last executing test programs: 3.279955307s ago: executing program 4 (id=779): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10, 0x1, 0xdda1}], 0x10}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x1}]}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10, 0x1, 0xdda1}], 0x10}, 0x20000000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x1}]}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x20) (async) 3.049036193s ago: executing program 4 (id=783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="060000f21c0b0004000000030000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40804) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r6, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) syz_emit_ethernet(0x13e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x108, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1c, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5"}]}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r7}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc059}, 0x4c080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 2.805045603s ago: executing program 4 (id=788): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x94, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xdb9}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0xca90}, {0x8, 0x13, 0x2}, {0x5}}]}, 0x94}}, 0x4c010) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0xb08, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4000024) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x10}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x1) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x18, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x4000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000840)={{r3, &(0x7f0000000680)='$))\x00', 0x2a000, &(0x7f00000006c0)={@align=0x7, {0x0, 0xfff7, 0x10000, 0x9}}, 0x3e39, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0xff}, 0x1, &(0x7f0000000800)=[{0x3, 0x1, &(0x7f0000000780)='batadv\x00', &(0x7f00000007c0)="d65ebb1e441f003dcdd38e1f6f5ac2a07305102258fcf711cb3ee60795239533225c0b08a3cf98dc0c8eaa6b3bc3cd9437a1596c875b87", 0x37, 0x2}]}) r6 = accept4$vsock_stream(r5, &(0x7f00000008c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) r7 = accept4$vsock_stream(r6, &(0x7f0000000900)={0x28, 0x0, 0x2711, @local}, 0x10, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r3) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, r8, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x8000) r9 = accept4$vsock_stream(r7, &(0x7f0000000ac0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x0) accept4$vsock_stream(r9, &(0x7f0000000b00)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) ioctl$NILFS_IOCTL_GET_SUINFO(r9, 0x80186e84, &(0x7f0000000b80)={&(0x7f0000000b40)=[{0x2}, {0x5, 0x7fff}, {0x101, 0x1, 0x2}], 0x3, 0x10, 0x0, 0x596}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r0) getpeername$packet(r5, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c80)=0x14) getsockname$packet(r5, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000d80)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000dc0)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xa8, r10, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xe70}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffff0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40805}, 0x1) pipe(&(0x7f0000001040)) getsockopt$SO_BINDTODEVICE(r15, 0x1, 0x19, &(0x7f0000001080), 0x10) 2.608368466s ago: executing program 4 (id=791): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) 2.425937422s ago: executing program 3 (id=793): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000040"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f07c60000000000000081"], 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newneigh={0x2c, 0x1c, 0x8, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x0, r2, 0x1, 0x20, 0xb}, [@NDA_IFINDEX={0x8, 0x8, r3}, @NDA_PROTOCOL={0x5, 0xc, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) 2.230963524s ago: executing program 4 (id=795): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00000000000000ff020000000000000000000000000001000000000a"], 0xc0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 2.222246573s ago: executing program 3 (id=796): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x2a, 0x5, 0x0) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) socket(0x15, 0x5, 0x0) (async) getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r5, 0x8) (async) accept4(r5, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) (async) 2.097367688s ago: executing program 4 (id=799): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80c00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x4451) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r4, 0x0, 0x80, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf4, 0x3e, 0x20, 0x70bd27, 0x25dfdbfb, {0x1b}, [@generic="52796ec7f2e8457c92539b23e82ccf688f02a1957bbbd150c45558a94ecc4effd59d68e623458d4e0779bb7d19338a6985ac844fb7b7c9898674cf91558c77f05757f2786704d73aea137937b023c09829ff4b02e452e6f5bbb496c1176960ca392ff36ff6d48f25690de71aa6f559d750823de084b126ff453c24ff4cbb52798b158715e63ef5e6cbc0ce13655ead7920557df6cbdc95fe9cbc11d09005f8a4146fdb66b107a1960ebc92402d68c9aa2bdbe41d0c24a058e5907e50e845da3fa85259951783b2cad4910560597c3fd372ab7c86b09d4ed3585de5878b"]}, 0xf4}, 0x1, 0x0, 0x0, 0x44004}, 0x89) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) syz_emit_ethernet(0x19c, &(0x7f0000000440)={@random="e33110495bfd", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x166, 0x3a, 0xff, @dev, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @dest_unreach={0x1, 0x2, 0x0, 0x5, '\x00', {0x4, 0x6, "a545e5", 0xbf, 0xc, 0x0, @mcast1, @local, [@dstopts={0x2c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x1, 0x10, 0x2, 0x7, 0x0, [@empty, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x8, 0x2, 0x4, 0x1, 0x5, 0x0, 0x338, [@private2]}, @fragment={0x2b, 0x0, 0x6, 0x1, 0x0, 0x7, 0x66}], "2030318eaccb571c5605be15d136fabcfb02096ee5e882feab89a3736405a9403c0697eed7eef2b462d7b1d1961b984d6176764931849e44c4e7255b908d0e25d7e205bfe9458d447ac3ab43eae86f119ff0aa8367c6f3ca366d1c5fc471d590a10239f48cf01c9627fec61686439197b78e5b137f9e"}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 1.948295203s ago: executing program 1 (id=801): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="7400000001070103000000000000e1ff020000040900010073797a3100000000540007800800024000000002080002400000b55a080001400000000108000140000000010800024000000007088001400800000608000140000000080813e640fffffffb0800014000e000000800024000000007"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[], &(0x7f0000000100)=""/141, 0x26, 0x8d, 0x1, 0x6}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000480)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1e, &(0x7f0000000c00)=0x80000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) socket$unix(0x1, 0x5, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r7, 0x8) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000005a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6075e70000323a00fe800000000000000000000000000000ff020000000000000080000000000001040090780000000060a3579e00002c00fe880000000000000000000000000001fe8000000000000000000000000000bb6be2"], 0x0) 1.717735464s ago: executing program 3 (id=804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r2, 0x1c5a7adcb1c518b3, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffffff4e, 0x803, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40002) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x120, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x10, 0x0, @l2={'ib', 0x3a, 'tunl0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 1.527234795s ago: executing program 0 (id=807): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) 1.524856194s ago: executing program 3 (id=808): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x6000cfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x6, 0x7) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) 1.457482999s ago: executing program 1 (id=810): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 1.383853289s ago: executing program 0 (id=811): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000001000000000000010"], &(0x7f0000000100)=""/141, 0x26, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x1c, 0x68, 0x162ceceb15c17209, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x1}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008090) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000001180)=""/4096, &(0x7f0000002180)=0x1000) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000001c0)=0x4, 0x1) sendto$inet(r3, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 865.323966ms ago: executing program 0 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x14, r5, 0xd5c15c672e322a81}, 0x14}}, 0x20000008) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) clock_gettime(0xfffffffb, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="6a635022aaa761eb0211ed4ae41df7c695fcc3b45cb960497f4ce0cfc38ed3b9c848aeaab209f30e46a473c07e9a6218856a8bdaaa8b3d0d050b00b7dad8e0f614a2890307e651dbeb326f46d697d21f9c3d928b19ed2d19f493fbc25d34d75e074152bfbb22ecd6", 0x68) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000200)={0x1f, @none, 0xa4}, 0xa) 853.727646ms ago: executing program 2 (id=815): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x1, 0xc, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @dev={0xac, 0x14, 0x14, 0xdc}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="fe7f0000815c00001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x40}}, 0x48010) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='team0\x00', 0x4000, &(0x7f0000000080)={@_ha_fsid={[0x10, 0x4]}, {0x0, 0x9, 0x40, 0x7}}, 0x8001, &(0x7f00000000c0), &(0x7f0000000100)=0x80a}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000001c0)={0x2, 0x5}, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r7], 0x2c}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x26, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000008000000000000000800000018110000c15788223d3229daa1c2c4a264c0a9e8f833c204718924e2570b447b906fc28ce2af5319e730e64562ead6db7818d34bfa7abf2de9d308d06deeae36c8650befb27b13348f5823d771dd96474d0cc54e63c5041fbbb8ed6bff573ce6bf23f5a4b2177530a64fb72c531bdc5ffa3be2b0d990e32105f9701f8c2b5da810e047e7", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001845000008000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000185100000500000000000000000000001867000008000000000000000f00000001930400ffffffff0048250007000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x3, 0x5c, &(0x7f00000006c0)=""/92, 0x41100, 0x4, '\x00', r7, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0x8, 0xffffffff, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x5, 0x2, 0x0, 0xc}], 0x10, 0x1}, 0x94) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="05fb00ffffffffffffff1f"], 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'tunl0\x00', r2, 0x40, 0x7800, 0x9, 0x1, {{0x10, 0x4, 0x2, 0x2, 0x40, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x6d, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@remote, 0x196}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@private=0xa010101, 0x8}]}, @timestamp={0x44, 0x8, 0xa2, 0x0, 0x9, [0x7f]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4004891}, 0x400008c5) 633.266972ms ago: executing program 2 (id=816): r0 = socket(0x11, 0x800000003, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000400000004020200000000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000200000003007767310000000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="a3f7df22", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4048001}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 612.971927ms ago: executing program 0 (id=817): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x6, 0x8000000000000001, 0x0, 0x9, 0x7}], 0x1, 0x38, 0x0, 0x7}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000200)={0x19, 0x25, 0x8000000, 0x8, 0xff}) (async) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000200)={0x19, 0x25, 0x8000000, 0x8, 0xff}) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000000240)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000280)={0x7, 0xe}) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000280)={0x7, 0xe}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000002c0)={0x3, 0x4, @status={[0x4, 0xfffffffffffffffe, 0x6, 0x7, 0x7ff, 0x5]}, [0x400, 0x0, 0x100000000, 0x800, 0x0, 0x9, 0x8001, 0x5da035b5, 0x43, 0x9, 0xa, 0x6, 0x6, 0x7, 0x6, 0x0, 0x200, 0xc7, 0x8, 0x578, 0x3, 0x0, 0x9, 0x80, 0x7, 0x3, 0xc76, 0xffffffff, 0xfffffffffffffff8, 0x200, 0x4, 0x8, 0x9, 0x7, 0x7, 0x2, 0x8, 0x100000001, 0x3, 0x101, 0x5, 0x8000000000000001, 0x70000000000, 0x0, 0x0, 0x1ff, 0x9, 0x5, 0x2, 0x1, 0x8000000000000000, 0x101, 0x8, 0x200, 0x1, 0x9, 0x352d, 0x0, 0x5, 0x80000001, 0x3, 0x3000, 0x4, 0x1]}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000d00)={r1}, 0x8) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ppoll(&(0x7f0000000e00)=[{r2, 0x2008}, {r2, 0x4000}, {r4, 0x4008}, {r5, 0x250}, {r6, 0xa004}], 0x5, &(0x7f0000000e40)={0x0, 0x989680}, &(0x7f0000000e80)={[0x7]}, 0x8) (async) ppoll(&(0x7f0000000e00)=[{r2, 0x2008}, {r2, 0x4000}, {r4, 0x4008}, {r5, 0x250}, {r6, 0xa004}], 0x5, &(0x7f0000000e40)={0x0, 0x989680}, &(0x7f0000000e80)={[0x7]}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f40)={{r3, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)='%pI4 \x00'}, 0x20) ioctl$XFS_IOC_GETBMAP(r7, 0xc0205826, &(0x7f0000000f80)={0xe24, 0xffff, 0x6, 0xfffffc00}) ioctl$XFS_IOC_INUMBERS(r5, 0x80405880, &(0x7f0000000fc0)={{0xfffffffffffffffd, 0x4, 0x7fffffff, 0x3, 0x8001}, [{0x1, 0x3, 0x1, 0xff}]}) accept(r3, &(0x7f0000001040)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f00000010c0)=0x80) (async) accept(r3, &(0x7f0000001040)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f00000010c0)=0x80) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000001100)) syz_genetlink_get_family_id$batadv(&(0x7f0000001140), r3) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001140), r3) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f00000011c0)={0x0, 0x80000000, 0x3ff, 0x0, 0xc, 0x3, 0x0, &(0x7f0000001180)=[{0x2, 0x101, 0x100}, {0x2, 0x101, 0x6}, {0x15, 0x1ff, 0x2a9}]}) r8 = accept4$unix(r3, &(0x7f0000001200), &(0x7f0000001280)=0x6e, 0x80800) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) ppoll(&(0x7f00000012c0)=[{r8, 0x8588}], 0x1, &(0x7f0000001340)={r9, r10+60000000}, &(0x7f0000001380)={[0x400]}, 0x8) (async) ppoll(&(0x7f00000012c0)=[{r8, 0x8588}], 0x1, &(0x7f0000001340)={r9, r10+60000000}, &(0x7f0000001380)={[0x400]}, 0x8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f00000013c0)={0x0, 0x7, 0x7ff}) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000001400)={r0}) (async) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000001400)={r0}) sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000016c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001480)={0x1f4, 0xa, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xc, 0x1a, '()%]&/#\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x400}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'macvlan1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x200}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7e}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x6f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xcad}}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x68e}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 535.54357ms ago: executing program 1 (id=818): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xffffffff, 'pim6reg\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x5e, 0x3, 0xa}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x55, 0x7, 0x8, 0x5e, 0x1, 0x3], 0x0, 0x7}}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'veth1\x00', 'macvtap0\x00', {0xff}, {}, 0x2f, 0x1, 0x45}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}}, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) 485.380209ms ago: executing program 3 (id=819): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x0, 0x7f, 0x0, 0x1, 0x7924}, 0x28) (async, rerun: 32) r0 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async, rerun: 64) r1 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x3e, 0x4, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e643000000000000000000000000800"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async, rerun: 32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (rerun: 32) close(r6) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) 482.63472ms ago: executing program 2 (id=820): r0 = socket(0x2b, 0x80801, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) socket(0x2b, 0x80801, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) unshare(0x400) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) (async) 422.197566ms ago: executing program 0 (id=821): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200300ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f77000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d60800000000000000c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f995a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bec62bcb2bc91ddcdfac2e6d442105ee6c0742b5e9584543b72f762d21c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) 376.631671ms ago: executing program 2 (id=822): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a0c829fef27fdb1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0) 257.962329ms ago: executing program 0 (id=823): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYBLOB="5fe72a54c6e1a29f09c45ee6a5b5c768621492b2d2ac8030eb81e0c11700a27d1e41ded84c24b13f34cd2e90299ff383d5219670931b038c690bf5abc6add8caf71f", @ANYBLOB="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", @ANYRESHEX=r4, @ANYRES64=r4], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x20061, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x48000) shutdown(r9, 0x1) getsockopt$bt_hci(r9, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 256.992933ms ago: executing program 1 (id=824): sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64040000}, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001540)={&(0x7f00000002c0)={0x11f4, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1030, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "b643bedab2a91c6a02c86a6ccbc9fdb44d5e3861c1d7b233bea767813d710202303d3295789e61bcd817f88c1794b3f20bcc74ce6b21de0cbbfae1b5ec75ba72dfa66871315aadc1ef090335390d2541db87fa21a149667be07899f5904ecabe638af9099d0b0d8e1ce76c835203661741c1fba8aa5745a9951c1ed6f81b27b20d5a995fba7b4e5df625827a06f8d10ff419ce518b781cbba8d2346528ae5c7531677d11435ed8e40dc6992038df5dc39c0032f9265373ab212cb99e1da186b06aabfe01e542a02c38bd424bd1ba16debb4f332ee4b2e409be9ed4848a1c336880eb9233bc04223202e5c818583988c46b4ec9b1f91f6ed33dfddb7c2f3536e6a8935aa10ccf62e1f1457a0623aa2fb902060fa2d90143b2afa033de800c6401bb7bc89afb0dbc9879ee699715cf5521ee0f2c8f766047a62a3bb5d72123a12295ad5ec2360275be27a3775d103cb2cf01d843fdbc5c57b596c8bacb187c061b3a91e5c25dd317e7c72282fbd9efa54f7c25beb606f3d8e3246189fbbbdcf6dd0207cadeef89549fc0cdc7dbf33f5520099d3dcc281286a2658e9cda926d58942261261c1caa06b08a84efefafc58ed980ef6cb7193e5016ad5256d15db23dfb776eab92da8e5386394399dac7849b58ac19b5c0eba53e02a9a34334ad50c23662678a83328143f348a9f436f30e797994ccd7ef40aae1e6bae8e60cf4233fd0e3ab2ee350050d76853bc76c9ef7bcce47131451a79e3ca3ffb027c2e5fed38fee86f93a70882436fd723583e6480060456285456351aa2975511aa1215f9f2031da32b99da3e0692da4d2c36bc8a91f2d5ed7b1184fed4d8f6efaae852e496813c0b3f6a7d9c7597e013585951631537972f2a6991007d68f2fa4c06ddcf1d58caeba375567afb1fb1deda08f6fce02aa76d63600ce95109aa182b450aeb135c7720f6e26d5d375ac68c4d6e7b7af341c1d83c7658226e72923797f3e7983f1647af90ac326cd6dfd1ad5a9d5c4c97fbd731755e91f38e9a2581991f6ef36a9b24579703c3a0335282b1d492c7f60b74f30b815fb4e3cecc67d0e1ce45084abe011de1a4e188eefad53081feb52e6dbd115a55437c3b02ea23ed9e40d24a8277a4614fa9348cb746141fcf97dfbdc8fde22b5ddec5591e2d4d2f7bf9f1ab1804cd89642498584ac0e3e6972dba9230a6efa8c2cd90c761e66082001f8a2ae51b38700e4817b30de930a741e58b5e84b6f22628df7ea8b76f9b1dfb591f918eccf410deeb355a881c4f8c7b98fc2fde0e5b93d31979c0ddaecb1f50fc4319164af08380c39758dbdb411ff92f0027db30d0b6fcccb7e8b6a3d6634dc53edd3eac501dfe19b7d6aee0aab1f536ee4c900172230fffd9c0af1ce87159185cba1cb87875107df3ebff8b669330dd14b0f3f47ef12a182c2dd68c3c506b0b784148218764dd5c002fec670b56dbee17329049a4dc9f7589f2e3c42032466d1294e5e497ca87fe38a4aea713c18a169a87d54402f06009fd24a7417a475aa493f313ef668a5e75f3048da8cc808eace1994454d24c8d6ec2b6c3f95f54a5e951a7907b69ddedc32e682fb592e75bff9b571f664c7d8a882bd1f2f8fbacc591c2b44d6d2695cd2151c2089e92f34c6fe925a5d4f548770405d7e1ed2de99e8182fe22fba1773dbd477053a7fbf7460d86d50bec387ba515c26c31d2baebf85c13a6b9173c10117a592d7096b73ecc9f284414d5cb8a778f1a353f91dae6b8c3060ba56afd2598566ad4d060ebc28a50054cd4c425dbe51d5744e599a391d84bb8381d7b1565e3977563789d1889bed6866b830a09b3db358e6e928eaea34ac3865648d7e93578d1d260c2c5617acf92a9ba90bd161d2919f1b74ec428bce0e909f512f9aba9f423ba30773a034eda12aa9f6816faf7ea0369b1d0e589be5ed3a52c475572b3e16ee7b1b19929d1436b07cf54a1d5bf215a0e2152539331382e4a1dceb3c79c16cf04e3180708bb34955f8ba23f888464927a6fff55be0efd4e1af13a736e597d1f6c50a8d5d3b5175913c39512a47444ce84b956c439fc06d0286be0346c36b3ccc8c055627a0cd173aa986dbb3d54ef9023109d1bb4b287ec30a71108f6aa75bce9a2418f2e468fb4f2e409f10ec03f02273883ab703ccecd692b87d547b6af7c76331026b99cc0e8639368fe221222ab702c075f00564eeda3b507e317f7dd830c2d5f3d3093ea39002657bb0af9255292817dbb36ba932c4cc6630922368b1cf5f142b5576989f5aa0df981fac5b2105180bcb38a6e4a4263e2c0ff7bc843ea335628ec4c559c76064565ec2212297b51cb75d1db703e55fffda3fc7c5dbd5a0eacd876152d47c2b61f51d1a437a613e3bc24924e636fd898637b18b9d70a57a70818bbe63cbbded75f560cbfebc83fd63049f82a79ae78f0b43f0ee082376336b47ef9ab85fba23737d23cb1e6beefaecbb9411f3f9e9437f7f594410a8631523baf200ef1127101d68c06517dbe7b94db9f6f78ccd802a325dfbb783c8d86828ae07f92c64a45926517b040fccc61e8a805cb12a1e8d48f2caaa50e339c7bd8e0c2be8dccf57721c88ad37d9f86f7c84bcf2a23f966e044b58154e0a35f903772e2697dc10aa869218a98e50753e251eb9af6473fa5422db7791ef7ee5d2773ca1dc53d3934d0adf6fccab356fdc258c5d4c78f972922dc4f1d4f21aaf40bdc2490e75cab02e80080aaba199567bf114d70f122f61641b7d9190d7b986b50446ae637d128760a67f08a6600a3ea641977fd926a450060fb2ea4d8c0915aaff187d973d96dd4b638556604be01dc45948908122ad3b435b005eb99c8c8a5c3c2c6c2c20c43d4ee2fda278e18b5acf0a141815d3f0c4f2d723c59ea6fce9d2adc4da163248015ebd64838742fbcfb023fe94f1a7ba9a662a182a973f704b995323e1a7fc7f425937cecd7e7f9edd3bf8c660c776115a9262e32c1717de34c70aa09caed70a3be59c45ea690151fb576c8cb2e52963c9e63c3f0f6d24f8483ca2572124483181818e596b59b211a89cd537b192e2b8c16e885b5ea14c280ea09efa803156b79c02949340a2848570d868d49dfd791efc75fae7399dce094b26da063f2c86abcfbb04fb16b13c32db8bcd0f12e70962b6ae9fd38f0063e449e1dca325439e806cb06a6611ad6fafa0cbc7b7769b4e417c3d4a3dc41d2626b6bdaf26cff2d3f62967a5511d78fc17edc998ff75911357c1c6d519af2e165131d5408ba0d6799eadb268cc84909c6280e635b1645dbecc2f916a0054728f6672021b6bed2fa90675bddaa83bf5b5ab5f46850fb8f29bf66885d8b727118e2802f35fb2b961b788386bb0caa4922ff2c6ee14c397943aa48a6518fa41a2ecca29637f1a93ac118d07230d8dbb147cf0bf66c722b4d34f67bfca735803bb3decd9652be2639a6fb10f348a1108957b44978a245aed2271ed26a14deda88eacb97e745096fa34d98ac983071390c7ee4448714494b5a4a08000f2977c8c062f220553c86fec66ba9dafc18d0fa03a35d3c06e6e39ef9e3c101299755c3a03c81eef5e8d10c5eb65ff70fd4654e965b77ca2a8d18636e222355b45e437e1f43283ccf20f4762f2a39ab76846dec00f3854f8726cbf64c67bc9a5bd64531a119ab20d80ffb348a1f49c179316c0619f53ad2bcb4bacec10dde44ad0bd3861d88240079b72f23bd8b7d8454b837a2f099ce9f80c0777c88c517c7b0f8f75684b8f18c473b2efdac9dd3b0348c99b81839ebc7b4d62140b3a67acf4323b3724fb85c88a128aa9cab15292c0f69840d6835a1a27d22c8baad9abc9437118b7292074b00ba12ac108c42dacd3c3e63856aae0a710ea00037c2498a27105c21780b5c03680eac865b9fed521018e4b02d53e17d8bfdb8b7901ce1e7c0c381cebb0ec6343735f68ef6b4656d913a72cb6febe8839f758332b0d3f0a61746ae57ff2b86f03a37cae10b3bc8ef1f16040fbe81d270e0e9a02212e6c555a48573bd5df24f48136d41592030347e77a1023760189c03b7dd437764e97e370da62d0dbde88c60a6adaf11a9ec007064bef21dab15eef6f099f9be7834e2f789e1b6433a8455acebe3898a84e412bff2ee3dc130505ae10fefa25164c99950dcc6e491d0e11ea10be97b95043b541dc69ceda762ddaa6e40e1021429c66a8ba1898adc05265ab5d0d8684e5ec6162e335f33cbd4a58133a9e2065c1554369b811ebbd27db43740a0b900594af8eb29fc67e937e2bfda57f9d480d7d38086595ec74e74ebe122af13eeabdee13707f2eb1974925802b31fbce98ba5611dc337c7a6194d545aa7806ae47ef2e5fe7c9d4e57c7e7647e0fcb874e71164b4533c8ee388dccc0118402d61d609ee87e909041bd666dc1014f7b4efa40e05313f145980f06d5e79c9a8b0990ae4fc62b496536e20b7b941960469b23c6127fdc1f5624c302602cfe4e1bb6218e6feda27e9e7e1e5fa2542e09953402bf8fd6fc90bd0bc9337f724a0b7bb90fead6eb84035ada0e32faabd62be16dc0a43a560219a8bac27073c4eaf1aae7f80025d1b533fed069b12ddc9ef4fa36915fe4d713ededdf3c469a509da70d7ae500f408b337e6d00db873fab79fff0586da411cf173aa6d201b6b779b0c5309227f2d82e8a9b258b84b5bed1192d52c36a7667c8bf3ac3a0ca4e7245f5db3d9df85ac21b3f890640619aeb7f255288f1ae4a6b52f8893ad9a894fe2b07177da23d4dca628a753e1d2f8bb20b19f0ff08ec500bbda666153c38c117c974586b145893794c88192700ada76b1d02039f09cc36f23c6d160bbe53a0a971b099a7e5604d14e48bb3e6c38d2c0f20f7f2f056643a156a2f81323f1dbad94a3662cf2756befb00b6b185e1df093881e5db348fc774fc059bb10f1070be0d32846c28f0ce25e2666727e67bce02b89a3e1f234e1b6885ac4accde096bceba2224bd0ddb02bd4d8e9c3d0cc1cfd76faab7ea6fd2d3675cd921404bdc49f99550968abe8711bde8c610f3a374ad78e4921f95d340b3698e3ed645b3be394507237d763bd9484f63c92aa26fb7dc8799cb5830795d02baaf0584f79bf1fd89752ef4305d18f743faf904984fb96c26c0fbd186b4c5b0ba85d2c71f61b2047e4ac4360b2eeac6db647c3dd417ad865d4243fa6f2704ceafa5567f0494899583ec169509b1e7f8fb95d90541fb883cc9e78a6e680e8ff6c40168211a976f9f592e27602454c66053c2fe74349c08a6f9cbed41eb5274355cf03b141031764e3e83022996753f74c4d6b09cef1f30c72affa437ed1e6452f622a35bca7416a2d0d19d7cfa813c341a42ac9632adc30390119bbc77fe39d4ff2d179a6df99ff9c7fc0f62727a6d80411f9d0fcee02e0bf4b7f70eac66c8cbb71d09619ca0ca7be9c793acce1554421184e17dc44b4fd1170ff77320e050d895c0a1a7089534208190733b30deca6d4345e384f2f776793c35ee2de588cabd08121133ab6a517024a071c10118dcb788e9106dedabe668c25063f289ce98612ea323b70074e1fcf9a2371e370d1f5e91cae4df8644f523800212681efb6032634d8e63401aa31c3bf5efa1eb0b4bdcc0278cdd5f37c6fb51654717602d41176b1068648a71d4c9bdc23f46ad00ab07afa878543c11df1dba5b8505c99f4175660043c6a8ad73d1709cb03ddfd37fb166daae56428d0143b1f0c9906c50e6764a84722ec972cb7ddcda48fd8c9f55f7cf00e3c81f4ed9a93148e2ea960241e17d47bb4e1fdf51ed18273b63"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x672}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb051}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc29}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @local, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1885}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x4}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)=@newspdinfo={0x2c, 0x24, 0x1, 0x70bd28, 0x25dfdbfe, 0x9, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40008c0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x5c, r3, 0x25, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xa}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x81}, @NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xb3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 220.782453ms ago: executing program 2 (id=825): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x38}}, 0x20000000) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r6, 0x0, 0x0}, 0x10) 157.997912ms ago: executing program 3 (id=826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x7, 0x7, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x80a0, 0x10, 0x4, 0x6}}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x7, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x54}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x5c, 0x8, 0x200000, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x9, 0xffffffcc, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000480)={@mcast2, 0x0}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x7, 0x401, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x67, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x56, 0x3, 0x4, [{@private=0xa010101, 0x2}]}, @end, @noop, @end, @timestamp={0x44, 0x8, 0xb1, 0x0, 0x0, [0x9]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000600)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x190, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20048090}, 0x20000000) 123.14888ms ago: executing program 1 (id=827): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) getpeername(r0, &(0x7f0000000040)=@l2tp, &(0x7f00000000c0)=0x80) 45.99857ms ago: executing program 2 (id=828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x442b3, 0x602a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x10, 0x8}) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000170a0102"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) 0s ago: executing program 1 (id=829): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x29) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x2, 0x10001, {{0x15, 0x4, 0x3, 0x6, 0x54, 0x68, 0x0, 0x9, 0x0, 0x0, @empty, @private=0xa010101, {[@cipso={0x86, 0x3f, 0x3, [{0x1, 0x4, "b44f"}, {0xe, 0x4, "20ab"}, {0x1, 0x11, "a62f87231c9db67b604f543e0bd3d6"}, {0x7, 0x3, '*'}, {0x5, 0x4, "64e5"}, {0x5, 0x8, "0080b49f5d0d"}, {0x0, 0xc, "a4ca10e43bb23b1a586d"}, {0x5, 0x5, "8d3224"}]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140100001200000125bd7000ffdbdf251af215034e244e23ff00000004000000800000000400000004000000060000000000010008000000", @ANYRES32=r2, @ANYBLOB="ff0300002a540000ff010000080000004b000100e3e70c90c6605d1f5ed5aa4f8e1238a3d0192d6c9781db1f6238048f26b0548bee3bf5e3023929d98125b9f01bf6ab2468440b960f0c4084a926b1673cda513eebba8c950e007c0001006b333be639f6bbe571cd6197437a0b6abd57d62d23d9377cbd3d685e574846d6dcdf1c34679d0c67b539238f3d35dc6078516f75e5824671a16b44c4c1bd976e6104b702147f15de65d6190762138d9fcce10426830678d235f5d09193e5f92d20d5fdfef660e6de323218e4acf8e0bff56bb8015479bbdc0000"], 0x114}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 48.688567][ T5287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.703501][ T5287] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. syzkaller login: [ 73.515051][ T5609] cgroup: Unknown subsys name 'net' [ 73.638809][ T5609] cgroup: Unknown subsys name 'cpuset' [ 73.647083][ T5609] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.999964][ T5609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.526587][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.536113][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.544555][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.552931][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.561252][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.569029][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.569367][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.585485][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.592828][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.601767][ T4942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.649716][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.650007][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.667299][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.676697][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.687116][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.696729][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.696808][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.713545][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.713796][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.721151][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.762306][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.773533][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.781979][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.790397][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.798390][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.468098][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.475860][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.482979][ T5631] bridge_slave_0: entered allmulticast mode [ 80.490198][ T5631] bridge_slave_0: entered promiscuous mode [ 80.506294][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.513393][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.521054][ T5621] bridge_slave_0: entered allmulticast mode [ 80.528117][ T5621] bridge_slave_0: entered promiscuous mode [ 80.558619][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.565821][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.572923][ T5631] bridge_slave_1: entered allmulticast mode [ 80.580018][ T5631] bridge_slave_1: entered promiscuous mode [ 80.592563][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.599734][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.607078][ T5621] bridge_slave_1: entered allmulticast mode [ 80.613951][ T5621] bridge_slave_1: entered promiscuous mode [ 80.620861][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.628056][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.635192][ T5625] bridge_slave_0: entered allmulticast mode [ 80.642277][ T5625] bridge_slave_0: entered promiscuous mode [ 80.649173][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.656318][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.663416][ T5630] bridge_slave_0: entered allmulticast mode [ 80.671156][ T5630] bridge_slave_0: entered promiscuous mode [ 80.686193][ T5629] Bluetooth: hci0: command tx timeout [ 80.692175][ T5623] Bluetooth: hci1: command tx timeout [ 80.712753][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.720060][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.727270][ T5625] bridge_slave_1: entered allmulticast mode [ 80.734116][ T5625] bridge_slave_1: entered promiscuous mode [ 80.741464][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.748656][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.755815][ T5630] bridge_slave_1: entered allmulticast mode [ 80.762615][ T5630] bridge_slave_1: entered promiscuous mode [ 80.766288][ T5629] Bluetooth: hci3: command tx timeout [ 80.774597][ T5623] Bluetooth: hci2: command tx timeout [ 80.784202][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.827162][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.845916][ T5629] Bluetooth: hci4: command tx timeout [ 80.869374][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.890487][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.908836][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.916089][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.923197][ T5638] bridge_slave_0: entered allmulticast mode [ 80.930284][ T5638] bridge_slave_0: entered promiscuous mode [ 80.939156][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.951002][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.962431][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.973436][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.992239][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.999404][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.006900][ T5638] bridge_slave_1: entered allmulticast mode [ 81.014574][ T5638] bridge_slave_1: entered promiscuous mode [ 81.048781][ T5631] team0: Port device team_slave_0 added [ 81.093983][ T5631] team0: Port device team_slave_1 added [ 81.110155][ T5621] team0: Port device team_slave_0 added [ 81.117404][ T5625] team0: Port device team_slave_0 added [ 81.124699][ T5630] team0: Port device team_slave_0 added [ 81.140845][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.152174][ T5621] team0: Port device team_slave_1 added [ 81.168005][ T5625] team0: Port device team_slave_1 added [ 81.175528][ T5630] team0: Port device team_slave_1 added [ 81.191827][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.229556][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.236632][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.262763][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.283347][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.290394][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.316522][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.330506][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.337945][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.364393][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.392230][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.399302][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.425724][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.451964][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.458947][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.485022][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.496841][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.503814][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.530088][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.550505][ T5638] team0: Port device team_slave_0 added [ 81.558947][ T5638] team0: Port device team_slave_1 added [ 81.565132][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.572131][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.598127][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.609642][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.616679][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.642620][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.690127][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.697174][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.723203][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.776909][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.783894][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.810250][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.836301][ T5621] hsr_slave_0: entered promiscuous mode [ 81.842579][ T5621] hsr_slave_1: entered promiscuous mode [ 81.854781][ T5631] hsr_slave_0: entered promiscuous mode [ 81.861076][ T5631] hsr_slave_1: entered promiscuous mode [ 81.867430][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 81.873199][ T5631] Cannot create hsr debugfs directory [ 81.935273][ T5630] hsr_slave_0: entered promiscuous mode [ 81.941578][ T5630] hsr_slave_1: entered promiscuous mode [ 81.947723][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 81.953451][ T5630] Cannot create hsr debugfs directory [ 81.977509][ T5625] hsr_slave_0: entered promiscuous mode [ 81.983658][ T5625] hsr_slave_1: entered promiscuous mode [ 81.990206][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 81.995997][ T5625] Cannot create hsr debugfs directory [ 82.093119][ T5638] hsr_slave_0: entered promiscuous mode [ 82.099600][ T5638] hsr_slave_1: entered promiscuous mode [ 82.106195][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 82.111978][ T5638] Cannot create hsr debugfs directory [ 82.548217][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.567449][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.576986][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.591358][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.599636][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.610030][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.618155][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.627445][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.691025][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.702964][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.715396][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.726420][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.734168][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.743287][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.764230][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.772574][ T5629] Bluetooth: hci1: command tx timeout [ 82.779323][ T5623] Bluetooth: hci0: command tx timeout [ 82.788074][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.845771][ T5623] Bluetooth: hci3: command tx timeout [ 82.851218][ T5629] Bluetooth: hci2: command tx timeout [ 82.878112][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.888040][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.895564][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.904794][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.912935][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.922595][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.929675][ T5629] Bluetooth: hci4: command tx timeout [ 82.941515][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.950899][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.039565][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.078713][ T5638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.088732][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.105187][ T5638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.115420][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.132402][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.152436][ T5638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.161486][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.169684][ T5638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.178918][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.220077][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.227456][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.252115][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.259309][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.312032][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.321402][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.334721][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.343945][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.355330][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.370034][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.379949][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.388373][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.398119][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.459393][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.479423][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.518202][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.525306][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.548554][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.565163][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.572339][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.593337][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.600442][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.644012][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.651124][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.782358][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.825110][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.882390][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.920456][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.927657][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.970786][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.001875][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.009060][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.057901][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.065024][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.113262][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.120453][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.343446][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.570912][ T5631] veth0_vlan: entered promiscuous mode [ 84.612450][ T5631] veth1_vlan: entered promiscuous mode [ 84.700380][ T5631] veth0_macvtap: entered promiscuous mode [ 84.725435][ T5631] veth1_macvtap: entered promiscuous mode [ 84.832273][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.850400][ T5629] Bluetooth: hci0: command tx timeout [ 84.855892][ T5623] Bluetooth: hci1: command tx timeout [ 84.860465][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.904119][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.920077][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.937026][ T5629] Bluetooth: hci3: command tx timeout [ 84.942796][ T5623] Bluetooth: hci2: command tx timeout [ 84.953283][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.973514][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.997217][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.006521][ T5623] Bluetooth: hci4: command tx timeout [ 85.013851][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.159379][ T5621] veth0_vlan: entered promiscuous mode [ 85.242873][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.266001][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.268928][ T5621] veth1_vlan: entered promiscuous mode [ 85.282925][ T5630] veth0_vlan: entered promiscuous mode [ 85.331330][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.361054][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.375407][ T5630] veth1_vlan: entered promiscuous mode [ 85.385513][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.398093][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.477923][ T5621] veth0_macvtap: entered promiscuous mode [ 85.512410][ T5621] veth1_macvtap: entered promiscuous mode [ 85.522313][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.529690][ T5630] veth0_macvtap: entered promiscuous mode [ 85.577326][ T5630] veth1_macvtap: entered promiscuous mode [ 85.591840][ T5638] veth0_vlan: entered promiscuous mode [ 85.621685][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.658661][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.678588][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.691605][ T5638] veth1_vlan: entered promiscuous mode [ 85.713525][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.731487][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.749856][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.764016][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 85.783715][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.810151][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.840526][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.871246][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.882831][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.909034][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.972491][ T5638] veth0_macvtap: entered promiscuous mode [ 86.023974][ T5638] veth1_macvtap: entered promiscuous mode [ 86.067897][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.087108][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.119141][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.144430][ T5823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 86.160084][ T5625] veth0_vlan: entered promiscuous mode [ 86.178794][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 86.188753][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.192501][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.202616][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.213633][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 86.215137][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.232141][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.319701][ T5625] veth1_vlan: entered promiscuous mode [ 86.353876][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.364255][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.390972][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.399881][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.410010][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.433062][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.623562][ T42] cfg80211: failed to load regulatory.db [ 86.671518][ T5625] veth0_macvtap: entered promiscuous mode [ 86.739262][ T5625] veth1_macvtap: entered promiscuous mode [ 86.761930][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.788446][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.799076][ T5836] xt_hashlimit: size too large, truncated to 1048576 [ 86.936445][ T5629] Bluetooth: hci0: command tx timeout [ 86.942081][ T5623] Bluetooth: hci1: command tx timeout [ 86.972105][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.007168][ T5629] Bluetooth: hci3: command tx timeout [ 87.012642][ T5623] Bluetooth: hci2: command tx timeout [ 87.033568][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.050622][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.085786][ T5623] Bluetooth: hci4: command tx timeout [ 87.149893][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.240835][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.272128][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.295886][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.306167][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.435104][ T5855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15'. [ 87.452184][ T5855] netlink: 13 bytes leftover after parsing attributes in process `syz.3.15'. [ 87.478361][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 87.504256][ T5850] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 87.528993][ T5850] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13'. [ 87.583593][ T5855] veth3: entered promiscuous mode [ 87.715699][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.762388][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.841309][ T5873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 87.882338][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.921721][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.941789][ T5875] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 88.157176][ T5885] netlink: 10 bytes leftover after parsing attributes in process `syz.0.23'. [ 88.433961][ T5895] block nbd0: Unsupported socket: should be TCP or UNIX. [ 88.579224][ T5900] netlink: 'syz.4.26': attribute type 11 has an invalid length. [ 88.634671][ T5900] veth0_macvtap: left promiscuous mode [ 88.735972][ T5912] x_tables: duplicate underflow at hook 3 [ 88.989341][ T5917] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.048075][ T5922] netlink: 'syz.1.33': attribute type 11 has an invalid length. [ 89.074223][ T5922] netlink: 'syz.1.33': attribute type 11 has an invalid length. [ 89.174365][ T5927] netlink: 'syz.3.34': attribute type 29 has an invalid length. [ 89.220945][ T5927] netlink: 'syz.3.34': attribute type 29 has an invalid length. [ 89.370448][ T5937] Zero length message leads to an empty skb [ 89.837174][ T5954] macvtap1: entered allmulticast mode [ 89.872675][ T5954] veth0_macvtap: entered allmulticast mode [ 90.028224][ T5961] syz.2.47 uses obsolete (PF_INET,SOCK_PACKET) [ 90.234398][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.243106][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.407781][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.424860][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.548207][ T94] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.563407][ T94] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.573201][ T57] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.611758][ T57] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.885083][ T6000] ip6gre0: Master is either lo or non-ether device [ 90.919462][ T6000] __nla_validate_parse: 8 callbacks suppressed [ 90.919480][ T6000] netlink: 56 bytes leftover after parsing attributes in process `syz.0.57'. [ 90.957050][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 91.153083][ T6013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.62'. [ 91.167727][ T6013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.62'. [ 91.368137][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 91.383979][ T6017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'. [ 91.412874][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 91.417140][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.423451][ T6017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'. [ 91.430849][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.468002][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.476854][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.697718][ T6023] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 91.943235][ T6037] bond1: invalid ARP target 0.0.0.0 specified for addition [ 91.968996][ T6037] bond1: option arp_ip_target: invalid value (0) [ 91.998168][ T6037] bond1 (unregistering): Released all slaves [ 92.018534][ T6042] Bluetooth: MGMT ver 1.23 [ 92.027846][ T6042] openvswitch: netlink: IP tunnel TTL not specified. [ 92.106194][ T6042] tipc: Started in network mode [ 92.113822][ T6042] tipc: Node identity ac14140f, cluster identity 4711 [ 92.137592][ T6042] tipc: New replicast peer: 255.255.255.255 [ 92.156887][ T6042] tipc: Enabled bearer , priority 10 [ 92.184605][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 92.200782][ T6043] vlan2: entered allmulticast mode [ 92.229906][ T6043] bond0: entered allmulticast mode [ 92.244105][ T6043] bond_slave_0: entered allmulticast mode [ 92.264809][ T6043] bond_slave_1: entered allmulticast mode [ 92.361607][ T6063] netlink: 4128 bytes leftover after parsing attributes in process `syz.1.79'. [ 92.481198][ T6071] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 92.567197][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.589657][ T6071] netlink: 'syz.2.81': attribute type 29 has an invalid length. [ 92.622320][ T6071] netlink: 'syz.2.81': attribute type 29 has an invalid length. [ 93.270920][ T5721] tipc: Node number set to 2886997007 [ 93.373013][ T6118] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 93.388103][ T6118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.597808][ T6124] bridge_slave_0: left allmulticast mode [ 93.615053][ T6124] bridge_slave_0: left promiscuous mode [ 93.637008][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.668209][ T6124] bridge_slave_1: left allmulticast mode [ 93.684210][ T6124] bridge_slave_1: left promiscuous mode [ 93.694527][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.733145][ T6124] bond0: (slave bond_slave_0): Releasing backup interface [ 93.753026][ T6129] openvswitch: netlink: Flow actions attr not present in new flow. [ 93.768803][ T6124] bond0: (slave bond_slave_1): Releasing backup interface [ 93.799456][ T6124] team0: Port device team_slave_0 removed [ 93.822824][ T6124] team0: Port device team_slave_1 removed [ 93.838585][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.855147][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.880013][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.892533][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.919600][ T6124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.981807][ T6135] warning: `syz.1.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.164784][ T6197] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 95.472469][ T6206] netlink: 'syz.4.123': attribute type 3 has an invalid length. [ 95.663731][ T6206] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 95.947242][ T6229] trusted_key: syz.1.128 sent an empty control message without MSG_MORE. [ 96.074114][ T6239] netlink: 'syz.3.132': attribute type 64 has an invalid length. [ 96.089869][ T6239] __nla_validate_parse: 8 callbacks suppressed [ 96.089885][ T6239] netlink: 5 bytes leftover after parsing attributes in process `syz.3.132'. [ 96.135542][ T6240] macsec1: entered promiscuous mode [ 96.411271][ T6249] netlink: 32 bytes leftover after parsing attributes in process `syz.2.135'. [ 96.523176][ T6260] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.139'. [ 96.561553][ T6260] veth1_macvtap: left promiscuous mode [ 96.609983][ T6268] veth0: entered promiscuous mode [ 96.623438][ T6268] veth0: left promiscuous mode [ 96.642409][ T6266] netlink: 'syz.1.141': attribute type 33 has an invalid length. [ 96.928935][ T6273] syzkaller0: entered promiscuous mode [ 96.941830][ T6273] syzkaller0: entered allmulticast mode [ 97.031353][ T6299] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20003 [ 97.067419][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 97.124360][ T6303] netlink: 76 bytes leftover after parsing attributes in process `syz.4.148'. [ 97.157988][ T6303] netlink: 320 bytes leftover after parsing attributes in process `syz.4.148'. [ 98.280216][ T6317] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 98.430374][ T6321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 98.611424][ T6334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.157'. [ 98.834963][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.160'. [ 98.855515][ T6334] syzkaller0: entered promiscuous mode [ 98.864309][ T6334] syzkaller0: entered allmulticast mode [ 98.896750][ T6334] x_tables: duplicate underflow at hook 3 [ 98.917026][ T6343] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 100.523756][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.170'. [ 100.564287][ T6382] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 101.204297][ T6419] __nla_validate_parse: 2 callbacks suppressed [ 101.204314][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 101.251628][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 101.301532][ T94] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.301645][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 101.319413][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.328991][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 101.344324][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.367027][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.437346][ T6432] netlink: 'syz.3.184': attribute type 3 has an invalid length. [ 101.535477][ T6436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.185'. [ 101.548766][ T6432] xt_CT: No such helper "snmp_trap" [ 101.560424][ T6438] Cannot find del_set index 1 as target [ 101.718655][ T6450] netlink: zone id is out of range [ 101.726086][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 101.742946][ T6450] netlink: zone id is out of range [ 101.749053][ T6445] netlink: 44 bytes leftover after parsing attributes in process `syz.2.189'. [ 101.766201][ T6450] netlink: zone id is out of range [ 101.801846][ T6450] netlink: zone id is out of range [ 101.826538][ T6450] netlink: zone id is out of range [ 101.832230][ T6450] netlink: zone id is out of range [ 101.837970][ T6450] netlink: zone id is out of range [ 101.860388][ T6450] netlink: zone id is out of range [ 101.866535][ T6450] netlink: zone id is out of range [ 101.871921][ T6450] netlink: zone id is out of range [ 101.935388][ T6462] netem: incorrect ge model size [ 102.008011][ T6467] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.195'. [ 103.519530][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'. [ 103.532903][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 103.782746][ T6514] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 103.807137][ T6514] macvlan2: entered promiscuous mode [ 103.812631][ T6514] macvlan2: entered allmulticast mode [ 103.819020][ T6514] bond1: entered promiscuous mode [ 103.824542][ T6514] bridge1: entered promiscuous mode [ 103.832380][ T6514] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.844261][ T6514] bond1: left promiscuous mode [ 103.853785][ T6514] bridge1: left promiscuous mode [ 104.049568][ T6522] dvmrp1: entered allmulticast mode [ 104.738138][ T6453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.773249][ T6544] netlink: 'syz.0.215': attribute type 23 has an invalid length. [ 104.978658][ T6561] bridge_slave_0: left allmulticast mode [ 104.987756][ T6561] bridge_slave_0: left promiscuous mode [ 104.994636][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.019584][ T6561] bridge_slave_1: left allmulticast mode [ 105.042509][ T6561] bridge_slave_1: left promiscuous mode [ 105.072945][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.139643][ T6561] bond0: (slave bond_slave_0): Releasing backup interface [ 105.148920][ T6561] bond_slave_0: left allmulticast mode [ 105.148925][ T6566] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 105.164318][ T6561] bond0: (slave bond_slave_1): Releasing backup interface [ 105.174770][ T6561] bond_slave_1: left allmulticast mode [ 105.182076][ T6561] team0: Port device team_slave_0 removed [ 105.189798][ T6561] team0: Port device team_slave_1 removed [ 105.196217][ T6561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.204686][ T6561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.314159][ T6566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.341423][ T6577] bond2: (slave bridge2): making interface the new active one [ 105.349731][ T6577] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 105.602349][ T6600] sctp: [Deprecated]: syz.1.229 (pid 6600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.602349][ T6600] Use struct sctp_sack_info instead [ 105.629107][ T6598] xt_nfacct: accounting object `syz1' does not exist [ 105.641985][ T6602] syzkaller0: entered promiscuous mode [ 105.649334][ T6602] syzkaller0: entered allmulticast mode [ 105.727350][ T6607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.739155][ T6607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.753556][ T6607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.804161][ T6607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.842364][ T6607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.858762][ T6607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.373201][ T6635] netem: change failed [ 106.412163][ T6634] x_tables: duplicate underflow at hook 1 [ 106.476920][ T6643] __nla_validate_parse: 4 callbacks suppressed [ 106.476937][ T6643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.242'. [ 106.524401][ T6644] netlink: 'syz.2.242': attribute type 1 has an invalid length. [ 106.550289][ T6644] netlink: 'syz.2.242': attribute type 2 has an invalid length. [ 106.589903][ T6644] netlink: 'syz.2.242': attribute type 1 has an invalid length. [ 106.606574][ T6644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.242'. [ 106.785514][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 106.802159][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.246'. [ 106.854649][ T57] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.884339][ T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.919034][ T57] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.939507][ T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.087690][ T6672] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 107.630039][ T6707] xt_nfacct: accounting object `syz1' does not exist [ 107.639384][ T6703] syzkaller0: entered promiscuous mode [ 107.662324][ T6703] syzkaller0: entered allmulticast mode [ 107.673210][ T6703] netlink: 68 bytes leftover after parsing attributes in process `syz.1.261'. [ 107.965873][ T5623] Bluetooth: hci4: command tx timeout [ 108.042850][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 108.070785][ T6730] tipc: Invalid UDP bearer configuration [ 108.070837][ T6730] tipc: Enabling of bearer rejected, failed to enable media [ 108.183920][ T6742] netlink: 'syz.3.269': attribute type 4 has an invalid length. [ 108.268213][ T6746] netlink: 'syz.3.269': attribute type 4 has an invalid length. [ 108.407537][ T6758] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.581723][ T6767] net_ratelimit: 137 callbacks suppressed [ 108.581740][ T6767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.114642][ T6797] syzkaller0: entered promiscuous mode [ 109.133375][ T6797] syzkaller0: entered allmulticast mode [ 109.551198][ T6830] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 109.586766][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 109.605989][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.298'. [ 109.789019][ T6839] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.911999][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.302'. [ 110.039758][ T6852] netlink: 'syz.2.303': attribute type 10 has an invalid length. [ 110.048606][ T6852] netlink: 396 bytes leftover after parsing attributes in process `syz.2.303'. [ 110.640655][ T6876] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 110.692676][ T6889] xt_l2tp: wrong L2TP version: 0 [ 110.971456][ T6900] netlink: 'syz.3.313': attribute type 2 has an invalid length. [ 111.009467][ T6900] netlink: 'syz.3.313': attribute type 1 has an invalid length. [ 111.146414][ T6912] pimreg3: entered allmulticast mode [ 111.560034][ T6935] batadv0: entered promiscuous mode [ 111.575735][ T6935] macsec1: entered promiscuous mode [ 111.592643][ T6938] __nla_validate_parse: 1 callbacks suppressed [ 111.592659][ T6938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.324'. [ 111.602722][ T6935] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 111.609052][ T6938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.324'. [ 111.638877][ T6935] batadv0: left promiscuous mode [ 111.705533][ T6938] veth0: entered promiscuous mode [ 111.745094][ T6937] veth0: left promiscuous mode [ 112.214709][ T6967] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.332'. [ 112.318978][ T6973] netlink: 'syz.4.335': attribute type 11 has an invalid length. [ 112.329205][ T6973] netlink: 64 bytes leftover after parsing attributes in process `syz.4.335'. [ 112.567296][ T6990] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.599617][ T6990] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 112.792524][ T6997] veth3: entered promiscuous mode [ 112.815751][ T6997] veth3: entered allmulticast mode [ 112.870173][ T1041] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.929994][ T1041] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.989755][ T7005] netlink: 'syz.0.343': attribute type 12 has an invalid length. [ 113.016150][ T7005] netlink: 'syz.0.343': attribute type 29 has an invalid length. [ 113.044698][ T7005] netlink: 148 bytes leftover after parsing attributes in process `syz.0.343'. [ 113.093220][ T7005] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 113.115094][ T7005] netlink: 47 bytes leftover after parsing attributes in process `syz.0.343'. [ 113.436162][ T7040] netlink: 272 bytes leftover after parsing attributes in process `syz.4.349'. [ 113.469324][ T7041] netlink: 272 bytes leftover after parsing attributes in process `syz.4.349'. [ 113.513546][ T7040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.349'. [ 113.554654][ T7046] netlink: 'syz.2.351': attribute type 16 has an invalid length. [ 113.586167][ T7046] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.597906][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 113.744861][ T7054] netlink: 'syz.0.353': attribute type 12 has an invalid length. [ 113.757581][ T7057] x_tables: duplicate underflow at hook 1 [ 113.793030][ T7057] sctp: [Deprecated]: syz.3.354 (pid 7057) Use of int in maxseg socket option. [ 113.793030][ T7057] Use struct sctp_assoc_value instead [ 114.190654][ T94] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.223245][ T94] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.268671][ T94] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.302838][ T7072] syzkaller0: entered promiscuous mode [ 114.314685][ T7072] syzkaller0: entered allmulticast mode [ 114.363024][ T94] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.638754][ T7112] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 115.320276][ T7150] netlink: 'syz.0.375': attribute type 2 has an invalid length. [ 115.504976][ T7144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.590162][ T7147] macvlan2: entered promiscuous mode [ 115.596618][ T7170] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 115.615961][ T7147] macvlan2: entered allmulticast mode [ 115.633954][ T7147] bond2: entered promiscuous mode [ 115.656137][ T7147] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.664166][ T7147] bond2: left promiscuous mode [ 116.071838][ T7193] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 116.098808][ T7193] netlink: 'syz.3.385': attribute type 2 has an invalid length. [ 116.614408][ T7231] __nla_validate_parse: 10 callbacks suppressed [ 116.614427][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 116.653251][ T7231] netlink: 'syz.2.395': attribute type 1 has an invalid length. [ 116.820758][ T7231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.843079][ T7234] bond2: (slave gretap1): making interface the new active one [ 116.854425][ T7234] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 117.507097][ T7287] netlink: 'syz.3.409': attribute type 2 has an invalid length. [ 117.519666][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 117.529854][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 117.539051][ T7288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.412'. [ 117.548508][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 117.578877][ T7289] openvswitch: netlink: Flow actions attr not present in new flow. [ 117.641856][ T7288] syzkaller1: entered promiscuous mode [ 117.655113][ T7288] syzkaller1: entered allmulticast mode [ 117.822531][ T7309] Cannot find del_set index 1 as target [ 117.983027][ T7317] Bluetooth: MGMT ver 1.23 [ 117.999655][ T7313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.419'. [ 118.009447][ T7316] syzkaller0: entered promiscuous mode [ 118.014947][ T7316] syzkaller0: entered allmulticast mode [ 118.031386][ T7307] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 118.314271][ T7331] sctp: [Deprecated]: syz.3.423 (pid 7331) Use of int in maxseg socket option. [ 118.314271][ T7331] Use struct sctp_assoc_value instead [ 118.727202][ T7352] xt_hashlimit: size too large, truncated to 1048576 [ 118.891295][ T7355] tipc: Started in network mode [ 118.902984][ T7355] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 118.938779][ T7355] tipc: Enabled bearer , priority 10 [ 119.392922][ T7384] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 119.418318][ T7384] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 119.579313][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 119.609102][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'. [ 119.773696][ T7399] tipc: Can't bind to reserved service type 2 [ 119.923175][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 119.958814][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 120.028625][ T7411] veth0: entered promiscuous mode [ 120.050872][ T24] tipc: Node number set to 4269801488 [ 120.086793][ T7418] gretap0: entered promiscuous mode [ 120.118191][ T7409] veth0: left promiscuous mode [ 120.489143][ T7440] geneve2: entered promiscuous mode [ 120.500732][ T7448] IPv6: Can't replace route, no match found [ 120.520742][ T7448] IPv6: Can't replace route, no match found [ 121.085205][ T7474] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 121.135397][ T7474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.197107][ T7474] xt_hashlimit: size too large, truncated to 1048576 [ 121.707333][ T7499] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 121.814671][ T7506] __nla_validate_parse: 7 callbacks suppressed [ 121.814687][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 121.862895][ T7509] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.479'. [ 121.913629][ T7509] netlink: 'syz.2.479': attribute type 1 has an invalid length. [ 122.050746][ T7509] bond3: entered promiscuous mode [ 122.057094][ T7509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.189074][ T7526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.224376][ T7539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.225090][ T7526] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 122.276128][ T7526] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 122.290836][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 122.299741][ T7526] bond3: (slave vti0): making interface the new active one [ 122.299766][ T7526] vti0: entered promiscuous mode [ 122.313585][ T7526] bond3: (slave vti0): Enslaving as an active interface with an up link [ 122.316838][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 122.385348][ T7543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.482315][ T7546] netlink: 204 bytes leftover after parsing attributes in process `syz.0.485'. [ 122.862250][ T7572] tipc: Started in network mode [ 122.872030][ T7572] tipc: Node identity 7a02d571d149, cluster identity 4711 [ 122.879946][ T7572] tipc: Enabled bearer , priority 0 [ 122.914041][ T7572] syzkaller0: entered promiscuous mode [ 122.934987][ T7572] syzkaller0: entered allmulticast mode [ 122.999980][ T7572] netlink: 44 bytes leftover after parsing attributes in process `syz.2.494'. [ 123.042357][ T7572] tipc: Resetting bearer [ 123.057912][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 123.088079][ T7569] tipc: Resetting bearer [ 123.107571][ T7569] tipc: Disabling bearer [ 123.137430][ T7583] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 123.145271][ T7583] netlink: 96 bytes leftover after parsing attributes in process `syz.1.496'. [ 123.158743][ T7583] netlink: 1 bytes leftover after parsing attributes in process `syz.1.496'. [ 123.170320][ T7583] netlink: 658 bytes leftover after parsing attributes in process `syz.1.496'. [ 123.407487][ T7590] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 123.653660][ T7609] openvswitch: netlink: Missing key (keys=40, expected=80) [ 123.712847][ T7614] sctp: [Deprecated]: syz.3.505 (pid 7614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.712847][ T7614] Use struct sctp_sack_info instead [ 123.747401][ T7614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.924788][ T7614] Cannot find set identified by id 0 to match [ 124.008470][ T7633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.111694][ T7641] ip6tnl1: entered promiscuous mode [ 124.154279][ T7646] nbd: couldn't find a device at index 1048580 [ 124.659445][ T7677] bond4: invalid ARP target 0.0.0.0 specified for addition [ 124.678028][ T7677] bond4: option arp_ip_target: invalid value (0) [ 124.689864][ T7677] bond4 (unregistering): Released all slaves [ 124.894816][ T7694] bond3: entered promiscuous mode [ 124.906249][ T7694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.974343][ T7697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.019275][ T7697] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 125.050230][ T7697] bond3: (slave sit1): Error -95 calling set_mac_address [ 125.139567][ T7711] netlink: 'syz.0.531': attribute type 19 has an invalid length. [ 125.330440][ T7719] xt_hashlimit: size too large, truncated to 1048576 [ 125.376824][ T7716] netlink: 'syz.2.532': attribute type 10 has an invalid length. [ 125.497385][ T7716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.542125][ T7716] bond0: (slave vxcan0): The slave device specified does not support setting the MAC address [ 125.588910][ T7716] bond0: (slave vxcan0): Error -95 calling set_mac_address [ 125.808334][ T7736] openvswitch: netlink: Flow key attr not present in new flow. [ 125.883455][ T7741] syzkaller0: entered promiscuous mode [ 125.911032][ T7741] syzkaller0: entered allmulticast mode [ 126.107973][ T7749] bridge0: port 3(vlan0) entered blocking state [ 126.144162][ T7749] bridge0: port 3(vlan0) entered disabled state [ 126.188150][ T7749] vlan0: entered allmulticast mode [ 126.213273][ T7749] geneve0: entered allmulticast mode [ 126.257563][ T7749] vlan0: entered promiscuous mode [ 126.289011][ T7749] geneve0: entered promiscuous mode [ 126.413715][ T7765] bond1 (unregistering): Released all slaves [ 126.821552][ T7799] __nla_validate_parse: 14 callbacks suppressed [ 126.821570][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 126.857642][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 126.867033][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 126.903501][ T7793] pimreg: entered allmulticast mode [ 126.917620][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 127.070744][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 127.100875][ T7809] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.129673][ T7809] netlink: 159708 bytes leftover after parsing attributes in process `syz.1.556'. [ 127.351644][ T7825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.558'. [ 127.747669][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.562'. [ 128.451207][ T7881] netlink: 13 bytes leftover after parsing attributes in process `syz.3.570'. [ 128.499078][ T7883] netlink: 'syz.2.572': attribute type 3 has an invalid length. [ 128.620294][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'. [ 128.924431][ T7906] netlink: 'syz.2.579': attribute type 61 has an invalid length. [ 129.031144][ T5721] IPVS: starting estimator thread 0... [ 129.146137][ T7920] IPVS: using max 38 ests per chain, 91200 per kthread [ 129.181666][ T7930] x_tables: duplicate underflow at hook 2 [ 129.616948][ T7953] netlink: 'syz.3.594': attribute type 1 has an invalid length. [ 130.153668][ T7975] veth1: entered allmulticast mode [ 130.198267][ T7974] veth1: left allmulticast mode [ 130.410535][ T7991] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 130.518261][ T8002] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 130.544458][ T7991] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.609148][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.691562][ T8002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.774062][ T8007] ipvlan2: entered allmulticast mode [ 130.784863][ T8007] bond1: entered allmulticast mode [ 130.837943][ T8016] tipc: Started in network mode [ 130.855132][ T8016] tipc: Node identity ac14140f, cluster identity 4711 [ 130.892226][ T8016] tipc: New replicast peer: 172.20.20.187 [ 130.903699][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.913366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.928713][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.946017][ T8016] tipc: Enabled bearer , priority 10 [ 131.035836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.045931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.175763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.184270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.469950][ T8054] tipc: Enabling of bearer rejected, failed to enable media [ 131.578841][ T8069] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 131.583771][ T8071] IPv6: NLM_F_REPLACE set, but no existing node found! [ 132.021463][ T9] tipc: Node number set to 2886997007 [ 132.138288][ T8105] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 132.171359][ T8105] netlink: 'syz.2.626': attribute type 4 has an invalid length. [ 132.196677][ T8105] __nla_validate_parse: 9 callbacks suppressed [ 132.196695][ T8105] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.626'. [ 132.518012][ T8123] lo: entered promiscuous mode [ 132.534497][ T8123] netlink: 'syz.3.634': attribute type 2 has an invalid length. [ 132.545812][ T8123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.621148][ T8125] netlink: 'syz.1.635': attribute type 10 has an invalid length. [ 132.631567][ T8125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.635'. [ 132.643405][ T8125] dummy0: entered promiscuous mode [ 132.662196][ T8125] bridge0: port 4(dummy0) entered blocking state [ 132.668816][ T8125] bridge0: port 4(dummy0) entered disabled state [ 132.686899][ T8125] dummy0: entered allmulticast mode [ 132.691120][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.699653][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.720857][ T8125] bridge0: port 4(dummy0) entered blocking state [ 132.727356][ T8125] bridge0: port 4(dummy0) entered forwarding state [ 132.875005][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 132.939639][ T8147] netlink: 'syz.2.642': attribute type 21 has an invalid length. [ 132.947632][ T8147] netlink: 156 bytes leftover after parsing attributes in process `syz.2.642'. [ 133.125011][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 133.279736][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 133.295042][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.649'. [ 133.351097][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 133.388511][ T8175] netlink: 244 bytes leftover after parsing attributes in process `syz.3.650'. [ 133.548975][ T8183] netlink: 64 bytes leftover after parsing attributes in process `syz.2.651'. [ 133.577428][ T8186] netlink: 'syz.1.652': attribute type 18 has an invalid length. [ 133.605410][ T5623] block nbd0: Receive control failed (result -32) [ 133.673010][ T8188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.680352][ T8188] IPv6: NLM_F_CREATE should be set when creating new route [ 133.687662][ T8188] IPv6: NLM_F_CREATE should be set when creating new route [ 133.707376][ T8186] netlink: 'syz.1.652': attribute type 18 has an invalid length. [ 133.823167][ T8193] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 134.057585][ T8190] nbd1: detected capacity change from 0 to 63 [ 134.634321][ T5623] block nbd1: Receive control failed (result -104) [ 134.634330][ T5629] block nbd1: Receive control failed (result -32) [ 135.125527][ T1115] tipc: Subscription rejected, illegal request [ 135.255517][ T8204] netlink: 'syz.3.659': attribute type 2 has an invalid length. [ 135.286865][ T8204] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 135.323275][ T8204] netlink: 'syz.3.659': attribute type 2 has an invalid length. [ 135.712002][ T8228] set match dimension is over the limit! [ 136.164485][ T8250] netlink: 'syz.3.671': attribute type 3 has an invalid length. [ 136.485367][ T8268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.635728][ T8277] netlink: 'syz.2.682': attribute type 10 has an invalid length. [ 136.635990][ T8278] net_ratelimit: 1 callbacks suppressed [ 136.636003][ T8278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.265418][ T8318] __nla_validate_parse: 10 callbacks suppressed [ 137.265435][ T8318] netlink: 68 bytes leftover after parsing attributes in process `syz.0.693'. [ 137.291061][ T8320] macvlan0: entered promiscuous mode [ 137.460962][ T8326] netlink: 'syz.3.696': attribute type 29 has an invalid length. [ 137.657427][ T8336] netlink: 284 bytes leftover after parsing attributes in process `syz.3.701'. [ 137.706840][ T8337] netlink: 284 bytes leftover after parsing attributes in process `syz.3.701'. [ 138.033306][ T8356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.705'. [ 138.084824][ T8350] bond4 (unregistering): Released all slaves [ 138.106395][ T8360] IPv6: addrconf: prefix option has invalid lifetime [ 138.287939][ T8368] 8021q: VLANs not supported on wg2 [ 138.439529][ T8376] netlink: 294 bytes leftover after parsing attributes in process `syz.1.709'. [ 138.475764][ T8376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.537186][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.711'. [ 138.555709][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.711'. [ 138.600687][ T8383] xt_hashlimit: size too large, truncated to 1048576 [ 138.670355][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.750447][ T8385] bridge_slave_0 (unregistering): left allmulticast mode [ 138.762986][ T8385] bridge_slave_0 (unregistering): left promiscuous mode [ 138.777778][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.023704][ T8399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.714'. [ 139.093114][ T8391] syzkaller0: entered promiscuous mode [ 139.100684][ T8391] syzkaller0: entered allmulticast mode [ 140.433345][ T8412] netlink: 84 bytes leftover after parsing attributes in process `syz.1.717'. [ 140.453268][ T8419] dvmrp0: entered allmulticast mode [ 140.655350][ T8432] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.722'. [ 140.679993][ T8432] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 140.805439][ T8442] netlink: 'syz.2.725': attribute type 9 has an invalid length. [ 140.822629][ T8438] netlink: 'syz.2.725': attribute type 9 has an invalid length. [ 141.092183][ T8451] syzkaller0: entered promiscuous mode [ 141.107802][ T8451] syzkaller0: entered allmulticast mode [ 141.164878][ T8471] netlink: 'syz.4.735': attribute type 29 has an invalid length. [ 142.552245][ T8480] ip6erspan0: entered promiscuous mode [ 142.756160][ T8489] syzkaller0: entered promiscuous mode [ 142.777568][ T8489] syzkaller0: entered allmulticast mode [ 142.802329][ T8489] netlink: 'syz.4.738': attribute type 2 has an invalid length. [ 142.818852][ T8489] netlink: 'syz.4.738': attribute type 8 has an invalid length. [ 142.841028][ T8489] __nla_validate_parse: 7 callbacks suppressed [ 142.841047][ T8489] netlink: 132 bytes leftover after parsing attributes in process `syz.4.738'. [ 142.998435][ T8507] netlink: 'syz.3.745': attribute type 39 has an invalid length. [ 143.261586][ T8527] x_tables: duplicate underflow at hook 2 [ 143.274185][ T8527] bridge0: port 1(veth0_to_bridge) entered blocking state [ 143.318320][ T8527] bridge0: port 1(veth0_to_bridge) entered disabled state [ 143.353548][ T8527] veth0_to_bridge: entered allmulticast mode [ 143.422798][ T8527] veth0_to_bridge: entered promiscuous mode [ 143.495523][ T8534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.753'. [ 143.520728][ T8536] xt_hl: Unknown Hop Limit match mode: 206 [ 143.625519][ T8540] syzkaller0: entered promiscuous mode [ 143.647414][ T8540] syzkaller0: entered allmulticast mode [ 143.663142][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 143.721787][ T8547] nbd: illegal input index 2958377 [ 143.735780][ T8548] netlink: 'syz.2.758': attribute type 11 has an invalid length. [ 143.749180][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 144.014084][ T8562] netlink: 'syz.3.764': attribute type 1 has an invalid length. [ 144.064745][ T10] IPVS: starting estimator thread 0... [ 144.136944][ T8562] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.160273][ T8567] IPVS: using max 28 ests per chain, 67200 per kthread [ 144.287580][ T8568] bond5: (slave bridge1): making interface the new active one [ 144.298931][ T8568] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 144.322804][ T8575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.365762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.375800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.446113][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.706758][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 144.851680][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.892602][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'. [ 144.964598][ T8610] IPVS: length: 126 != 24 [ 145.405727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.414239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.453919][ T8641] bond0: entered promiscuous mode [ 145.461640][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 145.475895][ T8641] bond_slave_0: entered promiscuous mode [ 145.486751][ T8641] bond_slave_1: entered promiscuous mode [ 145.492626][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.536412][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 145.653267][ T9] IPVS: starting estimator thread 0... [ 145.755707][ T8651] IPVS: using max 29 ests per chain, 69600 per kthread [ 145.922113][ T8665] netlink: 'syz.3.796': attribute type 1 has an invalid length. [ 146.077410][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 146.095781][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 146.127439][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.137772][ T8665] bond6: entered promiscuous mode [ 146.144816][ T8665] 8021q: adding VLAN 0 to HW filter on device bond6 [ 146.182613][ T8678] 8021q: adding VLAN 0 to HW filter on device bond6 [ 146.215139][ T8678] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 146.235516][ T8678] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 146.246399][ T8694] netlink: 'syz.1.801': attribute type 7 has an invalid length. [ 146.254238][ T8678] bond6: (slave ip6gre1): making interface the new active one [ 146.263197][ T8678] ip6gre1: entered promiscuous mode [ 146.273535][ T8678] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 146.445823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.698581][ T5623] block nbd2: Receive control failed (result -1) [ 146.790089][ T8719] bond3: entered promiscuous mode [ 146.801892][ T8719] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.079631][ T8738] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 147.115253][ T8738] netlink: 'syz.2.813': attribute type 2 has an invalid length. [ 147.308162][ T8741] team0: Port device gtp0 added [ 147.592343][ T8750] SET target dimension over the limit! [ 147.860819][ T8765] netlink: 'syz.0.823': attribute type 1 has an invalid length. [ 147.964026][ T8780] __nla_validate_parse: 5 callbacks suppressed [ 147.964045][ T8780] netlink: 144 bytes leftover after parsing attributes in process `syz.1.827'. [ 147.987676][ T8765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.101250][ T8777] bond1: (slave bridge2): making interface the new active one [ 148.109998][ T8777] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 148.125064][ T8778] [ 148.127499][ T8778] ====================================================== [ 148.134517][ T8778] WARNING: possible circular locking dependency detected [ 148.141546][ T8778] syzkaller #0 Not tainted [ 148.145950][ T8778] ------------------------------------------------------ [ 148.152952][ T8778] syz.3.826/8778 is trying to acquire lock: [ 148.158831][ T8778] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 148.168161][ T8778] [ 148.168161][ T8778] but task is already holding lock: [ 148.175517][ T8778] ffffffff8f38d3a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 148.184391][ T8778] [ 148.184391][ T8778] which lock already depends on the new lock. [ 148.184391][ T8778] [ 148.194775][ T8778] [ 148.194775][ T8778] the existing dependency chain (in reverse order) is: [ 148.203772][ T8778] [ 148.203772][ T8778] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 148.210886][ T8778] __mutex_lock+0x1a3/0x1550 [ 148.215998][ T8778] get_device_parent+0x16f/0x3a0 [ 148.221448][ T8778] device_add+0x2e1/0xbb0 [ 148.226286][ T8778] device_create+0x269/0x300 [ 148.231387][ T8778] msr_device_create+0x33/0x50 [ 148.236676][ T8778] cpuhp_invoke_callback+0x445/0x860 [ 148.242473][ T8778] cpuhp_thread_fun+0x36b/0x780 [ 148.247837][ T8778] smpboot_thread_fn+0x541/0xa50 [ 148.253289][ T8778] kthread+0x388/0x470 [ 148.257871][ T8778] ret_from_fork+0x514/0xb70 [ 148.262968][ T8778] ret_from_fork_asm+0x1a/0x30 [ 148.268245][ T8778] [ 148.268245][ T8778] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 148.275797][ T8778] cpuhp_thread_fun+0x127/0x780 [ 148.281171][ T8778] smpboot_thread_fn+0x541/0xa50 [ 148.286623][ T8778] kthread+0x388/0x470 [ 148.291210][ T8778] ret_from_fork+0x514/0xb70 [ 148.296311][ T8778] ret_from_fork_asm+0x1a/0x30 [ 148.301588][ T8778] [ 148.301588][ T8778] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 148.309311][ T8778] cpus_read_lock+0x42/0x160 [ 148.314406][ T8778] static_key_slow_inc+0x12/0x30 [ 148.319854][ T8778] setup_udp_tunnel_sock+0x2fd/0x510 [ 148.325654][ T8778] l2tp_tunnel_register+0xde2/0x1490 [ 148.331454][ T8778] pppol2tp_connect+0x8b7/0x17c0 [ 148.336940][ T8778] __sys_connect+0x312/0x450 [ 148.342042][ T8778] __x64_sys_connect+0x7a/0x90 [ 148.347316][ T8778] do_syscall_64+0x15f/0xf80 [ 148.352425][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.358828][ T8778] [ 148.358828][ T8778] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 148.366551][ T8778] lock_sock_nested+0x41/0x100 [ 148.371821][ T8778] inet_shutdown+0x6a/0x390 [ 148.376839][ T8778] nbd_mark_nsock_dead+0x2e9/0x560 [ 148.382465][ T8778] recv_work+0x1c2e/0x1d40 [ 148.387388][ T8778] process_scheduled_works+0xb5d/0x1860 [ 148.393439][ T8778] worker_thread+0xa53/0xfc0 [ 148.398534][ T8778] kthread+0x388/0x470 [ 148.403115][ T8778] ret_from_fork+0x514/0xb70 [ 148.408215][ T8778] ret_from_fork_asm+0x1a/0x30 [ 148.413491][ T8778] [ 148.413491][ T8778] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 148.421129][ T8778] __mutex_lock+0x1a3/0x1550 [ 148.426237][ T8778] nbd_queue_rq+0x37b/0x1100 [ 148.431352][ T8778] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 148.437412][ T8778] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 148.444256][ T8778] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 148.450755][ T8778] blk_mq_run_hw_queue+0x348/0x4f0 [ 148.456387][ T8778] blk_mq_dispatch_list+0xd16/0xe10 [ 148.462103][ T8778] blk_mq_flush_plug_list+0x48d/0x570 [ 148.468000][ T8778] __blk_flush_plug+0x3ed/0x4d0 [ 148.473365][ T8778] __submit_bio+0x28d/0x580 [ 148.478386][ T8778] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 148.484530][ T8778] block_read_full_folio+0x599/0x830 [ 148.490410][ T8778] filemap_read_folio+0x137/0x3b0 [ 148.495948][ T8778] do_read_cache_folio+0x358/0x590 [ 148.501574][ T8778] read_part_sector+0xb6/0x2b0 [ 148.506852][ T8778] adfspart_check_ICS+0xb1/0x960 [ 148.512303][ T8778] bdev_disk_changed+0x817/0x1770 [ 148.517850][ T8778] blkdev_get_whole+0x380/0x510 [ 148.523218][ T8778] bdev_open+0x31e/0xd30 [ 148.527972][ T8778] blkdev_open+0x470/0x610 [ 148.532899][ T8778] do_dentry_open+0x785/0x14e0 [ 148.538173][ T8778] vfs_open+0x3b/0x340 [ 148.542751][ T8778] path_openat+0x2e08/0x3860 [ 148.547874][ T8778] do_file_open+0x23e/0x4a0 [ 148.552907][ T8778] do_sys_openat2+0x113/0x200 [ 148.558092][ T8778] __x64_sys_openat+0x138/0x170 [ 148.563454][ T8778] do_syscall_64+0x15f/0xf80 [ 148.568574][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.574975][ T8778] [ 148.574975][ T8778] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 148.582176][ T8778] __mutex_lock+0x1a3/0x1550 [ 148.587277][ T8778] nbd_queue_rq+0xc6/0x1100 [ 148.592287][ T8778] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 148.598346][ T8778] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 148.605188][ T8778] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 148.611681][ T8778] blk_mq_run_hw_queue+0x348/0x4f0 [ 148.617307][ T8778] blk_mq_dispatch_list+0xd16/0xe10 [ 148.623020][ T8778] blk_mq_flush_plug_list+0x48d/0x570 [ 148.628903][ T8778] __blk_flush_plug+0x3ed/0x4d0 [ 148.634269][ T8778] __submit_bio+0x28d/0x580 [ 148.639285][ T8778] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 148.645428][ T8778] block_read_full_folio+0x599/0x830 [ 148.651220][ T8778] filemap_read_folio+0x137/0x3b0 [ 148.656770][ T8778] do_read_cache_folio+0x358/0x590 [ 148.662398][ T8778] read_part_sector+0xb6/0x2b0 [ 148.667681][ T8778] adfspart_check_ICS+0xb1/0x960 [ 148.673166][ T8778] bdev_disk_changed+0x817/0x1770 [ 148.678717][ T8778] blkdev_get_whole+0x380/0x510 [ 148.684093][ T8778] bdev_open+0x31e/0xd30 [ 148.688866][ T8778] blkdev_open+0x470/0x610 [ 148.693809][ T8778] do_dentry_open+0x785/0x14e0 [ 148.699110][ T8778] vfs_open+0x3b/0x340 [ 148.703693][ T8778] path_openat+0x2e08/0x3860 [ 148.708893][ T8778] do_file_open+0x23e/0x4a0 [ 148.713917][ T8778] do_sys_openat2+0x113/0x200 [ 148.719112][ T8778] __x64_sys_openat+0x138/0x170 [ 148.724479][ T8778] do_syscall_64+0x15f/0xf80 [ 148.729585][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.735992][ T8778] [ 148.735992][ T8778] -> #3 (set->srcu){.+.+}-{0:0}: [ 148.743114][ T8778] __synchronize_srcu+0xca/0x300 [ 148.748560][ T8778] elevator_switch+0x1e8/0x7a0 [ 148.753839][ T8778] elevator_change+0x2cc/0x450 [ 148.759123][ T8778] elevator_set_default+0x36c/0x430 [ 148.764838][ T8778] blk_register_queue+0x3e9/0x4e0 [ 148.770382][ T8778] __add_disk+0x677/0xd50 [ 148.775221][ T8778] add_disk_fwnode+0xfb/0x480 [ 148.780405][ T8778] nbd_dev_add+0x72c/0xb50 [ 148.785326][ T8778] nbd_init+0x168/0x1f0 [ 148.789991][ T8778] do_one_initcall+0x250/0x870 [ 148.795267][ T8778] do_initcall_level+0x104/0x190 [ 148.800716][ T8778] do_initcalls+0x59/0xa0 [ 148.805557][ T8778] kernel_init_freeable+0x2a6/0x3e0 [ 148.811272][ T8778] kernel_init+0x1d/0x1d0 [ 148.816118][ T8778] ret_from_fork+0x514/0xb70 [ 148.821214][ T8778] ret_from_fork_asm+0x1a/0x30 [ 148.826485][ T8778] [ 148.826485][ T8778] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 148.834295][ T8778] __mutex_lock+0x1a3/0x1550 [ 148.839520][ T8778] elevator_change+0x1b3/0x450 [ 148.844814][ T8778] elevator_set_none+0xb5/0x140 [ 148.850191][ T8778] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 148.856575][ T8778] nbd_start_device+0x17f/0xb10 [ 148.861949][ T8778] nbd_genl_connect+0x165b/0x1cf0 [ 148.867494][ T8778] genl_family_rcv_msg_doit+0x22a/0x330 [ 148.873654][ T8778] genl_rcv_msg+0x61c/0x7a0 [ 148.878689][ T8778] netlink_rcv_skb+0x232/0x4b0 [ 148.883980][ T8778] genl_rcv+0x28/0x40 [ 148.888503][ T8778] netlink_unicast+0x75c/0x8e0 [ 148.893796][ T8778] netlink_sendmsg+0x813/0xb40 [ 148.899093][ T8778] ____sys_sendmsg+0x972/0x9f0 [ 148.904384][ T8778] ___sys_sendmsg+0x2a5/0x360 [ 148.909589][ T8778] __x64_sys_sendmsg+0x1bd/0x2a0 [ 148.915058][ T8778] do_syscall_64+0x15f/0xf80 [ 148.920172][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.926574][ T8778] [ 148.926574][ T8778] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 148.935175][ T8778] blk_alloc_queue+0x546/0x680 [ 148.940455][ T8778] __blk_mq_alloc_disk+0x197/0x390 [ 148.946084][ T8778] nbd_dev_add+0x499/0xb50 [ 148.951015][ T8778] nbd_init+0x168/0x1f0 [ 148.955685][ T8778] do_one_initcall+0x250/0x870 [ 148.960964][ T8778] do_initcall_level+0x104/0x190 [ 148.966415][ T8778] do_initcalls+0x59/0xa0 [ 148.971260][ T8778] kernel_init_freeable+0x2a6/0x3e0 [ 148.976976][ T8778] kernel_init+0x1d/0x1d0 [ 148.981829][ T8778] ret_from_fork+0x514/0xb70 [ 148.986935][ T8778] ret_from_fork_asm+0x1a/0x30 [ 148.992212][ T8778] [ 148.992212][ T8778] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 148.999411][ T8778] __lock_acquire+0x15a5/0x2cf0 [ 149.004770][ T8778] lock_acquire+0x106/0x350 [ 149.009782][ T8778] fs_reclaim_acquire+0x71/0x100 [ 149.015238][ T8778] __kmalloc_cache_noprof+0x40/0x660 [ 149.021034][ T8778] get_device_parent+0x255/0x3a0 [ 149.026484][ T8778] device_add+0x2e1/0xbb0 [ 149.031320][ T8778] ib_register_device+0x109b/0x13e0 [ 149.037027][ T8778] siw_newlink+0x8fe/0xde0 [ 149.041977][ T8778] nldev_newlink+0x5bc/0x650 [ 149.047074][ T8778] rdma_nl_rcv+0x6d1/0xa10 [ 149.051995][ T8778] netlink_unicast+0x75c/0x8e0 [ 149.057269][ T8778] netlink_sendmsg+0x813/0xb40 [ 149.062548][ T8778] ____sys_sendmsg+0x972/0x9f0 [ 149.067826][ T8778] ___sys_sendmsg+0x2a5/0x360 [ 149.073020][ T8778] __x64_sys_sendmsg+0x1bd/0x2a0 [ 149.078475][ T8778] do_syscall_64+0x15f/0xf80 [ 149.083576][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.089979][ T8778] [ 149.089979][ T8778] other info that might help us debug this: [ 149.089979][ T8778] [ 149.100285][ T8778] Chain exists of: [ 149.100285][ T8778] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 149.100285][ T8778] [ 149.112284][ T8778] Possible unsafe locking scenario: [ 149.112284][ T8778] [ 149.119725][ T8778] CPU0 CPU1 [ 149.125085][ T8778] ---- ---- [ 149.130444][ T8778] lock(gdp_mutex); [ 149.134334][ T8778] lock(cpuhp_state-up); [ 149.141174][ T8778] lock(gdp_mutex); [ 149.147582][ T8778] lock(fs_reclaim); [ 149.151558][ T8778] [ 149.151558][ T8778] *** DEADLOCK *** [ 149.151558][ T8778] [ 149.159692][ T8778] 3 locks held by syz.3.826/8778: [ 149.164711][ T8778] #0: ffffffff9a7ee6c8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x328/0xa10 [ 149.174724][ T8778] #1: ffffffff8fb30528 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x429/0x650 [ 149.184132][ T8778] #2: ffffffff8f38d3a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 149.193450][ T8778] [ 149.193450][ T8778] stack backtrace: [ 149.199353][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.3.826 Not tainted syzkaller #0 PREEMPT(full) [ 149.199374][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.199390][ T8778] Call Trace: [ 149.199403][ T8778] [ 149.199411][ T8778] dump_stack_lvl+0xe8/0x150 [ 149.199431][ T8778] print_circular_bug+0x2e1/0x300 [ 149.199454][ T8778] check_noncircular+0x12e/0x150 [ 149.199476][ T8778] __lock_acquire+0x15a5/0x2cf0 [ 149.199494][ T8778] ? __pfx_clockevents_program_event+0x10/0x10 [ 149.199520][ T8778] ? __kmalloc_cache_noprof+0x40/0x660 [ 149.199541][ T8778] lock_acquire+0x106/0x350 [ 149.199557][ T8778] ? __kmalloc_cache_noprof+0x40/0x660 [ 149.199583][ T8778] fs_reclaim_acquire+0x71/0x100 [ 149.199605][ T8778] ? __kmalloc_cache_noprof+0x40/0x660 [ 149.199626][ T8778] __kmalloc_cache_noprof+0x40/0x660 [ 149.199647][ T8778] ? preempt_schedule_thunk+0x16/0x30 [ 149.199669][ T8778] ? get_device_parent+0x255/0x3a0 [ 149.199687][ T8778] get_device_parent+0x255/0x3a0 [ 149.199705][ T8778] device_add+0x2e1/0xbb0 [ 149.199722][ T8778] ib_register_device+0x109b/0x13e0 [ 149.199743][ T8778] ? __pfx_ib_register_device+0x10/0x10 [ 149.199761][ T8778] ? xa_load+0x60/0x210 [ 149.199784][ T8778] ? xa_load+0x60/0x210 [ 149.199802][ T8778] ? xa_load+0x60/0x210 [ 149.199820][ T8778] ? xa_load+0x60/0x210 [ 149.199838][ T8778] ? xa_load+0x1db/0x210 [ 149.199861][ T8778] ? __raw_spin_lock_init+0x45/0x100 [ 149.199884][ T8778] siw_newlink+0x8fe/0xde0 [ 149.199906][ T8778] nldev_newlink+0x5bc/0x650 [ 149.199921][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 149.199938][ T8778] ? __pfx_nldev_newlink+0x10/0x10 [ 149.199990][ T8778] ? bpf_lsm_capable+0x9/0x20 [ 149.200005][ T8778] ? security_capable+0x7e/0x2c0 [ 149.200024][ T8778] ? __pfx_nldev_newlink+0x10/0x10 [ 149.200044][ T8778] rdma_nl_rcv+0x6d1/0xa10 [ 149.200064][ T8778] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 149.200086][ T8778] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.200105][ T8778] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.200125][ T8778] netlink_unicast+0x75c/0x8e0 [ 149.200145][ T8778] netlink_sendmsg+0x813/0xb40 [ 149.200168][ T8778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.200188][ T8778] ? aa_sock_msg_perm+0xf1/0x1b0 [ 149.200208][ T8778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.200230][ T8778] ____sys_sendmsg+0x972/0x9f0 [ 149.200251][ T8778] ? __might_fault+0xaf/0x130 [ 149.200272][ T8778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.200294][ T8778] ? import_iovec+0x73/0xa0 [ 149.200318][ T8778] ___sys_sendmsg+0x2a5/0x360 [ 149.200337][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 149.200354][ T8778] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.200376][ T8778] ? futex_wait+0x2a2/0x390 [ 149.200406][ T8778] ? __fget_files+0x2a/0x420 [ 149.200424][ T8778] ? __fget_files+0x3a0/0x420 [ 149.200446][ T8778] __x64_sys_sendmsg+0x1bd/0x2a0 [ 149.200466][ T8778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.200489][ T8778] ? rcu_is_watching+0x15/0xb0 [ 149.200511][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.200527][ T8778] do_syscall_64+0x15f/0xf80 [ 149.200547][ T8778] ? trace_irq_disable+0x3b/0x140 [ 149.200571][ T8778] ? clear_bhb_loop+0x40/0x90 [ 149.200588][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.200604][ T8778] RIP: 0033:0x7f8553f9cdd9 [ 149.200626][ T8778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.200643][ T8778] RSP: 002b:00007f8554d98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.200661][ T8778] RAX: ffffffffffffffda RBX: 00007f8554215fa0 RCX: 00007f8553f9cdd9 [ 149.200673][ T8778] RDX: 0000000000000100 RSI: 00002000000002c0 RDI: 0000000000000004 [ 149.200683][ T8778] RBP: 00007f8554032d69 R08: 0000000000000000 R09: 0000000000000000 [ 149.200693][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.200703][ T8778] R13: 00007f8554216038 R14: 00007f8554215fa0 R15: 00007fffbc564068 [ 149.200720][ T8778] [ 149.565705][ C0] net_ratelimit: 9 callbacks suppressed [ 149.565721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.594509][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.602608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.611393][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.641168][ T8778] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 149.692031][ T8778] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 149.737627][ T8778] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 149.750353][ T8778] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.768492][ T8778] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 149.810737][ T1176] smbdirect: ib_dev[syz2] removed [ 150.605938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.614422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.623176][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.645709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.653837][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.661949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.765746][ C0] net_ratelimit: 8 callbacks suppressed [ 154.765764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.779415][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.787528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.325790][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.805757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.813870][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.821987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.845714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.854150][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.862487][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog