][T16786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2889'. [ 338.656716][T16789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2798'. [ 338.744911][T16794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.872127][T16794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.030810][T16820] netlink: 'syz.0.2897': attribute type 20 has an invalid length. [ 339.065384][T16820] IPv6: NLM_F_CREATE should be specified when creating new route [ 339.084657][T16822] netlink: 'syz.1.2898': attribute type 13 has an invalid length. [ 339.103016][T16822] syz_tun: refused to change device tx_queue_len [ 339.211287][ T51] Bluetooth: hci5: command tx timeout [ 339.250776][T16836] netlink: 'syz.0.2900': attribute type 1 has an invalid length. [ 339.896081][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.906610][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.915466][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.926582][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.936714][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.164145][T16860] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.171399][T16860] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.378479][T16860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.803799][ T5823] syz_tun (unregistering): left allmulticast mode [ 340.812324][ T5823] syz_tun (unregistering): left promiscuous mode [ 340.818840][ T5823] bridge0: port 1(syz_tun) entered disabled state [ 340.858429][ T78] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.867743][ T78] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.891525][ T78] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.920157][ T78] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.949506][ T78] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.959580][ T78] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.020084][ T78] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.038694][ T78] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.468961][ T1156] bond0: (slave netdevsim0): Releasing backup interface [ 341.489469][ T1156] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 341.944660][T16909] IPVS: set_ctl: invalid protocol: 0 172.20.20.16:20002 [ 342.021972][ T51] Bluetooth: hci4: command tx timeout [ 342.329513][ T1156] bond3 (unregistering): (slave gretap2): Releasing active interface [ 342.425054][ T1156] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 342.433548][ T1156] bridge2 (unregistering): left promiscuous mode [ 342.439879][ T1156] bridge2 (unregistering): left allmulticast mode [ 342.483512][ T1156] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 342.493359][ T1156] bridge3 (unregistering): left promiscuous mode [ 342.499699][ T1156] bridge3 (unregistering): left allmulticast mode [ 342.684574][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.694473][ T1156] bond_slave_0: left promiscuous mode [ 342.701488][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.712194][ T1156] bond_slave_1: left promiscuous mode [ 342.718034][ T1156] bond0 (unregistering): Released all slaves [ 342.729217][ T1156] bond1 (unregistering): Released all slaves [ 342.743516][ T1156] bond2 (unregistering): (slave vcan1): Releasing backup interface [ 342.752299][ T1156] bond2 (unregistering): Released all slaves [ 342.764761][ T1156] bond3 (unregistering): Released all slaves [ 342.783247][ T1156] bond4 (unregistering): Released all slaves [ 342.796421][ T1156] bond5 (unregistering): Released all slaves [ 342.808905][ T1156] bond6 (unregistering): Released all slaves [ 343.022215][ T1156] : left promiscuous mode [ 343.245437][T16945] bond11: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 343.725915][T16945] bond11 (unregistering): Released all slaves [ 343.850860][ T1156] tipc: Disabling bearer [ 343.864652][T16867] chnl_net:caif_netlink_parms(): no params data found [ 343.871751][ T1156] tipc: Left network mode [ 344.103747][ T51] Bluetooth: hci4: command tx timeout [ 344.247235][T17000] sctp: [Deprecated]: syz.4.2935 (pid 17000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.247235][T17000] Use struct sctp_sack_info instead [ 344.368076][T17000] bridge_slave_0: left allmulticast mode [ 344.376781][T17000] bridge_slave_0: left promiscuous mode [ 344.384886][T17000] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.399065][T17000] bridge_slave_1: left allmulticast mode [ 344.424212][T17000] bridge_slave_1: left promiscuous mode [ 344.430490][T17000] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.446258][T17000] bond0: (slave bond_slave_0): Releasing backup interface [ 344.459630][T17000] bond0: (slave bond_slave_1): Releasing backup interface [ 344.476191][T17000] team0: Port device team_slave_0 removed [ 344.488885][T17000] team0: Port device team_slave_1 removed [ 344.512373][T17000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.530378][T17000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.546598][T17000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.555278][T17000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.566388][T17000] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 344.672516][T16867] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.695904][T16867] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.707886][T16867] bridge_slave_0: entered allmulticast mode [ 344.721701][T16867] bridge_slave_0: entered promiscuous mode [ 344.759756][T16867] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.767905][T16867] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.775999][T16867] bridge_slave_1: entered allmulticast mode [ 344.784214][T16867] bridge_slave_1: entered promiscuous mode [ 345.047723][T16867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.242212][T16867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.271354][ T51] block nbd1: Receive control failed (result -32) [ 345.384187][T17057] __nla_validate_parse: 18 callbacks suppressed [ 345.384206][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'. [ 345.515532][T17062] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2951'. [ 345.522617][T16867] team0: Port device team_slave_0 added [ 345.556072][T17060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.576711][T16867] team0: Port device team_slave_1 added [ 345.583896][T17066] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 345.590768][T17066] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 345.716159][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 345.760570][T16867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.770220][T16867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.834039][T16867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.948814][T17068] syzkaller0: entered promiscuous mode [ 345.959829][T17068] syzkaller0: entered allmulticast mode [ 345.976425][T16867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.992777][T16867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.024375][T16867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.037205][T17092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2957'. [ 346.060245][T17092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2957'. [ 346.178246][ T51] Bluetooth: hci4: command tx timeout [ 347.839927][T17117] sctp: [Deprecated]: syz.2.2963 (pid 17117) Use of int in max_burst socket option. [ 347.839927][T17117] Use struct sctp_assoc_value instead [ 347.955337][T17104] tipc: Started in network mode [ 347.962597][T17104] tipc: Node identity e0000001, cluster identity 4711 [ 347.969532][T17104] tipc: Enabling of bearer rejected, failed to enable media [ 348.126045][T16867] hsr_slave_0: entered promiscuous mode [ 348.142615][T16867] hsr_slave_1: entered promiscuous mode [ 348.169903][T16867] debugfs: 'hsr0' already exists in 'hsr' [ 348.197279][T16867] Cannot create hsr debugfs directory [ 348.257537][ T51] Bluetooth: hci4: command tx timeout [ 348.264121][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 348.356539][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 348.555811][ T1156] IPVS: stop unused estimator thread 0... [ 348.828784][T17158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.940628][T17157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.053367][T17177] syzkaller0: entered promiscuous mode [ 349.059005][T17177] syzkaller0: entered allmulticast mode [ 349.252195][T17187] xt_hashlimit: size too large, truncated to 1048576 [ 349.331702][T17189] –: renamed from vxcan1 (while UP) [ 351.969422][T17168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.984622][T16867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.083220][T16867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.105397][T16867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.130512][T16867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.165858][T17259] netlink: 604 bytes leftover after parsing attributes in process `syz.2.2984'. [ 352.360473][T17276] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 352.378570][T16867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.397435][T17279] syz.1.2988: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 352.428101][T16867] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.440105][T17279] CPU: 1 UID: 0 PID: 17279 Comm: syz.1.2988 Not tainted syzkaller #0 PREEMPT(full) [ 352.440132][T17279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.440143][T17279] Call Trace: [ 352.440151][T17279] [ 352.440158][T17279] dump_stack_lvl+0xe8/0x150 [ 352.440186][T17279] warn_alloc+0x249/0x340 [ 352.440207][T17279] ? stack_trace_save+0xa9/0x100 [ 352.440228][T17279] ? __pfx_warn_alloc+0x10/0x10 [ 352.440251][T17279] ? kasan_save_track+0x4f/0x80 [ 352.440268][T17279] ? kasan_save_track+0x3e/0x80 [ 352.440282][T17279] ? __kasan_kmalloc+0x93/0xb0 [ 352.440299][T17279] ? __kmalloc_cache_noprof+0x31c/0x660 [ 352.440316][T17279] ? xskq_create+0x56/0x170 [ 352.440337][T17279] ? xsk_setsockopt+0x54c/0x990 [ 352.440356][T17279] ? do_sock_setsockopt+0x17c/0x1b0 [ 352.440377][T17279] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 352.440398][T17279] ? do_syscall_64+0x14d/0xf80 [ 352.440432][T17279] __vmalloc_node_range_noprof+0x132/0x1730 [ 352.440483][T17279] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 352.440507][T17279] ? __kasan_kmalloc+0x93/0xb0 [ 352.440527][T17279] vmalloc_user_noprof+0xad/0xe0 [ 352.440544][T17279] ? xskq_create+0xbf/0x170 [ 352.440564][T17279] xskq_create+0xbf/0x170 [ 352.440588][T17279] xsk_init_queue+0x8a/0xe0 [ 352.440611][T17279] xsk_setsockopt+0x54c/0x990 [ 352.440634][T17279] ? __pfx_xsk_setsockopt+0x10/0x10 [ 352.440655][T17279] ? __pfx_aa_sk_perm+0x10/0x10 [ 352.440677][T17279] ? aa_sock_opt_perm+0xff/0x1a0 [ 352.440700][T17279] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 352.440717][T17279] ? __pfx_xsk_setsockopt+0x10/0x10 [ 352.440737][T17279] do_sock_setsockopt+0x17c/0x1b0 [ 352.440761][T17279] __x64_sys_setsockopt+0x13d/0x1b0 [ 352.440787][T17279] do_syscall_64+0x14d/0xf80 [ 352.440807][T17279] ? trace_irq_disable+0x3b/0x150 [ 352.440828][T17279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.440846][T17279] ? clear_bhb_loop+0x40/0x90 [ 352.440867][T17279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.440884][T17279] RIP: 0033:0x7f060339c629 [ 352.440901][T17279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.440915][T17279] RSP: 002b:00007f060422a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 352.440932][T17279] RAX: ffffffffffffffda RBX: 00007f0603615fa0 RCX: 00007f060339c629 [ 352.440943][T17279] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 352.440951][T17279] RBP: 00007f0603432b39 R08: 0000000000000004 R09: 0000000000000000 [ 352.440960][T17279] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.440970][T17279] R13: 00007f0603616038 R14: 00007f0603615fa0 R15: 00007ffe32696778 [ 352.440995][T17279] [ 352.441000][T17279] Mem-Info: [ 352.458781][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.530087][T17279] active_anon:5938 inactive_anon:5 isolated_anon:0 [ 352.530087][T17279] active_file:2501 inactive_file:40222 isolated_file:0 [ 352.530087][T17279] unevictable:768 dirty:52 writeback:0 [ 352.530087][T17279] slab_reclaimable:12303 slab_unreclaimable:123603 [ 352.530087][T17279] mapped:29173 shmem:1367 pagetables:1289 [ 352.530087][T17279] sec_pagetables:0 bounce:0 [ 352.530087][T17279] kernel_misc_reclaimable:0 [ 352.530087][T17279] free:1300445 free_pcp:10296 free_cma:0 [ 352.530423][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.536176][T17279] Node 0 active_anon:23752kB inactive_anon:20kB active_file:10004kB inactive_file:160688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116692kB dirty:204kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13212kB pagetables:5008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 352.808197][T17279] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 352.840948][T17279] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.881035][T17279] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 352.887622][T17279] Node 0 DMA32 free:1243740kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23852kB inactive_anon:20kB active_file:10004kB inactive_file:160688kB unevictable:1536kB writepending:204kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:41076kB local_pcp:21168kB free_cma:0kB [ 352.939838][T17279] lowmem_reserve[]: 0 0 0 0 0 [ 352.945029][T17279] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 352.964410][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2994'. [ 352.975255][T17279] lowmem_reserve[]: 0 0 0 0 0 [ 352.988616][T17279] Node 1 Normal free:3942680kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.004786][T17300] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2995'. [ 353.024142][T17279] lowmem_reserve[]: 0 0 0 0 0 [ 353.035745][T17279] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 353.049629][T17279] Node 0 DMA32: 6186*4kB (UME) 3563*8kB (UME) 2251*16kB (UM) 297*32kB (UME) 197*64kB (UME) 261*128kB (UME) 346*256kB (UM) 241*512kB (UME) 166*1024kB (UM) 70*2048kB (UME) 140*4096kB (UM) = 1243536kB [ 353.073556][T17279] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 353.085624][T17279] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 12*16kB (UME) 14*32kB (UME) 6*64kB (UME) 6*128kB (UME) 4*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 960*4096kB (M) = 3942680kB [ 353.108415][T17279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.119510][T17279] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.129473][T17279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.144136][T17279] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.154396][T17279] 44086 total pagecache pages [ 353.159171][T17279] 0 pages in swap cache [ 353.163780][T17279] Free swap = 124996kB [ 353.168134][T17279] Total swap = 124996kB [ 353.172872][T17279] 2097051 pages RAM [ 353.176746][T17279] 0 pages HighMem/MovableOnly [ 353.182051][T17279] 427002 pages reserved [ 353.186275][T17279] 0 pages cma reserved [ 353.206884][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.214075][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.283538][T17298] bond0 (unregistering): Released all slaves [ 353.511467][T17323] veth0: entered promiscuous mode [ 353.518789][T17324] openvswitch: netlink: EtherType 0 is less than min 600 [ 353.542417][T17321] veth0: left promiscuous mode [ 353.624953][T17322] can: request_module (can-proto-4) failed. [ 353.659155][T17336] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3004'. [ 353.725499][T16867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.860985][T16867] veth0_vlan: entered promiscuous mode [ 353.884132][T16867] veth1_vlan: entered promiscuous mode [ 353.943518][T16867] veth0_macvtap: entered promiscuous mode [ 353.953091][T17353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3010'. [ 353.964381][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3009'. [ 353.976731][T16867] veth1_macvtap: entered promiscuous mode [ 354.012418][T16867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.046356][T16867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.073930][ T1156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.083949][ T1156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.094077][ T1156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.131168][ T1156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.149741][T17360] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3011'. [ 354.239701][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3012'. [ 354.262685][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.295984][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.373620][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.383771][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.567938][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 354.617576][T17381] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3018'. [ 354.672520][T17381] sctp: [Deprecated]: syz.4.3018 (pid 17381) Use of int in maxseg socket option. [ 354.672520][T17381] Use struct sctp_assoc_value instead [ 354.897620][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.907220][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.925258][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.933484][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.942866][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.021697][T17399] xt_nat: multiple ranges no longer supported [ 355.214157][T17404] dvmrp6: entered allmulticast mode [ 355.868819][T17438] hsr_slave_0: left promiscuous mode [ 355.875699][T17438] hsr_slave_1: left promiscuous mode [ 356.333520][T17394] chnl_net:caif_netlink_parms(): no params data found [ 356.452593][T17470] netlink: 'syz.4.3036': attribute type 1 has an invalid length. [ 356.568903][T17394] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.584946][T17394] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.593388][T17394] bridge_slave_0: entered allmulticast mode [ 356.601965][T17394] bridge_slave_0: entered promiscuous mode [ 356.610397][T17394] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.617536][T17394] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.624852][T17394] bridge_slave_1: entered allmulticast mode [ 356.632536][T17394] bridge_slave_1: entered promiscuous mode [ 356.730868][T17486] netlink: 'syz.0.3041': attribute type 24 has an invalid length. [ 356.759266][T17394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.825094][T17394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.924630][T13387] bridge_slave_1: left allmulticast mode [ 356.931135][T13387] bridge_slave_1: left promiscuous mode [ 356.938896][T13387] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.953249][T13387] bridge_slave_0: left promiscuous mode [ 356.959041][T13387] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.970336][ T51] Bluetooth: hci2: command tx timeout [ 357.049609][T13387] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 357.178406][T13387] bond4 (unregistering): (slave gretap1): Releasing active interface [ 357.202865][T13387] dvmrp0 (unregistering): left allmulticast mode [ 357.444367][T13387] bond4 (unregistering): (slave bridge5): Releasing active interface [ 357.544877][T13387] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 357.554116][T13387] bridge7 (unregistering): left promiscuous mode [ 357.595686][T13387]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.605640][T13387] bond_slave_0: left allmulticast mode [ 357.615844][T13387]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.625650][T13387] bond_slave_1: left allmulticast mode [ 357.633582][T13387]  (unregistering): Released all slaves [ 357.647013][T13387] bond0 (unregistering): Released all slaves [ 357.659398][T13387] bond1 (unregistering): Released all slaves [ 357.680328][T13387] bond2 (unregistering): Released all slaves [ 357.695021][T13387] bond3 (unregistering): Released all slaves [ 357.714105][T13387] bond4 (unregistering): Released all slaves [ 357.738522][T13387] bond5 (unregistering): Released all slaves [ 357.755602][T13387] bond6 (unregistering): Released all slaves [ 357.773635][T17499] netlink: 'syz.1.3045': attribute type 4 has an invalid length. [ 357.784137][T17394] team0: Port device team_slave_0 added [ 357.791079][T17504] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 357.819224][T17394] team0: Port device team_slave_1 added [ 357.856809][T17518] __nla_validate_parse: 4 callbacks suppressed [ 357.856827][T17518] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3048'. [ 357.967998][T17509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.016475][T17513] erspan0: entered promiscuous mode [ 358.156261][T17394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.182248][T13387] tipc: Left network mode [ 358.189897][T17394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.309110][T17394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.338129][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3053'. [ 358.357829][T13387] IPVS: stopping master sync thread 12197 ... [ 358.382580][T17394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.389380][T13387] IPVS: stopping backup sync thread 7061 ... [ 358.422050][T17394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.457437][T17394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.777962][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3060'. [ 358.787647][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3060'. [ 358.825051][T17567] team0: Device ip6gre3 is of different type [ 358.880041][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'. [ 358.917904][T17394] hsr_slave_0: entered promiscuous mode [ 358.928861][T17394] hsr_slave_1: entered promiscuous mode [ 358.936434][T17578] netlink: 'syz.4.3063': attribute type 1 has an invalid length. [ 358.937932][T17394] debugfs: 'hsr0' already exists in 'hsr' [ 358.951615][T17394] Cannot create hsr debugfs directory [ 359.050915][ T51] Bluetooth: hci2: command tx timeout [ 359.061291][T17578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.121117][T17577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.128075][T17577] bond0: (slave vxcan2): The slave device specified does not support setting the MAC address [ 359.141962][T17577] bond0: (slave vxcan2): Error -95 calling set_mac_address [ 359.423574][T17596] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3068'. [ 359.663084][T17611] netlink: 'syz.4.3071': attribute type 4 has an invalid length. [ 359.712490][T17611] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3071'. [ 360.697074][T17663] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3081'. [ 360.827447][T17659] netlink: set zone limit has 4 unknown bytes [ 361.130476][ T51] Bluetooth: hci2: command tx timeout [ 362.125160][T13387] hsr_slave_0: left promiscuous mode [ 362.136088][T13387] hsr_slave_1: left promiscuous mode [ 362.142303][T13387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.631944][T17681] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3086'. [ 362.825707][T17394] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.899527][T17394] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.917909][T17706] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3092'. [ 362.958906][T17394] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.152271][T17394] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.212552][ T51] Bluetooth: hci2: command tx timeout [ 363.321068][T17700] syzkaller0: entered promiscuous mode [ 363.335079][T17700] syzkaller0: entered allmulticast mode [ 363.358002][T13387] IPVS: stop unused estimator thread 0... [ 363.662438][T17747] netlink: 592 bytes leftover after parsing attributes in process `syz.0.3096'. [ 365.160247][T17736] syzkaller0: entered promiscuous mode [ 365.178735][T17736] syzkaller0: entered allmulticast mode [ 365.241345][T17778] netlink: 'syz.3.3099': attribute type 1 has an invalid length. [ 365.249261][T17778] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3099'. [ 365.398856][T17786] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3103'. [ 365.425642][T17394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.471446][T17789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3101'. [ 365.507498][T17784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3101'. [ 365.529381][T17394] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.563255][T17790] netlink: 'syz.3.3104': attribute type 1 has an invalid length. [ 365.576503][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.583711][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.199746][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.207017][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.454090][T17815] syzkaller0: entered promiscuous mode [ 366.459624][T17815] syzkaller0: entered allmulticast mode [ 366.481150][T17817] syzkaller0: entered allmulticast mode [ 366.569920][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 366.585974][T17830] netlink: 'syz.0.3109': attribute type 1 has an invalid length. [ 366.595230][T17830] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3109'. [ 366.822270][T17845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3111'. [ 366.836974][T17840] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 368.167664][T17834] erspan0: entered promiscuous mode [ 368.709864][T17896] openvswitch: netlink: Multiple metadata blocks provided [ 368.720799][T17895] openvswitch: netlink: Multiple metadata blocks provided [ 368.765536][T17394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.832367][T17905] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3126'. [ 368.938855][T17394] veth0_vlan: entered promiscuous mode [ 369.001607][T17394] veth1_vlan: entered promiscuous mode [ 369.124130][T17394] veth0_macvtap: entered promiscuous mode [ 369.137712][T17394] veth1_macvtap: entered promiscuous mode [ 369.165340][T17394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.197514][T17394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.253804][T17932] xt_limit: Overflow, try lower: 604147548/4200216962 [ 369.273183][ T3022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.311513][T17932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3132'. [ 369.343612][ T3022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.384387][ T3022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.434543][ T3022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.642771][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.667995][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.760618][T17951] netlink: 'syz.4.3136': attribute type 1 has an invalid length. [ 369.775104][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 369.801653][T17959] ip_vti0: entered allmulticast mode [ 369.807350][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.823804][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.839493][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3138'. [ 370.014496][T17968] netlink: 'syz.2.3017': attribute type 2 has an invalid length. [ 370.039732][T17968] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3017'. [ 370.273104][T17984] netlink: 'syz.4.3148': attribute type 1 has an invalid length. [ 370.319253][T17984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.355157][T17984] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 370.432055][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.442277][T17984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.442463][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.458182][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.467080][T17984] bond1: (slave bond2): Enslaving as an active interface with a down link [ 370.479058][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.488088][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.117089][T18021] SET target dimension over the limit! [ 371.288756][T17989] chnl_net:caif_netlink_parms(): no params data found [ 371.409588][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3160'. [ 371.429019][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3160'. [ 371.536108][T17989] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.544270][T17989] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.552136][T17989] bridge_slave_0: entered allmulticast mode [ 371.559882][T17989] bridge_slave_0: entered promiscuous mode [ 371.582816][T17989] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.590377][T17989] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.597617][T17989] bridge_slave_1: entered allmulticast mode [ 371.610287][T17989] bridge_slave_1: entered promiscuous mode [ 371.669249][T17989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.682578][T17989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.736049][T17989] team0: Port device team_slave_0 added [ 371.753194][T17989] team0: Port device team_slave_1 added [ 371.797583][T17989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.805305][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.839683][T17989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.855043][T17989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.864608][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.893203][T17989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.904481][T18065] lo: Caught tx_queue_len zero misconfig [ 371.961985][T17989] hsr_slave_0: entered promiscuous mode [ 371.968807][T17989] hsr_slave_1: entered promiscuous mode [ 371.994153][T18070] 8021q: adding VLAN 0 to HW filter on device bond9 [ 372.168700][T17989] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.185053][T17989] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.196721][T17989] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 54270 - 0 [ 372.268703][T17989] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.278699][T17989] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.289058][T17989] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 54270 - 0 [ 372.316876][T17989] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.326848][T17989] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.337206][T17989] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 54270 - 0 [ 372.395432][T17989] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.405815][T17989] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.415845][T17989] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 54270 - 0 [ 372.502945][T18082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3171'. [ 372.532846][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3171'. [ 372.542271][T18082] openvswitch: netlink: Flow key attr not present in new flow. [ 372.558429][T18082] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3171'. [ 372.571777][ T5837] Bluetooth: hci3: command tx timeout [ 372.594864][T17989] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.606209][T17989] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.644028][T17989] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 372.661887][T17989] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 372.818063][T17989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.852328][T17989] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.871160][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.878360][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.915697][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.922901][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.124219][T18111] bond10 (unregistering): Released all slaves [ 373.224235][T18112] bond10 (unregistering): Released all slaves [ 373.476761][T17989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.540694][T17989] veth0_vlan: entered promiscuous mode [ 373.555439][T17989] veth1_vlan: entered promiscuous mode [ 373.596843][T17989] veth0_macvtap: entered promiscuous mode [ 373.611661][T17989] veth1_macvtap: entered promiscuous mode [ 373.634859][T17989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.655638][T17989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.672753][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.685248][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.701153][T13388] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.715607][T13388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.752179][T18138] nbd: couldn't find a device at index 0 [ 373.804528][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.814882][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.876697][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.904027][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.377371][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.389039][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.404836][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.415458][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.429532][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.516734][T18169] __nla_validate_parse: 1 callbacks suppressed [ 374.516753][T18169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3194'. [ 374.568501][T18169] netlink: 212300 bytes leftover after parsing attributes in process `syz.0.3194'. [ 374.581368][T18169] openvswitch: netlink: Key 32 has unexpected len 28 expected 2 [ 374.654979][ T5837] Bluetooth: hci3: command tx timeout [ 374.682097][T18173] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3196'. [ 374.985419][T18161] chnl_net:caif_netlink_parms(): no params data found [ 375.189155][T18161] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.211400][T18161] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.219308][T18161] bridge_slave_0: entered allmulticast mode [ 375.260728][T18161] bridge_slave_0: entered promiscuous mode [ 375.269162][T18161] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.276565][T18161] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.288144][T18161] bridge_slave_1: entered allmulticast mode [ 375.294482][T18202] netlink: 'syz.0.3203': attribute type 21 has an invalid length. [ 375.301511][T18161] bridge_slave_1: entered promiscuous mode [ 375.324915][T18202] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3203'. [ 375.348091][T18161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.372953][T18161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.439631][T18161] team0: Port device team_slave_0 added [ 375.469270][T18161] team0: Port device team_slave_1 added [ 375.594669][T18161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.602045][T18161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.631584][T18161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.664301][T18161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.709650][T18161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.749535][T18161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.904940][T18161] hsr_slave_0: entered promiscuous mode [ 375.915217][T18161] hsr_slave_1: entered promiscuous mode [ 375.921947][T18161] debugfs: 'hsr0' already exists in 'hsr' [ 375.929391][T18161] Cannot create hsr debugfs directory [ 375.935798][T18230] tipc: Started in network mode [ 375.941564][T18230] tipc: Node identity ac1414aa, cluster identity 4711 [ 375.956358][T18230] tipc: Enabled bearer , priority 10 [ 376.018880][T18232] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 376.032924][T18232] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 376.204890][T18247] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3215'. [ 376.214676][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3215'. [ 376.223985][T18247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'. [ 376.456276][T18161] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.468438][T18161] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.478736][T18161] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 376.489176][T18161] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 376.499028][ T5837] Bluetooth: hci1: command tx timeout [ 376.556510][T18161] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.566531][T18161] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.578346][T18161] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 376.589760][T18161] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 376.682301][T18161] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.693310][T18161] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.703530][T18161] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 376.714785][T18161] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 376.732537][ T5837] Bluetooth: hci3: command tx timeout [ 376.741704][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 376.754894][T18266] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3221'. [ 376.775316][T18161] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.785575][T18161] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.795768][T18161] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 376.805735][T18161] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 376.914728][T18272] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3223'. [ 376.955867][ T5896] tipc: Node number set to 2886997162 [ 377.096482][T18161] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 377.113723][T18161] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 377.135232][T18161] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 377.166964][T18161] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 377.245304][T18292] veth3: entered allmulticast mode [ 377.354578][T18161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.385911][T18161] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.403010][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.410281][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.432154][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.439316][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.482301][T18300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.805123][T18161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.854651][T18161] veth0_vlan: entered promiscuous mode [ 377.867910][T18161] veth1_vlan: entered promiscuous mode [ 377.897536][T18161] veth0_macvtap: entered promiscuous mode [ 377.908909][T18161] veth1_macvtap: entered promiscuous mode [ 377.928749][T18161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.939612][T18161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.959223][ T1140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.968663][ T1140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.985067][ T1140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.994139][ T1140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.066644][ T290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.081415][ T290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.136114][T18282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.146252][T18282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.155710][T18325] 8021q: VLANs not supported on lo [ 378.468731][T18339] veth0_to_bridge: entered promiscuous mode [ 378.535072][T18338] veth0_to_bridge: left promiscuous mode [ 378.571422][ T5837] Bluetooth: hci1: command tx timeout [ 378.637282][T18345] netlink: 'syz.1.3244': attribute type 1 has an invalid length. [ 378.810441][ T5837] Bluetooth: hci3: command tx timeout [ 379.374146][T18393] netlink: 'syz.3.3255': attribute type 1 has an invalid length. [ 379.520927][T18405] syzkaller1: entered promiscuous mode [ 379.538122][T18405] syzkaller1: entered allmulticast mode [ 379.567410][T18407] Bluetooth: MGMT ver 1.23 [ 379.677556][T18412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.316121][T18448] nft_compat: unsupported protocol 0 [ 380.356087][ T5967] IPVS: starting estimator thread 0... [ 380.359916][T18454] nft_compat: unsupported protocol 0 [ 380.457638][T18456] IPVS: using max 30 ests per chain, 72000 per kthread [ 380.526897][T18463] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 380.545573][T18460] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 380.564013][T18460] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 380.635658][T18474] netlink: 'syz.1.3276': attribute type 1 has an invalid length. [ 380.652157][ T5837] Bluetooth: hci1: command tx timeout [ 380.691556][T18477] netlink: 'syz.0.3278': attribute type 2 has an invalid length. [ 380.809428][T18482] "syz.3.3280" (18482) uses obsolete ecb(arc4) skcipher [ 381.000315][T18497] openvswitch: netlink: EtherType 53b is less than min 600 [ 381.004668][T18489] syzkaller0: entered promiscuous mode [ 381.014478][T18489] syzkaller0: entered allmulticast mode [ 381.500731][T18523] __nla_validate_parse: 6 callbacks suppressed [ 381.500752][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3287'. [ 382.730731][ T5837] Bluetooth: hci1: command tx timeout [ 383.004716][T18523] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 383.055126][T18534] IPv6: NLM_F_CREATE should be specified when creating new route [ 383.152635][T18540] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 383.158698][T18540] syzkaller1: Refused to change device type [ 383.167538][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3292'. [ 383.178118][T18540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3292'. [ 383.190464][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3292'. [ 383.997232][T18497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.132293][T18586] netlink: 'syz.1.3299': attribute type 1 has an invalid length. [ 384.306648][T18596] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 384.320612][T18596] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 384.354858][T18596] bond1: (slave vcan1): making interface the new active one [ 384.366079][T18596] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 384.475386][T18604] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 385.196156][T18637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3309'. [ 385.401310][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3312'. [ 386.410459][T18598] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 386.410799][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 386.416589][T18598] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 387.314538][T18598] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 387.320786][T18598] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 387.359291][T18598] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 387.366471][T18598] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 387.426868][T18598] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 387.439394][T18598] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 387.486431][T18598] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.498117][T18598] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 387.584874][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 387.594436][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 387.604510][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 387.617891][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 387.629265][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 387.664211][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 387.676009][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 387.694132][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 387.708698][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 387.718027][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 387.833804][T18662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3314'. [ 387.882504][T18662] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.890445][T18662] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.945041][T18669] Bluetooth: MGMT ver 1.23 [ 388.029717][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3315'. [ 388.244926][T18690] pim6reg: entered allmulticast mode [ 388.273890][T18690] pim6reg: left allmulticast mode [ 388.383666][T18693] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 388.431135][T18697] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3322'. [ 389.066379][T18646] chnl_net:caif_netlink_parms(): no params data found [ 389.368740][T18751] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3334'. [ 389.492184][T18646] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.500722][T18646] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.507981][T18646] bridge_slave_0: entered allmulticast mode [ 389.532717][T18646] bridge_slave_0: entered promiscuous mode [ 389.551806][T18646] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.558951][T18646] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.580477][T18646] bridge_slave_1: entered allmulticast mode [ 389.588875][T18646] bridge_slave_1: entered promiscuous mode [ 389.716456][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 389.729488][T18646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.759867][T18646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.782011][ T5837] Bluetooth: hci0: command tx timeout [ 389.862685][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3340'. [ 389.877307][T18646] team0: Port device team_slave_0 added [ 389.886073][T18646] team0: Port device team_slave_1 added [ 389.984658][T18646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.002372][T18646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.046066][T18646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.061825][T18646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.095658][T18646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.124676][T18646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.179665][T18802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3345'. [ 390.231738][T18646] hsr_slave_0: entered promiscuous mode [ 390.253622][T18646] hsr_slave_1: entered promiscuous mode [ 390.280598][T18646] debugfs: 'hsr0' already exists in 'hsr' [ 390.306768][T18646] Cannot create hsr debugfs directory [ 390.345219][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3344'. [ 390.804361][T18826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3349'. [ 391.105006][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3352'. [ 391.262480][T18847] netlink: 'syz.1.3356': attribute type 8 has an invalid length. [ 391.670123][T18646] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 391.684236][T18646] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 391.696353][T18646] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 391.708521][T18646] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 391.798301][T18646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.823044][T18646] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.836440][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.843629][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.852680][ T5837] Bluetooth: hci0: command tx timeout [ 391.884895][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.892105][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.180460][T18896] bridge: RTM_NEWNEIGH with invalid ether address [ 392.187276][T18896] bridge: RTM_NEWNEIGH with invalid ether address [ 392.222603][T18896] bridge: RTM_NEWNEIGH with invalid ether address [ 392.243045][T18646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.930720][T18646] veth0_vlan: entered promiscuous mode [ 392.979028][T18946] __nla_validate_parse: 4 callbacks suppressed [ 392.979046][T18946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3381'. [ 392.983046][T18646] veth1_vlan: entered promiscuous mode [ 393.079608][T18646] veth0_macvtap: entered promiscuous mode [ 393.096162][T18646] veth1_macvtap: entered promiscuous mode [ 393.208421][T18646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.267213][T18646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.334402][T18282] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.343535][T18282] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.356202][T18282] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.372980][ T1156] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.422180][T18962] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.503346][T18282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.521301][T18282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.558625][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.568825][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.629425][T18972] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3388'. [ 393.710294][T18979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3390'. [ 393.722016][T18979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3390'. [ 393.930520][ T5837] Bluetooth: hci0: command tx timeout [ 394.486414][T19037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3403'. [ 394.553926][T19043] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 394.574203][T19043] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 394.593230][T19043] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 394.623535][T19049] netlink: 'syz.5.3409': attribute type 63 has an invalid length. [ 394.632551][T19049] netlink: 'syz.5.3409': attribute type 63 has an invalid length. [ 394.781475][ T35] [ 394.783842][ T35] ============================================ [ 394.789992][ T35] WARNING: possible recursive locking detected [ 394.796159][ T35] syzkaller #0 Not tainted [ 394.800663][ T35] -------------------------------------------- [ 394.806812][ T35] kworker/u8:2/35 is trying to acquire lock: [ 394.812788][ T35] ffff888087048fa0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 394.822120][ T35] [ 394.822120][ T35] but task is already holding lock: [ 394.829489][ T35] ffff888087048fa0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 394.839060][ T35] [ 394.839060][ T35] other info that might help us debug this: [ 394.847112][ T35] Possible unsafe locking scenario: [ 394.847112][ T35] [ 394.854556][ T35] CPU0 [ 394.857825][ T35] ---- [ 394.861175][ T35] lock(k-sk_lock-AF_INET6); [ 394.865844][ T35] lock(k-sk_lock-AF_INET6); [ 394.870507][ T35] [ 394.870507][ T35] *** DEADLOCK *** [ 394.870507][ T35] [ 394.878635][ T35] May be due to missing lock nesting notation [ 394.878635][ T35] [ 394.886941][ T35] 4 locks held by kworker/u8:2/35: [ 394.892038][ T35] #0: ffff888085e63148 ((wq_completion)krds_cp_wq#12/0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 394.904038][ T35] #1: ffffc90000ab7c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 394.916810][ T35] #2: ffff888087048fa0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 394.926816][ T35] #3: ffff888087049148 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 394.936841][ T35] [ 394.936841][ T35] stack backtrace: [ 394.942743][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 394.942763][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.942774][ T35] Workqueue: krds_cp_wq#12/0 rds_send_worker [ 394.942802][ T35] Call Trace: [ 394.942809][ T35] [ 394.942816][ T35] dump_stack_lvl+0xe8/0x150 [ 394.942837][ T35] print_deadlock_bug+0x279/0x290 [ 394.942858][ T35] __lock_acquire+0x253f/0x2cf0 [ 394.942879][ T35] ? unwind_next_frame+0xa5/0x23c0 [ 394.942901][ T35] lock_acquire+0xf0/0x2e0 [ 394.942916][ T35] ? inet6_getname+0x15d/0x650 [ 394.942934][ T35] lock_sock_nested+0x48/0x100 [ 394.942948][ T35] ? inet6_getname+0x15d/0x650 [ 394.942962][ T35] inet6_getname+0x15d/0x650 [ 394.942978][ T35] rds_tcp_conn_slots_available+0x288/0x470 [ 394.942995][ T35] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 394.943014][ T35] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 394.943032][ T35] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 394.943047][ T35] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 394.943063][ T35] ? process_scheduled_works+0xb02/0x1830 [ 394.943079][ T35] ? worker_thread+0xa50/0xfc0 [ 394.943094][ T35] ? kthread+0x388/0x470 [ 394.943109][ T35] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 394.943130][ T35] rds_recv_incoming+0x9f6/0x12d0 [ 394.943149][ T35] ? __pfx_rds_recv_incoming+0x10/0x10 [ 394.943164][ T35] ? skb_copy_bits+0x7e5/0x8f0 [ 394.943183][ T35] rds_tcp_data_recv+0x7f1/0xa40 [ 394.943203][ T35] __tcp_read_sock+0x196/0x970 [ 394.943217][ T35] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 394.943232][ T35] rds_tcp_data_ready+0x369/0x9a0 [ 394.943245][ T35] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 394.943262][ T35] ? __pfx_sock_def_readable+0x10/0x10 [ 394.943275][ T35] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 394.943293][ T35] tcp_rcv_established+0x19f4/0x2740 [ 394.943315][ T35] ? __pfx_tcp_rcv_established+0x10/0x10 [ 394.943336][ T35] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 394.943352][ T35] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 394.943363][ T35] __release_sock+0x1b8/0x3a0 [ 394.943384][ T35] release_sock+0x5f/0x1f0 [ 394.943397][ T35] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 394.943412][ T35] rds_send_xmit+0x207e/0x28d0 [ 394.943438][ T35] ? __pfx_rds_send_xmit+0x10/0x10 [ 394.943456][ T35] rds_send_worker+0x7d/0x2e0 [ 394.943472][ T35] ? process_scheduled_works+0xa25/0x1830 [ 394.943488][ T35] process_scheduled_works+0xb02/0x1830 [ 394.943518][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.943535][ T35] ? assign_work+0x3d5/0x5e0 [ 394.943551][ T35] worker_thread+0xa50/0xfc0 [ 394.943575][ T35] kthread+0x388/0x470 [ 394.943586][ T35] ? __pfx_worker_thread+0x10/0x10 [ 394.943601][ T35] ? __pfx_kthread+0x10/0x10 [ 394.943613][ T35] ret_from_fork+0x51e/0xb90 [ 394.943629][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 394.943643][ T35] ? __switch_to+0xc7d/0x1450 [ 394.943659][ T35] ? __pfx_kthread+0x10/0x10 [ 394.943670][ T35] ret_from_fork_asm+0x1a/0x30 [ 394.943693][ T35] [ 395.237006][ T35] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 395.245802][ T35] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 35, name: kworker/u8:2 [ 395.254868][ T35] preempt_count: 201, expected: 0 [ 395.260096][ T35] RCU nest depth: 0, expected: 0 [ 395.265044][ T35] INFO: lockdep is turned off. [ 395.269813][ T35] Preemption disabled at: [ 395.269825][ T35] [<0000000000000000>] 0x0 [ 395.278609][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 395.278632][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.278643][ T35] Workqueue: krds_cp_wq#12/0 rds_send_worker [ 395.278671][ T35] Call Trace: [ 395.278677][ T35] [ 395.278684][ T35] dump_stack_lvl+0xe8/0x150 [ 395.278706][ T35] __might_resched+0x378/0x4d0 [ 395.278730][ T35] lock_sock_nested+0x5d/0x100 [ 395.278748][ T35] inet6_getname+0x15d/0x650 [ 395.278769][ T35] rds_tcp_conn_slots_available+0x288/0x470 [ 395.278787][ T35] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 395.278809][ T35] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 395.278829][ T35] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 395.278844][ T35] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 395.278862][ T35] ? process_scheduled_works+0xb02/0x1830 [ 395.278879][ T35] ? worker_thread+0xa50/0xfc0 [ 395.278896][ T35] ? kthread+0x388/0x470 [ 395.278912][ T35] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 395.278933][ T35] rds_recv_incoming+0x9f6/0x12d0 [ 395.278951][ T35] ? __pfx_rds_recv_incoming+0x10/0x10 [ 395.278968][ T35] ? skb_copy_bits+0x7e5/0x8f0 [ 395.278990][ T35] rds_tcp_data_recv+0x7f1/0xa40 [ 395.279014][ T35] __tcp_read_sock+0x196/0x970 [ 395.279032][ T35] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 395.279051][ T35] rds_tcp_data_ready+0x369/0x9a0 [ 395.279066][ T35] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 395.279085][ T35] ? __pfx_sock_def_readable+0x10/0x10 [ 395.279100][ T35] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 395.279120][ T35] tcp_rcv_established+0x19f4/0x2740 [ 395.279150][ T35] ? __pfx_tcp_rcv_established+0x10/0x10 [ 395.279176][ T35] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 395.279195][ T35] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 395.279210][ T35] __release_sock+0x1b8/0x3a0 [ 395.279234][ T35] release_sock+0x5f/0x1f0 [ 395.279248][ T35] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 395.279263][ T35] rds_send_xmit+0x207e/0x28d0 [ 395.279292][ T35] ? __pfx_rds_send_xmit+0x10/0x10 [ 395.279312][ T35] rds_send_worker+0x7d/0x2e0 [ 395.279330][ T35] ? process_scheduled_works+0xa25/0x1830 [ 395.279350][ T35] process_scheduled_works+0xb02/0x1830 [ 395.279379][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 395.279399][ T35] ? assign_work+0x3d5/0x5e0 [ 395.279419][ T35] worker_thread+0xa50/0xfc0 [ 395.279446][ T35] kthread+0x388/0x470 [ 395.279460][ T35] ? __pfx_worker_thread+0x10/0x10 [ 395.279489][ T35] ? __pfx_kthread+0x10/0x10 [ 395.279504][ T35] ret_from_fork+0x51e/0xb90 [ 395.279524][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 395.279541][ T35] ? __switch_to+0xc7d/0x1450 [ 395.279557][ T35] ? __pfx_kthread+0x10/0x10 [ 395.279570][ T35] ret_from_fork_asm+0x1a/0x30 [ 395.279596][ T35] [ 395.279606][ T35] BUG: scheduling while atomic: kworker/u8:2/35/0x00000202 [ 395.557844][ T35] INFO: lockdep is turned off. [ 395.562786][ T35] Modules linked in: [ 395.566698][ T35] Preemption disabled at: [ 395.566710][ T35] [<0000000000000000>] 0x0 [ 395.575519][ T35] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 395.584299][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(full) [ 395.595159][ T35] Tainted: [W]=WARN [ 395.598968][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.609296][ T35] Workqueue: krds_cp_wq#12/0 rds_send_worker [ 395.615311][ T35] Call Trace: [ 395.618605][ T35] [ 395.621566][ T35] vpanic+0x56c/0xa60 [ 395.625577][ T35] ? __pfx_vpanic+0x10/0x10 [ 395.630106][ T35] ? rcu_is_watching+0x15/0xb0 [ 395.634897][ T35] panic+0xc5/0xd0 [ 395.638635][ T35] ? __pfx_panic+0x10/0x10 [ 395.643050][ T35] ? __pfx__printk+0x10/0x10 [ 395.647643][ T35] ? vprintk_emit+0x4eb/0x560 [ 395.652427][ T35] ? __pfx_vprintk_emit+0x10/0x10 [ 395.657565][ T35] ? __irq_work_queue_local+0x1f2/0x590 [ 395.663113][ T35] check_panic_on_warn+0x89/0xb0 [ 395.668045][ T35] __schedule_bug+0xf6/0x150 [ 395.672624][ T35] __schedule+0x16a9/0x5340 [ 395.677121][ T35] ? __wake_up_klogd+0xe6/0x120 [ 395.681958][ T35] ? vprintk_emit+0x4eb/0x560 [ 395.686628][ T35] ? rcu_is_watching+0x15/0xb0 [ 395.691493][ T35] ? __pfx_vprintk_emit+0x10/0x10 [ 395.696549][ T35] ? unwind_next_frame+0xa5/0x23c0 [ 395.701662][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.706673][ T35] ? __pfx___schedule+0x10/0x10 [ 395.711565][ T35] ? rcu_is_watching+0x15/0xb0 [ 395.716320][ T35] ? rcu_is_watching+0x15/0xb0 [ 395.721073][ T35] ? lock_release+0x4b/0x3d0 [ 395.725740][ T35] ? schedule+0x90/0x360 [ 395.729972][ T35] ? wq_worker_sleeping+0x63/0x250 [ 395.735080][ T35] schedule+0x164/0x360 [ 395.739402][ T35] __lock_sock+0x161/0x2c0 [ 395.743816][ T35] ? __pfx___lock_sock+0x10/0x10 [ 395.748844][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.753881][ T35] ? __pfx_autoremove_wake_function+0x10/0x10 [ 395.759958][ T35] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 395.765449][ T35] ? lock_acquire+0x57/0x2e0 [ 395.770045][ T35] ? dump_stack_lvl+0x135/0x150 [ 395.774897][ T35] ? lock_sock_nested+0x6a/0x100 [ 395.779828][ T35] lock_sock_nested+0x9f/0x100 [ 395.784583][ T35] inet6_getname+0x15d/0x650 [ 395.789166][ T35] rds_tcp_conn_slots_available+0x288/0x470 [ 395.795140][ T35] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 395.801551][ T35] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 395.807350][ T35] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 395.813750][ T35] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 395.818854][ T35] ? process_scheduled_works+0xb02/0x1830 [ 395.824568][ T35] ? worker_thread+0xa50/0xfc0 [ 395.829323][ T35] ? kthread+0x388/0x470 [ 395.833552][ T35] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 395.839178][ T35] rds_recv_incoming+0x9f6/0x12d0 [ 395.844193][ T35] ? __pfx_rds_recv_incoming+0x10/0x10 [ 395.849640][ T35] ? skb_copy_bits+0x7e5/0x8f0 [ 395.854407][ T35] rds_tcp_data_recv+0x7f1/0xa40 [ 395.859338][ T35] __tcp_read_sock+0x196/0x970 [ 395.864089][ T35] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 395.869543][ T35] rds_tcp_data_ready+0x369/0x9a0 [ 395.874551][ T35] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 395.880349][ T35] ? __pfx_sock_def_readable+0x10/0x10 [ 395.885798][ T35] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 395.891344][ T35] tcp_rcv_established+0x19f4/0x2740 [ 395.896624][ T35] ? __pfx_tcp_rcv_established+0x10/0x10 [ 395.902253][ T35] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 395.906921][ T35] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 395.912018][ T35] __release_sock+0x1b8/0x3a0 [ 395.916707][ T35] release_sock+0x5f/0x1f0 [ 395.921121][ T35] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 395.927350][ T35] rds_send_xmit+0x207e/0x28d0 [ 395.932120][ T35] ? __pfx_rds_send_xmit+0x10/0x10 [ 395.937228][ T35] rds_send_worker+0x7d/0x2e0 [ 395.941906][ T35] ? process_scheduled_works+0xa25/0x1830 [ 395.947631][ T35] process_scheduled_works+0xb02/0x1830 [ 395.953198][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 395.959181][ T35] ? assign_work+0x3d5/0x5e0 [ 395.963771][ T35] worker_thread+0xa50/0xfc0 [ 395.968365][ T35] kthread+0x388/0x470 [ 395.972420][ T35] ? __pfx_worker_thread+0x10/0x10 [ 395.977524][ T35] ? __pfx_kthread+0x10/0x10 [ 395.982102][ T35] ret_from_fork+0x51e/0xb90 [ 395.986685][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 395.991786][ T35] ? __switch_to+0xc7d/0x1450 [ 395.996454][ T35] ? __pfx_kthread+0x10/0x10 [ 396.001032][ T35] ret_from_fork_asm+0x1a/0x30 [ 396.005799][ T35] [ 396.009214][ T35] Kernel Offset: disabled [ 396.013524][ T35] Rebooting in 86400 seconds..