last executing test programs: 4m5.869776258s ago: executing program 2 (id=7219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000d0400000000000000000000c300", @ANYRES32=0x0, @ANYBLOB="00000000498005000a0001004af29c3ff5b40000140035006d6163766c616e30"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000140)={0xb, 0x1, {0x0, @struct={0x8fd, 0x6}, 0x0, 0x10001, 0x3, 0x4, 0xfffffffffffff8eb, 0x7, 0x824, @struct={0x96f, 0x3ff}, 0x80000001, 0xe0a1, [0x3, 0x5, 0x3, 0x2, 0x200003, 0x1ff]}, {0x660a, @struct={0x1, 0xdf}, 0x0, 0x1, 0xf49b, 0x8, 0x4, 0x7, 0x24, @struct={0x1, 0x4}, 0x7, 0x7, [0x0, 0x9, 0x4, 0x9, 0x8]}, {0x95, @usage=0xa, 0x0, 0x7fff, 0xd7, 0x2, 0x8, 0x4, 0x24, @struct={0x2, 0x3}, 0x25, 0xfffffffa, [0x6, 0x8, 0x8, 0x8000, 0x8]}, {0x3ff, 0x5, 0xfffffffffffffff9}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000700)={r1, 0x2, 0xfffffffffffffffe, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) 4m5.360533721s ago: executing program 2 (id=7227): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x27, 0x1, 0x8, 0x0, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20004000) 4m5.195074951s ago: executing program 2 (id=7232): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r4}, 0x10, &(0x7f0000000240)={&(0x7f00000003c0)=@can={{}, 0x41, 0x0, 0x4, 0x0, "5000040000008e56"}, 0x10}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv6_getnexthop={0x1c, 0x6a, 0x113, 0x70bd29, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m4.88315175s ago: executing program 2 (id=7237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r1) (async) socket$inet(0x2, 0x3, 0x1) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x7fff, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf6, 0x8, 0x9}, {0x1, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x400000000010, 0x2, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x1a, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xea800000}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x3, 0xa, 0x7, 0x10}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x4, 0xa9, &(0x7f00000007c0)=""/169, 0x41100, 0xc, '\x00', r5, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900)=[{0x0, 0x2, 0x3, 0x2}]}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f0000000a00)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x25, 0x5, 0xb4) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x20}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x3ffe, 0x0, 0x0, {{0x7, 0x4, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x61, "1218abe30ce0be053e2bdbe1a829f6687b69fd65a1d25879070e92ee73be6f7a0a91906cbe58442a072e1e6998e2c10d70cd8c5c97e42383d412709ea02c2262fb04aac345ed6e24fe2cccf5211f53913a97269b44aff46f4b64e49e6e128218f6"}, &(0x7f0000000a40)=0x69) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000a80)={0x0, 0x8000, 0x3, 0xec9, r10}, &(0x7f0000000ac0)=0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x388, 0x24, 0x800, 0x70bd28, 0xccfab6f, {0x0, 0x0, 0x0, r9, {0xffff, 0xfff3}, {0x8, 0xb}, {0x3, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x54, 0x1, 0x400, 0x7fff, 0x1, 0x7f, 0x5, 0x7}}, {0x12, 0x2, [0x0, 0xfff2, 0x6, 0x8, 0x1, 0x1, 0x4]}}, {{0x1c, 0x1, {0x8, 0x65, 0x7, 0x9, 0x1, 0x1, 0x5, 0x3}}, {0xa, 0x2, [0xd2d, 0xf, 0x3]}}, {{0x1c, 0x1, {0xf, 0x9, 0x401, 0x4, 0x2, 0x6, 0xa, 0x3}}, {0xa, 0x2, [0x9, 0x4, 0x7f]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7b44}, @TCA_STAB={0x184, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x5, 0x1, 0x2, 0x7fffffff, 0x6, 0x9}}, {0x16, 0x2, [0x3, 0xff, 0xf767, 0x1, 0x0, 0x840, 0x7, 0x0, 0x7f]}}, {{0x1c, 0x1, {0x4, 0x2, 0x4, 0x3ff, 0x3, 0x200, 0x4, 0x4}}, {0xc, 0x2, [0x3, 0x8, 0x800, 0xc59]}}, {{0x1c, 0x1, {0xd, 0xb8, 0x3, 0x401, 0x0, 0x8000, 0x4, 0x7}}, {0x12, 0x2, [0x6, 0xff00, 0x2, 0x6, 0x1, 0x4, 0x7fff]}}, {{0x1c, 0x1, {0x4, 0xa, 0xa, 0x4, 0x0, 0x3, 0xfff, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xc, 0x40, 0x2, 0x7, 0x2, 0x7, 0xb32, 0x2}}, {0x8, 0x2, [0x3, 0x8000]}}, {{0x1c, 0x1, {0x0, 0x2, 0x9, 0x4, 0x0, 0x2000, 0x9, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x1, 0x3, 0x2, 0x0, 0x2, 0x1, 0x2, 0x7}}, {0x12, 0x2, [0x7, 0x6, 0xd000, 0x3, 0xfff8, 0x4, 0x9]}}, {{0x1c, 0x1, {0x8, 0x3, 0x3, 0x8, 0x1, 0x307, 0x6, 0x9}}, {0x16, 0x2, [0x401, 0x5, 0x8, 0x2, 0xd, 0xa, 0x6, 0x7, 0x3]}}, {{0x1c, 0x1, {0x4, 0x60, 0x66f, 0x2, 0x2, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0xd]}}]}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x4, "bfbfd50daed594fec1a2a06bca161a6e"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x4, 0xfff6, 0x8, 0x1, 0x5, 0x0, 0x2}}, {0x8, 0x2, [0x3, 0x7]}}, {{0x1c, 0x1, {0x7b, 0x7f, 0x7, 0x6, 0x0, 0x6, 0x0, 0x2}}, {0x8, 0x2, [0x4, 0x6]}}, {{0x1c, 0x1, {0x0, 0x2, 0x20, 0x7, 0x0, 0x240000, 0x0, 0x5}}, {0xe, 0x2, [0xc, 0x5, 0x5, 0x4, 0x3]}}, {{0x1c, 0x1, {0x81, 0x4, 0xffff, 0x6, 0x2, 0x2, 0xffff9f6d}}, {0x4}}, {{0x1c, 0x1, {0x80, 0x8, 0x6, 0x7, 0x2, 0xfffffffc, 0xc78, 0x2}}, {0x8, 0x2, [0xa, 0x1000]}}, {{0x1c, 0x1, {0x8, 0x0, 0x3, 0xd, 0x2, 0x80000000, 0x1, 0x6}}, {0x10, 0x2, [0x7, 0xd0c, 0x1ff, 0x5, 0x3, 0x8f5]}}, {{0x1c, 0x1, {0x2, 0x43, 0x3, 0x1, 0x1, 0x1, 0x80000001, 0x2}}, {0x8, 0x2, [0x2, 0x4]}}]}, @TCA_RATE={0x6, 0x5, {0xff, 0xa4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}]}, 0x388}, 0x1, 0x0, 0x0, 0x3b9252b2e8064387}, 0x40000) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syz_tun\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x0, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1035}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) (async) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 4m4.567592654s ago: executing program 2 (id=7243): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x72b11cbaa3cf0c4e}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x18, 0x1409, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240408d0}, 0x4000044) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r4, 0x1f4d2000) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$kcm(r5, &(0x7f0000000940)={&(0x7f00000004c0)=@l2={0x1f, 0x8, @any, 0x3, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)="70748b06c49fea489dbd56d5ecfa1bc1c12db261e9217e10b89ea8ca95e32f83a2a64017286261a8485ddf7736eafc0f3c17ea85485025f4d27e88179cc5b98fa74679c27182d6e26fba3a377f7f71916f80b0f606e6bd8b9d22564882a466eacba9daa5a45be7091d3f59d1ac83f997e58537ea87961d892f4365e0c610dad5508a1054ff335c4def347721cac0d9d2ce2dc63a50823b556bb0bd97a0f9a45289d50effc526cb5fda3dbc52743890238f2dd1f443981816097a9c2d7907a2e9a4197ca58ed156a88277e04682990c0dfbd8a07180fa09c0fdd2c11d9379bc9ce20c5338ecc585488c4cd01244e2b2a2ac2886c7", 0xf4}], 0x1, &(0x7f0000000740)=[{0x100, 0x10c, 0x8000, "0898832f7354571b22b0c0495cd6d6d5465e33c4b18ce950bf942fbd65c9b597c50366b3809a7c7720d666e1516906999b18982db53fd04d1906a4932296e518b7988ac263e787718f9ffedf27c2286714c2fa5b19921ccd611968e4cdb5e8c2abca812d0167291b6fd872909a89ea5bbb94fc7877f34f941dab908994a1e7d286c61603ea9ef4679ec77a0e8a28661a19b8b2d10979bfe3ba7109ef90670f09959e6dc75b1c905cd28cecc04ff468ad8633ddb056aaad92090a99da47cd2d53fd563be5aa33071599d5b67abfdfa340255bd3ffdb63ed3d1052da220de39b468d1a3aab04f0f6f87d818012da8fff"}, {0x48, 0x101, 0x428a7f20, "d87d09d0f065c187e1973fed173249b1dfb3086cd3af852639bf60c4a261efed69b15ab254716c54e6febec48f61e9fe1b0f"}, {0xa0, 0x118, 0x401, "6abc12975018fc3bca26bc815040900651410f96bffbc455110d79b6806eda23f34f9c4d2f2cb3ad43f8d7e9f1b95b342aa5fa6849abcd4892e59f0ff3b15307f53241c901841ef6a5c0d5d3c7ca07a8a0c6ac8b6c1bd6eb0ad669260c0364800ab6d1a1288c9b8f9541c4b3f6623ae29b5f101806107b5bf9657e72d8df76f2d78cf8ce0d51e11ae7"}], 0x1e8}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x24000041) r7 = socket$netlink(0x10, 0x3, 0x10) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(r4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000004) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x6, 0x8001, 0x6}, 0x8) 4m4.49763434s ago: executing program 2 (id=7245): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24040854, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x24040854, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2f}], 0x2, 0x40000062, 0x0) recvmsg(r0, &(0x7f00000015c0)={&(0x7f0000000640)=@generic, 0x80, &(0x7f00000014c0)=[{&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000000740)=""/239, 0xef}, {&(0x7f00000013c0)=""/245, 0xf5}], 0x3, &(0x7f0000001500)=""/148, 0x94}, 0x2021) (async) recvmsg(r0, &(0x7f00000015c0)={&(0x7f0000000640)=@generic, 0x80, &(0x7f00000014c0)=[{&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000000740)=""/239, 0xef}, {&(0x7f00000013c0)=""/245, 0xf5}], 0x3, &(0x7f0000001500)=""/148, 0x94}, 0x2021) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x20008014) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e36fd8270ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff3"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) write$cgroup_type(r4, &(0x7f0000000280), 0x9) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r6 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) (async) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000440)={'vlan0\x00'}) write$cgroup_int(r8, &(0x7f00000004c0)=0x7, 0x12) (async) write$cgroup_int(r8, &(0x7f00000004c0)=0x7, 0x12) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="8d04013275fc4533e09e61ae78033582ea8e9fea643c9f066a94ab95d3a7fc16d5eb", @ANYRES32=r5, @ANYRES64=r4, @ANYRES16=r1], 0x1c}}, 0x48000) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0xf, 0x1, 0x9, 0x5, @mcast1, @dev={0xfe, 0x80, '\x00', 0x17}, 0x1, 0x10, 0xe, 0x64}}) 3m49.416278076s ago: executing program 32 (id=7245): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24040854, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x24040854, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2f}], 0x2, 0x40000062, 0x0) recvmsg(r0, &(0x7f00000015c0)={&(0x7f0000000640)=@generic, 0x80, &(0x7f00000014c0)=[{&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000000740)=""/239, 0xef}, {&(0x7f00000013c0)=""/245, 0xf5}], 0x3, &(0x7f0000001500)=""/148, 0x94}, 0x2021) (async) recvmsg(r0, &(0x7f00000015c0)={&(0x7f0000000640)=@generic, 0x80, &(0x7f00000014c0)=[{&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000000740)=""/239, 0xef}, {&(0x7f00000013c0)=""/245, 0xf5}], 0x3, &(0x7f0000001500)=""/148, 0x94}, 0x2021) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x20008014) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) write$cgroup_type(r4, &(0x7f0000000280), 0x9) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r6 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) (async) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000440)={'vlan0\x00'}) write$cgroup_int(r8, &(0x7f00000004c0)=0x7, 0x12) (async) write$cgroup_int(r8, &(0x7f00000004c0)=0x7, 0x12) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="8d04013275fc4533e09e61ae78033582ea8e9fea643c9f066a94ab95d3a7fc16d5eb", @ANYRES32=r5, @ANYRES64=r4, @ANYRES16=r1], 0x1c}}, 0x48000) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0xf, 0x1, 0x9, 0x5, @mcast1, @dev={0xfe, 0x80, '\x00', 0x17}, 0x1, 0x10, 0xe, 0x64}}) 2m2.356726177s ago: executing program 4 (id=8528): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000600), 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x20}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3b25fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) write$tun(r2, &(0x7f0000000400)={@void, @val={0x0, 0x80, 0x1, 0x26, 0x4, 0x8}, @ipv4=@dccp={{0x4d, 0x4, 0x3, 0x0, 0x15c, 0x66, 0x0, 0x6, 0x21, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x2c, 0x2d, 0x1, 0xb, [{@rand_addr=0x64010100, 0x6}, {@broadcast, 0x8000000}, {@local, 0x80000001}, {@loopback, 0x1}, {@multicast1, 0x7}]}, @ssrr={0x89, 0x27, 0xa3, [@loopback, @empty, @multicast1, @private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @multicast1, @multicast1]}, @end, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0xb, "2ed42a7ee252171e9b"}, @timestamp_prespec={0x44, 0x3c, 0x28, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x1}, {@local, 0x1}, {@loopback, 0x1}, {@private=0xa010100, 0x9}, {@loopback, 0x6}]}, @cipso={0x86, 0x3b, 0x3, [{0x6, 0x6, "3883aaae"}, {0x1, 0xb, "31ec41862f8e6f762b"}, {0x1, 0x3, 'I'}, {0x2, 0xe, "a59ef145de8be33fddebf3ce"}, {0x1, 0xe, "bcd3c59dd7602dc5b636ee13"}, {0x7, 0x5, "507a91"}]}, @timestamp_prespec={0x44, 0x44, 0x56, 0x3, 0x3, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x89c6}, {@multicast2, 0x7}, {@private=0xa010101, 0x2}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x7fffffff}, {@multicast1, 0xffff0f4c}]}]}}, {{0x4e24, 0x4e24, 0x4, 0x1, 0x2, 0x0, 0x0, 0x4, 0x1, "ea6a01", 0x9, 'G-N'}, "55f65389d73c1d7307238008d6ea04c2f84ab72aeda9112b"}}}, 0x166) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xf9a3d000) write$tcp_congestion(r1, 0x0, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="6c1eaa7b8a6f3b2af8d9d40855a0846b614c15d75039ce8aefacaf91eb786a76d9a6c78f065033a9c2447e90069f77ba360ad549e8800ef186d6e3ddb3221f59c7a1d734e1e920f5082cb865b7aba9d5cf", 0x51}], 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001f80)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 2m1.912060408s ago: executing program 4 (id=8535): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x66, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@private1, 0x3507, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r3 = socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socket(0x26, 0x5, 0x800000d) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0xcfb4854c0caad94c) socket$inet6(0xa, 0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb305e06daab01a77}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r6}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r8}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2m1.383858201s ago: executing program 4 (id=8541): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000040)="bd3a4f3791055c03c0c8a835677011b4f7fee69408f5574246e0bffbf67991e39b4f03626467b49e2cc8f11e19d009dc7cd798086e729d7855efe451a43cd688d5fc9088e42560887f35f63e0155e3e49fb41611bfd7926655a6fc2572e457fd3c685a043334bc", 0x67) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'ip6erspan0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3a, 0x7, [{}, {}, {}, {}, {}, {}, {}]}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000180)="2e1ca72425dd2f50388d409f53dc631293df98cc46fb733eb9c49957e4500db7bbf06088907da4d2dc44ece08448783391e3fd99d1c702fafc59b89460b4bc0c933e0cc0776d7d7745f7d92de9963128cc536c408a6fd19366e915d9339b661300fcdac34a270a8c90bc84f28d8ea06a2f5f63a64c8cd74b34dc58ada9b9b00c76865f0a2772e2531d04df68a89ef8ace03e7766b3ac44506780865db6e9baab82df3bc11c6a53f99663582a4ed1d1fb4659fe04aec37336d190927aa927378129ebcbf838f76175fbea911fa6683f675ad8a724c597d42b289088931c1380aca0be21", 0xe3, 0x40000, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000002c0)=0x40, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r4, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x79}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x74}}, 0x80) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000480)={0x0, 'bridge_slave_0\x00', {0x4}, 0x4f1a}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000640)={0x1, 'veth0\x00', {}, 0x8000}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r7 = accept$inet(r2, &(0x7f00000007c0)={0x2, 0x0, @loopback}, &(0x7f0000000800)=0x10) recvfrom$inet(r7, &(0x7f0000000840)=""/62, 0x3e, 0x40010100, &(0x7f0000000880)={0x2, 0x4e20, @loopback}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @var={0x3, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x2e, 0x0, 0x5f, 0x61, 0x61]}}, &(0x7f0000000940)=""/194, 0x4b, 0xc2, 0x1, 0x7}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x20000, 0x4, 0x9, 0x2080c, 0x1, 0x400, '\x00', 0x0, r8, 0x0, 0x3, 0x4, 0x7}, 0x50) sendmmsg$inet(r3, &(0x7f0000000b80)=[{{&(0x7f0000000b00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000000b40)}}], 0x1, 0x4004051) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r4, 0x200, 0x70bd26, 0x9, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x811) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000002200)={{r8, &(0x7f0000001f00)='veth0\x00', 0x2802, &(0x7f0000001f40)={@align=0xfffffffffffffffe, {0x3ff, 0x1, 0xfffffff9, 0xdf5c}}, 0xb, &(0x7f0000001f80)={@_ha_fsid}, &(0x7f0000001fc0)=0x10001}, 0x2, &(0x7f00000021c0)=[{0x3, 0x5, &(0x7f0000002000)='ip6erspan0\x00', &(0x7f0000002040)="95149479f0a17c96592464f1e6fff5eb76fd2d99213ee539bee75dacf8cae447e667dff4996cd1ab6497a878fdf4ec3b46be978a6d04cbc84984935b9451163642397091f355730c94884838229fc25d250a9259f67a59794e190c7bf5730b125021ddab19ef43c230058c5fc01f8ba7eadc425b3c6019499f864e2e4643898d59", 0x81, 0x2}, {0x1, 0x1, &(0x7f0000002100)='\x03\x03\x03\x03\x03\x03', &(0x7f0000002140)="9452c8572b42433fb7b65a36966a5c4a3643b83bcfa3bca677031cd3b6bc24080292c72f3a06164d6e633dee2b906f38e1150d3816c9137f254d08ba7e9d0433659892328d98120315c0a18036ad249c94093607d94622fb6d6ad86b0cf4b9d705a86af1316bf0016d89f14cb2f4c38bc3550b3e69074cb2", 0x78, 0x26}]}) r11 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002280)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000002380)=0xe8) r13 = getgid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000023c0)={0x0}, &(0x7f0000002400)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002440)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000002540)=0xe8) sendmsg$netlink(r5, &(0x7f0000002bc0)={&(0x7f0000000cc0)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001ec0)=[{&(0x7f0000000d00)={0x1198, 0x2e, 0x0, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x50, 0x0, 0x0, @fd=r5}, @generic="3ab0b246fa8558884d9a6a3df2714bf293e4c04dc42dabdce1a32e6d4ef55d63", @typed={0xc, 0xd9, 0x0, 0x0, @u64=0x4}, @typed={0x1004, 0x73, 0x0, 0x0, @binary="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"}, @nested={0xe6, 0x163, 0x0, 0x1, [@typed={0x5, 0x115, 0x0, 0x0, @str='\x00'}, @generic="981998307dd27f0211d1c0c9b0da70d72d84c88a2829e9a3ce2c21a9ade920f7ff08f42e3292fc9d4aad8154d475d0c951c7b5fac1d779dd7dad9702be4d2f2e81b4409c9aa44bfe0ce46102f32ca0f3ecfe32ae9bc51fb7e078022603cf32ee6e9efde01cb1132d117a1b0217d214186d9d7bc2b3e8b52d61e740facc9310642502816f171edeedc7806883d81d1d19b21b33779e392ba651ca301d07fa7b853abb309bc2a1a1d008215d25943724b5d0f26cfd89539d256cd0d7bfbc4b90088016ebc0a15192abb8c13024c4044d276a65", @typed={0x8, 0x7d, 0x0, 0x0, @u32=0xc}]}, @generic="23b22ca50fcd170eb942c39a7a3b5d86e4fd3e866b8988aa2e86946878d8559a3a21d73f21724f18267d348a2b267ee147", @typed={0x8, 0x99, 0x0, 0x0, @fd=r7}, @typed={0x4, 0x1a}, @generic="3e210d3210142670ef6f5230b97c4fbc57a287fb4ca1f9b8fbc1d2c5455981798edc", @typed={0x8, 0x91, 0x0, 0x0, @str='{%&\x00'}]}, 0x1198}], 0x1, &(0x7f0000002a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r7, r2, r7, r0, r0]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r3, r9, r7, r8, 0xffffffffffffffff, r0, r8, r0]}}, @rights={{0x20, 0x1, 0x1, [r9, 0xffffffffffffffff, r7, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x150, 0x801}, 0x4004010) 2m1.062906741s ago: executing program 4 (id=8548): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000000033e3297882b128708419b01092000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) (async) r0 = socket$kcm(0x23, 0x5, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200030300004e224e23b62a919030a885be04"], 0x4c}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0x8000000000000001, 0x9}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0xd81, 0x5, 0x400, 0x7c3, 0x6, 0x1, 0x4, 0x5, r4}, 0x20) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 2m0.532017709s ago: executing program 4 (id=8556): pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf2502000000000000000000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x6, 0x8, 0x0, r2, 0x401}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, &(0x7f00000002c0), &(0x7f00000002c0), 0xd9, r4}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="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", 0x137}, {&(0x7f00000007c0)="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", 0xde5}], 0x4}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x2, 0x4044805) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018180000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) splice(r5, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r6, 0x0, 0x8000000000025a5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x34, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x8240}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x34, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x8240}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 2m0.33372554s ago: executing program 4 (id=8559): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x700, 0x9, 0x6, 0xbe8, {{0x15, 0x4, 0x1, 0x24, 0x54, 0x64, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x24, 0xbd, 0x1, 0x3, [{@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x3ff}, {@multicast1, 0x5}, {@multicast2, 0x1}]}, @end, @ra={0x94, 0x4}, @cipso={0x86, 0x17, 0x0, [{0x5, 0x3, "96"}, {0x0, 0x7, "f46a800071"}, {0x7, 0x7, "f597c7c1f3"}]}]}}}}}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@gettaction={0xe4, 0x32, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf5}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8090}, 0x8000) (async, rerun: 64) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r1, 0x3, {0x2, 0x0, 0x3}, 0xfe}, 0x18) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) connect$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xf0}}, 0x18) sendmmsg(r3, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="ba0806f7974098b7201514a5e6f35395a8a7edcda4309e5a638a81366c5d0f119a231a5462c06cda314dbd3b5437fc61a3153d140a4d0c9c59cbe1a8b3bf5e564de1cad214b8431ae21aed41a2cde48a12f29c20d7a214c24d2bdbbc4421f6908b5ee9fe755168be5deb9e16613a8c215e2b44e8d06be4b6d0bf30868765fe1a1a05def3639bd2b89ede6975868d70fcac2de92e6661b6a33c3f3c0dee05295baca225b7e3e8985b217328cacfaa945e0221d3a76e1177a420c7daaa142ce546ca3ff6e8b91197f7a94e98d072e8d9b348591d9fca29dd6b9ec352d74edd1ce0c63ad64caaa1e30e24ac0305c5999b5545194ec572ba27fe4b543e3f7633b2d8d9639a30138f1efaade9f82fc877cf51130c8570f56fb41c0f5515cc9df80e2cd543be16799866ba259062726d99a5a6d7bda02334035b126c1ab323e2f820b050c9773a1098a1b9817f1a408dee2a2f7c91a5cebba6ace07171ce236ec47bce5dcd81bc685d4cb3bfcfbc24774aedf1f388df7db5aa5a572b086371a74d9f470da1f57ca8cb2ecb017c001f64723146442c217f3c91e2bbe4bc7610a1909048488fed84295b058272f42d812c7e5738a90f017bd49d5c849e42e18e1670a89fd20db5e1d6529c9cec7f44318e2a478f3b81375f72414e076646b6726de3e78438df63d631d0354d90e9de003320ffabb2c81576a6c5d2a769b83cb85c23a91ee49f607c8059932f3cbbf78a6d9edd2261101fb3176a6a4e2f9ac5f02144076c24ff2233104df6d53b553d19389eb4c48bc6eb88f3f950e9d27681502390eb01ccae9e9b730fdca1c55a7255b71a33191ac570ad056254e1a69ad5554b9380e53883883d0e535ecdf58516b416c15a24754b9a25ec06b8af3e40052881865b87150edd413e22858ba4e943b7a8a3ae435c4bb600c9b5678896e224b4dfc3c97e270fff363880acc4d6d2fd18de851ba33ae4afc4263e1e53ae4eb071a3230ee296930d76cd3d5bb96f3c5942c9a29207ca16f5854dba086d5c1c05cc968c4561941a749bfb44f9ede6d0bb3c00dedf93b1210eca37e873718ccdf7cc055d7bab4dd77ff95f3f20f41a92830c62f182ac3fb847ce8df7fdb3f616660bb752e4a86157f8d8c5ae61139cc76b38d9fbf84fc6429fed5deeb995998d2d8cf6547e7bff62129629d7087495d57b47e9bfe5301a1a7311569b0e28f5049ae88869f20c7cb4f6833d235c02cb9fca9ecc1be493f2bef37eadc3706e220b52b4ad24ee2f68346114be52c1dd3fa1b373c2272d3344b63111459934f1a6580d26b0c854fe0cd485c6996b6fe807b122b1a30af24610cdddbbdde5601d35a4f66cdd5a547870bca1182273f2dd236b7227bc9015026a7610c321279487c1d3ad009069eaa0a8c0939e507b8609ea5d3c6a3fc8d28a8eb599b12dddffdeaa5ce05ccd902627239ea537253d6be666b94f244a5c9525bb4f535496bbc3bf37fb20997d0b9054b9f59a1d202a94e9333a47f436fee2202999b76a1914b6c8595339d91bc07f302f2918d1bd933b497f778d61acf6ff304314d9b95cfc7e722dd28dd86a92ddcad07b96f46ae9ca4ae3ed8f0786668b531d9b680eeda7728b9d918febe3d387099314f104cba399acc360248a5262e97af554bd550e0e3c9353c1f1d603ad28f9e1e351a420223bfa4c18adc440e3e16ec47c818a28ed4c1683dd076e4424ef2bc9980aec0e3cb255a34b590c2e387ecac30be18e1fda22311e2993f4ae17172a1048b84ee5a7b33970058b55a43eac46eb5ec05d53b7031cec0e121b2e0947fa998eecd231daa2d5b1a875bee2e834610cd363cc7644911a34162bf247593e2cb8c8c62091f17532fb903eea3b10135b6aaf7ae7d82998f1063907de807b60763a9d34b3af13019d99148f3ab7fa5430523df350ba3105c717764392be28a24c08c20e38f87cf19904b0dff0c9ec3f1d83184923ec679dc06149f8465a6b0eedab15742ebd4fba0e5308c968e7db234d4c33024ff28439323af1ec1bded0dde9dd08ebe72c1782d269cf08db95e9dd431355f4a7402e4a31fee601362d32f05e23ba00bfae85f018b54d7cd38929b8e1e9bd16b7b07faad560f5ff07311d68e7fe25209fe1e0b862d2d19d551cdb4a5ce04159fde81a995a927d2b3b1ef83db81b71255ac8c2a00bce0fc0b525214f57c77749c9b791f8d779a71453183661a41dadec853f6922b485a73ee7835d5ba9a2c88be84826793706a991ce5326b0bb1cfe4dca625e32824e42a347a65305ee2cd44f6291aef2acf979705ccbdd2277cff875198d26176b81669a8eef544d5d9b5b16a4f4bb3b2895254a5dfc5a40f8121d366a4e8150d0fba93e2f443c8b378763808e42731814618de1e428660b527764", 0x6a2}], 0x2}}], 0x1, 0xf5) (async, rerun: 64) r7 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) (async) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8, 0x0, {0x2, 0xf0}, 0x1}, 0x18) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) sendmmsg(r7, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) getsockopt$inet6_tcp_buf(r13, 0x6, 0x1f, 0x0, &(0x7f0000001800)) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090) 1m20.024605418s ago: executing program 33 (id=8559): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x700, 0x9, 0x6, 0xbe8, {{0x15, 0x4, 0x1, 0x24, 0x54, 0x64, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x24, 0xbd, 0x1, 0x3, [{@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x3ff}, {@multicast1, 0x5}, {@multicast2, 0x1}]}, @end, @ra={0x94, 0x4}, @cipso={0x86, 0x17, 0x0, [{0x5, 0x3, "96"}, {0x0, 0x7, "f46a800071"}, {0x7, 0x7, "f597c7c1f3"}]}]}}}}}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@gettaction={0xe4, 0x32, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf5}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8090}, 0x8000) (async, rerun: 64) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r1, 0x3, {0x2, 0x0, 0x3}, 0xfe}, 0x18) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) connect$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xf0}}, 0x18) sendmmsg(r3, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5) (async, rerun: 64) r7 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) (async) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8, 0x0, {0x2, 0xf0}, 0x1}, 0x18) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) sendmmsg(r7, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) getsockopt$inet6_tcp_buf(r13, 0x6, 0x1f, 0x0, &(0x7f0000001800)) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090) 46.325057263s ago: executing program 3 (id=9091): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 46.188265059s ago: executing program 3 (id=9094): unshare(0x22020400) readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) 45.813878489s ago: executing program 3 (id=9099): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff000000000000000000000000000000000000a0af802698c85dcb81935c1d52d2c3c30dbe80d5f9986d94b11b11d6c7ce283691248191ac6e64ef0dc83a7ce40e49e75abfd23244bd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newtclass={0x64, 0x28, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {0x3, 0xfff1}, {0x10, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7f, 0x9}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x6c, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket(0x2b, 0x80805, 0x800) sendmmsg$inet(r8, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) getsockname$packet(r10, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r11, 0x4) r12 = socket(0x2d, 0x2, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2d, 0x4e24, @rand_addr=0x64010100}, 0x10) 45.300026921s ago: executing program 3 (id=9109): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x440b0) 45.143710725s ago: executing program 3 (id=9111): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700000225bd780000000800010003000000000000000000"], 0x1c}}, 0x4000080) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002000010000000000000000000a000002000000000000000008000600ffffff7f"], 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r7, 0x1, 0x1008, 0x7, 0x14d7a36c, 0xa}, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 44.768125674s ago: executing program 3 (id=9118): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x3, 0x7}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00098027bd7000fbdbdf25040000000c00170001"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x38}, 0x48) 6.020090398s ago: executing program 0 (id=9601): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000540)={{0xffffffffffffffff, &(0x7f0000000000)='#:!}\\\x00', 0xc0000, &(0x7f0000000040)={@_ha_fsid={[0x6, 0x8]}, {0x9, 0x7, 0x80, 0x10}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x7}, 0x3, &(0x7f00000004c0)=[{0x1, 0x7, &(0x7f0000000140)='\x7f+\'++)\x00', &(0x7f0000000180)="6ff578939b4aef8d0ea145ba10f50f029af1567f22300c341fef9ba1aed65381dd84f7b1756e1348a972b93f8942a99fcfb9084eb32140582c91a970f848036333db2e399c3ff10daa2f82489488414f6eff06a1f886e6d5d931738e951ff413c8f1b159258fb8274ea995f9a3a277ba29d4c7dedc305fd93e1c5776cfc11a5abac87dbb01ed8b001fcfe54f99d16cfa4e519753ae79b2819936455529ff83d84b01a681e6163dce7f1a260c1dcb0442ed22b0e187f0fa5191f813c17f6070a7a04090a07550a09561f633470086dd6e5a371453810203128bee06fbbdfd0eedc19f17d1be36fa425ccf49", 0xeb, 0x12}, {0x2, 0x7, &(0x7f0000000300)='-\'-/\x00', &(0x7f0000000340)="ab31a89ab80b94391430f1194b8289b868e8bd3646825646eafff64419db722e1ea20d322ae07944eb", 0x29, 0x2}, {0x2, 0xfffffff7, &(0x7f0000000380)='$^}\\%1$(!&&\'\'/&\\]\x00', &(0x7f00000003c0)="22b36c8bdd6ece61d45a1efb18b384038cd24d90c3903f794bba0c31cfb14137a5a3bf8f61e0c3ae84d8888184b7f8366acc6dbf9213abcae752a611238cee70e64a97404fbc2c7aa9f1bd869e7e44dad088a0f5d164e00f011049c17d4f9cdb0b8c09920ee72fe3c2a81243a4037869ac2b68c56087af3e127e2da0d8d084b8d6a41ae2c4e0485b1b32e04a9c274dbd945dc73e7ea2f85c0b15dcf79424e6ad82ac98bde84b1e45590c921cd4edbc0d8962e26c6d5a7afa60d0943eb392768dc1fd8b645375461c891f98599d8462ce97331b47a9f7f4fd962b2d612f6d9ec59ca6f05ac067a6152a86bd", 0xeb, 0x8}]}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x8c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc, 0x36}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x4}, @device_a, @broadcast}}, @NL80211_ATTR_FRAME={0x4f, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5}, @device_b, @device_b, @from_mac=@broadcast, {0x6, 0x40}}, @sp_mp_confirm={0xf, 0x2, {0x9cb1, @random=0x40, {0x1, 0x7, [{0xb}, {0x48}, {0x24, 0x1}, {0x9}, {0x24}, {0x3, 0x1}, {0x2}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x800, 0x1, 0x3, 0x0, {0x7, 0x3, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x8}}}}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x2d}}, &(0x7f0000000480)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x44, r5, 0x600, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}}, 0x800) sendmmsg$unix(r2, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20008880}}], 0x2, 0x4c054) 5.962042967s ago: executing program 0 (id=9603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r4, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r7, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xc8, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x4}}}, @NL80211_ATTR_FRAME={0x8e, 0x33, @ctrl_frame=@bar={{}, {0x3}, @device_a, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0xa}, [{0x0, 0x7, {0x6, 0x3}, "1f829ecb67937e96"}, {0x0, 0xb, {0x5, 0xf}, "f67233220cb31534"}, {0x0, 0x4, {0x9, 0x2}, "8501b10b77be3202"}, {0x0, 0x7, {0x4, 0xfc}, "214c34616c9326f7"}, {0x0, 0x9, {0x3, 0xc0}, "d799b8087ea7f430"}, {0x0, 0xa, {0x0, 0x8}, "875abccb270d461e"}, {0x0, 0x9, {0x6, 0xd}, "3c467ed846183901"}, {0x0, 0x9, {0xf, 0x19f}, "22ee1908c7be1c91"}, {0x0, 0xd, {0xc, 0x7}, "44ab0e31896b34ec"}, {0x0, 0x7, {0x1, 0x3}, "9196dcf50558cf76"}]}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000170a01020000000000000009000000000900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40004d0}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f00000009c0)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000740)=""/85, 0x55}, {&(0x7f00000007c0)=""/56, 0x38}, {&(0x7f0000000800)=""/229, 0xe5}, {&(0x7f0000000900)=""/5, 0x5}], 0x8}, 0x1) 5.805421373s ago: executing program 0 (id=9606): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000008c0)={{0x3, 0x2, 0x1, 0x6, 0x1dfb}, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104d000000000063012d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 5.694162034s ago: executing program 0 (id=9609): getsockopt(0xffffffffffffffff, 0x8000, 0x4, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0xc8, &(0x7f0000000300)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@x25={0x805, {0x0, 0x81, 0x23, "ea587611c11910bb767884b8d553fcd1403a5e7b506cd2530e307a18f59c8c1f61e4bd62febd377dd4d25148d78d253fddd48e51d4ae16a4b72512fe53ebd660da8945220a64acd3b4ad015c3e4c6ad26d25ed1ea63ff5f3b3d9ec3f9fc932b926d452b42cd1026945f6c677a4aeb138afedba4c7be17d031a86e167b520b8fe895336b82d9a7ef60563f16edd3c4a178b652f510e80b9fd4d1e6785debf355058c9ee6881285f8c923666b456be259647c10f91968571"}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000000010000104feffffff0400000000000000", @ANYRES32=0x0, @ANYBLOB="72b8817dbcb5f31a140003006272696467655f736c6176655f3000003c001280110001006272060067655f736c617665000000002400058005001e000000000008002500020000000500210001"], 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) 5.501558108s ago: executing program 0 (id=9613): r0 = socket(0x29, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x3, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0xff}, 0x18) sendmmsg(r3, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}, {&(0x7f0000000d40)="53e213219e7a102f23effe423dedae63167c487fd9d2cefdbd0098607e24882dbe88e9b22633e7757e5c9f420814b265d37c17cb2444cd0014fe9faacaaabf0c26081c8b3f2a799bbde1f7fb97ae262577e6e666cd1f7b9dfbabec42c57cb4bafe11cf51c16722873ba09f496ca34a7f42239b9f9e7939a538bd900b308861aa6a636ed309e199c2e3f137b9e966596b63556d47a52e177a43a3e6ad43ebd14b4f62c2d35fd533cfa5222e73f6d5436a1c887c09777ba59a0b35ee8abb124c5b05492095cddf62510bdecdfbbf0cf96eb8e75803b75ae304", 0xd8}, {&(0x7f0000000e40)="abb9b518775080357231153a57", 0xffffff81}], 0x4}}], 0x1, 0x40000f5) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@delchain={0x44, 0x65, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x4, 0xe}, {0xe, 0xa}, {0x7, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @TCA_RATE={0x6, 0x5, {0x1, 0xc}}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_CHAIN={0x8, 0xb, 0xe7e}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0x7ffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 5.320120933s ago: executing program 0 (id=9616): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd, 0x7f}}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd, 0x7f}}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async) 1.963638937s ago: executing program 1 (id=9661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="baea67cd07613c5a0007009078001809c4000502ffffff070000ffc10002d5880ff5463f1d8e1843a910a77b82a2272ddb12ac2b0c72bf24e510f55a95a8a1d809258a2d28cbd1cae040ce72b42ca18537b525698899b889e7abf4db1b333bbe632ed5021c4ffa6582c56b3d70271395786245ba1942bd3f2a52d321a087e1b24847f48e0d97eacda83d7e3877c98c838e8ab8d1e123dc1d696de1c67450c26a52bd8a45"], 0xfd6c) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000150001002abd7000ffdbdf2502180100", @ANYRES32=r4, @ANYBLOB="0500e43310e0eaa1579e7a007974543cd8915795c0"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r5, 0x1, 0x2c, 0x0, &(0x7f0000000500)) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000110000080000000000000000000a3c182cd0c80256bdbf2a680cbad2450c224f9af551b09800000012410e7d4800000000000000020000000900020073797a3100000000000900010073"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x10) 1.694533492s ago: executing program 1 (id=9664): r0 = socket(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r5, 0x0, 0x0, 0x800) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r2, &(0x7f00000006c0)="5c72292c2cb4504449dbff75bb9fc31e1d0a14e7e0dd389b91e44eead298d42224fd32bca3a132e7dfff949aa81e56d6a289e642318b4cc0c3f329efebac3d37c8074ee2f0d77bb52b78d20f90dbb20ca31cb45ff902c61dc53b537daf03f64aed2a32db5217e853d26fb5ef0b36722ac091873a76eb6f31ca2a6f0bb584490baf9d0812c86df43a4b35a00d58716a5005ceecd59b51df7a1edde1bd59", &(0x7f0000000780)=@tcp=r3}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000280)={'macsec0\x00', {0x2, 0x4e24, @multicast2}}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000b00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x138, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x372}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3a63}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xef4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000018}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) (async) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000001c0)) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x8) (async) pwritev(r9, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!G', 0x3}], 0x1, 0x73a, 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.346036879s ago: executing program 1 (id=9666): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f00050400000000da5a15e113"], 0x114}], 0x1, 0x0, 0x0, 0x881}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) (async) listen(r0, 0x0) (async) accept(r0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f00050400000000da5a15e113"], 0x114}], 0x1, 0x0, 0x0, 0x881}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) 1.094835409s ago: executing program 1 (id=9668): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50002, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) socket(0x2b, 0x80801, 0x1) (async) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r4, 0x11e, 0x17, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xa, 0x2}, {0x2, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x880) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xa, 0x2}, {0x2, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x880) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a00010027bd7000fcdbdf2502e9ffffff0000000800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4c830) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0x2, 0x4070bd28, 0x20008040, {0x0, 0x0, 0x0, r7, {0xffe0, 0xffe0}, {}, {0xc, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0x2, 0x4070bd28, 0x20008040, {0x0, 0x0, 0x0, r7, {0xffe0, 0xffe0}, {}, {0xc, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6017010000182bfffe8000000000000000000000000000bbff02000000000000000000000000000100000000001890780400000000000000000000000000000014cebd2f62a8bf6eb495f3a351f96f07681598b061f08f40f100498d87f7eb6f154f48a047557778dc4b7fb90976ea01edca2137595b3e8c19320f41584fc41200"], 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x40041) (async) sendmsg$inet(r9, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x40041) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x80010, r0, 0x215eb000) socket(0x8, 0x1, 0x7) (async) socket(0x8, 0x1, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000020000001000000000000000141000000180017000002000000000069623a677265746170300000d185c7baa585b41d71"], 0x34}}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_TOL(r10, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="200029bd8500fbdbbfa50100000000001000ac98b3ef00f500767bb79a5f0614001800797a554821010000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4045}, 0x48000) 1.05240421s ago: executing program 5 (id=9669): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x8}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000790438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000790438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r4, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r4, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601000000000000000000000000000d000300682173683a6e6574000000000900020073797a32000000001400078008000800000000000800064000000000050001000700000005000400000000000500050002000000"], 0x5c}}, 0x4000) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601000000000000000000000000000d000300682173683a6e6574000000000900020073797a32000000001400078008000800000000000800064000000000050001000700000005000400000000000500050002000000"], 0x5c}}, 0x4000) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000005bf645498fb446a99026d76791e4de", @ANYRES32, @ANYBLOB="0305000000000200080025000100000008002c00"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000040)={r9, 0x8}, 0xc) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) (async) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) 957.392835ms ago: executing program 6 (id=9670): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pselect6(0x40, &(0x7f0000000000)={0xffffffff80000000, 0x8, 0xf, 0x5, 0x6, 0x9f, 0x6, 0x6}, &(0x7f0000000040)={0xe7, 0x3, 0x93c, 0x6, 0xfffffffffffffffe, 0x4, 0x3, 0x8}, &(0x7f0000000080)={0x8, 0x3, 0x5, 0x1, 0x1, 0x38000000000, 0x6, 0xd7}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8000]}, 0x8}) (async) pselect6(0x40, &(0x7f0000000000)={0xffffffff80000000, 0x8, 0xf, 0x5, 0x6, 0x9f, 0x6, 0x6}, &(0x7f0000000040)={0xe7, 0x3, 0x93c, 0x6, 0xfffffffffffffffe, 0x4, 0x3, 0x8}, &(0x7f0000000080)={0x8, 0x3, 0x5, 0x1, 0x1, 0x38000000000, 0x6, 0xd7}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8000]}, 0x8}) listen(r2, 0xffffffff) close(0x3) (async) close(0x3) 755.242504ms ago: executing program 1 (id=9671): write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd2a, 0xfffffffd, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r8], 0x7c}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x1b, &(0x7f0000000140)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94) 754.176016ms ago: executing program 6 (id=9672): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001380)=@ethtool_cmd={0xa, 0x8, 0x57f959ea, 0x8, 0x6, 0x3, 0xc0, 0x4, 0xca, 0x2, 0x0, 0x4, 0x3, 0x3, 0x7, 0x8, [0x8, 0x34]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0504183e4d33a98bd8e90e", @ANYRES16=r2, @ANYBLOB="010028bd7000000003001a00000018000180140002006d6163766c616e300000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f0000000840)="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", 0x1c7}], 0x2}, 0x8045) ioctl(r3, 0x8b2a, &(0x7f0000000040)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff"], 0x50}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1f8, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x1a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x62, 0x3, "f32c9b3e0ccd272b527943485f068f369681486a4e5a932e7a499d3571d2d04511f4058b4ca22204975933d4cead3c3c877463efd2af718d0cbef9b277db47fc3d84b4e7db6f7a82e4296b683d5396d2fec3a14e4aaaa85e2793f0c166d0"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ffc877b18e444e79352d80f61fa4709dc5b98361a81d2b4e57b6e82393bc2a794a"}}, @TIPC_NLA_NODE_ID={0xdb, 0x3, "49d530cc38550e4381b414fbc7659b13d6009f81e9102fee2c209480af95ab11c4c78e2bf11821d86ca03eeaa40cd6e6e98d0f0f9224b1df8965d1089eae502ad124452b400bdfd45a0cb99c0ad0f2464d167bc5834e9deb7b7f2a91f51c94b3b716c104e53f65a15d9c0ab627fbc9dfe561bdf8ba63e17efcebc573b75476f3452ed08ab311095266fe0ccd9c4f9f9bfd500b583612fcf6d1f46343b2cda3d57225a4feb03086d02836fe9827d5304b0a5846fff29a346520e03f6e84399c206dcfac3c604d1ffdff51c6374c2896049f0fa466acb283"}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40000}, 0x881) 711.884795ms ago: executing program 5 (id=9673): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, r3, 0x321, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x140048c0}, 0x800) (async) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, r3, 0x321, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x140048c0}, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r4, 0x400454cd, 0x303) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x40048000) (async) sendmmsg$alg(r5, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x40048000) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r6, 0x800442d4, &(0x7f0000000000)=0xf141) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r6, 0x800442d4, &(0x7f0000000000)=0xf141) accept4(r5, 0x0, 0x0, 0x0) 535.614285ms ago: executing program 5 (id=9674): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0xe8b}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) setsockopt(r3, 0x3, 0x1fa, &(0x7f0000000280)="c045bfcbdad87767ba1553583c7e0b86a60b11383f9215bd39c2777aaad2e02357f7f42b9eddabe697bbe0a44ed46d16615bdd264c03480fa08536aeaae7fb4b458d6921d7df88b7f441795f86610b932eac9fa20f5fa42ded7c763acac51c51e7a720caf7436bd842765c43379c1987ba5973e94b7680386625cd86a1c37389bd9a5347ff047ed8e1180ec00a936dd5228ef41a81811becd462ae5dc34208", 0x9f) socket$inet_sctp(0x2, 0x1, 0x84) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32, @ANYBLOB="00000000000000000802000014000000b70300003f0000008500000083000000bf09200000000000550901000000000095000000009bf4ba0aa500"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast1}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000100)={r8, r7}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r9}, 0x14) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x4, 0x7, 0x0, @vifc_lcl_ifindex=r9, @broadcast}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001600", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x2000c800) 351.505ms ago: executing program 6 (id=9675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x5, "111fad"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x40, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}]}}}}}}}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r2, @ANYBLOB="400002803c000100240001"], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x80}, 0x40010) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_int(r5, 0x107, 0x0, &(0x7f0000000080)=0x40, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8c30}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) 287.418962ms ago: executing program 5 (id=9676): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 257.387201ms ago: executing program 1 (id=9677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000002980)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r2 = socket(0x10, 0x3, 0x0) getpeername$unix(r2, &(0x7f0000000600)=@abs, &(0x7f0000000680)=0x6e) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x7, 0x0, 0x0, 0xb, 0x4, 0x7, 0x7, 0x0, 0x2, 0x2, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000380)=@newqdisc={0x1a4, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4101}, {0xffff, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x174, 0x2, {{0x9, 0x7, 0x68, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x8, 0x0, 0xa, 0x7, 0x7fffffff}}, @TCA_NETEM_DELAY_DIST={0x58, 0x2, "0ac4c21c97c317ef034b8d6016eebf2d224333e60f466c31fe932dfcf51774ef175bd03697021fb2d143c6933f2615e62ec885965f0633a061780516987cf7c0b13a8bb7ed3e9fd2ecb3aab8731f586aea7bac6c"}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x7fff, 0xfffffff7, 0x6fd, 0x5}}, @TCA_NETEM_LOSS={0x9c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x9, 0x8, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0xf1ae, 0x5, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x81, 0x0, 0x9, 0x7ff, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x0, 0x0, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x80000001, 0x55a, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0xa, 0x80000001, 0x1, 0x4, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x80000001, 0x1d, 0x4, 0x9}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x80}}]}}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x74, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x74}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r8) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}}}}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000372d6c982523000000000000002a00000008005800000000000e0001006e657464653428767ee603977673696d0000000f0002006e65746465"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 171.519684ms ago: executing program 6 (id=9678): r0 = socket(0xa, 0x2, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r2, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0xc, 0x4) 170.813768ms ago: executing program 5 (id=9679): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0x2, 0x3, 0x2) (async) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000d000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x260, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1c8, 0x206, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0x1ba, 0x410}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x8d, 0x7fff, 0x1, 'snmp_trap\x00', 'syz1\x00', {0xfff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) (async) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r6, r6, 0x0, 0x9) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) 121.918199ms ago: executing program 6 (id=9680): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000052c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_ttl={{0x18, 0x0, 0x2, 0x1000}}], 0x18}}], 0x1, 0x20040814) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pread64(r5, 0x0, 0x0, 0xcd32) connect$pppl2tp(r0, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x1, 0x2, {0xa, 0x36e, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x32) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 59.545163ms ago: executing program 6 (id=9681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf25030000002b00070073797374656d5f753a6f626a6563745f723a63726f6e645f756e69745f66696c655f743a7330000014000600626f6e645f736c6176655f310000000014000200fe8000000000000000000000000000bb0500010001000000140003"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 0s ago: executing program 5 (id=9682): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) close(r1) kernel console output (not intermixed with test programs): .7770': attribute type 10 has an invalid length. [ 862.920640][ T2285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7770'. [ 862.947925][ T2285] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 863.085032][ T2293] netlink: 'syz.3.7773': attribute type 1 has an invalid length. [ 863.159892][ T2293] bond9: entered promiscuous mode [ 863.165418][ T2293] 8021q: adding VLAN 0 to HW filter on device bond9 [ 863.207883][ T2293] 8021q: adding VLAN 0 to HW filter on device bond9 [ 863.225371][ T2293] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 863.235756][ T2293] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 863.248726][ T2293] bond9: (slave ip6gre1): making interface the new active one [ 863.256338][ T2293] ip6gre1: entered promiscuous mode [ 863.263278][ T2293] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 863.293617][ T2295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7774'. [ 863.339107][ T2300] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 863.355902][ T2305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7777'. [ 863.404234][ T2293] syzkaller0: entered promiscuous mode [ 863.409977][ T2293] syzkaller0: entered allmulticast mode [ 863.739959][ T2325] pim6reg: entered allmulticast mode [ 863.894353][ T2341] bridge0: Device is already in use. [ 864.172387][ T2355] v: renamed from veth0_vlan (while UP) [ 864.244463][ T2364] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 864.807726][ T2398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7804'. [ 864.886839][ T2398] veth0: entered promiscuous mode [ 864.927009][ T2397] veth0: left promiscuous mode [ 865.019336][ T2410] xt_TPROXY: Can be used only with -p tcp or -p udp [ 865.060325][ T2413] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 865.449713][ T2427] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7810'. [ 865.458711][ T2427] netlink: 35 bytes leftover after parsing attributes in process `syz.5.7810'. [ 865.467670][ T2427] netlink: 'syz.5.7810': attribute type 5 has an invalid length. [ 865.475409][ T2427] netlink: 'syz.5.7810': attribute type 6 has an invalid length. [ 865.665071][ T2446] netlink: 'syz.5.7813': attribute type 1 has an invalid length. [ 865.774605][ T2446] 8021q: adding VLAN 0 to HW filter on device bond3 [ 865.860743][ T2458] team0: entered promiscuous mode [ 865.893798][ T2458] team_slave_0: entered promiscuous mode [ 865.915860][ T2458] team_slave_1: entered promiscuous mode [ 865.929503][ T2458] geneve1: entered promiscuous mode [ 865.955935][ T2458] team0: left promiscuous mode [ 865.968275][ T2458] team_slave_0: left promiscuous mode [ 865.983753][ T2458] team_slave_1: left promiscuous mode [ 865.996467][ T2458] geneve1: left promiscuous mode [ 866.658218][ T2476] veth5: entered allmulticast mode [ 866.718503][ T2494] openvswitch: netlink: Duplicate or invalid key (type 0). [ 866.793993][ T2494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.139175][ T2518] netlink: 'syz.4.7826': attribute type 8 has an invalid length. [ 867.380910][ T2528] __nla_validate_parse: 2 callbacks suppressed [ 867.380931][ T2528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7830'. [ 867.475999][ T2528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7830'. [ 867.531391][ T2528] netlink: 276 bytes leftover after parsing attributes in process `syz.5.7830'. [ 867.585799][ T2528] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7830'. [ 867.594797][ T2528] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7830'. [ 867.653763][ T2528] gretap1: entered promiscuous mode [ 867.681226][ T2528] gretap1: entered allmulticast mode [ 867.871352][ T2558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7834'. [ 867.893146][ T2558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7834'. [ 868.017680][ T2564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.029788][ T2564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.039588][ T2571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7835'. [ 868.039839][ T2564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.070728][ T2564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.113977][ T2575] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 868.157160][ T2581] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7836'. [ 868.355110][T27067] bond2: (slave bridge0): link status definitely down, disabling slave [ 868.380333][T27067] bond2: now running without any active interface! [ 868.801978][ T2597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7842'. [ 868.822059][ T2597] xt_hashlimit: size too large, truncated to 1048576 [ 868.958917][ T2607] gre0: entered promiscuous mode [ 868.978772][ T2607] gre0: entered allmulticast mode [ 868.997878][ T2603] netlink: 'syz.3.7844': attribute type 1 has an invalid length. [ 869.004638][ T2613] netlink: 'syz.5.7846': attribute type 16 has an invalid length. [ 869.015248][ T2613] veth0_macvtap: entered allmulticast mode [ 869.279903][ T2624] bridge0: port 3(syz_tun) entered blocking state [ 869.296595][ T2624] bridge0: port 3(syz_tun) entered disabled state [ 869.317788][ T2636] netlink: 'syz.4.7851': attribute type 49 has an invalid length. [ 869.329412][ T2624] syz_tun: entered allmulticast mode [ 869.373837][ T2624] syz_tun: entered promiscuous mode [ 869.389823][ T2624] bridge0: port 3(syz_tun) entered blocking state [ 869.396475][ T2624] bridge0: port 3(syz_tun) entered forwarding state [ 870.043165][ T2668] siw: device registration error -23 [ 870.442659][ T35] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.453864][ T35] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.469452][ T35] .` (unregistering): (slave dummy0): Releasing backup interface [ 870.479109][ T35] .` (unregistering): Released all slaves [ 870.489001][ T35] bond1 (unregistering): Released all slaves [ 870.503208][ T35] bond2 (unregistering): Released all slaves [ 870.524925][ T35] bond3 (unregistering): Released all slaves [ 870.543094][ T35] bond4 (unregistering): (slave veth9): Releasing active interface [ 870.551436][ T35] batadv2: entered promiscuous mode [ 870.559615][ T35] bond4 (unregistering): (slave batadv2): Releasing active interface [ 870.569556][ T35] bond4 (unregistering): Released all slaves [ 870.589105][ T35] bond5 (unregistering): Released all slaves [ 870.607780][ T35] bond6 (unregistering): Released all slaves [ 870.646287][ T35] bond7 (unregistering): Released all slaves [ 870.669112][ T35] bond8 (unregistering): Released all slaves [ 870.696623][ T35] bond9 (unregistering): Released all slaves [ 870.721681][ T35] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 870.737555][ T35] bond10 (unregistering): Released all slaves [ 870.770916][ T35] bond11 (unregistering): Released all slaves [ 871.231325][ T2704] sctp: [Deprecated]: syz.1.7867 (pid 2704) Use of int in max_burst socket option deprecated. [ 871.231325][ T2704] Use struct sctp_assoc_value instead [ 871.330437][ T35] : left promiscuous mode [ 871.762305][ T5765] IPVS: starting estimator thread 0... [ 871.823162][ T2740] netlink: 'syz.1.7873': attribute type 1 has an invalid length. [ 871.851301][ T2740] netlink: 'syz.1.7873': attribute type 4 has an invalid length. [ 872.000352][ T35] tipc: Left network mode [ 872.043734][ T35] IPVS: stopping backup sync thread 18946 ... [ 872.089693][ T2741] IPVS: using max 30 ests per chain, 72000 per kthread [ 872.760446][ T2796] macvtap0: entered allmulticast mode [ 872.774288][ T2796] veth0_macvtap: entered allmulticast mode [ 873.172698][ T2817] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 873.191156][ T2817] __nla_validate_parse: 22 callbacks suppressed [ 873.191177][ T2817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7894'. [ 873.220950][ T2817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7894'. [ 873.221093][ T5954] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.238893][ T5954] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.248713][ T5954] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.248811][ T2817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7894'. [ 873.298537][ T5954] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.689226][ T2843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7898'. [ 873.986565][ T35] hsr_slave_0: left promiscuous mode [ 874.019775][ T35] hsr_slave_1: left promiscuous mode [ 874.029802][ T35] veth1_vlan: left allmulticast mode [ 874.035447][ T35] veth0_macvtap: left promiscuous mode [ 874.080850][ T35] veth1_vlan: left promiscuous mode [ 874.118885][ T2872] IPVS: set_ctl: invalid protocol: 59 172.30.1.5:20000 [ 874.688931][ T35] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 874.851031][ T35] team0 (unregistering): Port device team_slave_1 removed [ 875.076158][ T2894] bridge_slave_1: left promiscuous mode [ 875.082086][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.090910][ T2894] bridge_slave_0: left allmulticast mode [ 875.097699][ T2894] bridge_slave_0: left promiscuous mode [ 875.103686][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.226409][ T2897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7906'. [ 875.545719][ T2900] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7907'. [ 875.574177][ T35] IPVS: stop unused estimator thread 0... [ 875.800157][ T2905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7909'. [ 875.809276][ T2905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7909'. [ 875.820408][ T2905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7909'. [ 875.829714][ T2905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7909'. [ 876.428674][ T2821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 877.014404][ T2930] syzkaller1: entered promiscuous mode [ 877.019959][ T2930] syzkaller1: entered allmulticast mode [ 877.414232][ T2953] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 877.425887][ T2953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.287781][ T2997] debugfs: '1ùà^!' already exists in 'ieee80211' [ 878.605650][ T3017] __nla_validate_parse: 2 callbacks suppressed [ 878.605669][ T3017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7943'. [ 878.695450][ T3020] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 878.733644][ T35] tipc: Subscription rejected, illegal request [ 878.735473][ T3017] vlan3: entered allmulticast mode [ 878.745396][ T3017] bridge0: entered allmulticast mode [ 878.782348][ T3017] bridge0: port 1(erspan0) entered blocking state [ 878.801411][ T3017] bridge0: port 1(erspan0) entered disabled state [ 878.831253][ T3017] erspan0: entered allmulticast mode [ 878.839970][ T3017] bridge0: port 1(erspan0) entered blocking state [ 878.846627][ T3017] bridge0: port 1(erspan0) entered forwarding state [ 879.333798][ T3053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7953'. [ 879.441582][ T3057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.460336][ T3057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7954'. [ 879.479701][ T3057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7954'. [ 879.533108][T21329] Bluetooth: hci3: command tx timeout [ 879.841709][ T3071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7961'. [ 879.851104][ T3071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7961'. [ 880.278905][ T3084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7963'. [ 880.307653][ T3084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7963'. [ 880.880656][ T3116] tipc: Enabled bearer , priority 0 [ 880.889958][ T3116] syzkaller0: entered promiscuous mode [ 880.935376][ T3116] syzkaller0: entered allmulticast mode [ 880.944081][ T3116] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 880.995429][ T3116] tipc: Resetting bearer [ 881.064445][ T3115] tipc: Resetting bearer [ 881.105062][ T3115] tipc: Disabling bearer [ 881.334566][ T3147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7981'. [ 881.389681][ T3150] netlink: 'syz.4.7980': attribute type 15 has an invalid length. [ 881.411602][ T3150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7980'. [ 881.589191][ T3160] netlink: 'syz.1.7983': attribute type 15 has an invalid length. [ 881.657274][ T3165] syzkaller0: entered promiscuous mode [ 881.664417][ T3165] syzkaller0: entered allmulticast mode [ 882.563785][ T3199] bond16: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 882.737080][ T3201] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20001 [ 883.125502][ T29] audit: type=1800 audit(1784150302.477:11): pid=3244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8000" name="memory.events" dev="tmpfs" ino=2058 res=0 errno=0 [ 883.266781][ T3253] bond6: entered promiscuous mode [ 883.271937][ T3253] bond6: entered allmulticast mode [ 883.277937][ T3253] 8021q: adding VLAN 0 to HW filter on device bond6 [ 883.319350][ T3252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 883.498890][ T3264] netlink: 'syz.4.8006': attribute type 28 has an invalid length. [ 883.506976][ T3264] netlink: 'syz.4.8006': attribute type 3 has an invalid length. [ 883.599587][ T3271] xt_socket: unknown flags 0x8 [ 883.867876][ T3278] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 883.905733][ T3268] tipc: Enabled bearer , priority 0 [ 883.974889][ T3265] tipc: Disabling bearer [ 884.017888][ T3293] __nla_validate_parse: 7 callbacks suppressed [ 884.017909][ T3293] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8013'. [ 884.239467][ T3304] netlink: 'syz.5.8018': attribute type 1 has an invalid length. [ 884.353749][ T3302] xt_bpf: check failed: parse error [ 884.729401][ T3324] vlan3: entered promiscuous mode [ 884.759979][ T3324] hsr0: entered promiscuous mode [ 884.765372][ T3324] vlan3: entered allmulticast mode [ 884.858186][ T3324] hsr0: entered allmulticast mode [ 884.922137][ T3324] hsr_slave_0: entered allmulticast mode [ 884.927856][ T3324] hsr_slave_1: entered allmulticast mode [ 884.934523][ T5753] IPVS: starting estimator thread 0... [ 884.953407][ T3343] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8026'. [ 885.057389][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.109508][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 885.357041][ T3342] IPVS: using max 36 ests per chain, 86400 per kthread [ 885.555978][ T3367] netlink: 'syz.1.8033': attribute type 11 has an invalid length. [ 885.596277][ T3367] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8033'. [ 885.844508][ T3362] netlink: 'syz.0.8032': attribute type 27 has an invalid length. [ 885.929334][ T3362] netlink: 'syz.0.8032': attribute type 4 has an invalid length. [ 886.033995][ T3362] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8032'. [ 886.521786][ T3415] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8044'. [ 886.594523][ T3415] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8044'. [ 886.608841][ T3419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8045'. [ 886.621141][ T3417] af_packet: tpacket_rcv: packet too big, clamped from 13612 to 3952. macoff=96 [ 886.649691][ T3421] xt_check_table_hooks: 55 callbacks suppressed [ 886.649806][ T3421] x_tables: unsorted entry at hook 2 [ 886.741295][ T3423] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8047'. [ 886.753206][ T3423] openvswitch: netlink: Flow actions attr not present in new flow. [ 886.914168][ T3432] netlink: 'syz.0.8050': attribute type 1 has an invalid length. [ 886.950609][ T3433] netlink: 'syz.0.8050': attribute type 1 has an invalid length. [ 887.014037][ T3446] netlink: 'syz.5.8053': attribute type 4 has an invalid length. [ 887.097327][ T3456] netlink: 'syz.5.8053': attribute type 4 has an invalid length. [ 887.124894][ T3433] 8021q: adding VLAN 0 to HW filter on device bond7 [ 887.218692][ T3446] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8053'. [ 887.299047][ T3468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 887.382506][ T3471] netlink: 3080 bytes leftover after parsing attributes in process `syz.0.8058'. [ 887.461779][ T3471] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 887.509410][ T3471] Cannot find add_set index 4 as target [ 887.522919][ T3480] netlink: 'syz.5.8061': attribute type 2 has an invalid length. [ 887.815917][ T3496] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 888.120591][ T3516] syzkaller1: entered promiscuous mode [ 888.145332][ T3516] syzkaller1: entered allmulticast mode [ 888.261585][ T3526] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 889.088022][ T3558] xt_HMARK: proto mask must be zero with L3 mode [ 889.345660][ T3570] __nla_validate_parse: 5 callbacks suppressed [ 889.345681][ T3570] netlink: 3080 bytes leftover after parsing attributes in process `syz.1.8085'. [ 889.430262][ T3570] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.8085'. [ 890.281706][ T3613] openvswitch: netlink: Missing valid actions attribute. [ 890.325564][ T3613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.419969][ T3613] netlink: 'syz.1.8094': attribute type 3 has an invalid length. [ 891.015713][ T3637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8103'. [ 891.153187][ T3637] team0 (unregistering): Port device team_slave_0 removed [ 891.239114][ T3637] team0 (unregistering): Port device team_slave_1 removed [ 891.330430][ T3644] tipc: Enabling of bearer rejected, media not registered [ 891.472908][ T3648] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8107'. [ 891.514637][ T3642] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 891.540499][ T3650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.583428][ T3648] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8107'. [ 891.592431][ T3648] netlink: 'syz.0.8107': attribute type 6 has an invalid length. [ 891.600214][ T3648] netlink: 'syz.0.8107': attribute type 5 has an invalid length. [ 891.607957][ T3648] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8107'. [ 891.621307][ T3642] bond4 (unregistering): Released all slaves [ 891.776973][ T3646] dvmrp1: entered allmulticast mode [ 891.936472][ T3661] syzkaller1: entered promiscuous mode [ 891.942053][ T3661] syzkaller1: entered allmulticast mode [ 892.005773][ T3661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8109'. [ 892.015183][ T3661] netlink: 'syz.1.8109': attribute type 7 has an invalid length. [ 892.062616][ T3661] netlink: 'syz.1.8109': attribute type 8 has an invalid length. [ 892.070413][ T3661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8109'. [ 892.682819][ T3688] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8117'. [ 892.704050][ T3686] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8118'. [ 892.713710][ T3689] 8021q: VLANs not supported on gre0 [ 892.734844][ T3688] 8021q: VLANs not supported on gre0 [ 893.565846][ T3724] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 893.579002][ T3724] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 893.803908][ T3736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 894.356328][ T3747] __nla_validate_parse: 49 callbacks suppressed [ 894.356348][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 894.402214][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 894.436887][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 894.524826][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 894.567552][ T3774] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8140'. [ 894.582190][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 894.591794][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 894.631410][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 894.701791][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 894.761212][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 895.717335][ T3819] syzkaller0: entered promiscuous mode [ 895.723097][ T3819] syzkaller0: entered allmulticast mode [ 896.004378][ T3822] netlink: 'syz.0.8156': attribute type 16 has an invalid length. [ 896.080572][ T3822] netlink: 'syz.0.8156': attribute type 17 has an invalid length. [ 897.756253][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 900.246314][ T3822] gre0: left promiscuous mode [ 900.251059][ T3822] gre0: left allmulticast mode [ 900.303768][ T3822] bridge_slave_1: left allmulticast mode [ 900.335768][ T3822] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 900.427715][ T3838] bridge0: port 1(erspan0) entered disabled state [ 900.616892][ T3838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.634466][ T3838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.691088][ T3838] veth0_macvtap: left allmulticast mode [ 900.732652][ T3838] bond1: left promiscuous mode [ 900.769016][ T3838] bond2: left promiscuous mode [ 900.779228][ T3838] geneve2: left promiscuous mode [ 900.787393][ T3838] geneve3: left promiscuous mode [ 900.792404][ T3838] geneve3: left allmulticast mode [ 900.815763][ T3838] bond5: left promiscuous mode [ 900.820725][ T3872] __nla_validate_parse: 12 callbacks suppressed [ 900.820746][ T3872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8167'. [ 900.820856][ T3838] bridge5: left promiscuous mode [ 900.847217][ T3838] vlan3: left allmulticast mode [ 900.852139][ T3838] bridge0: left allmulticast mode [ 900.858709][ T3838] bond6: left promiscuous mode [ 900.876251][ T3838] bond6: left allmulticast mode [ 900.897427][ T5638] Bluetooth: hci3: link tx timeout [ 900.903084][ T5638] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 900.945880][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.954818][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 900.970854][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.980521][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 901.057197][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.111105][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 901.118162][ T3879] netlink: 90 bytes leftover after parsing attributes in process `syz.4.8168'. [ 901.164491][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.191889][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 901.203088][ T3887] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8170'. [ 901.296955][ T3891] netlink: 'syz.1.8173': attribute type 1 has an invalid length. [ 901.433919][ T3894] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8174'. [ 901.455300][T21329] Bluetooth: hci3: link tx timeout [ 901.463931][T21329] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 901.535737][T21329] Bluetooth: hci3: link tx timeout [ 901.540960][T21329] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 901.612582][ T3894] syzkaller0: entered promiscuous mode [ 901.618115][ T3894] syzkaller0: entered allmulticast mode [ 901.857687][ T3918] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8174'. [ 902.310155][ T3935] syzkaller0: entered promiscuous mode [ 902.347665][ T3935] syzkaller0: entered allmulticast mode [ 902.423175][T21329] Bluetooth: hci3: link tx timeout [ 902.428376][T21329] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 902.458017][T21329] Bluetooth: hci3: link tx timeout [ 902.463254][T21329] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 902.983396][T21329] Bluetooth: hci3: command 0x0406 tx timeout [ 903.456568][ T3962] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8183'. [ 903.760386][ T3970] syzkaller0: entered promiscuous mode [ 903.766441][ T3970] syzkaller0: entered allmulticast mode [ 904.389114][ T3918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 904.636496][ T3990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.682010][ T3990] xt_hashlimit: size too large, truncated to 1048576 [ 904.969388][ T3999] tls_set_device_offload_rx: netdev not found [ 905.302655][ T4015] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8197'. [ 905.849545][ T4033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8201'. [ 905.867031][ T4033] bridge_slave_0: default FDB implementation only supports local addresses [ 905.894119][ T4033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8201'. [ 906.002725][ T4038] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 906.013047][ T4038] bond4 (unregistering): Released all slaves [ 906.047185][ T4033] netlink: 'syz.4.8201': attribute type 2 has an invalid length. [ 906.506274][ T4066] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8211'. [ 906.650427][ T4069] netlink: 'syz.0.8209': attribute type 49 has an invalid length. [ 906.733294][ T4074] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 906.753945][ T4061] syzkaller0: entered promiscuous mode [ 906.760373][ T4061] syzkaller0: entered allmulticast mode [ 907.051452][ T4084] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8215'. [ 911.850468][ T4112] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8219'. [ 912.044918][ T4120] netlink: 'syz.3.8223': attribute type 21 has an invalid length. [ 912.064872][ T4120] IPv6: NLM_F_CREATE should be specified when creating new route [ 912.092777][ T4122] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 912.115452][ T4122] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 912.301254][ T4135] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8228'. [ 912.420416][ T4143] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8231'. [ 912.513761][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8231'. [ 912.568818][ T4153] sctp: [Deprecated]: syz.0.8232 (pid 4153) Use of int in max_burst socket option. [ 912.568818][ T4153] Use struct sctp_assoc_value instead [ 912.633010][ T4154] sctp: [Deprecated]: syz.0.8232 (pid 4154) Use of int in max_burst socket option. [ 912.633010][ T4154] Use struct sctp_assoc_value instead [ 912.766378][ T4163] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8234'. [ 912.777945][ T4164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8233'. [ 912.803549][ T4164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8233'. [ 912.829486][ T4164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8233'. [ 912.977117][ T4175] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8237'. [ 913.097918][ T4180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8238'. [ 913.517373][ T4196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.221221][ T4223] netlink: 'syz.1.8251': attribute type 11 has an invalid length. [ 914.717787][ T4243] lo: Master is either lo or non-ether device [ 915.413072][ T4258] syzkaller1: entered promiscuous mode [ 915.444037][ T4258] syzkaller1: entered allmulticast mode [ 916.447007][ T4295] tipc: Enabled bearer , priority 0 [ 916.466573][ T4296] xt_hashlimit: size too large, truncated to 1048576 [ 917.432983][ T4349] netlink: 'syz.3.8282': attribute type 4 has an invalid length. [ 917.466552][ T4349] __nla_validate_parse: 2 callbacks suppressed [ 917.466570][ T4349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8282'. [ 917.654168][ T4364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 917.800787][ T4373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8287'. [ 917.891412][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8290'. [ 917.928435][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.025640][ T4379] netlink: 'syz.5.8290': attribute type 1 has an invalid length. [ 918.033442][ T4379] netlink: 'syz.5.8290': attribute type 6 has an invalid length. [ 918.421780][ T4412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8298'. [ 918.456926][ T4420] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8300'. [ 918.478289][ T4420] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8300'. [ 918.494939][ T4418] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 918.864512][ T4441] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 918.877008][ T4441] bond10 (unregistering): Released all slaves [ 921.286933][ T4410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 921.486516][ T4445] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8305'. [ 921.524207][ T4447] openvswitch: netlink: IP tunnel dst address not specified [ 921.545506][ T4449] openvswitch: netlink: IP tunnel dst address not specified [ 921.575045][ T4447] openvswitch: netlink: IP tunnel dst address not specified [ 921.764313][ T4466] xt_l2tp: missing protocol rule (udp|l2tpip) [ 922.170260][ T4481] lo speed is unknown, defaulting to 1000 [ 922.177761][ T4481] C speed is unknown, defaulting to 1000 [ 922.954410][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8325'. [ 922.987411][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8325'. [ 923.047390][ T4516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8328'. [ 923.111290][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8325'. [ 923.136263][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8325'. [ 923.240809][ T4519] syzkaller0: entered promiscuous mode [ 923.246351][ T4519] syzkaller0: entered allmulticast mode [ 923.532489][ T4527] netlink: 'syz.5.8332': attribute type 14 has an invalid length. [ 923.605781][ T4533] netlink: 'syz.5.8332': attribute type 14 has an invalid length. [ 924.273542][ T4554] macvtap1: entered promiscuous mode [ 924.286595][ T4554] macvtap1: entered allmulticast mode [ 924.292078][ T4554] veth1_vlan: entered allmulticast mode [ 924.644411][ T4574] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 924.849866][ T4586] syzkaller0: entered promiscuous mode [ 924.855388][ T4586] syzkaller0: entered allmulticast mode [ 924.862206][ T4594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8347'. [ 924.873625][ T4595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8347'. [ 925.194975][ T4604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8351'. [ 925.241654][ T4604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.251897][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8351'. [ 925.512183][ T4623] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8356'. [ 925.620922][ T4628] netlink: 'syz.4.8360': attribute type 39 has an invalid length. [ 926.077504][ T4660] netlink: 'syz.4.8370': attribute type 3 has an invalid length. [ 926.216189][ T4664] netlink: 'syz.1.8372': attribute type 23 has an invalid length. [ 926.266943][ T4670] netlink: 'syz.0.8371': attribute type 1 has an invalid length. [ 926.855003][ T4707] netlink: 'syz.5.8387': attribute type 1 has an invalid length. [ 927.007847][ T4712] netlink: 'syz.4.8389': attribute type 14 has an invalid length. [ 927.025089][T27067] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 927.025184][ T4712] netlink: 'syz.4.8389': attribute type 14 has an invalid length. [ 927.061510][T27067] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 927.070487][T27067] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 927.133891][ T4717] nbd: must specify a device to reconfigure [ 927.737818][ T4746] netlink: 'syz.3.8399': attribute type 16 has an invalid length. [ 927.846838][ T4746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.900269][ T4746] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 928.366177][ T4764] __nla_validate_parse: 14 callbacks suppressed [ 928.366196][ T4764] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8405'. [ 928.376635][ T4758] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 928.449880][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8402'. [ 928.507664][ T4763] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 928.523772][ T4763] bond4 (unregistering): Released all slaves [ 928.553282][ T4772] veth1_to_bond: entered allmulticast mode [ 928.646976][ T4769] veth1_to_bond: left allmulticast mode [ 928.967061][ T4788] IPv6: sit1: Disabled Multicast RS [ 929.052339][ T4792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8416'. [ 929.282438][ T4802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8418'. [ 929.318449][ T4798] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 929.344385][ T4798] sctp: [Deprecated]: syz.4.8417 (pid 4798) Use of int in maxseg socket option. [ 929.344385][ T4798] Use struct sctp_assoc_value instead [ 929.373777][ T4807] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8420'. [ 929.610224][ T4814] SET target dimension over the limit! [ 929.627547][ T4818] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8424'. [ 929.631419][ T4814] sctp: Trying to GSO but underlying device doesn't support it. [ 929.739810][ T4822] validate_nla: 1 callbacks suppressed [ 929.739831][ T4822] netlink: 'syz.1.8425': attribute type 39 has an invalid length. [ 930.028112][ T4843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.080339][ T4843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8431'. [ 930.194886][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8434'. [ 930.484157][ T4865] openvswitch: netlink: Multiple metadata blocks provided [ 930.854057][ T4878] netlink: 'syz.0.8439': attribute type 4 has an invalid length. [ 931.130104][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8444'. [ 931.267043][ T4896] netlink: 'syz.0.8446': attribute type 4 has an invalid length. [ 931.282646][ T4896] netlink: 'syz.0.8446': attribute type 4 has an invalid length. [ 931.430960][ T4896] bond8: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 931.444344][ T4896] bond8 (unregistering): Released all slaves [ 931.824692][ T4927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8454'. [ 931.827662][ T4929] netlink: 'syz.4.8455': attribute type 10 has an invalid length. [ 931.833707][ T4927] netlink: 'syz.1.8454': attribute type 3 has an invalid length. [ 931.859099][ T4927] netlink: 'syz.1.8454': attribute type 3 has an invalid length. [ 931.870674][ T4930] rdma_op ffff888076cad9f0 conn xmit_rdma 0000000000000000 [ 931.878777][ T4930] netlink: 'syz.4.8455': attribute type 10 has an invalid length. [ 931.879209][ T4929] bond13: (slave ): Releasing active interface [ 931.937969][ T4932] netlink: 'syz.1.8456': attribute type 1 has an invalid length. [ 932.053439][ T4932] 8021q: adding VLAN 0 to HW filter on device bond4 [ 932.141305][ T4932] vlan4: entered promiscuous mode [ 932.146402][ T4932] bond4: entered promiscuous mode [ 932.151708][ T4932] vlan4: entered allmulticast mode [ 932.156866][ T4932] bond4: entered allmulticast mode [ 932.265608][ T4932] bond5: option xmit_hash_policy: invalid value (64) [ 932.303348][ T4932] bond5 (unregistering): Released all slaves [ 932.331490][ T4935] netlink: 'syz.1.8456': attribute type 9 has an invalid length. [ 932.380331][ T4935] bond4: (slave bridge5): making interface the new active one [ 932.389915][ T4935] bridge5: entered promiscuous mode [ 932.395933][ T4935] bridge5: entered allmulticast mode [ 932.405144][ T4935] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 932.519266][ T4964] xt_TCPMSS: Only works on TCP SYN packets [ 932.723499][ T4975] can: request_module (can-proto-0) failed. [ 932.731345][ T4977] can: request_module (can-proto-0) failed. [ 933.586459][ T5016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 933.593820][ T5016] IPv6: NLM_F_CREATE should be set when creating new route [ 933.601180][ T5016] IPv6: NLM_F_CREATE should be set when creating new route [ 933.609856][ T5016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 933.791206][ T5022] __nla_validate_parse: 6 callbacks suppressed [ 933.791242][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8481'. [ 933.813499][ T5022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8481'. [ 934.138334][ T5033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 934.846653][ T5078] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8496'. [ 935.074949][ T5088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8501'. [ 935.118214][ T5088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8501'. [ 935.125740][ T5082] vlan5: entered allmulticast mode [ 935.132308][ T5082] bond0: entered allmulticast mode [ 935.137440][ T5082] bond_slave_0: entered allmulticast mode [ 935.173238][ T5082] bond_slave_1: entered allmulticast mode [ 935.179228][ T5082] bond10: entered allmulticast mode [ 935.185009][ T5089] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8499'. [ 935.254242][ T5094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8502'. [ 935.414056][ T5096] ipt_rpfilter: unknown options [ 935.502015][ T5107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8506'. [ 935.560869][ T5111] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 935.574476][ T5111] syzkaller1: linktype set to 823 [ 935.967041][ T5121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8511'. [ 936.160566][ T5125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8514'. [ 936.598508][ T5121] team0 (unregistering): Port device team_slave_0 removed [ 936.687503][ T5121] team0 (unregistering): Port device team_slave_1 removed [ 937.078437][ T5139] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 937.207747][ T5143] siw: device registration error -23 [ 937.790369][ T5177] SET target dimension over the limit! [ 938.028655][ T5201] validate_nla: 3 callbacks suppressed [ 938.028674][ T5201] netlink: 'syz.4.8535': attribute type 1 has an invalid length. [ 938.198423][ T5201] bond17: entered promiscuous mode [ 938.204390][ T5201] 8021q: adding VLAN 0 to HW filter on device bond17 [ 938.229710][ T5189] bond17: (slave bridge4): making interface the new active one [ 938.237412][ T5189] bridge4: entered promiscuous mode [ 938.244112][ T5189] bond17: (slave bridge4): Enslaving as an active interface with an up link [ 938.423333][ T5209] tipc: Started in network mode [ 938.428428][ T5209] tipc: Node identity ac14140f, cluster identity 4711 [ 938.435455][ T5209] tipc: New replicast peer: 255.255.255.255 [ 938.449562][ T5209] tipc: Enabled bearer , priority 10 [ 938.458208][ T5211] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 938.863060][ T5238] __nla_validate_parse: 10 callbacks suppressed [ 938.863080][ T5238] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8550'. [ 939.066624][ T5250] syzkaller0: entered promiscuous mode [ 939.086071][ T5250] syzkaller0: entered allmulticast mode [ 939.207461][ T5260] netlink: 'syz.3.8555': attribute type 1 has an invalid length. [ 939.234522][ T5260] 8021q: adding VLAN 0 to HW filter on device bond10 [ 939.284938][ T5260] veth9: entered allmulticast mode [ 939.307381][ T5260] bond10: (slave veth9): Enslaving as an active interface with a down link [ 939.371491][ T5638] block nbd5: Receive control failed (result -32) [ 939.408382][ T5260] bond10: (slave veth0_to_bond): making interface the new active one [ 939.418681][ T5260] veth0_to_bond: entered promiscuous mode [ 939.432504][ T5260] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 939.467441][ T5260] bond10: entered promiscuous mode [ 939.474332][ T5260] bond10: entered allmulticast mode [ 939.479902][ T5260] veth0_to_bond: entered allmulticast mode [ 939.497320][ T6351] tipc: Node number set to 2886997007 [ 939.843892][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8561'. [ 940.277290][ T5316] syzkaller1: entered promiscuous mode [ 940.298673][ T5316] syzkaller1: entered allmulticast mode [ 940.685332][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8572'. [ 940.744768][ T5330] batadv_slave_0: entered promiscuous mode [ 940.750762][ T5335] tipc: Enabling of bearer rejected, failed to enable media [ 940.833796][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806721a000: rx timeout, send abort [ 940.842740][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806721a000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 940.860760][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888067219000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 941.378930][ T5371] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8579'. [ 941.388251][ T5371] netlink: 'syz.3.8579': attribute type 9 has an invalid length. [ 941.402077][ T5371] netlink: 'syz.3.8579': attribute type 12 has an invalid length. [ 941.947639][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8586'. [ 941.987015][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8586'. [ 942.139591][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806721ac00: rx timeout, send abort [ 942.148647][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806721ac00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 942.163335][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888079677400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 942.224460][ T5408] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 942.257773][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8586'. [ 942.268002][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8586'. [ 942.286684][T27077] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.293848][T27077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.306219][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8586'. [ 942.319033][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8586'. [ 942.894831][ T5458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 943.425305][ T5485] macvlan1: mtu less than device minimum [ 943.453055][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888041361c00: rx timeout, send abort [ 943.461845][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888041361c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 943.476505][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888041362c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 943.718058][ T5499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.815532][ T5505] vcan0: tx address claim with dlc 0 [ 943.895316][ T5512] __nla_validate_parse: 7 callbacks suppressed [ 943.895336][ T5512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8620'. [ 943.907817][ T5509] xt_hashlimit: size too large, truncated to 1048576 [ 944.194958][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8626'. [ 944.207208][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8626'. [ 944.285289][ T5530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8627'. [ 944.311768][ T5532] veth1_macvtap: entered allmulticast mode [ 944.394629][ T12] tipc: Resetting bearer [ 944.433107][ T5538] syzkaller1: entered promiscuous mode [ 944.463532][ T5538] syzkaller1: entered allmulticast mode [ 944.502890][ T5547] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8632'. [ 944.751317][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888041363400: rx timeout, send abort [ 944.760040][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888041363400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 944.774616][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888041361000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 944.930452][ T5568] netlink: 'syz.3.8638': attribute type 1 has an invalid length. [ 945.071977][ T5572] x_tables: duplicate underflow at hook 1 [ 945.208411][ T5581] vcan1: entered promiscuous mode [ 945.214208][ T5581] vcan1: entered allmulticast mode [ 945.322874][ T5586] netlink: 'syz.0.8644': attribute type 1 has an invalid length. [ 945.398988][ T5593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8644'. [ 945.435659][ T5586] bond8: entered promiscuous mode [ 945.441534][ T5586] 8021q: adding VLAN 0 to HW filter on device bond8 [ 945.474520][ T5593] bond8: entered allmulticast mode [ 945.552836][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8648'. [ 945.580355][ T5586] bond8: (slave bridge7): making interface the new active one [ 945.588377][ T5586] bridge7: entered promiscuous mode [ 945.597861][ T5586] bridge7: entered allmulticast mode [ 945.611586][ T5586] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 945.760293][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8650'. [ 945.814297][ T5616] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 945.824988][ T5618] netlink: 'syz.3.8653': attribute type 10 has an invalid length. [ 945.877742][ T5624] ipt_REJECT: TCP_RESET invalid for non-tcp [ 945.891320][ T5625] netlink: 'syz.3.8653': attribute type 10 has an invalid length. [ 945.927171][ T5618] team0: Port device dummy0 added [ 945.938552][ T5613] bond5: (slave sit0): The slave device specified does not support setting the MAC address [ 945.945607][ T5628] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 945.972230][ T5613] bond5: (slave sit0): Error -95 calling set_mac_address [ 946.052586][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888041360c00: rx timeout, send abort [ 946.061645][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888041360c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 946.076251][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c8f8000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 946.093775][ T5625] team0: Port device dummy0 removed [ 946.478613][ T5658] netlink: 'syz.5.8659': attribute type 3 has an invalid length. [ 946.756180][ T5659] lo speed is unknown, defaulting to 1000 [ 946.819773][ T5659] C speed is unknown, defaulting to 1000 [ 946.826399][ T5675] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8661'. [ 947.301233][ T5684] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8669'. [ 947.359090][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807c8fb000: rx timeout, send abort [ 947.367849][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c8fb000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 947.382421][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c8f9c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 947.445116][ T5692] netlink: 'syz.0.8671': attribute type 7 has an invalid length. [ 947.786324][ T5707] netlink: 'syz.3.8677': attribute type 11 has an invalid length. [ 947.796294][ T5704] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 948.020557][ T5716] netlink: 'syz.5.8680': attribute type 83 has an invalid length. [ 948.409913][ T5731] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 948.417870][ T5733] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 948.658215][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807c8f9000: rx timeout, send abort [ 948.669298][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c8f9000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 948.684037][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c8f9400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 948.806690][ T5745] netlink: 'syz.0.8687': attribute type 1 has an invalid length. [ 948.838666][ T5748] syzkaller0: entered promiscuous mode [ 948.844551][ T5748] syzkaller0: entered allmulticast mode [ 949.202138][ T5763] ip6gre3: entered allmulticast mode [ 949.245814][T27075] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 949.283368][ T5763] bond0: (slave batadv0): Releasing backup interface [ 949.302677][ T5763] bond0: (slave batadv0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 949.372230][ T5769] __nla_validate_parse: 7 callbacks suppressed [ 949.372247][ T5769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8692'. [ 949.393595][ T5772] netlink: 'syz.5.8693': attribute type 13 has an invalid length. [ 949.401589][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8693'. [ 949.412651][ T5772] netlink: 'syz.5.8693': attribute type 13 has an invalid length. [ 949.421288][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8693'. [ 949.480250][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8694'. [ 949.529828][ T5776] x_tables: unsorted underflow at hook 4 [ 949.537336][ T5776] x_tables: unsorted underflow at hook 4 [ 949.618731][ T5782] netlink: 'syz.1.8697': attribute type 11 has an invalid length. [ 949.623141][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.626881][ T5782] netlink: 'syz.1.8697': attribute type 11 has an invalid length. [ 949.635227][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.680094][ T5782] bridge6: entered promiscuous mode [ 949.685447][ T5782] bridge6: entered allmulticast mode [ 949.692613][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.700031][ T5781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.707912][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.715148][ T5781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.723082][ T5781] bridge0: entered promiscuous mode [ 949.728366][ T5781] bridge0: entered allmulticast mode [ 949.812730][ T5785] xt_policy: too many policy elements [ 949.969930][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807c8fb800: rx timeout, send abort [ 949.978953][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c8fb800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 949.993505][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c8f9800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 950.007200][ T5796] sctp: [Deprecated]: syz.1.8701 (pid 5796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 950.007200][ T5796] Use struct sctp_sack_info instead [ 950.229847][ T5805] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 950.275466][ T5805] syzkaller1: Refused to change device type [ 950.649885][ T5825] 8021q: VLANs not supported on ip6tnl0 [ 950.677662][ T5825] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8708'. [ 950.777762][ T5832] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 950.790462][ T5843] IPVS: length: 1152 != 8 [ 950.865917][ T5829] tipc: Started in network mode [ 950.885539][ T5829] tipc: Node identity 9ee19027f205, cluster identity 4711 [ 950.916220][ T5829] tipc: Enabled bearer , priority 0 [ 950.988146][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8713'. [ 951.027545][ T5826] tipc: Disabling bearer [ 951.275607][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888045caf400: rx timeout, send abort [ 951.276995][ T5859] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8718'. [ 951.284417][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888045caf400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 951.307534][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888045cacc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 951.331126][ T5861] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8721'. [ 951.374279][ T5864] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8721'. [ 951.609335][ T5874] bond4: entered promiscuous mode [ 951.614421][ T5874] bond4: entered allmulticast mode [ 951.619936][ T5874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 951.711148][ T5889] netlink: 'syz.0.8727': attribute type 1 has an invalid length. [ 951.770935][ T5889] 8021q: adding VLAN 0 to HW filter on device bond9 [ 951.990536][ T5889] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8727'. [ 952.256415][ T5916] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 952.591336][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888045cac000: rx timeout, send abort [ 952.600095][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888045cac000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 952.614712][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888045caf000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 953.262174][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 953.895466][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806973e000: rx timeout, send abort [ 953.904940][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806973e000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 953.919582][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806973e400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 955.202731][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806973ec00: rx timeout, send abort [ 955.211687][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806973ec00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 955.226292][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806973f000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 956.516046][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806973c800: rx timeout, send abort [ 956.524821][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806973c800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 956.539383][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806973cc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 957.829157][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807ad54400: rx timeout, send abort [ 957.838000][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807ad54400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 957.852876][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807ad55800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 959.136641][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888054883800: rx timeout, send abort [ 959.145336][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888054883800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 959.159896][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807f93b400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 960.443701][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888069a08800: rx timeout, send abort [ 960.452533][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888069a08800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 960.467628][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888069a0a800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 961.502144][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 961.755480][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888069b4d400: rx timeout, send abort [ 961.764237][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888069b4d400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 961.778804][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888069b4cc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 963.054547][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888069b4f800: rx timeout, send abort [ 963.063502][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888069b4f800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 963.078100][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888069b4f000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 963.284375][ T5638] Bluetooth: hci3: link tx timeout [ 963.289588][ T5638] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 964.362868][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888069b4d000: rx timeout, send abort [ 964.371524][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888069b4d000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 964.386058][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802c62d400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 965.342951][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 965.675801][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802c62c400: rx timeout, send abort [ 965.686102][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802c62c400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 965.700762][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807ec6f800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 966.986708][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807ec6d000: rx timeout, send abort [ 966.995598][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807ec6d000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 967.123460][T27075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.135270][T27075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.145610][T27075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 967.548296][T27075] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.558662][T27075] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.568927][T27075] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 967.927744][T27075] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.941566][T27075] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.956665][T27075] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 968.395584][T27075] pimreg3: left allmulticast mode [ 968.413361][T27075] tipc: Resetting bearer [ 968.586098][T27075] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 968.595674][T27075] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 968.604019][T27075] bond4 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - c6:5c:ed:b1:f0:9c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 968.641899][T27075] tipc: Disabling bearer [ 968.717349][T27075] bond14 (unregistering): (slave gretap2): Releasing active interface [ 968.739406][T27075] bond12 (unregistering): (slave geneve3): Releasing active interface [ 968.800690][T27075] bond17 (unregistering): (slave bridge4): Releasing backup interface [ 968.808949][T27075] bridge4 (unregistering): left promiscuous mode [ 968.830726][T27075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.851479][T27075] bond_slave_0: left allmulticast mode [ 968.859344][T27075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.868309][T27075] bond_slave_1: left allmulticast mode [ 968.876016][T27075] bond0 (unregistering): (slave bond10): Releasing backup interface [ 968.919839][T27075] bond10 (unregistering): left allmulticast mode [ 968.926930][T27075] bond0 (unregistering): Released all slaves [ 968.937212][T27075] bond1 (unregistering): Released all slaves [ 968.957137][T27075] bond2 (unregistering): Released all slaves [ 968.970315][T27075] bond3 (unregistering): Released all slaves [ 968.984937][T27075] bond4 (unregistering): (slave veth3): Releasing backup interface [ 969.010139][T27075] bond4 (unregistering): Released all slaves [ 969.023556][T27075] bond5 (unregistering): Released all slaves [ 969.036708][T27075] bond6 (unregistering): Released all slaves [ 969.049909][T27075] bond7 (unregistering): Released all slaves [ 969.064109][T27075] bond8 (unregistering): Released all slaves [ 969.087441][T27075] bond9 (unregistering): Released all slaves [ 969.131141][T27075] bond10 (unregistering): Released all slaves [ 969.149011][T27075] bond11 (unregistering): Released all slaves [ 969.169351][T27075] bond12 (unregistering): Released all slaves [ 969.190401][T27075] bond13 (unregistering): Released all slaves [ 969.213944][T27075] bond14 (unregistering): Released all slaves [ 969.246244][T27075] bond15 (unregistering): Released all slaves [ 969.280478][T27075] bond16 (unregistering): Released all slaves [ 969.301148][T27075] bond17 (unregistering): Released all slaves [ 969.536404][T27075] : left promiscuous mode [ 969.919576][T27075] tipc: Left network mode [ 970.917491][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 971.274325][T27075] hsr_slave_0: left promiscuous mode [ 971.280522][T27075] hsr_slave_1: left promiscuous mode [ 971.286548][T27075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.294207][T27075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.302651][T27075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.310090][T27075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.324478][T27075] veth1_vlan: left allmulticast mode [ 971.391546][T27075] veth1_macvtap: left promiscuous mode [ 971.397601][T27075] veth0_macvtap: left promiscuous mode [ 971.403552][T27075] veth1_vlan: left promiscuous mode [ 971.412602][T27075] veth0_vlan: left promiscuous mode [ 972.104949][ T6350] C speed is unknown, defaulting to 1000 [ 972.106386][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 972.117442][ T6350] syz2: Port: 1 Link DOWN [ 972.126536][T27077] smbdirect: ib_dev[syz2] removed [ 972.674476][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 973.031631][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 978.142158][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 979.885752][ T6117] __nla_validate_parse: 1 callbacks suppressed [ 979.885774][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8737'. [ 979.891139][ T6118] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8736'. [ 979.906880][ T6117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8737'. [ 980.115006][ T6125] tipc: Resetting bearer [ 980.226627][ T5923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 980.250336][ T5923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 980.279283][ T5923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 980.292621][ T5923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 980.307802][ T5923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 980.524982][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8742'. [ 980.787980][T27067] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.838380][T27067] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 981.045965][ T6135] lo speed is unknown, defaulting to 1000 [ 981.481077][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.488620][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.496279][ T6135] bridge_slave_0: entered allmulticast mode [ 981.505100][ T6135] bridge_slave_0: entered promiscuous mode [ 981.513572][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.520931][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.528716][ T6135] bridge_slave_1: entered allmulticast mode [ 981.536103][ T6135] bridge_slave_1: entered promiscuous mode [ 981.564854][ T6135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.576796][ T6135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.607924][ T6135] team0: Port device team_slave_0 added [ 981.617973][ T6135] team0: Port device team_slave_1 added [ 981.643628][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.650676][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.677128][ T6135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.690081][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.697481][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.724452][ T6135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.773944][ T6135] hsr_slave_0: entered promiscuous mode [ 981.780420][ T6135] hsr_slave_1: entered promiscuous mode [ 981.787200][ T6135] debugfs: 'hsr0' already exists in 'hsr' [ 981.793323][ T6135] Cannot create hsr debugfs directory [ 982.382506][T21329] Bluetooth: hci0: command tx timeout [ 982.976106][ T6124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 983.026031][ T6135] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 983.108330][ T6135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 983.146506][ T6135] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 983.197423][ T6135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 983.251086][ T6203] SET target dimension over the limit! [ 983.253779][ T6135] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 983.309371][ T6135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 983.325606][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8751'. [ 983.341706][ T6135] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 983.367617][ T6135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 983.405729][ T6206] veth1_macvtap: left promiscuous mode [ 983.788379][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.923862][ T6135] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.984726][ T6238] syzkaller0: entered promiscuous mode [ 984.018501][ T6238] syzkaller0: entered allmulticast mode [ 984.060545][T27067] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.067787][T27067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.201338][ T6250] netlink: 'syz.0.8764': attribute type 12 has an invalid length. [ 984.236276][T27073] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.243822][T27073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.252841][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8764'. [ 984.349201][ T6250] netlink: 'syz.0.8764': attribute type 12 has an invalid length. [ 984.358863][ T6242] lo speed is unknown, defaulting to 1000 [ 984.374879][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8764'. [ 984.462412][T21329] Bluetooth: hci0: command tx timeout [ 984.731634][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8767'. [ 985.278260][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8773'. [ 985.581177][ T6301] bond5: Unable to set down delay as MII monitoring is disabled [ 985.634171][ T6301] bond5 (unregistering): Released all slaves [ 986.085667][ T6334] x_tables: duplicate underflow at hook 2 [ 986.244360][ T6341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8781'. [ 986.466466][ T6135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.487284][ T6359] netlink: 660 bytes leftover after parsing attributes in process `syz.1.8784'. [ 986.511649][ T6360] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 986.542757][T21329] Bluetooth: hci0: command tx timeout [ 987.451237][ T6399] bond6: entered promiscuous mode [ 987.560143][ T6135] veth0_vlan: entered promiscuous mode [ 987.616331][ T6135] veth1_vlan: entered promiscuous mode [ 987.655025][ T6408] netlink: 'syz.3.8796': attribute type 1 has an invalid length. [ 987.735174][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8797'. [ 987.796054][ T6135] veth0_macvtap: entered promiscuous mode [ 987.801850][ T6412] block nbd6: Unsupported socket: should be TCP or UNIX. [ 987.878099][ T6135] veth1_macvtap: entered promiscuous mode [ 987.990679][ T6415] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8798'. [ 988.011247][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.113167][ T6423] syzkaller1: entered promiscuous mode [ 988.141750][ T6423] syzkaller1: entered allmulticast mode [ 988.165433][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 988.188474][ T6430] netlink: 'syz.0.8803': attribute type 2 has an invalid length. [ 988.191716][ T6415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 988.216599][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.368922][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.416171][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.435176][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.624282][T21329] Bluetooth: hci0: command tx timeout [ 988.702661][ T6454] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8810'. [ 988.844471][T27067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.857436][ T6459] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8812'. [ 988.877337][T27067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.929561][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8812'. [ 989.109858][ T6468] geneve3: entered promiscuous mode [ 989.127293][ T6468] geneve3: entered allmulticast mode [ 989.263622][T27075] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 989.304889][T27075] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 989.319715][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8814'. [ 989.354451][T27077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.373384][T27077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.381222][T27075] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 989.412757][T27075] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 989.509203][ T6491] netlink: 'syz.3.8820': attribute type 9 has an invalid length. [ 989.592106][ T6491] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8820'. [ 990.066483][ T6526] vlan0: entered promiscuous mode [ 990.734975][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8839'. [ 990.759539][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8839'. [ 991.140282][ T6588] bridge_slave_1: left allmulticast mode [ 991.157799][ T6588] bridge_slave_1: left promiscuous mode [ 991.173777][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.195162][ T6589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8845'. [ 991.210915][ T6588] bridge_slave_0: left allmulticast mode [ 991.259261][ T6588] bridge_slave_0: left promiscuous mode [ 991.284939][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.703846][ T6608] 8021q: adding VLAN 0 to HW filter on device bond5 [ 991.712992][ T6608] bridge0: port 3(bond5) entered blocking state [ 991.721649][ T6608] bridge0: port 3(bond5) entered disabled state [ 991.728895][ T6608] bond5: entered allmulticast mode [ 991.737250][ T6608] bond5: entered promiscuous mode [ 991.746359][ T6608] bridge0: port 3(bond5) entered blocking state [ 991.752800][ T6608] bridge0: port 3(bond5) entered forwarding state [ 991.854851][ T6617] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8853'. [ 992.006316][ T6622] tipc: Enabled bearer , priority 0 [ 992.015579][ T6621] netlink: 198796 bytes leftover after parsing attributes in process `syz.5.8854'. [ 992.027534][ T6622] syzkaller0: entered promiscuous mode [ 992.042033][ T6621] netlink: 'syz.5.8854': attribute type 2 has an invalid length. [ 992.049917][ T6622] syzkaller0: entered allmulticast mode [ 992.103411][ T6627] vlan3: entered allmulticast mode [ 992.108612][ T6627] veth1_virt_wifi: entered allmulticast mode [ 992.126022][ T6622] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 992.181118][ T6622] tipc: Resetting bearer [ 992.260781][ T6620] tipc: Resetting bearer [ 992.316932][ T6620] tipc: Disabling bearer [ 992.417048][ T6637] netlink: 'syz.3.8860': attribute type 178 has an invalid length. [ 992.518303][ T6660] sctp: [Deprecated]: syz.6.8864 (pid 6660) Use of int in maxseg socket option. [ 992.518303][ T6660] Use struct sctp_assoc_value instead [ 992.541359][ T6663] mac80211_hwsim hwsim64 syzkaller0: entered promiscuous mode [ 992.549352][ T6663] mac80211_hwsim hwsim64 syzkaller0: entered allmulticast mode [ 992.575271][T14349] bridge0: port 3(bond5) entered disabled state [ 992.787229][ T6671] 8021q: adding VLAN 0 to HW filter on device bond6 [ 993.817555][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8873'. [ 993.830093][ T6690] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8873'. [ 993.885634][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8873'. [ 995.259559][ T6651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 995.469735][ T6707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8876'. [ 995.491727][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8879'. [ 995.504857][ T6712] x_tables: unsorted entry at hook 1 [ 995.553361][ T6715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.559687][ T6710] 8021q: adding VLAN 0 to HW filter on device bond7 [ 996.061274][ T6749] __nla_validate_parse: 2 callbacks suppressed [ 996.061292][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8886'. [ 996.229307][ T6757] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8888'. [ 996.436881][ T6768] netlink: 'syz.6.8892': attribute type 21 has an invalid length. [ 996.454336][ T6768] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8892'. [ 996.523686][ T6771] netlink: 'syz.6.8892': attribute type 21 has an invalid length. [ 996.529617][ T6728] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 996.562820][ T6771] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8892'. [ 996.770538][ T6784] ip6gre4: entered allmulticast mode [ 996.836592][ T6786] IPv6: sit1: Disabled Multicast RS [ 996.839771][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8898'. [ 996.929134][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8898'. [ 997.048008][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8901'. [ 997.372427][ T6822] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8904'. [ 997.574452][ T6826] syzkaller0: entered promiscuous mode [ 997.583193][ T6826] syzkaller0: entered allmulticast mode [ 997.711056][ T6828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8908'. [ 997.742748][T21329] Bluetooth: hci3: command 0x0406 tx timeout [ 997.746382][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8910'. [ 997.789087][ T6834] netlink: 'syz.6.8910': attribute type 1 has an invalid length. [ 997.839360][ T6834] netlink: 'syz.6.8910': attribute type 2 has an invalid length. [ 998.083632][ T6850] netlink: 'syz.3.8915': attribute type 9 has an invalid length. [ 998.529512][ T6717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 998.635979][ T5923] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 998.659350][ T5923] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 998.668113][ T5923] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 998.678003][ T5923] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 998.688681][ T5923] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 999.025013][ T6879] netlink: 'syz.3.8922': attribute type 1 has an invalid length. [ 999.033421][ T6878] netlink: 'syz.5.8921': attribute type 1 has an invalid length. [ 999.173983][ T6886] netlink: 'syz.6.8924': attribute type 1 has an invalid length. [ 999.214563][ T6879] bond12: entered promiscuous mode [ 999.220139][ T6879] 8021q: adding VLAN 0 to HW filter on device bond12 [ 999.240187][ T6882] bond12: (slave bridge4): making interface the new active one [ 999.248689][ T6882] bridge4: entered promiscuous mode [ 999.257660][ T6882] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 999.481282][ T6894] netlink: 'syz.6.8926': attribute type 30 has an invalid length. [ 999.686431][ T6867] lo speed is unknown, defaulting to 1000 [ 999.970717][ T6916] bridge_slave_1: entered promiscuous mode [ 1000.072899][ T6926] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1000.525231][ T6941] netlink: 'syz.5.8941': attribute type 10 has an invalid length. [ 1000.538399][ T6941] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1000.782827][ T5923] Bluetooth: hci6: command tx timeout [ 1000.836493][T27077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.864567][T27077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.095098][ T6964] geneve2: entered promiscuous mode [ 1001.384491][ T6987] __nla_validate_parse: 47 callbacks suppressed [ 1001.384509][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8955'. [ 1001.402369][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.409758][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.435415][ T6867] bridge_slave_0: entered allmulticast mode [ 1001.450157][ T6867] bridge_slave_0: entered promiscuous mode [ 1001.461568][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.469225][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.477515][ T6867] bridge_slave_1: entered allmulticast mode [ 1001.481449][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8955'. [ 1001.485731][ T6867] bridge_slave_1: entered promiscuous mode [ 1001.556977][ T6867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.578668][ T6867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.632660][ T6867] team0: Port device team_slave_0 added [ 1001.641679][ T6867] team0: Port device team_slave_1 added [ 1001.686847][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.707390][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.743193][ T6867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.758133][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.766365][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.813626][ T6867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.867833][ T7001] ip6gre1: entered allmulticast mode [ 1001.990652][ T6867] hsr_slave_0: entered promiscuous mode [ 1002.010757][ T6867] hsr_slave_1: entered promiscuous mode [ 1002.029011][ T6867] debugfs: 'hsr0' already exists in 'hsr' [ 1002.046722][ T6867] Cannot create hsr debugfs directory [ 1002.059979][ T7015] tipc: Enabling of bearer rejected, already enabled [ 1002.096676][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8964'. [ 1002.138776][ T7020] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1002.151438][ T7020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.167265][ T7013] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1002.207033][ T6989] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1002.250127][ T7013] tipc: Resetting bearer [ 1002.397220][ T7026] x_tables: duplicate underflow at hook 1 [ 1002.423459][ T7030] x_tables: duplicate underflow at hook 1 [ 1002.556242][ T7035] openvswitch: netlink: Flow actions attr not present in new flow. [ 1002.559039][ T7036] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8972'. [ 1002.619765][ T7039] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8972'. [ 1002.659815][ T7041] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1002.850721][ T7049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.865506][ T5923] Bluetooth: hci6: command tx timeout [ 1002.961407][ T7050] bond8: entered promiscuous mode [ 1003.001402][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8977'. [ 1003.013117][ T7054] lo speed is unknown, defaulting to 1000 [ 1003.067018][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8977'. [ 1003.095568][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8977'. [ 1003.193362][ T7067] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1003.224601][ T7065] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8981'. [ 1003.256451][ T7065] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8981'. [ 1003.389881][ T7050] lo speed is unknown, defaulting to 1000 [ 1003.421191][ T7077] syzkaller1: entered promiscuous mode [ 1003.428291][ T7076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1003.453282][ T7077] syzkaller1: entered allmulticast mode [ 1004.571128][ T7115] validate_nla: 1 callbacks suppressed [ 1004.571149][ T7115] netlink: 'syz.5.8991': attribute type 10 has an invalid length. [ 1004.942621][ T5923] Bluetooth: hci6: command tx timeout [ 1006.878259][ T7086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1006.895745][ T6867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1007.018258][ T6867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.026424][ T5923] Bluetooth: hci6: command tx timeout [ 1007.034642][ T6867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1007.065993][ T6867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1007.113558][ T6867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1007.166363][ T6867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1007.197982][ T6867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1007.207900][ T7140] __nla_validate_parse: 1 callbacks suppressed [ 1007.207919][ T7140] netlink: 252 bytes leftover after parsing attributes in process `syz.1.8999'. [ 1007.289868][ T6867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1007.340638][ T7140] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1007.390886][ T7147] bond0: entered allmulticast mode [ 1007.414940][ T7147] bond_slave_0: entered allmulticast mode [ 1007.448287][ T7147] bond_slave_1: entered allmulticast mode [ 1007.625626][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9003'. [ 1007.710581][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9005'. [ 1007.754599][ T7170] netlink: 'syz.1.9005': attribute type 10 has an invalid length. [ 1007.770175][ T6867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.788696][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9005'. [ 1007.855676][ T6867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.891458][T27077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.898697][T27077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.979455][T27077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.986676][T27077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.035624][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9008'. [ 1008.201526][ T7186] netlink: 'syz.1.9010': attribute type 5 has an invalid length. [ 1008.280731][ T7186] x_tables: duplicate underflow at hook 3 [ 1008.443700][ T7200] netlink: 'syz.3.9014': attribute type 1 has an invalid length. [ 1008.460780][ T7200] netlink: 200 bytes leftover after parsing attributes in process `syz.3.9014'. [ 1008.798700][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9017'. [ 1008.874566][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9017'. [ 1009.222916][ T7239] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9023'. [ 1009.655084][ T6867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.687320][ T7258] openvswitch: netlink: IP tunnel dst address not specified [ 1009.699569][ T7256] pimreg: entered allmulticast mode [ 1009.805471][ T6867] veth0_vlan: entered promiscuous mode [ 1009.849483][ T6867] veth1_vlan: entered promiscuous mode [ 1009.962904][ T6867] veth0_macvtap: entered promiscuous mode [ 1009.993063][ T6867] veth1_macvtap: entered promiscuous mode [ 1010.025232][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.079639][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.097880][ T7276] netlink: 'syz.6.9035': attribute type 16 has an invalid length. [ 1010.110312][ T7276] netlink: 'syz.6.9035': attribute type 17 has an invalid length. [ 1010.120169][T14349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.163093][ T7276] bond0: left allmulticast mode [ 1010.168027][ T7276] bond_slave_0: left allmulticast mode [ 1010.173971][ T7276] bond_slave_1: left allmulticast mode [ 1010.217324][ T7276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1010.243286][T14349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.299604][T14349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.310454][T14349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.620310][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.655978][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.678186][ T7294] netlink: 'syz.3.9038': attribute type 4 has an invalid length. [ 1010.696609][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.703909][ T7293] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9040'. [ 1010.723913][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.926622][ T7302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.340959][ T7322] netlink: zone id is out of range [ 1011.357853][ T7322] netlink: zone id is out of range [ 1011.369650][ T7322] netlink: zone id is out of range [ 1011.382917][ T7322] netlink: zone id is out of range [ 1011.399899][ T7322] netlink: zone id is out of range [ 1011.419562][ T7322] netlink: zone id is out of range [ 1011.426369][ T7322] netlink: zone id is out of range [ 1011.501050][ T7335] team0 (unregistering): Port device team_slave_0 removed [ 1011.534854][ T7335] team0 (unregistering): Port device team_slave_1 removed [ 1011.561450][ T7336] netlink: 'syz.0.9051': attribute type 3 has an invalid length. [ 1011.783244][ T7357] x_tables: duplicate underflow at hook 1 [ 1011.899749][ T7359] Cannot find set identified by id 65534 to match [ 1012.062921][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1012.236678][ T7379] syzkaller1: entered promiscuous mode [ 1012.263488][ T7379] syzkaller1: entered allmulticast mode [ 1012.299901][ T7373] tipc: Enabling of bearer rejected, already enabled [ 1012.317495][ T7380] __nla_validate_parse: 5 callbacks suppressed [ 1012.317521][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9064'. [ 1012.550893][ T7397] bond2: Removing last ns target with arp_interval on [ 1012.606246][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9071'. [ 1012.639075][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9071'. [ 1012.947947][ T7419] net_ratelimit: 5 callbacks suppressed [ 1012.947968][ T7419] netlink: set zone limit has 4 unknown bytes [ 1012.997088][ T7417] IPv6: sit1: Disabled Multicast RS [ 1012.997564][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9079'. [ 1013.016670][ T7419] netlink: set zone limit has 4 unknown bytes [ 1013.121666][ T7429] netlink: 'syz.3.9080': attribute type 23 has an invalid length. [ 1013.710375][ T7466] bond13: invalid ARP target 0.0.0.0 specified for addition [ 1013.718815][ T7466] bond13: option arp_ip_target: invalid value (0) [ 1013.748419][ T7466] bond13 (unregistering): Released all slaves [ 1013.879858][ T7474] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9096'. [ 1013.961450][ T7480] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9098'. [ 1014.162798][ T7489] syzkaller0: entered promiscuous mode [ 1014.176300][ T7489] syzkaller0: entered allmulticast mode [ 1014.586578][ T7516] netlink: 'syz.3.9109': attribute type 1 has an invalid length. [ 1014.600847][ T7516] netlink: 'syz.3.9109': attribute type 2 has an invalid length. [ 1014.612495][ T7519] netlink: 'syz.6.9110': attribute type 10 has an invalid length. [ 1014.660245][ T7518] netlink: 'syz.6.9110': attribute type 1 has an invalid length. [ 1014.718544][ T7519] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1014.761731][ T7525] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9112'. [ 1014.859824][ T7527] netlink: 'syz.0.9113': attribute type 1 has an invalid length. [ 1014.888163][ T7527] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9113'. [ 1014.898839][ T7527] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.9113'. [ 1014.927179][ T7531] Bluetooth: MGMT ver 1.23 [ 1014.943372][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9115'. [ 1015.108491][ T7543] validate_nla: 1 callbacks suppressed [ 1015.108511][ T7543] netlink: 'syz.3.9118': attribute type 23 has an invalid length. [ 1015.297681][ T7554] openvswitch: netlink: Message has 12 unknown bytes. [ 1015.310848][ T7554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.326166][ T7554] openvswitch: netlink: Message has 12 unknown bytes. [ 1015.359294][ T7554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.415399][ T7554] openvswitch: netlink: Message has 12 unknown bytes. [ 1015.449887][ T7554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.492779][ T7554] openvswitch: netlink: Message has 12 unknown bytes. [ 1015.511707][ T7554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.659402][ T7567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.720076][ T7567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.794880][T21329] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1015.807214][T21329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1015.816355][T21329] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1015.837054][T21329] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1015.845793][T21329] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1016.524756][ T7595] netlink: 'syz.5.9131': attribute type 4 has an invalid length. [ 1016.583989][ T7595] netlink: 'syz.5.9131': attribute type 1 has an invalid length. [ 1016.602393][ T7606] bridge: RTM_NEWNEIGH with invalid ether address [ 1016.609968][ T7606] bridge: RTM_NEWNEIGH with invalid ether address [ 1016.895349][ T7625] tipc: Enabling of bearer rejected, failed to enable media [ 1017.043924][ T7570] lo speed is unknown, defaulting to 1000 [ 1017.244536][ T7637] tipc: Started in network mode [ 1017.283814][ T7637] tipc: Node identity , cluster identity 4711 [ 1017.326308][ T7637] tipc: Failed to set node id, please configure manually [ 1017.362103][ T7637] tipc: Enabling of bearer rejected, failed to enable media [ 1017.902696][T21329] Bluetooth: hci1: command tx timeout [ 1018.366836][ T7687] __nla_validate_parse: 7 callbacks suppressed [ 1018.366857][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9155'. [ 1018.499883][ T7690] ipvlan1: entered promiscuous mode [ 1018.522247][ T7690] ipvlan1: entered allmulticast mode [ 1018.541718][ T7690] veth0_vlan: entered allmulticast mode [ 1018.586129][ T6346] syz0: Port: 1 Link ACTIVE [ 1018.690230][ T7693] net_ratelimit: 59 callbacks suppressed [ 1018.690247][ T7693] tunl0: mtu less than device minimum [ 1018.776508][ T7704] openvswitch: netlink: IP tunnel dst address not specified [ 1018.932636][ T7570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.949536][ T7570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.966551][ T7570] bridge_slave_0: entered allmulticast mode [ 1018.996377][ T7570] bridge_slave_0: entered promiscuous mode [ 1019.016350][ T7570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.030005][ T7570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.055417][ T7570] bridge_slave_1: entered allmulticast mode [ 1019.082205][ T7570] bridge_slave_1: entered promiscuous mode [ 1019.147506][ T7570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.164357][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9167'. [ 1019.177934][ T7570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.267604][ T7570] team0: Port device team_slave_0 added [ 1019.281698][ T7732] netlink: 'syz.6.9169': attribute type 28 has an invalid length. [ 1019.306107][ T7570] team0: Port device team_slave_1 added [ 1019.314420][ T7732] netlink: 'syz.6.9169': attribute type 3 has an invalid length. [ 1019.333353][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9169'. [ 1019.340888][ T7732] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9169'. [ 1019.379673][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9171'. [ 1019.396216][ T7570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.405794][ T7570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.472726][ T7570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.493304][ T7570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.536891][ T7570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.564922][ T7570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.602382][ T7745] tipc: Started in network mode [ 1019.609668][ T7745] tipc: Node identity ac14140f, cluster identity 4711 [ 1019.629440][ T7745] tipc: Enabled bearer , priority 10 [ 1019.781611][ T7570] hsr_slave_0: entered promiscuous mode [ 1019.811604][ T7570] hsr_slave_1: entered promiscuous mode [ 1019.827964][ T7570] debugfs: 'hsr0' already exists in 'hsr' [ 1019.849018][ T7570] Cannot create hsr debugfs directory [ 1019.982799][T21329] Bluetooth: hci1: command tx timeout [ 1020.066902][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9179'. [ 1020.575517][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9185'. [ 1020.591038][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9185'. [ 1020.656628][T27077] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.656743][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9185'. [ 1020.667033][T27077] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.684595][T27077] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.689977][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9185'. [ 1020.697499][T27077] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.752219][ T5765] tipc: Node number set to 2886997007 [ 1022.062167][T21329] Bluetooth: hci1: command tx timeout [ 1023.045597][ T7772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1023.263034][ T7835] netlink: 'syz.5.9193': attribute type 1 has an invalid length. [ 1023.325841][ T7831] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 1023.361286][ T7831] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1023.386327][ T7835] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1023.416548][ T7848] netlink: 'syz.5.9193': attribute type 19 has an invalid length. [ 1023.459561][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9193'. [ 1023.524702][ T7835] bond7: (slave geneve4): making interface the new active one [ 1023.548097][ T7835] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 1023.666875][ T7853] syzkaller0: entered promiscuous mode [ 1023.673808][ T7853] syzkaller0: entered allmulticast mode [ 1023.730081][ T7853] netlink: 'syz.6.9197': attribute type 11 has an invalid length. [ 1024.144726][T21329] Bluetooth: hci1: command tx timeout [ 1024.190973][ T7883] netlink: 580 bytes leftover after parsing attributes in process `syz.0.9205'. [ 1024.209001][ T7883] netlink: 580 bytes leftover after parsing attributes in process `syz.0.9205'. [ 1024.256818][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9207'. [ 1024.377912][ T7893] ip_vti0: entered promiscuous mode [ 1024.408976][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9208'. [ 1024.508778][ T7901] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9211'. [ 1025.114472][ T7914] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 1025.247973][ T7916] netlink: 'syz.1.9214': attribute type 27 has an invalid length. [ 1025.278615][ T7916] netlink: 'syz.1.9214': attribute type 4 has an invalid length. [ 1025.310230][ T7916] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9214'. [ 1025.540649][ T7930] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9219'. [ 1026.025034][ T7968] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9229'. [ 1026.122962][ T7970] netlink: 'syz.1.9230': attribute type 6 has an invalid length. [ 1026.312786][ T7991] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9236'. [ 1026.562822][ T8007] netlink: 'syz.5.9240': attribute type 1 has an invalid length. [ 1026.645763][ T8011] netlink: 'syz.6.9238': attribute type 2 has an invalid length. [ 1026.903412][ T8025] tipc: Enabling of bearer rejected, already enabled [ 1027.004327][ T8030] netlink: 'syz.1.9248': attribute type 1 has an invalid length. [ 1027.014115][ T8030] bridge0: port 3(syz_tun) entered disabled state [ 1027.021322][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.029032][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.097898][ T8031] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.120030][ T8031] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.131719][ T8031] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1027.465713][ T8052] netlink: 'syz.1.9254': attribute type 2 has an invalid length. [ 1027.910769][ T8071] sit1: entered promiscuous mode [ 1027.933119][ T8071] sit1: entered allmulticast mode [ 1027.995616][ T8077] bond8 (unregistering): Released all slaves [ 1028.037462][ T8084] unsupported nla_type 7424 [ 1028.200014][ T8090] syzkaller1: entered promiscuous mode [ 1028.217032][ T8090] syzkaller1: entered allmulticast mode [ 1028.312009][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1028.385457][ T8102] 8021q: VLANs not supported on xfrm0 [ 1028.405593][ T8102] netlink: 'syz.0.9266': attribute type 21 has an invalid length. [ 1028.431602][ T8102] netlink: 'syz.0.9266': attribute type 1 has an invalid length. [ 1028.701114][ T8121] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1028.779667][ T8123] __nla_validate_parse: 14 callbacks suppressed [ 1028.779688][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9275'. [ 1028.836526][ T8128] bond0: (slave bond_slave_1): Releasing backup interface [ 1029.191744][ T8150] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9279'. [ 1029.252657][ T8150] syzkaller0: entered promiscuous mode [ 1029.272502][ T8150] syzkaller0: entered allmulticast mode [ 1029.317581][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9279'. [ 1029.343799][ T8150] nbd: must specify a device to reconfigure [ 1029.368847][ T8155] netlink: 'syz.1.9281': attribute type 3 has an invalid length. [ 1029.466136][ T8159] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1029.599870][ T8163] netlink: 'syz.6.9284': attribute type 1 has an invalid length. [ 1029.608028][ T8165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9285'. [ 1029.680548][ T8170] netlink: 'syz.0.9288': attribute type 2 has an invalid length. [ 1029.694145][ T8168] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9286'. [ 1029.712291][ T8170] netlink: 'syz.0.9288': attribute type 2 has an invalid length. [ 1029.722255][ T8168] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9286'. [ 1029.723548][ T8163] bond3: entered promiscuous mode [ 1029.739113][ T8163] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1029.746794][ T8171] netlink: 'syz.0.9288': attribute type 2 has an invalid length. [ 1029.752658][ T8168] netlink: 'syz.1.9286': attribute type 6 has an invalid length. [ 1029.763671][ T8168] netlink: 'syz.1.9286': attribute type 5 has an invalid length. [ 1029.771443][ T8168] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9286'. [ 1029.780885][ T8175] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9286'. [ 1029.790928][ T8171] netlink: 67 bytes leftover after parsing attributes in process `syz.0.9288'. [ 1029.801985][ T8170] netlink: 67 bytes leftover after parsing attributes in process `syz.0.9288'. [ 1029.812812][ T8175] netlink: 'syz.1.9286': attribute type 6 has an invalid length. [ 1029.835537][ T8163] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1029.843541][ T8163] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1029.878057][ T8163] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1029.957067][ T8163] bond3: (slave ip6gre1): making interface the new active one [ 1029.995719][ T8163] ip6gre1: entered promiscuous mode [ 1030.022167][ T8163] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 1030.358543][ T8210] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1030.394601][ T8208] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1030.395445][ T8213] vxcan2: entered allmulticast mode [ 1030.459860][ T8216] ip6t_srh: unknown srh invflags 4000 [ 1030.720670][ T8237] bond4: option all_slaves_active: invalid value (222) [ 1030.730691][ T8237] bond4 (unregistering): Released all slaves [ 1033.521659][ T8222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1033.973884][ T8271] __nla_validate_parse: 91 callbacks suppressed [ 1033.973904][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9310'. [ 1034.064398][ T8277] validate_nla: 59 callbacks suppressed [ 1034.064418][ T8277] netlink: 'syz.0.9311': attribute type 4 has an invalid length. [ 1034.117756][ T8276] lo speed is unknown, defaulting to 1000 [ 1034.219512][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9313'. [ 1034.389982][ T29] audit: type=1804 audit(1784150453.797:12): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9314" name="/newroot/59/cgroup.controllers" dev="tmpfs" ino=321 res=1 errno=0 [ 1034.416180][ T29] audit: type=1800 audit(1784150453.797:13): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9314" name="cgroup.controllers" dev="tmpfs" ino=321 res=0 errno=0 [ 1034.526707][ T8287] netlink: 'syz.0.9315': attribute type 7 has an invalid length. [ 1034.699036][ T8291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9317'. [ 1034.900471][ T8291] syzkaller1: entered promiscuous mode [ 1034.920687][ T8291] syzkaller1: entered allmulticast mode [ 1035.307023][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9323'. [ 1035.318878][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9323'. [ 1035.495668][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9328'. [ 1035.616633][ T8338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1035.721618][ T8346] tipc: Started in network mode [ 1035.733898][ T8346] tipc: Node identity c2e4c122e67f, cluster identity 4711 [ 1035.753397][ T8346] tipc: Enabled bearer , priority 0 [ 1035.797482][ T8346] tipc: Disabling bearer [ 1035.843243][ T8352] tipc: Enabled bearer , priority 0 [ 1035.863518][ T8351] tipc: Enabling of bearer rejected, already enabled [ 1035.888308][ T8360] netlink: 'syz.0.9337': attribute type 4 has an invalid length. [ 1035.901056][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9337'. [ 1035.912625][ T8360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9337'. [ 1036.002191][ T8364] xt_hashlimit: size too large, truncated to 1048576 [ 1036.407810][T21329] block nbd6: Receive control failed (result -32) [ 1036.515404][ T8388] syzkaller0: entered promiscuous mode [ 1036.555798][ T8388] syzkaller0: entered allmulticast mode [ 1036.955843][ T6346] tipc: Node number set to 1826918439 [ 1037.148252][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9358'. [ 1037.158713][ T8428] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1037.454298][ T8438] x_tables: unsorted entry at hook 3 [ 1037.801593][ T8460] netlink: 'syz.1.9366': attribute type 3 has an invalid length. [ 1037.822255][ T8460] netlink: 'syz.1.9366': attribute type 2 has an invalid length. [ 1037.887165][ T8463] netlink: 'syz.6.9367': attribute type 21 has an invalid length. [ 1038.169530][ T8482] netlink: 'syz.5.9372': attribute type 1 has an invalid length. [ 1038.367678][ T8500] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9377'. [ 1038.413978][ T8500] netlink: 'syz.1.9377': attribute type 12 has an invalid length. [ 1038.433656][ T8500] netlink: 'syz.1.9377': attribute type 11 has an invalid length. [ 1038.528471][ T8504] netlink: 'syz.6.9379': attribute type 6 has an invalid length. [ 1039.354188][ T8557] syzkaller1: entered promiscuous mode [ 1039.365251][ T8557] syzkaller1: entered allmulticast mode [ 1039.737361][ T8583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.758885][ T8583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.817239][ T8582] ip_vti0: entered promiscuous mode [ 1039.825649][ T8582] __nla_validate_parse: 5 callbacks suppressed [ 1039.825666][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9404'. [ 1039.843120][ T8590] openvswitch: netlink: Flow actions attr not present in new flow. [ 1039.854712][ T8590] validate_nla: 1 callbacks suppressed [ 1039.854728][ T8590] netlink: 'syz.0.9407': attribute type 1 has an invalid length. [ 1039.975253][ T8590] bond1: (slave ip6erspan0): making interface the new active one [ 1039.984719][ T8590] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1040.059194][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9409'. [ 1040.111107][ T8597] tipc: Enabled bearer , priority 10 [ 1040.511126][ T8624] x_tables: duplicate entry at hook 2 [ 1040.538881][ T8624] netdevsim netdevsim5: Direct firmware load for ÿ failed with error -2 [ 1040.554815][ T8624] netdevsim netdevsim5: Falling back to sysfs fallback for: ÿ [ 1040.581397][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9417'. [ 1040.683599][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9420'. [ 1040.696416][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9420'. [ 1040.807116][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9422'. [ 1040.859077][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9422'. [ 1040.903898][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9423'. [ 1041.027622][ T8651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9426'. [ 1041.176309][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9428'. [ 1041.408772][ T8678] netlink: 'syz.6.9433': attribute type 4 has an invalid length. [ 1041.443964][ T8678] netlink: 'syz.6.9433': attribute type 4 has an invalid length. [ 1041.592970][ T8690] xt_cluster: node mask cannot exceed total number of nodes [ 1041.839979][ T8700] bond2 (unregistering): Released all slaves [ 1041.942837][ T8716] veth1_to_bond: entered allmulticast mode [ 1041.979627][ T8716] veth1_to_bond: left allmulticast mode [ 1042.531156][ T8755] xt_hashlimit: size too large, truncated to 1048576 [ 1042.901436][ T8770] netlink: 'syz.1.9461': attribute type 1 has an invalid length. [ 1042.922192][ T8770] netlink: 'syz.1.9461': attribute type 2 has an invalid length. [ 1043.329726][ T8798] xt_policy: too many policy elements [ 1043.958538][ T8837] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1044.103324][ T5357] IPVS: starting estimator thread 0... [ 1044.193112][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.212124][ T8851] IPVS: using max 29 ests per chain, 69600 per kthread [ 1044.218758][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.234214][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.242450][ T8855] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1044.260487][ T8855] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1044.313741][ T8855] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1044.360961][ T8855] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1044.437759][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.465053][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.473501][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.488590][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.489667][ T8866] lo speed is unknown, defaulting to 1000 [ 1044.508841][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.523620][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.533065][ T8872] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1044.540049][ T8872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1044.551559][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.560442][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.569961][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.584384][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.603367][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.620690][ T8855] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.919338][ T8884] __nla_validate_parse: 22 callbacks suppressed [ 1044.919358][ T8884] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9496'. [ 1045.078175][ T8886] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9498'. [ 1045.096399][ T8886] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9498'. [ 1045.128926][ T8893] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9499'. [ 1045.139227][ T8890] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9499'. [ 1045.434837][ T8904] bond0: entered allmulticast mode [ 1045.443097][ T8904] bond_slave_0: entered allmulticast mode [ 1045.461525][ T8904] dummy0: entered allmulticast mode [ 1045.790542][ T8915] netlink: 'syz.1.9508': attribute type 5 has an invalid length. [ 1045.820017][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9510'. [ 1045.851815][ T8926] netlink: 84 bytes leftover after parsing attributes in process `syz.5.9510'. [ 1046.000498][ T8926] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9510'. [ 1046.030833][ T8941] netlink: 'syz.1.9514': attribute type 1 has an invalid length. [ 1046.093507][ T8937] openvswitch: netlink: IP tunnel TTL not specified. [ 1046.266548][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9519'. [ 1046.267927][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9519'. [ 1046.391748][ T8974] syzkaller0: entered promiscuous mode [ 1046.398921][ T8974] syzkaller0: entered allmulticast mode [ 1046.458354][ T8976] xt_hashlimit: size too large, truncated to 1048576 [ 1046.790597][ T8988] lo speed is unknown, defaulting to 1000 [ 1046.920384][ T8988] syzkaller0 speed is unknown, defaulting to 1000 [ 1049.136475][ T8949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1049.371666][ T8998] netlink: 'syz.6.9528': attribute type 10 has an invalid length. [ 1049.466061][ T9004] tipc: Enabling of bearer rejected, already enabled [ 1049.625219][ T9013] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1050.378622][ T9061] __nla_validate_parse: 5 callbacks suppressed [ 1050.378642][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9543'. [ 1050.470223][ T9065] macvtap1: entered allmulticast mode [ 1050.578800][ T9058] bond5: (slave vti0): refused to change device type [ 1050.885793][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9552'. [ 1050.913567][ T9096] netlink: 'syz.0.9553': attribute type 9 has an invalid length. [ 1050.930802][ T9096] netlink: 'syz.0.9553': attribute type 6 has an invalid length. [ 1051.239208][ T9118] netlink: 'syz.1.9561': attribute type 1 has an invalid length. [ 1051.254156][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9560'. [ 1051.265441][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9561'. [ 1051.277295][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9561'. [ 1051.588200][ T9141] netlink: 'syz.0.9565': attribute type 1 has an invalid length. [ 1051.759482][ T9154] netlink: 'syz.5.9567': attribute type 1 has an invalid length. [ 1051.813448][ T9150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1051.824646][ T9150] bond2: (slave bond3): making interface the new active one [ 1051.837351][ T9150] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1051.847587][ T9147] ip6gre0: Master is either lo or non-ether device [ 1051.917033][ T9152] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 1052.016818][ T9165] netlink: 'syz.6.9570': attribute type 4 has an invalid length. [ 1052.323126][ T9181] netlink: 'syz.0.9577': attribute type 1 has an invalid length. [ 1052.368299][ T9181] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1052.615379][ T9202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.628401][ T9202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.670916][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9584'. [ 1052.773094][ T9216] netlink: 'syz.5.9586': attribute type 1 has an invalid length. [ 1052.816729][ T9216] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1052.828747][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9586'. [ 1052.841072][ T9216] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1052.844742][T14349] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1052.972877][T14349] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1053.245769][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9591'. [ 1053.639078][ T9253] IPv6: sit1: Disabled Multicast RS [ 1053.650535][ T9253] sit1: entered allmulticast mode [ 1053.835288][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9600'. [ 1053.866595][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9600'. [ 1054.560956][ T9316] netlink: 'syz.6.9618': attribute type 12 has an invalid length. [ 1054.595802][ T9316] netlink: 'syz.6.9618': attribute type 12 has an invalid length. [ 1054.960977][ T9333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1055.172994][ T9354] nbd0: detected capacity change from 0 to 16777216 [ 1055.190585][ T1681] block nbd0: Dead connection, failed to find a fallback [ 1055.897008][ T9393] __nla_validate_parse: 11 callbacks suppressed [ 1055.897030][ T9393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9641'. [ 1055.942547][ T9393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9641'. [ 1056.111641][ T9400] pimreg: left allmulticast mode [ 1056.240834][ T1681] block nbd0: shutting down sockets [ 1056.247313][ T1681] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.259585][ T1681] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1056.277411][ T1681] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.289051][ T1681] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1056.298539][ T1681] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.308865][ T1681] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1056.317221][ T1681] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.326733][ T1681] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1056.334937][ T1681] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.344808][ T1681] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1056.353352][ T1681] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.362906][ T1681] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1056.373899][ T1681] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.384130][ T1681] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1056.393214][ T1681] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.402564][ T1681] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1056.410391][ T9194] ldm_validate_partition_table(): Disk read failed. [ 1056.427816][ T1681] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.437812][ T1681] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1056.446248][ T1681] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1056.455770][ T1681] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1056.464452][ T9194] Dev nbd0: unable to read RDB block 0 [ 1056.473105][ T9194] nbd0: unable to read partition table [ 1056.550094][ T9194] ldm_validate_partition_table(): Disk read failed. [ 1056.557920][ T9194] Dev nbd0: unable to read RDB block 0 [ 1056.564528][ T9194] nbd0: unable to read partition table [ 1057.044436][ T9429] ip6t_rpfilter: unknown options [ 1057.300163][ T9431] SET target dimension over the limit! [ 1057.652780][ T9444] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1057.924180][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9661'. [ 1058.098746][ T9460] validate_nla: 2 callbacks suppressed [ 1058.098762][ T9460] netlink: 'syz.1.9664': attribute type 1 has an invalid length. [ 1058.117141][ T9461] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9664'. [ 1058.147327][ T9460] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9664'. [ 1058.182332][ T9461] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9664'. [ 1058.247588][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9665'. [ 1058.405811][ T9467] SET target dimension over the limit! [ 1058.506558][ T9467] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 1058.551096][ T9467] bond6: (slave vti0): Error -95 calling set_mac_address [ 1058.596674][ T9473] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9666'. [ 1058.936880][ T9487] Can't find ip_set type h!sh:net [ 1058.985292][ T9486] Can't find ip_set type h!sh:net [ 1059.158703][ T9504] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9672'. [ 1059.524999][ T9521] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9675'. [ 1059.785182][ T9526] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 1059.853189][ T9540] [ 1059.855580][ T9540] ====================================================== [ 1059.862663][ T9540] WARNING: possible circular locking dependency detected [ 1059.869777][ T9540] syzkaller #0 Not tainted [ 1059.874194][ T9540] ------------------------------------------------------ [ 1059.881270][ T9540] syz.1.9677/9540 is trying to acquire lock: [ 1059.887329][ T9540] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1059.897743][ T9540] [ 1059.897743][ T9540] but task is already holding lock: [ 1059.905100][ T9540] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1059.915979][ T9540] [ 1059.915979][ T9540] which lock already depends on the new lock. [ 1059.915979][ T9540] [ 1059.926980][ T9540] [ 1059.926980][ T9540] the existing dependency chain (in reverse order) is: [ 1059.935983][ T9540] [ 1059.935983][ T9540] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1059.944784][ T9540] down_read+0x4a/0x330 [ 1059.949462][ T9540] kernfs_remove_by_name_ns+0x3f/0x140 [ 1059.955447][ T9540] internal_create_group+0x58e/0x1180 [ 1059.961332][ T9540] sysfs_update_groups+0x60/0x130 [ 1059.966879][ T9540] pmu_dev_alloc+0x29b/0x300 [ 1059.971986][ T9540] perf_event_sysfs_init+0x76/0x100 [ 1059.977847][ T9540] do_one_initcall+0x250/0x870 [ 1059.983139][ T9540] do_initcall_level+0x10a/0x1a0 [ 1059.988735][ T9540] do_initcalls+0x59/0xa0 [ 1059.993590][ T9540] kernel_init_freeable+0x29d/0x3e0 [ 1059.999310][ T9540] kernel_init+0x1d/0x1d0 [ 1060.004153][ T9540] ret_from_fork+0x514/0xb70 [ 1060.009298][ T9540] ret_from_fork_asm+0x1a/0x30 [ 1060.014575][ T9540] [ 1060.014575][ T9540] -> #9 (pmus_lock){+.+.}-{4:4}: [ 1060.021954][ T9540] __mutex_lock+0x19d/0x1550 [ 1060.027065][ T9540] perf_event_init_cpu+0x1d1/0x7a0 [ 1060.032699][ T9540] cpuhp_invoke_callback+0x434/0x810 [ 1060.038509][ T9540] cpuhp_thread_fun+0x362/0x780 [ 1060.043991][ T9540] smpboot_thread_fn+0x57c/0xa80 [ 1060.049476][ T9540] kthread+0x388/0x470 [ 1060.054060][ T9540] ret_from_fork+0x514/0xb70 [ 1060.059168][ T9540] ret_from_fork_asm+0x1a/0x30 [ 1060.064439][ T9540] [ 1060.064439][ T9540] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1060.071997][ T9540] cpuhp_thread_fun+0x127/0x780 [ 1060.077750][ T9540] smpboot_thread_fn+0x57c/0xa80 [ 1060.083227][ T9540] kthread+0x388/0x470 [ 1060.087816][ T9540] ret_from_fork+0x514/0xb70 [ 1060.092923][ T9540] ret_from_fork_asm+0x1a/0x30 [ 1060.098232][ T9540] [ 1060.098232][ T9540] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1060.105964][ T9540] cpus_read_lock+0x42/0x160 [ 1060.111073][ T9540] static_key_slow_inc+0x12/0x30 [ 1060.116592][ T9540] nbd_genl_reconfigure+0x1301/0x1e80 [ 1060.122632][ T9540] genl_family_rcv_msg_doit+0x233/0x340 [ 1060.128780][ T9540] genl_rcv_msg+0x614/0x7a0 [ 1060.133803][ T9540] netlink_rcv_skb+0x226/0x4a0 [ 1060.139166][ T9540] genl_rcv+0x28/0x40 [ 1060.143774][ T9540] netlink_unicast+0x7bb/0x940 [ 1060.149061][ T9540] netlink_sendmsg+0x813/0xb40 [ 1060.154334][ T9540] sock_sendmsg_nosec+0x13a/0x180 [ 1060.159872][ T9540] ____sys_sendmsg+0x54e/0x850 [ 1060.165158][ T9540] ___sys_sendmsg+0x2a5/0x360 [ 1060.170443][ T9540] __x64_sys_sendmsg+0x1b1/0x290 [ 1060.175901][ T9540] do_syscall_64+0x174/0x580 [ 1060.181010][ T9540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.187420][ T9540] [ 1060.187420][ T9540] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1060.195055][ T9540] __mutex_lock+0x19d/0x1550 [ 1060.200163][ T9540] nbd_queue_rq+0x373/0x1150 [ 1060.205366][ T9540] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1060.211537][ T9540] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1060.218425][ T9540] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1060.224925][ T9540] blk_mq_run_work_fn+0x16c/0x300 [ 1060.230463][ T9540] process_scheduled_works+0xa8e/0x14e0 [ 1060.236522][ T9540] worker_thread+0xa47/0xfb0 [ 1060.241717][ T9540] kthread+0x388/0x470 [ 1060.246307][ T9540] ret_from_fork+0x514/0xb70 [ 1060.251443][ T9540] ret_from_fork_asm+0x1a/0x30 [ 1060.256807][ T9540] [ 1060.256807][ T9540] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1060.264012][ T9540] __mutex_lock+0x19d/0x1550 [ 1060.269393][ T9540] nbd_queue_rq+0xc1/0x1150 [ 1060.274589][ T9540] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1060.280658][ T9540] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1060.287506][ T9540] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1060.294267][ T9540] blk_mq_run_work_fn+0x16c/0x300 [ 1060.301725][ T9540] process_scheduled_works+0xa8e/0x14e0 [ 1060.307786][ T9540] worker_thread+0xa47/0xfb0 [ 1060.312886][ T9540] kthread+0x388/0x470 [ 1060.317464][ T9540] ret_from_fork+0x514/0xb70 [ 1060.322569][ T9540] ret_from_fork_asm+0x1a/0x30 [ 1060.329400][ T9540] [ 1060.329400][ T9540] -> #4 (set->srcu){.+.+}-{0:0}: [ 1060.336530][ T9540] __synchronize_srcu+0xc9/0x2f0 [ 1060.342012][ T9540] elevator_switch+0x1e8/0x7b0 [ 1060.347557][ T9540] elevator_change+0x2fa/0x480 [ 1060.353025][ T9540] elevator_set_default+0x375/0x440 [ 1060.358911][ T9540] blk_register_queue+0x3f3/0x4e0 [ 1060.364594][ T9540] __add_disk+0x6cb/0xe30 [ 1060.369778][ T9540] add_disk_fwnode+0xfb/0x4b0 [ 1060.374994][ T9540] nbd_dev_add+0x733/0xb60 [ 1060.380935][ T9540] nbd_init+0x15f/0x1e0 [ 1060.385944][ T9540] do_one_initcall+0x250/0x870 [ 1060.391405][ T9540] do_initcall_level+0x10a/0x1a0 [ 1060.396876][ T9540] do_initcalls+0x59/0xa0 [ 1060.401730][ T9540] kernel_init_freeable+0x29d/0x3e0 [ 1060.407974][ T9540] kernel_init+0x1d/0x1d0 [ 1060.412838][ T9540] ret_from_fork+0x514/0xb70 [ 1060.418313][ T9540] ret_from_fork_asm+0x1a/0x30 [ 1060.423589][ T9540] [ 1060.423589][ T9540] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1060.431500][ T9540] __mutex_lock+0x19d/0x1550 [ 1060.436631][ T9540] elevator_change+0x1af/0x480 [ 1060.443532][ T9540] elevator_set_none+0xb5/0x140 [ 1060.449415][ T9540] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1060.455929][ T9540] nbd_start_device+0x189/0xb30 [ 1060.461300][ T9540] nbd_genl_connect+0x1597/0x1c10 [ 1060.467044][ T9540] genl_family_rcv_msg_doit+0x233/0x340 [ 1060.473383][ T9540] genl_rcv_msg+0x614/0x7a0 [ 1060.478924][ T9540] netlink_rcv_skb+0x226/0x4a0 [ 1060.484228][ T9540] genl_rcv+0x28/0x40 [ 1060.488726][ T9540] netlink_unicast+0x7bb/0x940 [ 1060.494009][ T9540] netlink_sendmsg+0x813/0xb40 [ 1060.499280][ T9540] sock_sendmsg_nosec+0x13a/0x180 [ 1060.504817][ T9540] ____sys_sendmsg+0x54e/0x850 [ 1060.510103][ T9540] ___sys_sendmsg+0x2a5/0x360 [ 1060.515292][ T9540] __x64_sys_sendmsg+0x1b1/0x290 [ 1060.520749][ T9540] do_syscall_64+0x174/0x580 [ 1060.525892][ T9540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.532300][ T9540] [ 1060.532300][ T9540] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1060.540900][ T9540] blk_alloc_queue+0x544/0x690 [ 1060.546187][ T9540] __blk_mq_alloc_disk+0x194/0x390 [ 1060.551820][ T9540] nbd_dev_add+0x494/0xb60 [ 1060.556766][ T9540] nbd_init+0x15f/0x1e0 [ 1060.561454][ T9540] do_one_initcall+0x250/0x870 [ 1060.566767][ T9540] do_initcall_level+0x10a/0x1a0 [ 1060.572413][ T9540] do_initcalls+0x59/0xa0 [ 1060.577278][ T9540] kernel_init_freeable+0x29d/0x3e0 [ 1060.583019][ T9540] kernel_init+0x1d/0x1d0 [ 1060.587971][ T9540] ret_from_fork+0x514/0xb70 [ 1060.593078][ T9540] ret_from_fork_asm+0x1a/0x30 [ 1060.598353][ T9540] [ 1060.598353][ T9540] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1060.605562][ T9540] fs_reclaim_acquire+0x71/0x100 [ 1060.611014][ T9540] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1060.617244][ T9540] alloc_inode+0xb8/0x1b0 [ 1060.622122][ T9540] iget_locked+0x131/0x6a0 [ 1060.627053][ T9540] kernfs_get_inode+0x4f/0x770 [ 1060.632329][ T9540] kernfs_get_tree+0x5cd/0x980 [ 1060.637603][ T9540] vfs_get_tree+0x92/0x2a0 [ 1060.642532][ T9540] do_new_mount+0x319/0xdc0 [ 1060.647545][ T9540] __se_sys_mount+0x31d/0x420 [ 1060.652908][ T9540] do_syscall_64+0x174/0x580 [ 1060.658014][ T9540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.664414][ T9540] [ 1060.664414][ T9540] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 1060.672396][ T9540] __lock_acquire+0x1520/0x2cf0 [ 1060.677762][ T9540] lock_acquire+0x106/0x350 [ 1060.682778][ T9540] down_write+0x96/0x200 [ 1060.687541][ T9540] kernfs_remove_by_name_ns+0x4e/0x140 [ 1060.693538][ T9540] sysfs_unmerge_group+0xd3/0x140 [ 1060.699092][ T9540] dpm_sysfs_remove+0x5f/0xd0 [ 1060.704396][ T9540] device_del+0x250/0x8f0 [ 1060.709287][ T9540] cdev_device_del+0x27/0xf0 [ 1060.714386][ T9540] evdev_disconnect+0x4c/0xb0 [ 1060.719693][ T9540] __input_unregister_device+0x356/0x650 [ 1060.725870][ T9540] input_unregister_device+0x9b/0x100 [ 1060.731746][ T9540] hidp_session_remove+0x181/0x2b0 [ 1060.737431][ T9540] l2cap_unregister_user+0x145/0x160 [ 1060.743281][ T9540] hidp_connection_del+0xfd/0x1d0 [ 1060.748813][ T9540] hidp_sock_ioctl+0x3ab/0x650 [ 1060.754086][ T9540] sock_do_ioctl+0x101/0x320 [ 1060.759186][ T9540] sock_ioctl+0x57a/0x7e0 [ 1060.764024][ T9540] __se_sys_ioctl+0xfc/0x170 [ 1060.769389][ T9540] do_syscall_64+0x174/0x580 [ 1060.774492][ T9540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.780890][ T9540] [ 1060.780890][ T9540] other info that might help us debug this: [ 1060.780890][ T9540] [ 1060.791105][ T9540] Chain exists of: [ 1060.791105][ T9540] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 1060.791105][ T9540] [ 1060.804920][ T9540] Possible unsafe locking scenario: [ 1060.804920][ T9540] [ 1060.812423][ T9540] CPU0 CPU1 [ 1060.817813][ T9540] ---- ---- [ 1060.823198][ T9540] rlock(&root->kernfs_supers_rwsem); [ 1060.828647][ T9540] lock(pmus_lock); [ 1060.835048][ T9540] lock(&root->kernfs_supers_rwsem); [ 1060.842927][ T9540] lock(&root->kernfs_rwsem); [ 1060.847678][ T9540] [ 1060.847678][ T9540] *** DEADLOCK *** [ 1060.847678][ T9540] [ 1060.855869][ T9540] 4 locks held by syz.1.9677/9540: [ 1060.860974][ T9540] #0: ffff8880412ac2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_unregister_user+0x35/0x160 [ 1060.871047][ T9540] #1: ffffffff901dd748 (hidp_session_sem){++++}-{4:4}, at: hidp_session_remove+0x2c/0x2b0 [ 1060.881064][ T9540] #2: ffffffff8faa4640 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x2d8/0x650 [ 1060.891261][ T9540] #3: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1060.902583][ T9540] [ 1060.902583][ T9540] stack backtrace: [ 1060.908464][ T9540] CPU: 1 UID: 0 PID: 9540 Comm: syz.1.9677 Not tainted syzkaller #0 PREEMPT(full) [ 1060.908484][ T9540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1060.908496][ T9540] Call Trace: [ 1060.908504][ T9540] [ 1060.908512][ T9540] dump_stack_lvl+0xe8/0x150 [ 1060.908539][ T9540] print_circular_bug+0x2e1/0x300 [ 1060.908558][ T9540] check_noncircular+0x12e/0x150 [ 1060.908584][ T9540] __lock_acquire+0x1520/0x2cf0 [ 1060.908606][ T9540] ? __lock_acquire+0x13e8/0x2cf0 [ 1060.908632][ T9540] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1060.908655][ T9540] lock_acquire+0x106/0x350 [ 1060.908675][ T9540] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1060.908704][ T9540] down_write+0x96/0x200 [ 1060.908719][ T9540] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1060.908741][ T9540] ? __pfx_down_write+0x10/0x10 [ 1060.908759][ T9540] kernfs_remove_by_name_ns+0x4e/0x140 [ 1060.908783][ T9540] sysfs_unmerge_group+0xd3/0x140 [ 1060.908804][ T9540] dpm_sysfs_remove+0x5f/0xd0 [ 1060.908823][ T9540] device_del+0x250/0x8f0 [ 1060.908838][ T9540] ? preempt_schedule_thunk+0x16/0x40 [ 1060.908858][ T9540] ? __pfx_device_del+0x10/0x10 [ 1060.908876][ T9540] cdev_device_del+0x27/0xf0 [ 1060.908894][ T9540] evdev_disconnect+0x4c/0xb0 [ 1060.908913][ T9540] __input_unregister_device+0x356/0x650 [ 1060.908929][ T9540] ? enable_work+0x1fd/0x230 [ 1060.908949][ T9540] input_unregister_device+0x9b/0x100 [ 1060.908966][ T9540] hidp_session_remove+0x181/0x2b0 [ 1060.908984][ T9540] l2cap_unregister_user+0x145/0x160 [ 1060.909009][ T9540] hidp_connection_del+0xfd/0x1d0 [ 1060.909026][ T9540] hidp_sock_ioctl+0x3ab/0x650 [ 1060.909045][ T9540] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 1060.909078][ T9540] ? do_vfs_ioctl+0x116f/0x1530 [ 1060.909098][ T9540] sock_do_ioctl+0x101/0x320 [ 1060.909116][ T9540] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1060.909131][ T9540] ? hook_file_ioctl+0x1f0/0x5f0 [ 1060.909229][ T9540] sock_ioctl+0x57a/0x7e0 [ 1060.909246][ T9540] ? __pfx_sock_ioctl+0x10/0x10 [ 1060.909261][ T9540] ? __fget_files+0x2a/0x420 [ 1060.909280][ T9540] ? __fget_files+0x3a2/0x420 [ 1060.909298][ T9540] ? __fget_files+0x2a/0x420 [ 1060.909317][ T9540] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1060.909335][ T9540] ? __pfx_sock_ioctl+0x10/0x10 [ 1060.909350][ T9540] __se_sys_ioctl+0xfc/0x170 [ 1060.909364][ T9540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.909380][ T9540] do_syscall_64+0x174/0x580 [ 1060.909401][ T9540] ? trace_irq_disable+0x3b/0x140 [ 1060.909420][ T9540] ? clear_bhb_loop+0x40/0x90 [ 1060.909437][ T9540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.909452][ T9540] RIP: 0033:0x7f81ec39de59 [ 1060.909468][ T9540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.909483][ T9540] RSP: 002b:00007f81ed236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1060.909499][ T9540] RAX: ffffffffffffffda RBX: 00007f81ec626180 RCX: 00007f81ec39de59 [ 1060.909511][ T9540] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000008 [ 1060.909539][ T9540] RBP: 00007f81ec433e6f R08: 0000000000000000 R09: 0000000000000000 [ 1060.909550][ T9540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.909559][ T9540] R13: 00007f81ec626218 R14: 00007f81ec626180 R15: 00007ffc59b3d438 [ 1060.909578][ T9540]