last executing test programs: 2.749605215s ago: executing program 4 (id=804): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) unshare(0x24060400) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0600000004000000040000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ba9d000000000000904dcac13a9dcf0be243e3427bc6435964af080000002b131b5681299bd7bbf5ffd66b32045337f5ac5c498293226ff32c1a1e742e7456b1ed98c36629182682da62c9991fa4450000000000001e5a35a9d325c1a89d3ab2504c02f4009372002ce3cb100400"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x13, &(0x7f0000000040)=0x4, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES16=r0, @ANYRESHEX=r2], 0x3c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x2, 0x2, 0xfffffffe) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r9, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) listen(r6, 0x6) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f00000000c0)=0xfd, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) sendmsg$nl_route(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x8000) accept$phonet_pipe(r6, 0x0, &(0x7f00000002c0)) 2.396591s ago: executing program 1 (id=808): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000f0002000000080005"], 0x44}}, 0x0) (async) close(0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/1, 0x1}], 0x1}, 0x8}], 0x1, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x0, 0x1, 0xb913, 0xed2d, 0xfff, 0x400]}, 0x32) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000400)=ANY=[], 0x128) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0x5cf9f000) 2.124790359s ago: executing program 2 (id=811): r0 = socket(0x28, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}], 0x1c) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) unshare(0x2a020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x600, 0x48c, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) (async) pselect6(0x40, &(0x7f0000000380)={0x1, 0x78, 0x9, 0x80, 0x4, 0x4, 0x1, 0x8}, 0x0, 0x0, &(0x7f0000000500), 0x0) r5 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast1, 0x6}, 0x1c) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000002540)=0x1) (async) close(0x4) 2.011553713s ago: executing program 2 (id=814): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x6, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x0, 0x30, 0x5f, 0x2e]}}, 0x0, 0x2d, 0x0, 0x1, 0x5}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x38}, 0x2, 0x34005}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x104, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x4, 0xffff, 0x8251c, 0x40002, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f}, {0x2, 0xfffffffc}, 0x70bd2a, 0xfffffffc, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008805}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0xf0, 0x1a, 0x1, 0x70bd29, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@local, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x1000000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) sendmsg$inet_sctp(r0, &(0x7f0000000780)={&(0x7f00000001c0)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x18, 0x4040010}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x9, 0xc}, {0xe, 0x4}}, ["", "", "", ""]}, 0x24}}, 0x20000000) 1.918029886s ago: executing program 3 (id=815): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe) preadv(r1, &(0x7f0000001440)=[{0x0}, {&(0x7f0000001480)=""/15, 0xf}], 0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000004006608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048000}, 0x40000) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r8, 0x0, r9, 0x0, 0x10500, 0x0) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r10, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x28}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf9a9697cd775f8da}, 0x81) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 1.91762405s ago: executing program 1 (id=816): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x160, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0xfff3}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x130, 0x2, [@TCA_FLOW_EMATCHES={0x12c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10c, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}, "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"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x203}}, @TCA_EMATCH_TREE_HDR={0xfffffe68, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x37}}]}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000000c0)={0x1f, @none}, 0x8) listen(r3, 0x86) connect$bt_sco(r4, &(0x7f0000000040), 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r8, r6, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0x82, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c20000000180c200000188a82e008100490086dd6090d3a100442f01fc020000000000000000000000000000fe8000000000000000000000000000aa0420880b0000000208000800080086dd080088be00000000180bd7fa0100000000000009080022eb000000023208ecc502000000000000086104820d0800655800000004"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x4c}}, 0xc001) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.829536413s ago: executing program 2 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_delrule={0x30, 0x21, 0x610, 0x70bd2a, 0x25dfdbff, {0xa, 0x80, 0x10, 0x6, 0xe9, 0x0, 0x0, 0x6, 0x8004}, [@FRA_SRC={0x14, 0x2, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)={0x29c, r4, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0x277, 0x1, 'C\xec\xf8\xa0w\x15|:\xac\r\xab\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x95K]\xce,\xd1\xeb\x17]\xd5\xd0\xa7D!_\xa9$\x94\x02\v\x10od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*s6\xec\x06\xc7\x1dO\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xdak\x1a\x13\xe9\tc\x85\xb4\xcb\x815\x87\xd5\x97C\x1cM\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd2\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\xb4\v[\xdc@5\xbe\x9f\xccz\x81\x1f\xb4A|\x1a2p\xd1\x95\xb0i\"g\xd1\xf7t\xa4\xb3\x94\xe9\x01\xce\x82`\x17n\f\x05\xaa:\x03\x8cJs\x92\x81\xb0\\\xa5\xc7eB\xa5\a\xb6\x814\x05\xd1$3\x15/\xfcwNV\xeaif\xeb\x0f6\x94{5Se\xe9o\x86\a!\xf0\x9b\x80\x95\x84\xa6E\x90\xc9 \t \x04\xb1\xe7\xec\xf4\xe6 \x91\xfa\xd01<\xbcc\xd1\xac?V\xe2b3\xdelP[I\xae\x18Z\xa6K\xf2~\x19\x0f\xe7\x90\xb0\x84M)\x8e\x1av\xc2\a\xb4{\xb1(\b\xb5uh\x12k\xe2R?\x8boI\t\x87\xab\x80{\x8a\x1e\x85\xd6\x8c8vx\xeeTF\x1f&\x1fmaCc;Q\x9e\xd2\x9e\xcb\xa4\xb5M\xb1I\xfe%ukl\x18\xf7\xa5`\xaa\xed\xd7\xb1\xbf\xa0S?8\xb3Z\xb3\x1c\xb7FI7\xac\xdb\xa8\x1aF\xe5\x99\xc1\xa8\x9d\x84\x80]\x96\x0f\x0e\xd3\x00\xc91\xf1\x99\x02\xce\x01\x00\x00\x00\x00\x00\x00\x00;\xc5\b\x95\x1e\xff\xfc\xc8\x8e\x82\xb1\x8b_E\xc1\xb9AVN\v\xdf\xc1\x7f\x8f\xe9\xac\xab/\x85\xb3\xe8\xde\r\x04\xe7`\xb2\x1a\xcb;\xd8)\xac\x96\x1b\xd6K\x94z\xf7\xb8l0e\xed\x7f\xbb]\xdb\x1e\xff\xe8\xe8\x03V\x0e/\xc5K\x1e\x99\x9d\x11\xfe\x85c\x8a\x98|}\v\xb6\xaak\xc9p\xa0j\xe5!\r3\xd3I|\x1e]\xc8\xc4x\x92\xf3UE\xbcr\xbe\x0fI\xcfj\xdeB\x90\xa1\xe2Q\fD\xda_p\x87\x1b\xcd\x04\x94\xd67\xbe\xa2\xcaW\x12c{RzZ\x06\xf9\x95Pj\x06\x04\xbdz\x89o\x83N\x1ez\x10\xda\xdeK\xbaf\xcbDq\x97'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f0000000740)=0x2, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000002d00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xa) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000003100)={0x80002010}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) 1.7526581s ago: executing program 4 (id=818): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100039040200"/20, @ANYRES32=r2, @ANYBLOB="40100000004104002c00128008000100677265002000028008000700ac1414aa060003008100000008000100", @ANYRES32=r2, @ANYBLOB="040c1200080004"], 0x54}}, 0x4040000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'veth1\x00', 0x800}) 1.517370052s ago: executing program 0 (id=819): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000080)="29000300010003", 0x7) (async) write(r3, &(0x7f0000000080)="29000300010003", 0x7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r14) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x40, r15, 0xf22cbce20af0f23f, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8800) syz_genetlink_get_family_id$nfc(0x0, r14) (async) syz_genetlink_get_family_id$nfc(0x0, r14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r17, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r17, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) 1.494668772s ago: executing program 2 (id=820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@deltclass={0x80, 0x29, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {0x10, 0xfff2}, {0xffff, 0xd}}, [@tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5c, 0x43}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7e}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf9}}, @TCA_RATE={0x6, 0x5, {0x6, 0xff}}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}, @tclass_kind_options=@c_htb={{0x8}, {0x10, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x1}]}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x80}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf9, 0x2, 0xa, 0x1000, 0xff, 0x4}, {0x5, 0x1, 0x2, 0x1, 0x101}, 0xffff, 0x3, 0x11fb}}, @TCA_TBF_BURST={0x8, 0x6, 0xfffffffc}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.450540347s ago: executing program 4 (id=821): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "448ab78bce"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x24040840) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x200}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040890}, 0x20000840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68}, 0x94) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000280)="d5", 0x1) listen(r4, 0xe) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x70) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000001, 0x8c4b815a5461c2b2, 0xffffffffffffffff, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0xb, 0x2, 0x0, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.350031498s ago: executing program 1 (id=822): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000000000fdffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c0800"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async, rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000001", @ANYRES64=r4, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYBLOB="c270e6effe89c1fb9e708fa77f", @ANYBLOB="0c0099000900000044000000080002002f000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) (async) r5 = accept4(r2, 0x0, 0x0, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (rerun: 32) sendmmsg$alg(r5, &(0x7f0000001e00)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000007c0)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}, {0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000840)="4c78544e6aecc758573b0b1eaf920ac3d03078f9e57eb00e53c20ec578ce5ae9518367c36ec9c8a95a098f9b31bbcaf0cafd6b4b1717787186a31220a2f341a29be1688beee7b45979ef7623ee40cf15624568573038d6b3cf25c6f4bdc66649009b873234b9923c366300bc3198b2f7f5b25744366e8bc1c6f663cdd7d708526cfbb67e2329db4df5982fdb76ebad41c9097ba286bbd3bfba22c12f603a658157a1741160c409c13da8c4e56e95578b36cdf2e545c844bea9311838a7e3930e450824cca088", 0xc6}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="9ff273001f9d0600cb5cd8ba3b8c2278dd0f48612b38e4f48b8214ce7c260d0ed70f6dc56353fd5c6d2cca6d8004f21c406f820d9326ac9c0b3b7c6b4d11d25c5f1b5417cf6616e0d9", 0x49}], 0x3, &(0x7f0000001c00)=[@iv={0xf8, 0x117, 0x2, 0xe0, "47e840a3d7a2da78b985f74b6870776e3dbe90ced3a657f6db5bf37ebe8ece099f7cfe66f9f6b53b7dd4c5baea34b8c568018834e343482b48174f84d9a44c0697ca871763f22c4ccd269ab12b690ec4b2c9fe87cd90ff8780bd387c2aa3b16420b0dbd09abfba8d55d3d5625d2799752919cbd917dde276a39b83efbb1fe3a8ae07c029634d7216003d087676b551ad484c9a0225deb42f138a289e09c7c2067277683ef60843c9565fc0539dbad04b9299838ded318caae2d7ab62c8ef430b489a88473233f58fffd390a09d503112d353f5ea61d36cee754947cb8aa9c13c"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x54, "fc21df2d2ecbc6ce2feb20d34b0f94ab64a0599f1acaac13f7e51dd1bea0e6389a0dd03318dc8572f6661da386a5126d231cce919356af4c9a3382693f0a9326ce870987a7147ae840ea2541e89d871cb28d7e3b"}], 0x178}, {0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=[@assoc={0x18, 0x117, 0x4, 0x80}], 0x18, 0x40}], 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'netpci0\x00', 0x0}) (async) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="02fc195e0000000000ffffffff4e21ffffffdaff010000000000000000000000000001720000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x20000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x20, &(0x7f0000000680)=ANY=[@ANYBLOB="180000040a000000000000000900000018110000498d8a4b9c9f035158720fa0e0590808334595ec731b2d15a6dddf324c22fc2d1ba6e538e8ac1555aece47ce9440", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000065901800010000008046090002000000186400000f000000000000007f00000097171800040000008500000074000000b73afefffcffffff851000000800000085000000a10000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f00008500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x4a4, 0x31, &(0x7f0000000140)=""/49, 0x1e00, 0x9, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0xc, 0x48, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r0, r0, r0], &(0x7f00000003c0)=[{0x2, 0x1, 0x2, 0x7}, {0x4, 0x1, 0x5, 0x5}], 0x10, 0xe}, 0x94) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x40000}, 0x10}, 0x1, 0x7}, 0x40030000000000) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', r7, 0x10, 0x40, 0xb, 0xf, {{0x12, 0x4, 0x3, 0x5, 0x48, 0x65, 0x0, 0x80, 0x6, 0x0, @loopback, @loopback, {[@generic={0x89, 0x12, "64dc2ec9147e77f2964899e005b7a5d1"}, @timestamp={0x44, 0x20, 0x27, 0x0, 0x1, [0x0, 0x5, 0x8, 0xe29e, 0xb, 0x8, 0x50000]}]}}}}}) (async) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) (async) connect$unix(r11, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async, rerun: 32) close(0x4) (rerun: 32) 1.252630322s ago: executing program 3 (id=823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="004efee26ee8eacccf0000000000f8ffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1, 0x7) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8c0}, 0x40010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000090000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.149400246s ago: executing program 0 (id=824): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r2], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165cc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x7d4165c9) listen(r6, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES64=0x0], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.089405977s ago: executing program 1 (id=825): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd87, 0x0, 0x0, 0x0, 0xf0000000}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000140), 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r4, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}}, 0xc30c, 0x3}, &(0x7f0000000340)=0x90) bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x13, r5, 0x4a9b6000) 1.08904701s ago: executing program 2 (id=826): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0) close(r0) socket$l2tp(0x2, 0x2, 0x73) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) 1.088498178s ago: executing program 4 (id=827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000005a00010000000000000000000000000008000200", @ANYRES32=0x0, @ANYBLOB="a1500b788aeb7af97d3ff55fe6cccc5eed7b0e1f6c7e2e7b5ed651c95ee0ef34a93890a14e794a2d1c7af26ed0b75b8a211d76f0eef31a57124b00000000a928105f01807253fbe23345837c"], 0x1c}}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x20, 0x140b, 0x800, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r7, @ANYBLOB="060015000800000010001680"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000580)={0x11, 0x0, 0x0}, &(0x7f00000005c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000000800)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="ebdcc9ca70df820c2f85cd2bb3475d21f9e042b91e526b7b02b3976f80de4d623eb249491bdf089d08c3b1bb3ff47ebabc51eb0285c17fd8b19658a947922f097aaff16fa209dfbd08f6cd30dd02ed9c81e1068135d999c6ff5a553e2e98abf134337d356b89563d1df6dfbed2bcc00608d3af20b697a9d768e16077ebea99ced35fa90cfc93bc5cff3a30466a2369ad78230695226027e39c68a441d146bf62ba80f8b3b91c3079935d7ea2d6065feb27e9ee237e907d5158b66c114ee3c42a41e89f7ce200f737a4676cf9bd9da70fa77cdcf35d83e56d8dba8e3ce99d37", 0xdf}, {&(0x7f0000000300)="9c6abb6fe0d52137cd5f49f90172e72c4e38765a9687f457c9819124d50c2e73b698b58a5b77691d9837e6bbd00a38c23626b5fd6d2c3527b9b3fbfa7cc4bec7e29199e7ca5433c5bca1fef15aecf93ae9539e7342a82baa64823541327d57a05d2998c7d5eddf50f2dbae734d46fa9bcf6910ebac69f99bbc951ef28de6", 0x7e}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="7f7274468d757f4b7fde", 0xa}, {&(0x7f0000000400)="0facc78807cde0bdde8120a0d78eb2b1d899ac50d4d45360d5bf49e55ef36a5101a97d4f01f9c5cee0b5d31b1fb87c038a605a685c3e7eedce5409003530ebcf08179879289789921f2a380cb0d7c50bcf5fb09b38615a90ebc530366dc0837395f21a6d88f5c5287cc9972496d0559c4c3d803dffef171405f07a58c5ee27b91fa5a67645f4f52e58cb3cf9756b779e9a052f7cfbf1", 0x96}, {&(0x7f00000004c0)}], 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="64010100ac14144300000000140000000000000000000000010000000f000000000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="5e7e6eb7dd5c57799790c5bbbdf3741e6a3aec77af70329105c166bc52fd19be614a1916c2cdc6bbe12e42498222a159546208ef4ce50dff15eff10ab5ff"], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000380)=0x8) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r10, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="002000000102"}) close(0x3) 1.088216212s ago: executing program 3 (id=828): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r2) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x1}}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000080)=@routing={0x86, 0x0, 0x2, 0xf8}, 0x8) getsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, &(0x7f0000000000)=0xa4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0xffffffff}, 0x10) bind$tipc(r5, 0x0, 0x0) close(r5) 873.308001ms ago: executing program 0 (id=829): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x8000}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xaf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}}, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x8000}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xaf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) 872.416504ms ago: executing program 2 (id=830): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0xbb171, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000200900020073797a310000000008000440000000000900010073797af7ec9aa90a14000000110000e500"/100], 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004100)={0x38, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x6, 0x20, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @nested={0x4, 0x2, 0x0, 0x1, [@generic="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", @typed={0x0, 0x137, 0x0, 0x0, @u64=0x6}, @nested={0x0, 0x6d, 0x0, 0x1, [@typed={0x0, 0xe8, 0x0, 0x0, @ipv4=@loopback}, @nested={0x0, 0xbf, 0x0, 0x1, [@nested={0x0, 0x45}, @generic="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", @nested={0x0, 0x6b}, @nested={0x0, 0x135}, @typed={0x0, 0x144, 0x0, 0x0, @ipv6=@remote}, @typed={0x0, 0x55, 0x0, 0x0, @u64=0x9}, @nested={0x0, 0xba}]}, @nested={0x0, 0x99, 0x0, 0x1, [@nested={0x0, 0xd0}]}, @nested={0x0, 0x52, 0x0, 0x1, [@typed={0x0, 0x169, 0x0, 0x0, @ipv4=@local}, @generic="6f44d006dc4e11b61fa9bc094d60d0d8cdaaafa585451000920b5cc44111fc85c3331da6fa1e74f19db6d9ad121dbe583be6a0d3fc9488a9a3ffcf4f63d532c72d2235d3f8f2e16641a3a93c661293fcbcd337a3fb0d116ac7b60ac1a877e8bf91bfe885424c3474fc259934fe693f755a6428a6f340160ddeb41130199ef01eaee9d21671098d8e89839cd3a7061df637d4303c8a04c3ad937ecdd22675f989fe4b913469b9e46c97a7dad04667bacf033da9c7700f66977e2d", @generic="84f06ac5fb9efb46ff8136b5a067646bc248819f3a392698c52f8eb35c1b3de9b27d4b34abd63499db3429fda2bd85232451522f796d9a243b323593956e895e6031a0c3ac74ed6559d50ff57f2ba4a1c51af7b52eecec1a42db378800628723f00c5b1ebf9620e46d4660f151ddfc36cae1d105fd664551b24b32c86e03937acacace9684eabd181a28dc5177a7f398b8b4042cb9301f2b32f4c9156c8d", @generic="e7b5dcb1cc19095f7e202bcc46d579a7f3435892098d98231649b8d38c5597e4ddb5b9fc40d051a336367499f87033b1da7c16a6656c483c384194f28460218b4e64028dd7291b5272749751b349c6dbebd6a9bdfefd3d849156339bd97ca73be35cee12aa02546d81f4a38dde51ee278ad4192d96cbc5fc233f8d0b3ba0b16f70b791e07f8ea3a7ae08d3292f17ebef3c39ef7081b7a2f88ce2a2c0ddcd8700d423bff95c178e9a7b7dc77e28c36486a995225b52e74cba2a0e8ef8edb3cf8bd5f286c61dc351393780bf880f663754359ae8b13d3131e651cf1c"]}]}, @typed={0x0, 0x33, 0x0, 0x0, @uid}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 866.577436ms ago: executing program 3 (id=831): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000035c0)={&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/205, 0xcd, 0x1, &(0x7f0000002580)=""/4096, 0x1000}, &(0x7f0000003600)=0x40) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@newqdisc={0x48, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x6, 0x4}, {0xffff, 0xb}, {0xc, 0xc}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0xffffffff, 0xff, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfe, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x40840) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfe, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x40840) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001780)='\"', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000003580)=[{&(0x7f0000002540)="9d8bc2", 0x3}], 0x1}}], 0x3, 0x4000800) (async) sendmmsg$inet(r5, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001780)='\"', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000003580)=[{&(0x7f0000002540)="9d8bc2", 0x3}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0x6a, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0x6a, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000340)=0xa6d) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r6, 0xd}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x9b, &(0x7f0000000240)={@local, @empty, @val={@val, {0x8100, 0x1, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0x4e, 0x1, "eccb", "72cae3e8787c61aa3a4f0100ad75706d9315a9aedd2bc09bb2b6bf1119b413d1b9ab0f9f6dcc1309e09ada7da8e4159a67bfb0f06e157803fd90de19120a45e690b5b0ba504a243743c7c5eeb16dee641b224922e533b8f42a02b4e761d09404bee2468a48f330ee74e80bb137ea83792b31af21d19b9f0f019b00545b22001578"}}}}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20008084) (async) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00082dbd7000ce4cdbdf251900000005001e000300000005001c000300000005001c00c4239c71e9392bdacd030000000500a300000000000500a3010000000006006d000200000006006d00020000000500a300010000000000fcff02e5a2eb09bb015a7c6995829cc7212c70f382211e3c944c93a3d6d5d0da78926f19e66700579d71c3fff4549c16e533aad595867ca2fbe366d4de17d755382067cd39aae45d60c87f0669394096affb511d31a398bf758a52959d11d4442efcf3108a92b0c655f4b7ebfc6d66b40dd9ed4d5c7f5a997dac6cf03bd6e99be0a9c169863a5c1f1146be791c3980cec85b2a9ea0490bccabba13ff3a45461a0599f6e7632a480c72e106f4c31cab8c152fa938811e3f809e9db6d35c1fb5fd0aa429bb586ad8d059154c6f8b85d0119c3644bf2a0f4445b1ec7c34e75945508a8a3bdf5e7160e2b8299fdd16c10eb7d07b7214ac8bbf2a46e70eda270fe4de30dae0be78923ae41728c3832cd6239eb02ae1ade8d2d5bc95a38c21e83a20224cab67cf8e149348a2ab7dc35a1d781ba56ea625c14a5d2a9d0b7c81336af0da493e812255a18f4fd061e5f347afb1069bdc2cd97be2c08e6b8f634123ba4254044037016a282d3837650283df638d57d5dabec3c1dad30e1b903710e4420daf6277e46c3cc933061665acc97aaddb81dc05d8e8dc126cb51b59833dd20bd3c72287eab40fcf304835c67d4c68e9c7accd177865891a33e3c9ee4f2beb55ded950e76f926684271381948144d4283eabf874b8ec7418c7fb76082ab63aa702aa277776fef6ddce8aa39aa36f1e49360648a9f25c96582237fda24631be8925f7f9416458c6d9e54cddc81286e10674fe0a7961b5ebba1c5e895dd03aa36c99918674c40baab3e6402fe45156e546e81c5108b9336b7a08d6ee3b48ff3069f3bfec298add56fb0cb865e482ba68dc22f91efd4b16102e54324265341b9c4db16eeba737580899"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20008084) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001a0000012cbd7000fbdbdf25000020006e3cbe993c9db5ef13bd12e03ca6d3902286c2e75c445f7adb7856f6acb3febe776a59eb6266b0ad"], 0x14}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ac41, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000a80)=ANY=[@ANYBLOB="ffffa65f0eb6c15b30fd947819a78295b7ffffffff00000000000088a8090081003400080045f0002440000000002f907864010101e00000014e246558ecdfa21923a93f15d7534f58"], 0x3a) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) 730.957599ms ago: executing program 1 (id=832): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050500000000000000000a000005300002802c00018014000300ff010000000003"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800009b0000b2c4392210beb7f0dafb43723dfa6211b2325b94753d28cdcc539dbf0c42bf000000000000000000"], 0x44}}, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800009b0000b2c4392210beb7f0dafb43723dfa6211b2325b94753d28cdcc539dbf0c42bf000000000000000000"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000400000000000000000000f37287eba9ad4bce0a050000000000000000000a00fffe38000000090a0103000000ec7a00000007000000c5d97508000f4000000000020000000000003100000000087566aaeb00c5620500601b47b3946c4d0f4000000001"], 0x74}, 0x1, 0x0, 0x0, 0x4088080}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000010000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 598.958625ms ago: executing program 0 (id=833): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], &(0x7f0000000700), 0x200000000000000, 0x1}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400000000000000000000000074ccecb492b95826cc23fb38add19d601be7f820be04b5dacd68609907bfa5af9b50403ba7fee169e6aea13eae743bd39c669bbdd31559cd9b53be175e7ba963962f702bf267fceb6c8d522b46c7a19f35a10f00b8575b0872969bf0fe30d436c781c1256c2c7088af7762c8d7546b31011328989008e15778872bdc6e7a8dbbe203e7f6e9ba05fa10ec87e4cf65b41438c2ca22fdc4630221ad69ba0ba758466a8bce746e2e32", @ANYRES32=0x0, @ANYBLOB="1502000000001000140012800a00010069706f69620000000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0xba01}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x24008050) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4890) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'C'}], 0x18}, 0xfc40) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r11, 0x0) recvmmsg(r11, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000018000100090000020000000000000200000000000008", @ANYRES32, @ANYBLOB="f8ffffff00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r12, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r12}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) 505.774521ms ago: executing program 3 (id=834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="07012cbd7000fedbdf2524000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000810) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x40004) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r8, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 505.475669ms ago: executing program 1 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x38, 0x1403, 0xf, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 402.00351ms ago: executing program 4 (id=836): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0xc, 0x0, &(0x7f0000000240)) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 167.08521ms ago: executing program 0 (id=837): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x80, 0x14, 0xc, 0x0, 0x76e993a086cc320e, 0xfd, 0x7, 0x100}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) 118.148635ms ago: executing program 4 (id=838): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={r3, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f0000000300)=0x10) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @remote, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = epoll_create1(0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000000)=ANY=[], 0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000b40)={0x10000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x14}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 73.735531ms ago: executing program 3 (id=839): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000002fa63664205d781182e715a95e46f6d50595a3d869af000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x1000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000001070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000090) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000002fa63664205d781182e715a95e46f6d50595a3d869af000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x1000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r4, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000001070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000090) (async) 0s ago: executing program 0 (id=840): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0011}, 0x400d4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newlink={0x20, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}}, 0x20}}, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0), &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x9c, &(0x7f0000000940)=[{}, {}], 0x10, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x9a, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes\x00', 0x7a05, 0x1700) pwritev(r8, &(0x7f0000000100), 0x0, 0x880a, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1200000069000b"], 0x20}}, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0xf03a0008) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x13, 0x20, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx={0x18, 0x4}, @call={0x85, 0x0, 0x0, 0xcb}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @alu={0x7, 0x1, 0x1, 0x3, 0x1, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xa9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xfffffffe}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0xe, 0x0, 0x5, 0xfffa, 0x7}]}, &(0x7f0000000440)='syzkaller\x00', 0x1, 0x7f, &(0x7f0000000680)=""/127, 0x41000, 0x35, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x80}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0xe, 0xffff, 0xb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r6, r8], &(0x7f0000000a80), 0x10, 0x8}, 0x94) close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x9, '\x00', r0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 76.761850][ T5606] cgroup: Unknown subsys name 'net' [ 76.900859][ T5606] cgroup: Unknown subsys name 'cpuset' [ 76.909984][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.301699][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.446463][ T4936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.458571][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.470413][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.479438][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.490628][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.500144][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.508666][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.508881][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.519592][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.531138][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.539203][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.540928][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.552086][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.554517][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.568906][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.573804][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.584035][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.584748][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.607445][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.609376][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.615910][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.624228][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.632564][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.638820][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.652404][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.424491][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.432837][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.440330][ T5621] bridge_slave_0: entered allmulticast mode [ 82.448756][ T5621] bridge_slave_0: entered promiscuous mode [ 82.457603][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.465304][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.472643][ T5618] bridge_slave_0: entered allmulticast mode [ 82.479729][ T5618] bridge_slave_0: entered promiscuous mode [ 82.512868][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.520355][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.527984][ T5621] bridge_slave_1: entered allmulticast mode [ 82.535112][ T5621] bridge_slave_1: entered promiscuous mode [ 82.542680][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.550061][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.557396][ T5618] bridge_slave_1: entered allmulticast mode [ 82.564789][ T5618] bridge_slave_1: entered promiscuous mode [ 82.598150][ T50] Bluetooth: hci1: command tx timeout [ 82.632864][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.640532][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.649768][ T5619] bridge_slave_0: entered allmulticast mode [ 82.657150][ T5619] bridge_slave_0: entered promiscuous mode [ 82.664733][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.671906][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.679251][ T50] Bluetooth: hci0: command tx timeout [ 82.679558][ T5626] Bluetooth: hci2: command tx timeout [ 82.685503][ T5638] Bluetooth: hci4: command tx timeout [ 82.698022][ T5635] bridge_slave_0: entered allmulticast mode [ 82.710513][ T5635] bridge_slave_0: entered promiscuous mode [ 82.741909][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.761232][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.767941][ T5638] Bluetooth: hci3: command tx timeout [ 82.768949][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.781539][ T5619] bridge_slave_1: entered allmulticast mode [ 82.789823][ T5619] bridge_slave_1: entered promiscuous mode [ 82.797370][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.805077][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.813643][ T5635] bridge_slave_1: entered allmulticast mode [ 82.821451][ T5635] bridge_slave_1: entered promiscuous mode [ 82.832051][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.844859][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.865940][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.921402][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.928938][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.936372][ T5620] bridge_slave_0: entered allmulticast mode [ 82.943748][ T5620] bridge_slave_0: entered promiscuous mode [ 82.973384][ T5621] team0: Port device team_slave_0 added [ 82.991843][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.999769][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.007921][ T5620] bridge_slave_1: entered allmulticast mode [ 83.015131][ T5620] bridge_slave_1: entered promiscuous mode [ 83.025039][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.038444][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.049817][ T5621] team0: Port device team_slave_1 added [ 83.057668][ T5618] team0: Port device team_slave_0 added [ 83.066413][ T5618] team0: Port device team_slave_1 added [ 83.083872][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.095819][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.183969][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.205903][ T5635] team0: Port device team_slave_0 added [ 83.213088][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.220817][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.248353][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.263522][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.271575][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.298511][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.313101][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.324473][ T5619] team0: Port device team_slave_0 added [ 83.332336][ T5635] team0: Port device team_slave_1 added [ 83.338774][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.346050][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.373411][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.385492][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.392921][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.419528][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.442421][ T5619] team0: Port device team_slave_1 added [ 83.506675][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.513808][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.540457][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.553506][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.560833][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.590692][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.606047][ T5620] team0: Port device team_slave_0 added [ 83.641544][ T5620] team0: Port device team_slave_1 added [ 83.648121][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.655624][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.682279][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.719626][ T5621] hsr_slave_0: entered promiscuous mode [ 83.727958][ T5621] hsr_slave_1: entered promiscuous mode [ 83.745163][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.753042][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.781690][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.845493][ T5618] hsr_slave_0: entered promiscuous mode [ 83.852203][ T5618] hsr_slave_1: entered promiscuous mode [ 83.859937][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 83.865843][ T5618] Cannot create hsr debugfs directory [ 83.889128][ T5635] hsr_slave_0: entered promiscuous mode [ 83.898655][ T5635] hsr_slave_1: entered promiscuous mode [ 83.905261][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 83.911365][ T5635] Cannot create hsr debugfs directory [ 83.918494][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.925844][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.953048][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.966434][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.974501][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.002537][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.155204][ T5619] hsr_slave_0: entered promiscuous mode [ 84.161766][ T5619] hsr_slave_1: entered promiscuous mode [ 84.168906][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 84.175064][ T5619] Cannot create hsr debugfs directory [ 84.218587][ T5620] hsr_slave_0: entered promiscuous mode [ 84.226048][ T5620] hsr_slave_1: entered promiscuous mode [ 84.232720][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 84.239687][ T5620] Cannot create hsr debugfs directory [ 84.668382][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.684069][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.693720][ T5638] Bluetooth: hci1: command tx timeout [ 84.701480][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.712844][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.721981][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.732375][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.740432][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.751161][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.758675][ T50] Bluetooth: hci0: command tx timeout [ 84.764597][ T5638] Bluetooth: hci4: command tx timeout [ 84.767542][ T5626] Bluetooth: hci2: command tx timeout [ 84.837242][ T5626] Bluetooth: hci3: command tx timeout [ 84.850816][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.862306][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.870345][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.882111][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.890633][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.900185][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.908473][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.919012][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.020282][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.032723][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.041891][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.059799][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.068544][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.077754][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.086165][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.099289][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.200528][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.243241][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.254843][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.273228][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.283122][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.302651][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.313195][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.344610][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.355158][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.365459][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.421916][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.429853][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.462312][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.470122][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.499255][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.540342][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.552519][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.570706][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.582188][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.606033][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.618903][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.627329][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.637786][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.676550][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.703483][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.720081][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.727276][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.759489][ T236] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.767159][ T236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.810966][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.851447][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.859044][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.910360][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.918407][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.018134][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.106719][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.173465][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.180945][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.246036][ T236] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.253695][ T236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.292590][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.388183][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.435002][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.443431][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.499906][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.507604][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.602626][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.757581][ T5626] Bluetooth: hci1: command tx timeout [ 86.839054][ T5626] Bluetooth: hci4: command tx timeout [ 86.845869][ T5626] Bluetooth: hci0: command tx timeout [ 86.853944][ T5638] Bluetooth: hci2: command tx timeout [ 86.926891][ T5638] Bluetooth: hci3: command tx timeout [ 86.946697][ T5621] veth0_vlan: entered promiscuous mode [ 87.003408][ T5621] veth1_vlan: entered promiscuous mode [ 87.186433][ T5621] veth0_macvtap: entered promiscuous mode [ 87.249349][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.278351][ T5621] veth1_macvtap: entered promiscuous mode [ 87.313605][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.418160][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.471665][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.576718][ T113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.601491][ T113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.648228][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.659985][ T113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.686964][ T113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.772469][ T5635] veth0_vlan: entered promiscuous mode [ 87.788089][ T5619] veth0_vlan: entered promiscuous mode [ 87.839428][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.854639][ T5635] veth1_vlan: entered promiscuous mode [ 87.877090][ T5619] veth1_vlan: entered promiscuous mode [ 87.973806][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.986679][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.048671][ T5618] veth0_vlan: entered promiscuous mode [ 88.072857][ T5635] veth0_macvtap: entered promiscuous mode [ 88.089948][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.109535][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.114742][ T5635] veth1_macvtap: entered promiscuous mode [ 88.125882][ T5619] veth0_macvtap: entered promiscuous mode [ 88.135340][ T5618] veth1_vlan: entered promiscuous mode [ 88.166064][ T5619] veth1_macvtap: entered promiscuous mode [ 88.240662][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.273461][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.295989][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.315743][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.337830][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.365015][ T29] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.380613][ T29] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.391161][ T29] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.419559][ T5618] veth0_macvtap: entered promiscuous mode [ 88.431774][ T29] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.444361][ T29] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.462601][ T5620] veth0_vlan: entered promiscuous mode [ 88.480121][ T29] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.491304][ T29] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.509059][ T5618] veth1_macvtap: entered promiscuous mode [ 88.524557][ T29] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.582835][ T5620] veth1_vlan: entered promiscuous mode [ 88.600936][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.659500][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.763467][ T1104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.789115][ T1104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.798775][ T1104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.815447][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.837687][ T5638] Bluetooth: hci1: command tx timeout [ 88.841722][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.854589][ T1104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.901558][ T236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.911182][ T236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.917698][ T5825] netlink: 'syz.1.8': attribute type 21 has an invalid length. [ 88.920443][ T5638] Bluetooth: hci2: command tx timeout [ 88.931666][ T5825] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8'. [ 88.933099][ T50] Bluetooth: hci0: command tx timeout [ 88.941914][ T5626] Bluetooth: hci4: command tx timeout [ 88.971714][ T5825] netlink: 'syz.1.8': attribute type 4 has an invalid length. [ 88.979967][ T5825] netlink: 'syz.1.8': attribute type 5 has an invalid length. [ 88.988127][ T5825] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8'. [ 88.997486][ T5626] Bluetooth: hci3: command tx timeout [ 89.008756][ T5620] veth0_macvtap: entered promiscuous mode [ 89.046088][ T5620] veth1_macvtap: entered promiscuous mode [ 89.073530][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.092699][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.105777][ T5828] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9'. [ 89.123881][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.140712][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.255321][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.263883][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.293910][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.306528][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.357722][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.388621][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.427954][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.448264][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.477978][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.489764][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.563378][ T5835] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12'. [ 89.726456][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11'. [ 89.754504][ T5843] netlink: 'syz.2.13': attribute type 8 has an invalid length. [ 89.793887][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.804693][ T5843] netlink: 'syz.2.13': attribute type 8 has an invalid length. [ 89.818872][ T5838] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 89.828796][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.919694][ T5843] netlink: 'syz.2.13': attribute type 8 has an invalid length. [ 89.984820][ T5843] netlink: 'syz.2.13': attribute type 8 has an invalid length. [ 90.020582][ T5843] netlink: 'syz.2.13': attribute type 8 has an invalid length. [ 90.028433][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.038877][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.061630][ T5838] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 90.061890][ T5843] netlink: 'syz.2.13': attribute type 8 has an invalid length. [ 90.567033][ T5866] IPVS: Scheduler module ip_vs_sip not found [ 90.633458][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 90.663258][ T5866] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 90.694632][ T5866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 90.739441][ T5881] syzkaller0: entered allmulticast mode [ 91.502664][ T5915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.29'. [ 91.604162][ T5754] IPVS: starting estimator thread 0... [ 91.648267][ T5909] bridge13: entered promiscuous mode [ 91.655112][ T5909] bridge13: entered allmulticast mode [ 91.676017][ T5909] team0: Port device bridge13 added [ 91.683011][ T5923] tc_dump_action: action bad kind [ 91.694453][ T5923] ieee802154 phy0 wpan0: encryption failed: -90 [ 91.698444][ T5920] IPVS: using max 34 ests per chain, 81600 per kthread [ 92.043977][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 92.061091][ T5938] netlink: 32 bytes leftover after parsing attributes in process `syz.2.35'. [ 92.241532][ T5945] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 92.249944][ T5945] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 92.312190][ T10] cfg80211: failed to load regulatory.db [ 92.572619][ T5955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.803759][ T5971] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET) [ 93.203251][ T5986] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 93.231078][ T5986] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 93.961375][ T6013] warning: `syz.4.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.020823][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.061939][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.108694][ T6025] __nla_validate_parse: 8 callbacks suppressed [ 94.108713][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 94.110845][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 94.448769][ T10] hid-generic 0005:0007:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 94.831624][ T6037] fido_id[6037]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 95.049258][ T6052] netlink: 48 bytes leftover after parsing attributes in process `syz.0.65'. [ 95.212904][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 95.244644][ T6057] validate_nla: 10 callbacks suppressed [ 95.244661][ T6057] netlink: 'syz.3.68': attribute type 10 has an invalid length. [ 95.275801][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 95.382908][ T6061] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 95.424402][ T6061] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 95.452985][ T6061] bond1: entered allmulticast mode [ 95.702500][ T6079] netlink: 'syz.3.74': attribute type 11 has an invalid length. [ 95.711039][ T6079] netlink: 140 bytes leftover after parsing attributes in process `syz.3.74'. [ 95.812338][ T6082] bridge_slave_0: left allmulticast mode [ 95.866524][ T6082] bridge_slave_0: left promiscuous mode [ 95.909595][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.973449][ T6082] bridge_slave_1: left allmulticast mode [ 96.026965][ T6082] bridge_slave_1: left promiscuous mode [ 96.064510][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.177936][ T6082] bond0: (slave bond_slave_0): Releasing backup interface [ 96.339733][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'. [ 96.532789][ T6082] bond0: (slave bond_slave_1): Releasing backup interface [ 97.169318][ T6082] team0: Port device team_slave_0 removed [ 97.322898][ T6082] team0: Port device team_slave_1 removed [ 97.329896][ T6082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.338752][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.348864][ T6082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.356280][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.367414][ T6082] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.410310][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 97.454588][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.470414][ T6108] netlink: 'syz.0.81': attribute type 12 has an invalid length. [ 97.508301][ T6108] netlink: 132 bytes leftover after parsing attributes in process `syz.0.81'. [ 97.665861][ T6117] netlink: 'syz.4.85': attribute type 11 has an invalid length. [ 97.701170][ T6117] netlink: 'syz.4.85': attribute type 4 has an invalid length. [ 97.741485][ T6117] netlink: 224 bytes leftover after parsing attributes in process `syz.4.85'. [ 97.773888][ T6112] syzkaller0: entered promiscuous mode [ 97.779619][ T6112] syzkaller0: entered allmulticast mode [ 97.900323][ T6126] dummy0: entered promiscuous mode [ 100.526307][ T6186] __nla_validate_parse: 2 callbacks suppressed [ 100.526324][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'. [ 100.596010][ T6189] tipc: Started in network mode [ 100.627276][ T6189] tipc: Node identity ea09d7a90a3e, cluster identity 4711 [ 100.655393][ T6189] tipc: Enabled bearer , priority 0 [ 100.698704][ T6190] syzkaller0: entered promiscuous mode [ 100.712080][ T6190] syzkaller0: entered allmulticast mode [ 100.744013][ T6190] tipc: Resetting bearer [ 100.766302][ T6190] tipc: Disabling bearer [ 101.047240][ T6201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.103'. [ 101.172358][ T6219] netlink: 'syz.3.107': attribute type 5 has an invalid length. [ 101.441635][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 101.469382][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 101.517815][ T6231] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.865140][ T6250] syzkaller0: entered promiscuous mode [ 101.876234][ T6250] syzkaller0: entered allmulticast mode [ 102.083850][ T6257] Zero length message leads to an empty skb [ 102.167942][ T6266] netlink: 36 bytes leftover after parsing attributes in process `syz.3.121'. [ 102.205256][ T6266] nbd: must specify at least one socket [ 102.216883][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 102.311611][ T6275] pimreg: entered allmulticast mode [ 102.461475][ T6285] netlink: 170676 bytes leftover after parsing attributes in process `syz.1.125'. [ 102.506152][ T6285] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 102.532708][ T6285] openvswitch: netlink: Message has 512 unknown bytes. [ 102.768183][ T6300] netlink: 34 bytes leftover after parsing attributes in process `syz.0.130'. [ 102.811854][ T6299] syzkaller0: entered promiscuous mode [ 102.836875][ T6299] syzkaller0: entered allmulticast mode [ 102.878568][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.132'. [ 102.889709][ T6299] tipc: Started in network mode [ 102.895721][ T6299] tipc: Node identity 4a0a91caadd5, cluster identity 4711 [ 102.912442][ T6299] tipc: Enabled bearer , priority 0 [ 102.930351][ T6297] tipc: Resetting bearer [ 102.951190][ T6297] tipc: Disabling bearer [ 102.972825][ T6308] syz_tun: entered allmulticast mode [ 103.030739][ T6307] syz_tun: left allmulticast mode [ 103.322181][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 104.060294][ T6351] IPv6: NLM_F_REPLACE set, but no existing node found! [ 104.099350][ T6351] netlink: 'syz.2.146': attribute type 6 has an invalid length. [ 104.131653][ T6345] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 104.141840][ T31] audit: type=1800 audit(1784242078.330:2): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.147" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 104.174341][ T6351] netlink: 'syz.2.146': attribute type 5 has an invalid length. [ 104.185001][ T6345] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 104.213131][ T6345] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 104.262011][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.272277][ T6351] netlink: 'syz.2.146': attribute type 6 has an invalid length. [ 104.286685][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.319417][ T6351] netlink: 'syz.2.146': attribute type 5 has an invalid length. [ 104.335133][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.357258][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.618058][ T6374] tap0: tun_chr_ioctl cmd 1074025677 [ 104.625294][ T6374] tap0: linktype set to 780 [ 104.931766][ T6385] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 105.049659][ T6395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.142962][ T6398] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 105.259607][ T6408] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 105.285142][ T6403] macvlan0: entered promiscuous mode [ 105.301086][ T6403] netlink: 'syz.2.161': attribute type 1 has an invalid length. [ 105.323476][ T6403] netlink: 'syz.2.161': attribute type 2 has an invalid length. [ 105.546447][ T6427] __nla_validate_parse: 12 callbacks suppressed [ 105.546466][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 105.702175][ T6434] netlink: 244 bytes leftover after parsing attributes in process `syz.1.168'. [ 105.776289][ T6430] netlink: 244 bytes leftover after parsing attributes in process `syz.1.168'. [ 106.739499][ T6445] tipc: Started in network mode [ 106.748002][ T6445] tipc: Node identity 72bb94cbd19e, cluster identity 4711 [ 106.778025][ T6445] tipc: Enabled bearer , priority 0 [ 106.814392][ T6444] tipc: Disabling bearer [ 107.152045][ T6481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 107.164474][ T6481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 107.180624][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'. [ 107.308975][ T6483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.356168][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 107.372220][ T6486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.179'. [ 107.503940][ T6488] syzkaller1: entered promiscuous mode [ 107.560081][ T6488] syzkaller1: entered allmulticast mode [ 107.771190][ T5624] udevd[5624]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 107.843958][ T5624] udevd[5624]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 107.953105][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 107.999378][ T5626] block nbd0: Receive control failed (result -107) [ 109.696564][ T6563] tipc: Can't bind to reserved service type 1 [ 110.254945][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 110.793776][ T6631] tipc: Enabling of bearer rejected, failed to enable media [ 110.822472][ T6633] tipc: Enabling of bearer rejected, failed to enable media [ 110.849532][ T6635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.022026][ T6643] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 111.117807][ T6651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.204471][ T6643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.378243][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 112.566146][ T6687] netlink: 'syz.2.230': attribute type 21 has an invalid length. [ 112.582720][ T6687] netlink: 128 bytes leftover after parsing attributes in process `syz.2.230'. [ 112.605157][ T6687] netlink: 'syz.2.230': attribute type 5 has an invalid length. [ 112.621711][ T6687] netlink: 'syz.2.230': attribute type 6 has an invalid length. [ 112.639924][ T6687] netlink: 3 bytes leftover after parsing attributes in process `syz.2.230'. [ 112.729793][ T6692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.232'. [ 112.946325][ T6694] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 113.007280][ T6702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.235'. [ 113.177541][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 113.368332][ T6717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.239'. [ 113.580543][ T6725] vlan2: entered allmulticast mode [ 113.585919][ T6725] bond0: entered allmulticast mode [ 113.593089][ T6725] bond_slave_0: entered allmulticast mode [ 113.599600][ T6725] bond_slave_1: entered allmulticast mode [ 113.626975][ T6724] netlink: 'syz.1.240': attribute type 1 has an invalid length. [ 113.629967][ T6728] netlink: 80 bytes leftover after parsing attributes in process `syz.2.243'. [ 113.847729][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 113.874014][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 113.990821][ T6706] syz.4.236 (6706) used greatest stack depth: 18312 bytes left [ 115.380814][ T6786] veth1_to_team: entered promiscuous mode [ 115.441401][ T6786] veth1_to_team: left promiscuous mode [ 115.621175][ T6813] syzkaller0: entered promiscuous mode [ 115.641448][ T6813] syzkaller0: entered allmulticast mode [ 115.715474][ T6823] trusted_key: syz.0.262 sent an empty control message without MSG_MORE. [ 115.841332][ T6832] sctp: [Deprecated]: syz.0.265 (pid 6832) Use of int in maxseg socket option. [ 115.841332][ T6832] Use struct sctp_assoc_value instead [ 116.010442][ T6835] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 116.224455][ T6849] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 116.239341][ T6849] bond1 (unregistering): Released all slaves [ 116.321362][ T6845] geneve1: entered promiscuous mode [ 116.335501][ T6845] geneve1: entered allmulticast mode [ 116.363435][ T6845] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 116.519459][ T6866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.706315][ T6878] __nla_validate_parse: 11 callbacks suppressed [ 116.706333][ T6878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.277'. [ 116.771296][ T6869] netlink: ct family unspecified [ 116.789056][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.280'. [ 116.797037][ T6869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.814725][ T6887] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 116.846213][ T6887] netlink: 224 bytes leftover after parsing attributes in process `syz.2.279'. [ 116.888184][ T6887] NCSI netlink: No device for ifindex 0 [ 116.978513][ T6894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.276'. [ 117.455798][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.283'. [ 117.485439][ T6920] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 117.752001][ T6920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.838614][ T6926] bond2: (slave gretap1): making interface the new active one [ 117.850605][ T6926] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 118.047276][ T6946] netlink: 32 bytes leftover after parsing attributes in process `syz.1.291'. [ 118.107862][ T6946] openvswitch: netlink: Actions may not be safe on all matching packets [ 118.118723][ T6951] netlink: 'syz.3.293': attribute type 4 has an invalid length. [ 118.324084][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.296'. [ 118.471140][ T6970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'. [ 118.614607][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 118.722553][ T6976] bond1: option xmit_hash_policy: invalid value (10) [ 118.732779][ T6980] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 118.781022][ T6980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.788738][ T6980] IPv6: NLM_F_CREATE should be set when creating new route [ 118.814267][ T6976] bond1 (unregistering): Released all slaves [ 119.091028][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'. [ 119.123236][ T6997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.223651][ T6997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.423158][ T7020] sctp: [Deprecated]: syz.4.310 (pid 7020) Use of int in max_burst socket option. [ 119.423158][ T7020] Use struct sctp_assoc_value instead [ 119.511967][ T7024] sctp: [Deprecated]: syz.1.312 (pid 7024) Use of int in maxseg socket option. [ 119.511967][ T7024] Use struct sctp_assoc_value instead [ 119.784042][ T7029] netlink: 'syz.3.313': attribute type 24 has an invalid length. [ 120.019673][ T7043] sctp: [Deprecated]: syz.3.316 (pid 7043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.019673][ T7043] Use struct sctp_sack_info instead [ 120.083078][ T7044] sctp: [Deprecated]: syz.3.316 (pid 7044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.083078][ T7044] Use struct sctp_sack_info instead [ 120.709339][ T7075] sctp: [Deprecated]: syz.2.325 (pid 7075) Use of int in max_burst socket option. [ 120.709339][ T7075] Use struct sctp_assoc_value instead [ 120.804744][ T7075] gretap1: entered promiscuous mode [ 121.015976][ T7075] syzk: option downdelay: invalid value (18446744073709547007) [ 121.028303][ T10] IPVS: starting estimator thread 0... [ 121.040143][ T7075] syzk: option downdelay: allowed values 0 - 2147483647 [ 121.067146][ T7075] syzk (unregistering): Released all slaves [ 121.148139][ T7092] IPVS: using max 39 ests per chain, 93600 per kthread [ 121.307962][ T113] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 121.333494][ T7100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.759992][ T1113] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 121.821268][ T7121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.919781][ T7140] __nla_validate_parse: 8 callbacks suppressed [ 121.919799][ T7140] netlink: 292 bytes leftover after parsing attributes in process `syz.0.339'. [ 122.053641][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 122.092212][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 122.126067][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 122.154887][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 122.194704][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 122.227052][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 122.277778][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 122.290697][ T7155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.291677][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 122.326608][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 122.390428][ T7156] netlink: 'syz.4.342': attribute type 210 has an invalid length. [ 122.612679][ T7168] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 123.163788][ T7192] netlink: 'syz.1.353': attribute type 11 has an invalid length. [ 123.595504][ T7213] xt_NFQUEUE: number of total queues is 0 [ 123.963788][ T7232] netlink: 'syz.3.360': attribute type 1 has an invalid length. [ 124.151609][ T7232] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.159605][ T7238] netlink: 'syz.2.363': attribute type 19 has an invalid length. [ 124.180848][ T7248] netlink: 'syz.3.360': attribute type 10 has an invalid length. [ 124.190292][ T7248] dummy0: entered promiscuous mode [ 124.194593][ T7238] netlink: 'syz.2.363': attribute type 20 has an invalid length. [ 124.222540][ T7244] netlink: 'syz.2.363': attribute type 19 has an invalid length. [ 124.240210][ T7244] netlink: 'syz.2.363': attribute type 20 has an invalid length. [ 124.261360][ T7233] bond3: (slave veth3): Enslaving as an active interface with a down link [ 124.268691][ T7252] netlink: 'syz.4.365': attribute type 49 has an invalid length. [ 124.294789][ T7251] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 124.464247][ T7252] ip6gretap0: entered promiscuous mode [ 124.472460][ T7252] ip6gretap0: entered allmulticast mode [ 124.683342][ T7273] xt_SECMARK: invalid mode: 4 [ 124.698612][ T7258] syzkaller0: entered promiscuous mode [ 124.704855][ T7258] syzkaller0: entered allmulticast mode [ 124.791558][ T7271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.845099][ T7276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.855503][ T7276] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 124.866926][ T7276] bond1: (slave vti0): Error -95 calling set_mac_address [ 124.966635][ T7280] bond1: (slave dummy0): Error -99 calling set_mac_address [ 125.001001][ T7279] erspan0: entered promiscuous mode [ 125.054135][ T7279] bond0: (slave bond_slave_1): Releasing backup interface [ 125.123188][ T7278] erspan0: left promiscuous mode [ 125.513987][ T7310] netlink: zone id is out of range [ 125.532635][ T7310] netlink: zone id is out of range [ 125.555164][ T7310] netlink: zone id is out of range [ 125.574225][ T7310] netlink: zone id is out of range [ 125.602530][ T7310] netlink: zone id is out of range [ 125.612584][ T7310] netlink: zone id is out of range [ 125.619180][ T7310] netlink: zone id is out of range [ 125.624777][ T7310] netlink: zone id is out of range [ 127.854121][ T7316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.928061][ T7316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.981461][ T7316] bond0 (unregistering): Released all slaves [ 128.042846][ T7329] macsec1: entered promiscuous mode [ 128.076684][ T7333] __nla_validate_parse: 58 callbacks suppressed [ 128.100925][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 128.564411][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 128.691072][ T7374] netlink: 36 bytes leftover after parsing attributes in process `syz.1.387'. [ 128.703280][ T7379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.388'. [ 128.713614][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'. [ 128.743369][ T7380] netlink: 240 bytes leftover after parsing attributes in process `syz.2.391'. [ 128.781674][ T7380] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 128.885118][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.896989][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.008237][ T5624] udevd[5624]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 129.195075][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 129.708233][ T7422] bridge3: entered promiscuous mode [ 129.721618][ T7426] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 129.833349][ T7423] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 129.858036][ T7426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.530766][ T7484] ip6erspan0: entered allmulticast mode [ 130.589507][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.406'. [ 130.861166][ T7493] syzkaller0: entered promiscuous mode [ 130.878419][ T7493] syzkaller0: entered allmulticast mode [ 130.897476][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.0.411'. [ 130.937996][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.0.411'. [ 133.239321][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.250116][ T7525] x_tables: duplicate underflow at hook 2 [ 133.281763][ T7525] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004 [ 133.289662][ T7533] IPVS: length: 15 != 8 [ 133.320359][ T7535] Bluetooth: MGMT ver 1.23 [ 133.522517][ T7545] netlink: 36 bytes leftover after parsing attributes in process `syz.2.424'. [ 133.606683][ T7551] netlink: 44 bytes leftover after parsing attributes in process `syz.2.424'. [ 133.974271][ T7569] netlink: 80 bytes leftover after parsing attributes in process `syz.2.428'. [ 133.995221][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.428'. [ 134.016659][ T7569] netlink: 64 bytes leftover after parsing attributes in process `syz.2.428'. [ 134.098177][ T7570] netlink: 'syz.2.428': attribute type 3 has an invalid length. [ 134.600467][ T7589] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 134.713589][ T7597] netlink: 7 bytes leftover after parsing attributes in process `syz.4.434'. [ 134.746449][ T7599] netlink: 7 bytes leftover after parsing attributes in process `syz.4.434'. [ 134.923571][ T7614] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 134.949666][ T7616] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 135.050288][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'. [ 135.061326][ T7614] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.084573][ T7621] bond4: (slave geneve4): making interface the new active one [ 135.098249][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 135.111140][ T7621] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 135.138817][ T7630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.439'. [ 135.259990][ T48] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.271806][ T48] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.408840][ T7628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.457186][ T7645] netlink: 'syz.0.444': attribute type 9 has an invalid length. [ 135.479281][ T7619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.482006][ T7628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.644031][ T7634] batadv0: entered promiscuous mode [ 135.667378][ T7634] macsec1: entered promiscuous mode [ 135.675885][ T7634] macsec1: entered allmulticast mode [ 135.693398][ T7634] batadv0: entered allmulticast mode [ 135.708272][ T7634] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 135.730333][ T7634] batadv0: left allmulticast mode [ 135.738527][ T7634] batadv0: left promiscuous mode [ 135.776021][ T48] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.786176][ T48] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.224947][ T7655] tipc: Enabled bearer , priority 0 [ 136.368955][ T7654] tipc: Disabling bearer [ 137.154247][ T5626] block nbd1: Receive control failed (result -32) [ 137.162784][ T5638] block nbd1: Receive control failed (result -32) [ 137.404759][ T7693] ip6tnl1: entered allmulticast mode [ 137.781033][ T7708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.835864][ T7714] openvswitch: netlink: Flow actions attr not present in new flow. [ 137.920409][ T7711] bridge0: port 1(macvlan0) entered blocking state [ 137.943443][ T7715] xt_CT: No such helper "netbios-ns" [ 137.944262][ T7711] bridge0: port 1(macvlan0) entered disabled state [ 137.993274][ T7711] macvlan0: entered allmulticast mode [ 138.015916][ T7711] veth1_vlan: entered allmulticast mode [ 138.080828][ T7711] macvlan0: entered promiscuous mode [ 138.102022][ T7711] bridge0: port 1(macvlan0) entered blocking state [ 138.110629][ T7711] bridge0: port 1(macvlan0) entered forwarding state [ 138.159851][ T7722] tipc: Enabled bearer , priority 0 [ 138.189979][ T7728] netlink: 'syz.0.465': attribute type 12 has an invalid length. [ 138.248058][ T7709] tipc: Disabling bearer [ 138.313971][ T7726] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.506630][ T7740] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 138.527597][ T7733] netlink: 'syz.4.467': attribute type 11 has an invalid length. [ 138.803605][ T7748] netlink: 'syz.0.471': attribute type 1 has an invalid length. [ 138.853902][ T7749] __nla_validate_parse: 7 callbacks suppressed [ 138.853922][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.471'. [ 138.980723][ T7739] batadv_slave_0: entered promiscuous mode [ 139.008774][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 139.123958][ T7763] l2tp_ppp: sess 2/0: no socket in recv [ 139.323533][ T7739] batadv_slave_0: left promiscuous mode [ 139.539527][ T7775] netlink: 80 bytes leftover after parsing attributes in process `syz.2.475'. [ 139.579873][ T7767] nbd2: detected capacity change from 0 to 127 [ 139.632293][ T5638] block nbd2: Receive control failed (result -32) [ 139.652051][ T25] block nbd2: Dead connection, failed to find a fallback [ 139.664796][ T25] block nbd2: shutting down sockets [ 139.672544][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.686654][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.697091][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.709773][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 139.718609][ T25] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.729635][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 139.737935][ T25] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.747472][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 139.757160][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.766873][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.775390][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.785256][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 139.785859][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 139.794483][ T25] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.813336][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 139.824248][ T25] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.834592][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 139.845272][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.856579][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 139.877388][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.887750][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 139.900674][ T5639] ldm_validate_partition_table(): Disk read failed. [ 139.914640][ T5639] Dev nbd2: unable to read RDB block 0 [ 139.923350][ T5639] nbd2: unable to read partition table [ 139.942300][ T5639] ldm_validate_partition_table(): Disk read failed. [ 139.953828][ T5639] Dev nbd2: unable to read RDB block 0 [ 139.962933][ T5639] nbd2: unable to read partition table [ 140.001588][ T7781] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 140.079358][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.483'. [ 140.102551][ T7781] erspan0: entered promiscuous mode [ 140.170240][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 140.230029][ T7795] xt_hashlimit: size too large, truncated to 1048576 [ 140.289147][ T7787] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 140.316181][ T7800] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 140.473275][ T7800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.482'. [ 140.563262][ T7816] netlink: 15 bytes leftover after parsing attributes in process `syz.1.487'. [ 141.146514][ T236] bridge0: port 1(macvlan0) entered disabled state [ 141.312857][ T7827] bridge_slave_0: left allmulticast mode [ 141.321423][ T7832] netlink: 44 bytes leftover after parsing attributes in process `syz.1.490'. [ 141.329873][ T7834] netlink: 'syz.1.490': attribute type 23 has an invalid length. [ 141.350991][ T7827] bridge_slave_0: left promiscuous mode [ 141.368006][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.393825][ T7827] bridge_slave_1: left allmulticast mode [ 141.410235][ T7827] bridge_slave_1: left promiscuous mode [ 141.429540][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.468631][ T7827] bond0: (slave bond_slave_0): Releasing backup interface [ 141.512254][ T7827] bond0: (slave bond_slave_1): Releasing backup interface [ 141.569652][ T7827] team0: Port device team_slave_0 removed [ 141.588422][ T7827] team0: Port device team_slave_1 removed [ 141.618207][ T7827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.649090][ T7827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.679304][ T7827] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 141.867924][ T7828] team0: Port device xfrm0 added [ 141.955438][ T7841] tipc: Enabled bearer , priority 0 [ 142.002779][ T7840] tipc: Disabling bearer [ 142.090521][ T7848] netlink: 'syz.0.496': attribute type 4 has an invalid length. [ 142.141277][ T7852] xt_connbytes: Forcing CT accounting to be enabled [ 142.283167][ T7855] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 142.372321][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 142.774126][ T7883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.793237][ T7882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.969572][ T7898] SET target dimension over the limit! [ 143.451817][ T7913] tipc: Enabled bearer , priority 0 [ 143.484062][ T7912] tipc: Disabling bearer [ 143.600087][ T5281] veth0_vlan: left promiscuous mode [ 143.675635][ T13] bridge0: port 1(macvlan0) entered blocking state [ 143.683080][ T13] bridge0: port 1(macvlan0) entered forwarding state [ 143.686123][ T7919] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 143.755222][ T5723] veth0_vlan: entered promiscuous mode [ 143.952359][ T7921] __nla_validate_parse: 3 callbacks suppressed [ 143.952378][ T7921] netlink: 48 bytes leftover after parsing attributes in process `syz.2.513'. [ 144.013001][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 144.303925][ T7948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.517'. [ 144.408842][ T7949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.665862][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 145.485901][ T7966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.612607][ T8018] netlink: 44 bytes leftover after parsing attributes in process `syz.1.526'. [ 145.626093][ T8018] netlink: 43 bytes leftover after parsing attributes in process `syz.1.526'. [ 145.650548][ T8018] netlink: 'syz.1.526': attribute type 6 has an invalid length. [ 145.694785][ T8018] netlink: 'syz.1.526': attribute type 5 has an invalid length. [ 145.726581][ T8018] netlink: 43 bytes leftover after parsing attributes in process `syz.1.526'. [ 145.834879][ T8028] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 145.843675][ T8030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.530'. [ 145.892587][ T8030] netlink: 60 bytes leftover after parsing attributes in process `syz.2.530'. [ 146.020696][ T8028] bond1: entered promiscuous mode [ 146.026414][ T8028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.040434][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 146.164214][ T8040] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.000467][ T8086] tunl0 speed is unknown, defaulting to 1000 [ 147.098460][ T8086] tunl0 speed is unknown, defaulting to 1000 [ 147.444370][ T8097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.499283][ T8097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.566673][ T8097] macvlan0: left promiscuous mode [ 147.611208][ T8097] geneve1: left promiscuous mode [ 147.624509][ T8097] geneve1: left allmulticast mode [ 147.682329][ T8097] bridge13: left promiscuous mode [ 147.691655][ T8097] bridge13: left allmulticast mode [ 147.710741][ T8097] gretap1: left promiscuous mode [ 147.725302][ T8086] tunl0 speed is unknown, defaulting to 1000 [ 147.832061][ T6151] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.857551][ T6151] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.883423][ T6151] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.912838][ T6151] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.956170][ T6151] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.004521][ T6151] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.048297][ T6151] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.091495][ T6151] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.308860][ T8148] pim6reg1: entered promiscuous mode [ 148.320478][ T8148] pim6reg1: entered allmulticast mode [ 148.537811][ T8164] netlink: 'syz.1.557': attribute type 12 has an invalid length. [ 148.612240][ T8086] infiniband syz2: set active [ 148.619237][ T8163] macvtap1: entered promiscuous mode [ 148.631015][ T8086] infiniband syz2: added tunl0 [ 148.641561][ T8163] erspan0: entered promiscuous mode [ 148.673764][ T8163] macvtap1: entered allmulticast mode [ 148.695384][ T8163] erspan0: entered allmulticast mode [ 148.725390][ T8086] infiniband syz2: Couldn't open port 1 [ 148.759938][ T8086] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 148.789276][ T8167] erspan0: left allmulticast mode [ 148.797206][ T8086] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 148.813187][ T8167] erspan0: left promiscuous mode [ 148.837564][ T8086] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 148.860384][ T8167] macvtap1: left promiscuous mode [ 148.879664][ T8167] macvtap1: left allmulticast mode [ 148.906211][ T8158] syzkaller1: entered promiscuous mode [ 148.925525][ T8158] syzkaller1: entered allmulticast mode [ 148.942499][ T8125] tunl0 speed is unknown, defaulting to 1000 [ 148.951380][ T8176] syz_tun: entered allmulticast mode [ 149.028011][ T8177] syz_tun (unregistering): left allmulticast mode [ 149.114346][ T8086] RDS/IB: syz2: added [ 149.140515][ T8086] smc: adding ib device syz2 with port count 1 [ 149.152191][ T8184] openvswitch: netlink: Unknown key attributes 20 [ 149.175922][ T8086] smc: ib device syz2 port 1 has pnetid S (user defined) [ 149.227865][ T8122] tunl0 speed is unknown, defaulting to 1000 [ 149.383729][ T8086] tunl0 speed is unknown, defaulting to 1000 [ 149.583674][ T8205] __nla_validate_parse: 7 callbacks suppressed [ 149.583692][ T8205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.567'. [ 149.810701][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.569'. [ 149.901847][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 150.124068][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.571'. [ 150.331902][ T8086] tunl0 speed is unknown, defaulting to 1000 [ 150.467013][ T8086] tunl0 speed is unknown, defaulting to 1000 [ 150.611249][ T8086] tunl0 speed is unknown, defaulting to 1000 [ 150.784532][ T8086] tunl0 speed is unknown, defaulting to 1000 [ 150.918583][ T8086] tunl0 speed is unknown, defaulting to 1000 [ 151.043343][ T8086] tunl0 speed is unknown, defaulting to 1000 [ 151.194826][ T8224] siw: device registration error -23 [ 151.215456][ T8214] smc: removing ib device syz2 [ 151.274782][ T8241] netlink: 'syz.0.574': attribute type 2 has an invalid length. [ 151.323205][ T8214] smbdirect: ib_dev[syz2] removed [ 151.800837][ C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 151.827358][ T1113] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 152.447882][ T8259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.461169][ T8272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.581'. [ 152.545578][ T8125] IPVS: starting estimator thread 0... [ 152.656958][ T8273] IPVS: using max 27 ests per chain, 64800 per kthread [ 152.874088][ T8279] netlink: 'syz.3.584': attribute type 4 has an invalid length. [ 152.887883][ T8279] netlink: 240 bytes leftover after parsing attributes in process `syz.3.584'. [ 152.913457][ T8280] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 152.922774][ T8280] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 153.003405][ T8282] netlink: 'syz.0.585': attribute type 6 has an invalid length. [ 153.012808][ T8282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.585'. [ 153.353519][ T8295] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 153.429079][ T8298] bridge1: entered promiscuous mode [ 153.446475][ T8298] bridge1: entered allmulticast mode [ 153.468476][ T8108] IPVS: starting estimator thread 0... [ 153.510106][ T8295] syzkaller0: entered promiscuous mode [ 153.515849][ T8295] syzkaller0: entered allmulticast mode [ 153.550670][ T8295] tipc: Enabled bearer , priority 0 [ 153.565706][ T8295] tipc: Resetting bearer [ 153.576989][ T8301] IPVS: using max 29 ests per chain, 69600 per kthread [ 153.647339][ T8304] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 153.659072][ T8304] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 153.700728][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 153.751519][ T8306] netlink: 'syz.0.589': attribute type 1 has an invalid length. [ 153.868868][ T8306] bond3: entered promiscuous mode [ 153.875870][ T8306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.928472][ T8308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.942371][ T8308] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 153.953580][ T8308] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 153.979418][ T8308] bond3: (slave ip6gre1): making interface the new active one [ 153.987725][ T8308] ip6gre1: entered promiscuous mode [ 153.996283][ T8308] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 154.137007][ T8294] tipc: Resetting bearer [ 154.205212][ T8294] tipc: Disabling bearer [ 154.505829][ T8327] netlink: 84 bytes leftover after parsing attributes in process `syz.1.593'. [ 155.203103][ T8373] netlink: zone id is out of range [ 155.215927][ T8373] netlink: zone id is out of range [ 155.233335][ T8373] netlink: zone id is out of range [ 155.248497][ T8373] netlink: zone id is out of range [ 155.267197][ T8373] netlink: zone id is out of range [ 155.302440][ T8373] netlink: zone id is out of range [ 155.324089][ T8373] netlink: zone id is out of range [ 155.346165][ T8373] netlink: zone id is out of range [ 155.571094][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 155.753987][ T8396] netlink: 40 bytes leftover after parsing attributes in process `syz.2.605'. [ 156.254791][ T8420] netlink: 'syz.2.611': attribute type 1 has an invalid length. [ 156.528979][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.613'. [ 156.566572][ T8430] vlan2: entered promiscuous mode [ 156.588740][ T8430] bridge0: entered promiscuous mode [ 157.370985][ T8467] netlink: 64 bytes leftover after parsing attributes in process `syz.2.621'. [ 157.724504][ T8477] bridge0: port 1(macvlan0) entered disabled state [ 157.991089][ T8477] veth0_vlan: left promiscuous mode [ 158.004619][ T8477] veth1_vlan: left allmulticast mode [ 158.155607][ T8477] macsec1: left promiscuous mode [ 158.169383][ T8477] ip6tnl1: left allmulticast mode [ 158.187376][ T8486] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.210620][ T8486] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.238709][ T113] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.293588][ T113] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.324792][ T113] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.388798][ T113] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.688811][ T8521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.629'. [ 158.814156][ T8527] netlink: 32 bytes leftover after parsing attributes in process `syz.2.631'. [ 158.880128][ T8533] netlink: 32 bytes leftover after parsing attributes in process `syz.2.631'. [ 158.948605][ T8534] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 158.964364][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 159.025885][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 159.280843][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 159.419240][ T8549] macvtap1: entered promiscuous mode [ 159.421239][ T8558] raw_sendmsg: syz.4.640 forgot to set AF_INET. Fix it! [ 159.441173][ T8549] batadv0: entered promiscuous mode [ 159.451863][ T8549] macvtap1: entered allmulticast mode [ 159.469550][ T8549] batadv0: entered allmulticast mode [ 159.494237][ T8549] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 159.528224][ T8553] batadv0: left allmulticast mode [ 159.543637][ T8553] batadv0: left promiscuous mode [ 159.556333][ T8553] macvtap1: left promiscuous mode [ 159.565057][ T8553] macvtap1: left allmulticast mode [ 160.082338][ T8536] dvmrp0: entered allmulticast mode [ 160.182648][ T13] dvmrp0: left allmulticast mode [ 160.752319][ T8618] tipc: Enabled bearer , priority 0 [ 160.819324][ T8617] tipc: Disabling bearer [ 160.827691][ T8629] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 160.851298][ T8629] xt_hashlimit: size too large, truncated to 1048576 [ 160.997044][ T8629] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.781975][ T8668] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 161.811921][ T8668] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 162.283358][ T8683] __nla_validate_parse: 5 callbacks suppressed [ 162.283376][ T8683] netlink: 116 bytes leftover after parsing attributes in process `syz.1.665'. [ 162.359290][ T8688] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 162.405189][ T8688] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 162.514812][ T8694] netlink: 40 bytes leftover after parsing attributes in process `syz.4.668'. [ 162.770350][ T8705] netlink: 830 bytes leftover after parsing attributes in process `syz.2.670'. [ 162.861436][ T8705] netlink: 830 bytes leftover after parsing attributes in process `syz.2.670'. [ 183.638744][ T8753] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 183.683552][ T8760] nbd: socks must be embedded in a SOCK_ITEM attr [ 183.699545][ T8759] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 183.746825][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 183.760820][ T8760] nbd: socks must be embedded in a SOCK_ITEM attr [ 183.894628][ T8761] netlink: 'syz.2.673': attribute type 13 has an invalid length. [ 184.029373][ T8780] netlink: 'syz.4.677': attribute type 3 has an invalid length. [ 184.038032][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 184.072202][ T8777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.673'. [ 184.122959][ T8753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.180059][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 184.486081][ T8788] tipc: Failed to remove unknown binding: 66,1,1/0:2752580095/2752580097 [ 185.038083][ T8821] netlink: 64 bytes leftover after parsing attributes in process `syz.0.687'. [ 185.207360][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 185.358286][ T8828] xt_CT: No such helper "netbios-ns" [ 185.982732][ T8851] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.003686][ T8858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.693'. [ 186.015629][ T8851] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 186.226162][ T8851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.233621][ T8851] IPv6: NLM_F_CREATE should be set when creating new route [ 186.241140][ T8851] IPv6: NLM_F_CREATE should be set when creating new route [ 186.249043][ T8851] IPv6: NLM_F_CREATE should be set when creating new route [ 186.352106][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 186.561851][ T8875] netlink: 52 bytes leftover after parsing attributes in process `syz.2.700'. [ 186.634272][ T8878] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 186.672432][ T8878] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 186.883491][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 188.420551][ T8840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.742833][ T8901] sctp: [Deprecated]: syz.1.708 (pid 8901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.742833][ T8901] Use struct sctp_sack_info instead [ 188.927692][ T8913] __nla_validate_parse: 1 callbacks suppressed [ 188.927710][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 188.961411][ T8913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.710'. [ 189.190161][ T8926] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 189.470008][ T8935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.712'. [ 189.966622][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.974997][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.325519][ T8948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.361525][ T8948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.578298][ T8955] macvtap1: entered promiscuous mode [ 190.584302][ T8955] vlan0: entered promiscuous mode [ 190.589757][ T8955] bond2: entered promiscuous mode [ 190.595033][ T8955] gretap1: entered promiscuous mode [ 190.605017][ T8955] vlan0: left promiscuous mode [ 190.610767][ T8955] bond2: left promiscuous mode [ 190.615620][ T8955] gretap1: left promiscuous mode [ 190.668919][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.688958][ T236] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.702265][ T236] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 190.715915][ T236] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.726095][ T236] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 190.762961][ T236] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.772239][ T236] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 190.782306][ T8987] gre0: entered promiscuous mode [ 190.789011][ T8987] gre0: entered allmulticast mode [ 190.796976][ T8987] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 190.951921][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 190.955621][ T8995] netlink: zone id is out of range [ 190.966994][ T8995] netlink: zone id is out of range [ 190.972437][ T8995] netlink: zone id is out of range [ 190.978910][ T8995] netlink: zone id is out of range [ 190.984609][ T8995] netlink: zone id is out of range [ 190.990223][ T8995] netlink: zone id is out of range [ 190.995485][ T8995] netlink: zone id is out of range [ 191.004391][ T8995] netlink: zone id is out of range [ 191.011017][ T8995] netlink: zone id is out of range [ 191.267875][ T9013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.731'. [ 191.294428][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.732'. [ 191.306568][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.732'. [ 191.340233][ T9018] netlink: 'syz.0.732': attribute type 1 has an invalid length. [ 191.473541][ T9028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.732'. [ 191.482941][ T9019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.732'. [ 191.495791][ T9018] bond4: entered promiscuous mode [ 191.502644][ T9018] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.511347][ T9028] bond4: entered allmulticast mode [ 191.568395][ T9035] netlink: 'syz.1.734': attribute type 1 has an invalid length. [ 191.919034][ T9053] netlink: 'syz.0.739': attribute type 4 has an invalid length. [ 192.005664][ T9056] netlink: 'syz.0.739': attribute type 4 has an invalid length. [ 192.340281][ T9066] : option downdelay: invalid value (18446744073709547007) [ 192.390607][ T9066] : option downdelay: allowed values 0 - 2147483647 [ 192.390692][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 192.427061][ T9074] netlink: 'syz.0.744': attribute type 1 has an invalid length. [ 192.435252][ T9066]  (unregistering): Released all slaves [ 192.488660][ T9075] netlink: 'syz.0.744': attribute type 1 has an invalid length. [ 192.658066][ T9078] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 192.767775][ T9092] žÿ: renamed from team_slave_1 [ 194.446074][ T9130] __nla_validate_parse: 4 callbacks suppressed [ 194.446092][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 194.681255][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.606037][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.770'. [ 197.615678][ T9191] block nbd3: server does not support multiple connections per device. [ 197.644562][ T9191] block nbd3: shutting down sockets [ 197.927759][ T9212] syzkaller0: entered promiscuous mode [ 197.941106][ T9212] syzkaller0: entered allmulticast mode [ 198.115953][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.778'. [ 198.133726][ T9218] syzkaller0: entered promiscuous mode [ 198.152416][ T9218] syzkaller0: entered allmulticast mode [ 198.163429][ T9221] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 198.197520][ T9221] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 198.231714][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 198.522625][ T9239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.784'. [ 198.524486][ T9241] netlink: 'syz.1.785': attribute type 1 has an invalid length. [ 198.548043][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'. [ 198.628891][ T9250] netlink: 36 bytes leftover after parsing attributes in process `syz.1.785'. [ 198.640814][ T9244] block nbd0: reconnected socket [ 198.668042][ T9241] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.814099][ T9256] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.849769][ T9261] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.851852][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'. [ 198.864192][ T9260] net_ratelimit: 1 callbacks suppressed [ 198.864212][ T9260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.904553][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'. [ 199.036804][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 199.539106][ T9296] netlink: 'syz.4.797': attribute type 4 has an invalid length. [ 199.598499][ T9299] netlink: 'syz.4.797': attribute type 4 has an invalid length. [ 200.250338][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.285040][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.479907][ T9296] dummy0: left promiscuous mode [ 200.577866][ T9308] dvmrp3: entered allmulticast mode [ 200.628948][ T9316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.723570][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.764613][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.789977][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.827160][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.875031][ T9332] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.805'. [ 200.909777][ T9330] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.805'. [ 201.129847][ T9349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.809'. [ 201.513027][ T9368] xt_hashlimit: size too large, truncated to 1048576 [ 201.705120][ T9369] ip6gre1: entered promiscuous mode [ 201.713371][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 201.725838][ T9369] ip6gre1: entered allmulticast mode [ 201.738818][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.762462][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.773286][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 201.787806][ T9380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.816'. [ 201.799865][ T995] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.843110][ T9382] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 201.901815][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.819'. [ 202.010225][ T9386] macvtap1: entered allmulticast mode [ 202.046233][ T9392] tipc: Started in network mode [ 202.069847][ T9392] tipc: Node identity 080211, cluster identity 4711 [ 202.084681][ T9392] tipc: Enabled bearer , priority 0 [ 202.101863][ T9386] bond6: (slave vti0): refused to change device type [ 202.156966][ T995] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.166217][ T9392] tipc: Resetting bearer [ 202.533145][ T31] audit: type=1804 audit(1784242176.730:3): pid=9418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.825" name="/newroot/184/cgroup.controllers" dev="tmpfs" ino=966 res=1 errno=0 [ 202.533397][ T9419] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.594039][ T31] audit: type=1800 audit(1784242176.730:4): pid=9418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.825" name="cgroup.controllers" dev="tmpfs" ino=966 res=0 errno=0 [ 202.750410][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 202.759771][ T9321] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.774490][ T9415] syzkaller0: entered promiscuous mode [ 202.781681][ T9433] netlink: 'syz.1.832': attribute type 3 has an invalid length. [ 202.795731][ T9415] syzkaller0: entered allmulticast mode [ 202.805835][ T9433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.832'. [ 202.815938][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.833'. [ 202.956411][ T9438] wlan1 speed is unknown, defaulting to 1000 [ 202.976443][ T9438] wlan1 speed is unknown, defaulting to 1000 [ 202.992346][ T9438] wlan1 speed is unknown, defaulting to 1000 [ 203.151255][ T5737] tipc: Node number set to 134353152 [ 203.417630][ T9460] Bluetooth: MGMT ver 1.23 [ 203.472727][ T9438] infiniband syz1: set down [ 203.480217][ T9438] infiniband syz1: added wlan1 [ 203.496199][ T9438] [ 203.498787][ T9438] ====================================================== [ 203.505813][ T9438] WARNING: possible circular locking dependency detected [ 203.513119][ T9438] syzkaller #0 Not tainted [ 203.517636][ T9438] ------------------------------------------------------ [ 203.525131][ T9438] syz.1.835/9438 is trying to acquire lock: [ 203.531291][ T9438] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 203.540376][ T9438] [ 203.540376][ T9438] but task is already holding lock: [ 203.548078][ T9438] ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 203.557838][ T9438] [ 203.557838][ T9438] which lock already depends on the new lock. [ 203.557838][ T9438] [ 203.568330][ T9438] [ 203.568330][ T9438] the existing dependency chain (in reverse order) is: [ 203.578051][ T9438] [ 203.578051][ T9438] -> #7 (wq_pool_mutex){+.+.}-{4:4}: [ 203.586036][ T9438] __mutex_lock+0x19d/0x1550 [ 203.592109][ T9438] __alloc_workqueue+0xa9c/0x2060 [ 203.598104][ T9438] alloc_workqueue_noprof+0xe3/0x210 [ 203.604060][ T9438] padata_alloc+0xbe/0x360 [ 203.609429][ T9438] pcrypt_init_padata+0x27/0x100 [ 203.614952][ T9438] pcrypt_init+0x60/0xc0 [ 203.619824][ T9438] do_one_initcall+0x250/0x870 [ 203.625284][ T9438] do_initcall_level+0x10a/0x1a0 [ 203.631883][ T9438] do_initcalls+0x59/0xa0 [ 203.637093][ T9438] kernel_init_freeable+0x29d/0x3e0 [ 203.643009][ T9438] kernel_init+0x1d/0x1d0 [ 203.648117][ T9438] ret_from_fork+0x514/0xb70 [ 203.653420][ T9438] ret_from_fork_asm+0x1a/0x30 [ 203.659069][ T9438] [ 203.659069][ T9438] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 203.667083][ T9438] cpus_read_lock+0x42/0x160 [ 203.673235][ T9438] static_key_slow_inc+0x12/0x30 [ 203.679721][ T9438] nbd_genl_reconfigure+0x1301/0x1e80 [ 203.686703][ T9438] genl_family_rcv_msg_doit+0x233/0x340 [ 203.693751][ T9438] genl_rcv_msg+0x614/0x7a0 [ 203.699497][ T9438] netlink_rcv_skb+0x226/0x4a0 [ 203.705171][ T9438] genl_rcv+0x28/0x40 [ 203.710561][ T9438] netlink_unicast+0x7bb/0x940 [ 203.715996][ T9438] netlink_sendmsg+0x813/0xb40 [ 203.722271][ T9438] sock_sendmsg_nosec+0x13a/0x180 [ 203.728924][ T9438] ____sys_sendmsg+0x54e/0x850 [ 203.734386][ T9438] ___sys_sendmsg+0x2a5/0x360 [ 203.739891][ T9438] __x64_sys_sendmsg+0x1b1/0x290 [ 203.746467][ T9438] do_syscall_64+0x174/0x580 [ 203.752117][ T9438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.759167][ T9438] [ 203.759167][ T9438] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 203.767158][ T9438] __mutex_lock+0x19d/0x1550 [ 203.772603][ T9438] nbd_queue_rq+0x373/0x1150 [ 203.778097][ T9438] blk_mq_dispatch_rq_list+0x499/0x1990 [ 203.784826][ T9438] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 203.792851][ T9438] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 203.802778][ T9438] blk_mq_run_work_fn+0x16c/0x300 [ 203.808331][ T9438] process_scheduled_works+0xa8e/0x14e0 [ 203.815535][ T9438] worker_thread+0xa47/0xfb0 [ 203.820752][ T9438] kthread+0x388/0x470 [ 203.825523][ T9438] ret_from_fork+0x514/0xb70 [ 203.830807][ T9438] ret_from_fork_asm+0x1a/0x30 [ 203.836793][ T9438] [ 203.836793][ T9438] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 203.844126][ T9438] __mutex_lock+0x19d/0x1550 [ 203.849885][ T9438] nbd_queue_rq+0xc1/0x1150 [ 203.855709][ T9438] blk_mq_dispatch_rq_list+0x499/0x1990 [ 203.862058][ T9438] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 203.869667][ T9438] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 203.877175][ T9438] blk_mq_run_work_fn+0x16c/0x300 [ 203.882944][ T9438] process_scheduled_works+0xa8e/0x14e0 [ 203.889583][ T9438] worker_thread+0xa47/0xfb0 [ 203.895196][ T9438] kthread+0x388/0x470 [ 203.901032][ T9438] ret_from_fork+0x514/0xb70 [ 203.906786][ T9438] ret_from_fork_asm+0x1a/0x30 [ 203.912170][ T9438] [ 203.912170][ T9438] -> #3 (set->srcu){.+.+}-{0:0}: [ 203.920701][ T9438] __synchronize_srcu+0xc9/0x2f0 [ 203.926265][ T9438] elevator_switch+0x1e8/0x7b0 [ 203.932252][ T9438] elevator_change+0x2fa/0x480 [ 203.938776][ T9438] elevator_set_default+0x375/0x440 [ 203.945218][ T9438] blk_register_queue+0x3f3/0x4e0 [ 203.951134][ T9438] __add_disk+0x6cb/0xe30 [ 203.956223][ T9438] add_disk_fwnode+0xfb/0x4b0 [ 203.961460][ T9438] nbd_dev_add+0x733/0xb60 [ 203.966770][ T9438] nbd_init+0x15f/0x1e0 [ 203.971463][ T9438] do_one_initcall+0x250/0x870 [ 203.977028][ T9438] do_initcall_level+0x10a/0x1a0 [ 203.982690][ T9438] do_initcalls+0x59/0xa0 [ 203.987909][ T9438] kernel_init_freeable+0x29d/0x3e0 [ 203.994813][ T9438] kernel_init+0x1d/0x1d0 [ 204.000234][ T9438] ret_from_fork+0x514/0xb70 [ 204.006586][ T9438] ret_from_fork_asm+0x1a/0x30 [ 204.012926][ T9438] [ 204.012926][ T9438] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 204.021463][ T9438] __mutex_lock+0x19d/0x1550 [ 204.027282][ T9438] elevator_change+0x1af/0x480 [ 204.032852][ T9438] elevator_set_none+0xb5/0x140 [ 204.038823][ T9438] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 204.045596][ T9438] nbd_start_device+0x189/0xb30 [ 204.051716][ T9438] nbd_genl_connect+0x1597/0x1c10 [ 204.057550][ T9438] genl_family_rcv_msg_doit+0x233/0x340 [ 204.063723][ T9438] genl_rcv_msg+0x614/0x7a0 [ 204.069016][ T9438] netlink_rcv_skb+0x226/0x4a0 [ 204.074598][ T9438] genl_rcv+0x28/0x40 [ 204.079140][ T9438] netlink_unicast+0x7bb/0x940 [ 204.084680][ T9438] netlink_sendmsg+0x813/0xb40 [ 204.090572][ T9438] sock_sendmsg_nosec+0x13a/0x180 [ 204.096285][ T9438] ____sys_sendmsg+0x54e/0x850 [ 204.101999][ T9438] ___sys_sendmsg+0x2a5/0x360 [ 204.107498][ T9438] __x64_sys_sendmsg+0x1b1/0x290 [ 204.113854][ T9438] do_syscall_64+0x174/0x580 [ 204.119172][ T9438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.126802][ T9438] [ 204.126802][ T9438] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 204.135531][ T9438] blk_alloc_queue+0x544/0x690 [ 204.140990][ T9438] __blk_mq_alloc_disk+0x194/0x390 [ 204.146737][ T9438] nbd_dev_add+0x494/0xb60 [ 204.151812][ T9438] nbd_init+0x15f/0x1e0 [ 204.156664][ T9438] do_one_initcall+0x250/0x870 [ 204.162335][ T9438] do_initcall_level+0x10a/0x1a0 [ 204.167896][ T9438] do_initcalls+0x59/0xa0 [ 204.172966][ T9438] kernel_init_freeable+0x29d/0x3e0 [ 204.179136][ T9438] kernel_init+0x1d/0x1d0 [ 204.184357][ T9438] ret_from_fork+0x514/0xb70 [ 204.190393][ T9438] ret_from_fork_asm+0x1a/0x30 [ 204.196475][ T9438] [ 204.196475][ T9438] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 204.205236][ T9438] __lock_acquire+0x1520/0x2cf0 [ 204.211519][ T9438] lock_acquire+0x106/0x350 [ 204.216896][ T9438] fs_reclaim_acquire+0x71/0x100 [ 204.222799][ T9438] __kmalloc_noprof+0xbc/0x720 [ 204.229850][ T9438] apply_wqattrs_prepare+0xee/0xdc0 [ 204.235971][ T9438] __alloc_workqueue+0x117c/0x2060 [ 204.242024][ T9438] alloc_workqueue_noprof+0xe3/0x210 [ 204.248698][ T9438] ib_mad_init_device+0x993/0x2150 [ 204.255262][ T9438] add_client_context+0x37c/0x7b0 [ 204.261611][ T9438] enable_device_and_get+0x19c/0x3e0 [ 204.268688][ T9438] ib_register_device+0x10af/0x1380 [ 204.275344][ T9438] rxe_register_device+0x1e3/0x350 [ 204.281366][ T9438] rxe_net_add+0x81/0x110 [ 204.286531][ T9438] rxe_newlink+0xf4/0x1c0 [ 204.291901][ T9438] nldev_newlink+0x5bc/0x650 [ 204.297371][ T9438] rdma_nl_rcv+0x6ef/0xa40 [ 204.303105][ T9438] netlink_unicast+0x7bb/0x940 [ 204.308929][ T9438] netlink_sendmsg+0x813/0xb40 [ 204.314407][ T9438] sock_sendmsg_nosec+0x13a/0x180 [ 204.319989][ T9438] ____sys_sendmsg+0x54e/0x850 [ 204.325912][ T9438] ___sys_sendmsg+0x2a5/0x360 [ 204.331215][ T9438] __x64_sys_sendmsg+0x1b1/0x290 [ 204.336674][ T9438] do_syscall_64+0x174/0x580 [ 204.341877][ T9438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.348336][ T9438] [ 204.348336][ T9438] other info that might help us debug this: [ 204.348336][ T9438] [ 204.358918][ T9438] Chain exists of: [ 204.358918][ T9438] fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex [ 204.358918][ T9438] [ 204.372429][ T9438] Possible unsafe locking scenario: [ 204.372429][ T9438] [ 204.380054][ T9438] CPU0 CPU1 [ 204.385631][ T9438] ---- ---- [ 204.391011][ T9438] lock(wq_pool_mutex); [ 204.395839][ T9438] lock(cpu_hotplug_lock); [ 204.403502][ T9438] lock(wq_pool_mutex); [ 204.410716][ T9438] lock(fs_reclaim); [ 204.414793][ T9438] [ 204.414793][ T9438] *** DEADLOCK *** [ 204.414793][ T9438] [ 204.423908][ T9438] 6 locks held by syz.1.835/9438: [ 204.429296][ T9438] #0: ffffffff9ab1b1a8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 204.439567][ T9438] #1: ffffffff8fd8ae28 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x429/0x650 [ 204.449623][ T9438] #2: ffffffff8fd7c308 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 204.460012][ T9438] #3: ffffffff8fd7c608 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 204.470600][ T9438] #4: ffff888020ea0620 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0 [ 204.482496][ T9438] #5: ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 204.492612][ T9438] [ 204.492612][ T9438] stack backtrace: [ 204.498603][ T9438] CPU: 1 UID: 0 PID: 9438 Comm: syz.1.835 Not tainted syzkaller #0 PREEMPT(full) [ 204.498623][ T9438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 204.498638][ T9438] Call Trace: [ 204.498647][ T9438] [ 204.498656][ T9438] dump_stack_lvl+0xe8/0x150 [ 204.498681][ T9438] print_circular_bug+0x2e1/0x300 [ 204.498699][ T9438] check_noncircular+0x12e/0x150 [ 204.498724][ T9438] __lock_acquire+0x1520/0x2cf0 [ 204.498746][ T9438] ? __schedule+0x17ef/0x56c0 [ 204.498768][ T9438] ? clockevents_program_event+0x491/0x630 [ 204.498795][ T9438] ? __kmalloc_noprof+0xbc/0x720 [ 204.498812][ T9438] lock_acquire+0x106/0x350 [ 204.498836][ T9438] ? __kmalloc_noprof+0xbc/0x720 [ 204.498855][ T9438] ? pcpu_alloc_noprof+0xde2/0x1900 [ 204.498874][ T9438] fs_reclaim_acquire+0x71/0x100 [ 204.498897][ T9438] ? __kmalloc_noprof+0xbc/0x720 [ 204.498914][ T9438] __kmalloc_noprof+0xbc/0x720 [ 204.498932][ T9438] ? apply_wqattrs_prepare+0xee/0xdc0 [ 204.498948][ T9438] ? apply_wqattrs_prepare+0xee/0xdc0 [ 204.498966][ T9438] apply_wqattrs_prepare+0xee/0xdc0 [ 204.498982][ T9438] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 204.498999][ T9438] ? pcpu_alloc_noprof+0x100f/0x1900 [ 204.499016][ T9438] ? pcpu_alloc_noprof+0x1036/0x1900 [ 204.499038][ T9438] __alloc_workqueue+0x117c/0x2060 [ 204.499064][ T9438] alloc_workqueue_noprof+0xe3/0x210 [ 204.499087][ T9438] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 204.499108][ T9438] ? __ib_alloc_pd+0x4d6/0x6d0 [ 204.499127][ T9438] ? __ib_alloc_pd+0x171/0x6d0 [ 204.499147][ T9438] ib_mad_init_device+0x993/0x2150 [ 204.499176][ T9438] ? __pfx_ib_mad_init_device+0x10/0x10 [ 204.499192][ T9438] ? do_raw_spin_unlock+0xf5/0x210 [ 204.499208][ T9438] ? _raw_spin_unlock+0x28/0x50 [ 204.499228][ T9438] add_client_context+0x37c/0x7b0 [ 204.499245][ T9438] ? __pfx_add_client_context+0x10/0x10 [ 204.499258][ T9438] ? xa_find+0x25b/0x2b0 [ 204.499276][ T9438] enable_device_and_get+0x19c/0x3e0 [ 204.499298][ T9438] ? __pfx_enable_device_and_get+0x10/0x10 [ 204.499322][ T9438] ? device_add+0x6f6/0xb80 [ 204.499346][ T9438] ib_register_device+0x10af/0x1380 [ 204.499371][ T9438] ? __pfx_ib_register_device+0x10/0x10 [ 204.499396][ T9438] ? xa_load+0x60/0x210 [ 204.499409][ T9438] ? xa_load+0x60/0x210 [ 204.499421][ T9438] ? xa_load+0x60/0x210 [ 204.499434][ T9438] ? xa_load+0x1db/0x210 [ 204.499450][ T9438] ? ib_device_set_netdev+0x5c9/0x6d0 [ 204.499467][ T9438] rxe_register_device+0x1e3/0x350 [ 204.499491][ T9438] rxe_net_add+0x81/0x110 [ 204.499512][ T9438] rxe_newlink+0xf4/0x1c0 [ 204.499531][ T9438] nldev_newlink+0x5bc/0x650 [ 204.499551][ T9438] ? __pfx_nldev_newlink+0x10/0x10 [ 204.499613][ T9438] ? bpf_lsm_capable+0x9/0x20 [ 204.499631][ T9438] ? security_capable+0x7e/0x2c0 [ 204.499659][ T9438] ? __pfx_nldev_newlink+0x10/0x10 [ 204.499678][ T9438] rdma_nl_rcv+0x6ef/0xa40 [ 204.499703][ T9438] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 204.499731][ T9438] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.499745][ T9438] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.499760][ T9438] netlink_unicast+0x7bb/0x940 [ 204.499785][ T9438] netlink_sendmsg+0x813/0xb40 [ 204.499803][ T9438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.499818][ T9438] ? aa_sock_msg_perm+0xf1/0x1b0 [ 204.499834][ T9438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.499848][ T9438] sock_sendmsg_nosec+0x13a/0x180 [ 204.499866][ T9438] ____sys_sendmsg+0x54e/0x850 [ 204.499895][ T9438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.499920][ T9438] ? import_iovec+0x73/0xa0 [ 204.499941][ T9438] ___sys_sendmsg+0x2a5/0x360 [ 204.499962][ T9438] ? __lock_acquire+0x683/0x2cf0 [ 204.499983][ T9438] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.500006][ T9438] ? futex_wake+0x51b/0x5f0 [ 204.500032][ T9438] ? __fget_files+0x2a/0x420 [ 204.500051][ T9438] ? __fget_files+0x3a2/0x420 [ 204.500072][ T9438] __x64_sys_sendmsg+0x1b1/0x290 [ 204.500095][ T9438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.500124][ T9438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.500140][ T9438] do_syscall_64+0x174/0x580 [ 204.500161][ T9438] ? trace_irq_disable+0x3b/0x140 [ 204.500179][ T9438] ? clear_bhb_loop+0x40/0x90 [ 204.500196][ T9438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.500211][ T9438] RIP: 0033:0x7f8013f9de59 [ 204.500231][ T9438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.500244][ T9438] RSP: 002b:00007f8014d82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.500260][ T9438] RAX: ffffffffffffffda RBX: 00007f8014225fa0 RCX: 00007f8013f9de59 [ 204.500271][ T9438] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 000000000000000d [ 204.500281][ T9438] RBP: 00007f8014033e6f R08: 0000000000000000 R09: 0000000000000000 [ 204.500290][ T9438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.500299][ T9438] R13: 00007f8014226038 R14: 00007f8014225fa0 R15: 00007ffc03c3f938 [ 204.500316][ T9438] [ 205.103095][ T9462] team0: Port device xfrm0 removed [ 205.125879][ T9462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 205.130630][ T9438] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 205.158091][ T5737] wlan1 speed is unknown, defaulting to 1000 [ 205.164321][ T9438] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 205.183161][ T9438] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 205.207461][ T9438] RDS/IB: syz1: added [ 205.211956][ T9438] smc: adding ib device syz1 with port count 1 [ 205.219335][ T9438] smc: ib device syz1 port 1 has no pnetid [ 205.226994][ T5737] wlan1 speed is unknown, defaulting to 1000 [ 205.233880][ T9438] wlan1 speed is unknown, defaulting to 1000 [ 205.340441][ T9438] wlan1 speed is unknown, defaulting to 1000 [ 205.403928][ T9438] wlan1 speed is unknown, defaulting to 1000 [ 205.460752][ T9438] wlan1 speed is unknown, defaulting to 1000 [ 205.476878][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.526553][ T9438] wlan1 speed is unknown, defaulting to 1000 [ 207.157073][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 207.157119][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 207.163349][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 212.596877][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!