last executing test programs: 45.026978247s ago: executing program 4 (id=399): getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xb377}, &(0x7f00000000c0)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x615a}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={r0, 0xc74}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0xee, @private0, 0xffff0001}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x80, @multicast1}, @in6={0xa, 0x4e20, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, @in6={0xa, 0x4e22, 0xbf, @empty, 0x1}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}], 0xb4) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16=r3], 0x84}, 0x1, 0x0, 0x0, 0xc4}, 0x8800) 44.877435253s ago: executing program 4 (id=401): syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0066a6", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x9, 0x0, 0x7}}}}}}}, 0x0) 44.682571369s ago: executing program 4 (id=402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0xf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0xf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="bad330fbc9b55400041900ea0756", 0xe, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) socket$pptp(0x18, 0x1, 0x2) (async) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$F2FS_IOC_SEC_TRIM_FILE(r7, 0x4018f514, &(0x7f0000000000)={0xffffffff, 0x4, 0x3}) 44.308724042s ago: executing program 4 (id=408): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffc, @empty, 0xe79}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0904000000000000000002000000780004803c0001800e000100696d6d656469617465000000280002801c0002801800028008000180fffffffb0900020073797a32000000000800014000000000380001800c000100636f756e74657200280002800c00014000000000000000090c00024000000000000000090c000140fffffffffffffffb0900010073797a30000000000900020073797a310000000014000000180a0108000000000000000002000008140000001100010000000000000000000500001a"], 0xe0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0x80, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x2}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x2}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048000}, 0x4008000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xfffffffffffffdb1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x812, 0x0, 0x1c, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x21, 0x8, 0x0, 0x0}}, 0x10) 44.153050891s ago: executing program 4 (id=410): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x7ffffffe, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e21, 0x3, @remote}}}, 0x32) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000240)=[{0x30, 0x4, 0x53, 0xfffff038}, {0x6, 0xa, 0x6, 0x147c97ea}]}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b500000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 44.011675386s ago: executing program 4 (id=413): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x320, 0x320, 0x3f0, 0xffffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000, 0x0, 0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) (async) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000080)='FROZEN\x00', 0x7) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0800000004000000040000000200010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000075a2e57bc1bb266ed410fe0000000080800100000000000000"], 0x50) (async) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), 0xffffffffffffffff) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) (async) connect$pptp(r9, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000340)=0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000"], &(0x7f0000000680)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @sk_msg}, 0x94) (async) socket(0x28, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000580), &(0x7f0000000080)}, 0x20) close(0x4) (async) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000003918ce11923ef40183c588cb2", @ANYRES16=r8, @ANYBLOB="000126bd7000fddbdf250200000008000200020000000800030009000000040004000800020007000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x8c}}, 0x24) (async) socket$inet_udp(0x2, 0x2, 0x0) 28.898494327s ago: executing program 32 (id=413): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x320, 0x320, 0x3f0, 0xffffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000, 0x0, 0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) (async) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000080)='FROZEN\x00', 0x7) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0800000004000000040000000200010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000075a2e57bc1bb266ed410fe0000000080800100000000000000"], 0x50) (async) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), 0xffffffffffffffff) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) (async) connect$pptp(r9, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000340)=0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000"], &(0x7f0000000680)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @sk_msg}, 0x94) (async) socket(0x28, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000580), &(0x7f0000000080)}, 0x20) close(0x4) (async) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000003918ce11923ef40183c588cb2", @ANYRES16=r8, @ANYBLOB="000126bd7000fddbdf250200000008000200020000000800030009000000040004000800020007000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x8c}}, 0x24) (async) socket$inet_udp(0x2, 0x2, 0x0) 4.286352s ago: executing program 1 (id=760): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x404c000}, 0x44004) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.715461531s ago: executing program 1 (id=769): unshare(0x4030400) r0 = gettid() r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') unshare(0x2020000) close(r1) 3.598961457s ago: executing program 1 (id=771): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) (async) unshare(0x22020400) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) shutdown(r3, 0x1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000076000d0b20000000fcdbdf25030000000000000008000500", @ANYRES32=0x0, @ANYBLOB="32b64b1c3195db7f0b9845c6e466cf9a39afd95f56a01b9604bfe3f7eb9cec0f019615bf024f07e3cff675ab28f288bf9adba94e2e51d05ebf72251bdd00ac39305a7371f6bba87ee02310804abce03c279ffd0a29c3be92a0123de418b28a341dd06c1c63dbdd59f2ddbdf9ed5d052a83248c1cfe9f5b39d9743a924e00797bdd997b7c0308b34f5cfe629ed03e1de00cd6e6ba3345f3792e21c734e957ff4a9c098deed8e884f89f18e656ab4093bf6c22f67d6eda5ca928fd055b5ca2d6cdbbdc17fa93d3301011b7a3882e8c94f3db103e7690f83375ecbf89fc3ec47b085047d14d4882"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r5, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) write(r3, 0x0, 0x0) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r6, 0x0, 0x0, 0x40010000, &(0x7f0000002b80)={0x0, 0x3938700}) socket$tipc(0x1e, 0x5, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004885}, 0x4) 3.598666061s ago: executing program 0 (id=772): r0 = socket$kcm(0x1e, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)={0x5e, 0x21, '\x00', [@ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x10000}, @generic={0x3, 0x1, "d9"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x8, 0xe9, "5dfb7f664f7bfe1c0ee7e15675b8951f163dc9115b4966360fb7f296012dd3a44d9191eda13ec1431d7394b460180eb037e46749e17dd6f027c068620a04f44d50f6920b5c3f2273085771907ae4d71101d6e31756b565c58f315136b695963d1d13d007f86b675419b6f2a68f960241e7579020fa267cfac88bce6854e45cd286009d4ec4cf8c208297fcf177d5a113ce046e988e28a74361ed322327cc0dc5624c96cd2b035d46c9b52979c541af65f30fa151bf00375ef2e53c8fbb9c2bfd3342f4492fe1c162d35a7acac9800bd2e5fca78184808724ec40e17891131794a88ce0237a5a2e3bd4"}]}, 0x118) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) close(r0) 3.387210817s ago: executing program 1 (id=775): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/cgroup\x00') syz_open_procfs$namespace(r1, &(0x7f0000000040)) (async) r8 = syz_open_procfs$namespace(r1, &(0x7f0000000040)) mkdirat$cgroup(r8, &(0x7f0000000000)='syz0\x00', 0x1ff) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000100)={'netdevsim0\x00', @ifru_mtu}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x11, &(0x7f0000000040)=@raw=[@exit, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x6b, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xe, 0xa, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000240)=[{0x2, 0x2, 0x3, 0x7}, {0x1, 0x3, 0x3, 0xc}, {0x3, 0x3, 0x2, 0x8}, {0x4, 0x5, 0x6, 0x5}, {0x1, 0x4, 0x10, 0x1}, {0x5, 0x5, 0x5, 0x6}, {0x0, 0x5, 0xa, 0x4}, {0x1, 0x4, 0xa, 0xa}, {0x5, 0x1, 0xa, 0xb}], 0x10, 0x7}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x11, &(0x7f0000000040)=@raw=[@exit, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x6b, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xe, 0xa, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000240)=[{0x2, 0x2, 0x3, 0x7}, {0x1, 0x3, 0x3, 0xc}, {0x3, 0x3, 0x2, 0x8}, {0x4, 0x5, 0x6, 0x5}, {0x1, 0x4, 0x10, 0x1}, {0x5, 0x5, 0x5, 0x6}, {0x0, 0x5, 0xa, 0x4}, {0x1, 0x4, 0xa, 0xa}, {0x5, 0x1, 0xa, 0xb}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x45, 0xab, &(0x7f00000003c0)="834962a163c2778aed8221e9ff41c32b70a89572d80a17dd4d122684916df69a6286ed58974593d6c9d3b2aed29789fc4f76ec3606f4da549563c8b368f4ee3db75e4b8d7e", &(0x7f0000000440)=""/171, 0x800, 0x0, 0xb2, 0x5d, &(0x7f0000000500)="70c87c3c24e75ce0857f8b0a88ca54b5fee72d74ca46c3326741e917b0fe51ecd18ca7b0588d03a1e801969afa4bbc7666a9ee2ecb2f81f23372f4dadff06e5272423b3b5e5b7f8205384013eddb0a96bd7b32972f73fd9929b9feb20cedbc4703a6282a87faf6cced88c937d2da48af23ea45304730cac2204495e63ecca1027b77def7c47b58ec70c5f918e0077d9b79fe6cefbd413a3eca4e1ed54f3a87af574ecb25e5e3686fbac133a659342bc8fe05", &(0x7f00000005c0)="8ed2764e27f012fa056efaf5ce063e4772ae3e2432e26768060969736aeffb804df5ece92ff26b572a2819419c7fbd8efb726d40b6464319a490e5f9561d2521e2cad05d66c58e78436255433d0defcdd37daf31eac570232e09fec8bc", 0x7, 0x0, 0x5}, 0x50) 3.37111703s ago: executing program 0 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000002404b56c37287526fe2f8f86b7bcfa90f04663a231e677053d391f91dc2be28486a7866de56b1178ad590a3cda0b2f3bd5f1ac8d777740e0b314c9b777d748f8bf2cb84e4cca2f14e8c692957452e7677ad90436a9abdc09db30502dfbe398ad3518f6e52ce0a2be0057e920", @ANYRES16=r4, @ANYBLOB="010000000000000000000400000005000400e00000011400060076657468315f746f5f7465616d00000005000500e0000001"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x400480, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000506000000000000000000000c"], 0x0, 0x32, 0x0, 0xa, 0x7ff}, 0x28) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000004", @ANYRES32=0x0, @ANYBLOB="04000d800800010002"], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffff, 0xe}, {0xfff0, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x0, 0xffffffff, 0x7ffffffb, 0x7, 0x4, 0xba, 0x401, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4800) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@delqdisc={0x228, 0x25, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8, 0x5}, {0xfff1, 0xffff}, {0xd, 0xffff}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0x80, 0x1, 0x1, 0x2, 0xfb, 0x1}}, {0x6, 0x2, [0x9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x39}, @TCA_STAB={0x128, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x9, 0x8234, 0x5, 0x2, 0x7, 0xbc5, 0x2}}, {0x8, 0x2, [0x0, 0xcb5]}}, {{0x1c, 0x1, {0x0, 0x2, 0x401, 0xff, 0x2, 0x2, 0x3, 0x7}}, {0x12, 0x2, [0x8001, 0x2, 0x0, 0x4, 0x57, 0x1ff, 0x790b]}}, {{0x1c, 0x1, {0xe5, 0x2, 0x4, 0x3, 0x0, 0x4, 0x2, 0x1}}, {0x6, 0x2, [0x70]}}, {{0x1c, 0x1, {0x3, 0x3, 0x7, 0x48f, 0x2, 0x2, 0x684, 0x3}}, {0xa, 0x2, [0xd, 0x0, 0x1ff]}}, {{0x1c, 0x1, {0xc, 0x0, 0xfff, 0x0, 0x1, 0x3, 0x8a0, 0x5}}, {0xe, 0x2, [0x1, 0x9, 0x80, 0xc3, 0x8000]}}, {{0x1c, 0x1, {0x8, 0x6, 0x2, 0x8c, 0x1, 0x2, 0x6, 0x8}}, {0x14, 0x2, [0x5, 0x6, 0x4, 0x4, 0x81, 0x9, 0x2, 0x3]}}, {{0x1c, 0x1, {0xb, 0xf8, 0x8, 0x8, 0x2, 0x1, 0x3, 0x4}}, {0xc, 0x2, [0x8, 0x2, 0xfdff, 0x0]}}]}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd5, 0x10, 0x11f1, 0x3, 0x1, 0x0, 0x3, 0x5}}, {0xe, 0x2, [0x7a8, 0x6b90, 0x6a, 0x1, 0x5]}}, {{0x1c, 0x1, {0x8, 0x9, 0x1, 0x1ff, 0x1, 0x6, 0xfffffffd, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0x6, 0x7, 0xfff, 0x0, 0x1, 0x4, 0xbd, 0x6}}, {0x10, 0x2, [0x4, 0x1, 0x8, 0x5, 0x5, 0xe]}}, {{0x1c, 0x1, {0x9, 0xd, 0x187, 0x7, 0x2, 0x2, 0x1, 0x1}}, {0x6, 0x2, [0x3]}}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r11, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r12, &(0x7f0000000080)='memory.swap.max\x00', 0x2, 0x0) recvfrom$inet(r11, &(0x7f0000000080)=""/8, 0x8, 0x740, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000001c0)=0x1c, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.005039233s ago: executing program 1 (id=784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = socket(0x23, 0x5, 0x0) listen(r2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x89ed, 0x0) socket(0x8, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d6174636800000024000280080003000100000008000240000000000e000100636f6e6e6c6162656c0000000900010073797a3000"], 0xd4}}, 0x0) 2.360571261s ago: executing program 0 (id=791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101a00, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x1c, r3, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}}, 0x4000000) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x7fff}, &(0x7f00000001c0)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000980), &(0x7f00000009c0)=0x4) close(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r6) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x50, r8, 0x406, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5768}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7, 0x3, 0x6361, 0x0, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1000000000000006, 0xfada, 0x7, 0x80000001, 0x800000000000007, 0x80}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xfff2, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x300, 0x8, 0x4, 0x2}, 0x1, 0x1, 0xc1, 0x8, 0xc, 0x12, 0x1a, 0x15, 0x3, 0x7, {0x87, 0x1, 0xdda, 0x3, 0x9, 0x7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x24, &(0x7f00000005c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe6c1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000480)='GPL\x00', 0xe0, 0xf0, &(0x7f0000000700)=""/240, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xd, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0xffffffffffffffff], &(0x7f0000000800)=[{0x2, 0x2, 0x1, 0x8}, {0x3, 0x3}, {0x5, 0x1, 0x10, 0x9}, {0x2, 0x3, 0x1, 0x4}, {0xffffffff, 0x4, 0xb, 0x4}, {0x4, 0x3, 0xd, 0xa}, {0x1, 0x4, 0x2, 0x9}], 0x10, 0xf01}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r11, r9, 0x25, 0x6, @void}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f00000000c0)="80", 0x1, 0x48d4, &(0x7f00000001c0)={0x11, 0x8, r12, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.927012764s ago: executing program 3 (id=794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8c00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000540)=0x460) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.598512035s ago: executing program 3 (id=795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.575725661s ago: executing program 2 (id=797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008011}, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfee4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) listen(r4, 0x46) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$sock_ifreq(r3, 0x8970, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_settings={0x80000000, 0x100009, @sync=0x0}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008011}, 0x1) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfee4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) listen(r4, 0x46) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) ioctl$sock_ifreq(r3, 0x8970, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_settings={0x80000000, 0x100009, @sync=0x0}}) (async) 1.471159076s ago: executing program 0 (id=798): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xa, 0x0, 0x1, [0x86, 0x3]}]}}}], 0x20}}], 0x1, 0x40004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x2, {0x0, 0x0, 0x4, 0x0, 0x0, 0x30}}, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}]}, 0x4c}}, 0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0x434, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x1e4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8423}, @TIPC_NLA_NODE_ID={0xb2, 0x3, "6f504d912aa1d2afa533ece1f099bbbc0ca083b26f2c8c5a9a60e748b7ccfe39ea1357b9729853fd293c5d7b8df32591f2d55020c65c50d72c56ac9af35e48727d23be9ac36da2195332ba6202bb69c7939526982ae3bc24026b0bd9952bb77bb089d532c9ca7970e1c89aee347ba9129ab9e2417738f6d4594b827dc6d243432ca82bb305324b559c6c9338af45444b379382e81516605d31d8252833ba3c1acf6fe984742aeeb839def95349e4"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "c452f6ba10054f484f517856b5e66a4302ff6da30cf335849d9704"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "9109740c425d105bb8008b35eb4a0041d18b449780df06adb5d0d0849100f9267d08f1f4a89969943be6703f06d94cb18177c4ca7be8beab76da7212fba990fde456a067de13e7a5939b1596bb049571a4ae0c82d375a7e7784d8712ca9b148f7b512ee04b1dda7fd138ebf7dc06a95f7b3371c697d6edcbeab37c3756f6f99f894e99a07397b2d1f5ac56347a632f2d88131b1ee20f2ba94ea482dd3d11e08479ae6ca7fabf18d208d38120cc1d289a565b3b87fab98b0fd544dfb346615c"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbc1d}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "1b69d082e07b6783771f8e19131172a0ff7fb214c6a5d7e4faae77963c6c1a9404"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "25e1e3472d6508996f5a413d9895426e2649a90c3fdf"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x20}, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd2}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x34c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x15e}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}]}]}, 0x434}}, 0x40001) 1.402200353s ago: executing program 2 (id=799): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="6b8ed4bf9cb7cdd25a411cb42161697230d7729f81ccc0dd9a2e035a33725aaf1129bed869de6346de19ba8d4ec8b94e22fb31e94a113b68b64e459acb1b730fac030eb9b889ba9e6da56547413e6f022079ad087b0cd47580ba9ca679c62759d1fb53301febb1c97a9b217e66310e00ba84a4a0efb2345a5ed6ad1b3bf6c9f0eedc356239ca47ea7b95e627b56b4245842033", 0x93}, {&(0x7f0000002100)="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", 0xfa}, {&(0x7f0000000800)="9dcb46420e2e457e32c7d049b2b74fecd4aa64ebd854b837c4ad24896de56b2c3c7d0a5062e4321e6ca92bde3b0b9f8b8c8d8ea629a1f9ead5cac19bb2aa1a2fef266c18133c68a8ccf8f36e5f6732e2ec6d6c33c44d9b0cbc66869636f7fab2ae7144ceb8d2cdc376a3f922bdfa94b97d5a5f87b43a0b75a6ff0902b912d7829aece791cf556f60852eb1eb6ac82f21", 0x90}], 0x3, &(0x7f0000002200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@cipso={0x86, 0x69, 0x3, [{0x1, 0x11, "c90e339bdeaf831f7da0031df00e3d"}, {0x1, 0xb, "32b9773983dc0b72e9"}, {0x7, 0x3, "93"}, {0x4, 0xa, "4c272fd4cafe05b0"}, {0x1, 0x5, '@z>'}, {0x7, 0x12, "cc94b18a8fe07c68ba6d5793a9238f5d"}, {0x2, 0xf, "e0e75c7c729ceaf3cbc73d96f4"}, {0x0, 0xd, "fbf6c5905cff1c0df7bfb0"}, {0x0, 0x7, "ea031e321d"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x63}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x7a, [@broadcast, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x1c0}}, {{&(0x7f0000000bc0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002400)=[{&(0x7f0000000c00)="24f32b038c901f7d47aefc7c85d92756572e82edf0416c6f0e45d235d02bd3afa1ef51ab7b5fc9be9cae284cba2d15323987dd5718974a3c19f3ae0099aa0dbfcee0cdd05a32440ae666b106db17de39904216fb0fe7ab3ce4879a4f083be2542273ab11343a89edb036ad2d", 0x6c}, {&(0x7f00000023c0)="7c2a89bd818a732079e45fdddba8f23b3e561d3d81", 0x15}], 0x2, &(0x7f0000002440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xaf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x79, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@loopback, 0xc}]}, @lsrr={0x83, 0xb, 0xb3, [@multicast2, @remote]}, @timestamp_addr={0x44, 0x14, 0xf2, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x6}]}, @lsrr={0x83, 0x7, 0x3a, [@multicast2]}, @noop, @cipso={0x86, 0x3c, 0x1, [{0x2, 0xb, "cd0c885f2e300b07dd"}, {0x1, 0x10, "5069a3cd92ac301866e7c68d02ec"}, {0x0, 0xc, "3fc8c18b833b766dac14"}, {0x5, 0x2}, {0x6, 0x6, "7616c8d7"}, {0x2, 0x7, "bf338b6292"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x18}}], 0xd0}}, {{&(0x7f0000002540)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000002580)="ebf32fae1b5f0aa0aeb65a2dc5", 0xd}, {&(0x7f00000025c0)="24284f717b4697b5413a008481bb588eff92f55a7073cd5596bcaafcf5777a04c5a9e5b89657faff4555b5538b8eb4ef64604d571faf11d7f2d67d20dfae23296205989543a0bf8e4c8358c36661395dd7f192317af6a5b8664fa9f5ea899e2ffb5a477f874dd3ce15b1dac833eb49114058667feb7e19abab03a87b6e2faa0312c33cadbfc1b834b66d98cef0a2c02dcdff43461c98a366633677910770d98ae89f90ff750dc254", 0xa8}, {&(0x7f0000002680)="1810f1450003f940c95f9e240bcd1210f9d8052433c7ca68960af7e2ef1adf1e68b60c90204f789dd8ee3bbceab5d7db0965d79ab1d7ac55e426b6651ee77fb7f65bc0d0431dd755fe6bf3b96b4ae8195ad1f677d438bfa3d09e6d0a85ff7774f6dcede7c6d6395b89f9599daf4d8b7619772fbbf2380c51c33a3e432787dac69162a67e561ba3e376fbad5309e6f0929adb25debc2b47b470cbcac046117cc32d568ddb86e87881c21e01224a016cfc3c23433ce1501230e84fb77747a368ab2ed13f18db7d644802d1d2c9d90d4dd5dec1837912a2aa6239548299b0ead903e00ea740a814176b17de6fa63e02797d", 0xf0}, {&(0x7f0000002780)="b31869e93f725dc1803176645d42475963c946c6c8cb95340c03563e8bb1b6e9c3f012b7fa5e6d010cf5bbc659ed21542b0081c56f38a916f50f3473739709f2120541cb221bd56096955f83e363689307a6b9b5d0fb8cf6eddb9537e85ac4ee6c015b83bf1c8b6e", 0x68}, {&(0x7f0000002800)}, {&(0x7f0000002840)="e7f1353f96c343df470c191f3afb8c59c25fe03287b4d32b7bacd0b4772450f1f553e2bcdaf840dd26cd95a36135878ae520eb2e55c2df544276b5cfb3327cb6dcde32c9b05af5d0cfd56b6efc6baa88c8623600af38eafd08b5b7638402f17df87cd23b74456da15c", 0x69}, {&(0x7f00000028c0)="034d64a0a64b44dd85631ddf5acc", 0xe}, {&(0x7f0000002900)="c2a0606c7673de73f00182e966598c8767fae38f32d1a2aeadacaeb79efdf3c15a3de334d4c68a0afb1bb969027ae6", 0x2f}, {&(0x7f0000002940)="47cce5885f238e455019690321b43106be9d00fb03497836e6dc87adb7f86341c81ccb573dc4bd722ff9614aac7ccc42643ac920df0584123eb379c7f9cbd714ebd4421ef04649b445084f4a959f8550f94c09ef70fb9c4d1e", 0x59}, {&(0x7f00000029c0)="ade5d1dd956f0b24fd09fe5a4dd72afb34ff59634366538030aa258cc2663797858b532eb5c89005ba6930dd67938bec7c22192ce34bb6640905abc04b47fce200b7cc8c4ead53b36b88532b943dda5b6ae671628675af290c390ac1e357a66504effb1b68acb46f0b48c509a8dfa04393e8c9dec74724a25f", 0x79}], 0xa, &(0x7f0000002b00)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0xce}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x30}}], 0x3, 0x4000000) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000480)='4vpvP', 0x5}], 0x1}}], 0x1, 0x4040094) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f00000031c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000009c0)="cec7d6d7aa", 0x5}], 0x1}}], 0x1, 0x8c0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x1, 0x0, 0x4, r6, 0xfff}, 0xc) (async) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000280)={0x77359400}, 0x10) (async) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x200440c4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2}, 0x8) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) (async) close(r7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000a00)=@newtaction={0x184, 0x30, 0x9, 0x70bd2d, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x140, 0x1, [@m_simple={0x13c, 0xa, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x58, 0x3, '\\\'%+!$^(\\/@\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffe, 0x3, 0x10000000, 0x1a4d}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x3ff, 0xffffffffffffffff, 0xa100000, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x10, 0x20000000, 0x6, 0xe}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd, 0x1, 0xffffffffffffffff, 0x7, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff8, 0x0, 0x8, 0x4, 0x90}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x3, 0x10000004, 0x8000, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5fa, 0x7, 0x10000000, 0x9, 0x100}}, @TCA_DEF_PARMS={0x18, 0x2, {0x200, 0xfff, 0x6, 0x6, 0x80000001}}]}, {0x37, 0x6, "b4b63f46dea806c882deb89ac72a48d7e16639e94a4315111855a84ca0a0609336197ef335e266c79c3a7d03bb0c12bb874c57"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x184}}, 0x4000800) (async) getsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f00000000c0)=0xc, &(0x7f0000000100)=0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x40, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000006110280000000000d400000000009500000c000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000d0aaa00000000000001000006"], &(0x7f0000000f40)=""/4089, 0x3c, 0xff9, 0x1, 0xfffffffa}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000001f40)=ANY=[@ANYBLOB="180000008f080000000000000500000018110000", @ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 1.310555316s ago: executing program 5 (id=800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004f0001002ae5104822ce021348d4"], 0x14}}, 0x20008040) accept4$unix(r3, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.310301661s ago: executing program 3 (id=801): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000540)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 1.301959703s ago: executing program 0 (id=802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) close(r2) (async) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x10}], 0x1, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r5) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x5, 0x8000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.236443851s ago: executing program 2 (id=803): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x0) 1.106693085s ago: executing program 3 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x830}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x8}, 0x3c) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.104409706s ago: executing program 5 (id=805): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000001c0)={r0, r0, 0x7, 0x0, 0x0, 0x7, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 'syz0\x00'}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000001c0)={r0, r0, 0x7, 0x0, 0x0, 0x7, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 'syz0\x00'}) (async) 756.432682ms ago: executing program 3 (id=806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x1e, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f00000002c0), 0x0, 0x40000100, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xffff}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 581.635774ms ago: executing program 5 (id=807): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r3, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="ee619d8a73c26bf3b585bfee56570c3b11c6b1ca1389", 0x16}], 0x1, 0x0, 0x0, 0x4044040}}], 0x1, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000040), 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0xfa, 0x9, 0xfffffff8, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x80, 0x0, 0x0, 0x5}}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) preadv(r6, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1a, 0xef, 0x2, 0xb5c3, 0x0, r4, 0x12ac, '\x00', 0x0, r1, 0x1, 0x1, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 458.454715ms ago: executing program 3 (id=808): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x1, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r3], 0x44}}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r6, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) unshare(0x6a040000) r7 = socket(0x1d, 0x3, 0x1) sendto$isdn(r7, &(0x7f0000000140)={0x2, 0x800, "c3e64f8716"}, 0xd, 0x20004801, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 433.464039ms ago: executing program 2 (id=809): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14, 0x3ec}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0xd4, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}], {0x14, 0x3f8, 0x1, 0x0, 0x0, {0x3}}}, 0x16c}, 0x1, 0x0, 0x0, 0x20000811}, 0x20000010) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14, 0x3ec}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0xd4, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}], {0x14, 0x3f8, 0x1, 0x0, 0x0, {0x3}}}, 0x16c}, 0x1, 0x0, 0x0, 0x20000811}, 0x20000010) 421.732571ms ago: executing program 5 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4'], 0x34}}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xffffffff, 0x4, 0x6}, &(0x7f0000000100)=0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d000000000000a000128014000100687372001400a7a92ebc7caff96a02800800bc9c910200f1c485bee2628c5cdc1f191ef4a5bcf92d2eedb892c353ed4a34ceaee1cde42c81a007dece0c86b427baec243323ca642820fc8a4b77a1597b2a0ea8ceb15490a270f24384fb6b33aba31461391c7c2ab54e64f42af5a8a5818087d32046b33a8ef84cdbba3322e60000000000000000e0a68989fd8b965a5e07000000000000008c3037542650ee", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 326.639228ms ago: executing program 1 (id=811): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x60, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x60}}, 0x20000000) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x60, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x60}}, 0x20000000) 293.707854ms ago: executing program 5 (id=812): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x5) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x100) sendmsg$sock(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x4e24, 0x3, 'lblcr\x00', 0x24, 0x0, 0x79}, 0x2c) (async) socket(0x2, 0x80805, 0x0) (async, rerun: 64) r7 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0xb}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e26, 0x3, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000100), 0x4) (async) unshare(0x20000400) 222.612477ms ago: executing program 2 (id=813): r0 = getpid() getpid() syz_open_procfs$namespace(r0, &(0x7f00000011c0)='ns/user\x00') 98.605289ms ago: executing program 2 (id=814): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x91, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xffff, '\x00', 0x0, r1, 0x2, 0x4, 0x5}, 0x50) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipmr_newroute={0x78, 0x18, 0x100, 0x70bd2d, 0x25dfdbfc, {0x80, 0x20, 0x80, 0x9, 0xfc, 0x4, 0xc8, 0x9, 0x800}, [@RTA_PREFSRC={0x8, 0x7, @private=0xa010101}, @RTA_DST={0x8, 0x1, @local}, @RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_MARK={0x8, 0x10, 0xf}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x8}}, @RTA_PREFSRC={0x8, 0x7, @multicast1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @loopback}}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010100}, @RTA_GATEWAY={0x8, 0x5, @local}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000300)=0x7) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0xea, 0x5, 0xc, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x1, 0x1, 0xdf8}}) ioctl$XFS_IOC_FSGEOMETRY_V1(r2, 0x80705864, &(0x7f0000000400)) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000480)={'erspan0\x00', 0x4000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000b40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELSET={0x310, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xbd25}, @NFTA_SET_EXPRESSIONS={0x2b4, 0x12, 0x0, 0x1, [{0x290, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x280, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x274, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x24, 0x1, "dd83dc8759a498a2cd6a46a8775400f39e6df8cb8c1124faddd9ff7f77550d36"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "c3554c6de8036664b3ebc011bed83f10fd0936a8b5a6d2065892f447c75d140ce7da25b3f2f177a77e9d2ceccbe34d9f6ca410aa6140ae3069838bac383dc32d2b093880011e199f87906bd2bca502845150f7f047e1be4fab92ac741c30e10900abe793d1c207b236abe6287561aa813605ce2cdeb4db2f5c5d7dca882ab7e1c7cfa5e22779da2bd50c32ac6721ac7bceaf8f78216f573b99725b9e3940d42e867501c74a1efd4db0a84b50a574cec903245ea09aac4ef8604409d36f5cd8ac"}, @NFTA_DATA_VALUE={0xb6, 0x1, "22771bddf67bcae444f879909b3bb9103850e2b0d3dceb4fb9a249fd2beddb4260e1f3386ea0e07b534341aa8a68a71c026df2b6013b3028708a875355b4ff22c5e1c3a9a784087d807f8e17ab74e18c3da621db39eca10ae3e6d5f1b7d0826f5f6c176bdc514a5e5a37e1d55c8b1c29b9c40f58a83f96ce5ec336c65dc50a65f57a8ba6745501142338f7f34a338a675992c0d458c9e3ea08c41438f1d2f80a81f39f914378c2c8fa2163f82112dc15352b"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xba}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x50000000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x110, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xd0, 0x6, "7c99f316530d795b9da5008ed80a0dd94e52f8d4e68d44613337f0cb0d7e81e516a123fa05cd4ae1a778cb11da8694d80ad6d6d5e2fc89ab140354bcb3c9ac08f4cd8f01b5d72b468b76336bec6fc3392c648562d1f55c5c308693148b9ed028778c31fddfc3673c30073fd660f85282998a14896329eb75c5618c145e8f45558f57d15b23a1fb6dde69a207f89df2d6221e19cc414a8db266dea67f76bfd3d9b7059eeeecc725f93e68571941d8da77833ebccd093cd0be25f141db17526559dca9f1f570e0735e91cc2781"}]}, @NFT_MSG_NEWOBJ={0x50, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x3c, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @NFT_MSG_NEWTABLE={0x94, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_USERDATA={0x5f, 0x6, "3ebc19cb0c71ec9fc32c53377b35f150f06badf693e3193a4187be5ac54090e697df26d560f7990c6194f61218b539353b893276f23ccb44628435ec5b4bfd51da97b8937ab82e97f1a00475becb31f318ec8e408591189857c505"}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x82) r7 = socket(0x29, 0x3, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r6) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r8, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x63}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x42}, 0x4002000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r2, 0xffffffffffffffff}, 0x4) r10 = accept4(r7, 0x0, &(0x7f0000000d00), 0x800) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x1, &(0x7f0000000d80)=@raw=[@call={0x85, 0x0, 0x0, 0x96}], &(0x7f0000000dc0)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000e00)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0x4, 0x957, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[r9, r9, r9, r9, r0], 0x0, 0x10, 0xfffffffe}, 0x94) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000fc0)=@generic={&(0x7f0000000f80)='./file0\x00'}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x7, 0x13, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000010c0)='GPL\x00', 0x3, 0x3, &(0x7f0000001100)=""/3, 0x40f00, 0x24, '\x00', r5, @fallback=0x19, r1, 0x8, &(0x7f0000001140)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x1, 0xc, 0x2d, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f00000011c0)=[r9, r9, r0, r0], &(0x7f0000001200)=[{0x1, 0x3, 0xf, 0x9}, {0x2, 0x2, 0x0, 0x7}, {0x4ddc, 0x2, 0xf, 0x7}, {0x2, 0x2, 0xc, 0x1}, {0x1, 0x5, 0xe}, {0x3, 0x2, 0x3, 0x4}, {0x1, 0x4, 0x2, 0x7}, {0x3, 0x4, 0x0, 0x6}, {0x4, 0x4, 0x3, 0x8}], 0x10, 0x10001}, 0x94) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_lsm={0x1d, 0xf, &(0x7f0000001380)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}], &(0x7f0000001400)='GPL\x00', 0x81, 0xeb, &(0x7f0000001440)=""/235, 0x41000, 0x7, '\x00', r5, 0x1b, r1, 0x8, &(0x7f0000001540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001580)={0x5, 0x1, 0x80000000, 0xc}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000015c0)=[r9, r0, r0], &(0x7f0000001600)=[{0x1, 0x1, 0x8, 0xd398f8f20715951}, {0x2, 0x4, 0xa, 0x1}, {0x4, 0x1, 0x4, 0x4}], 0x10, 0x80}, 0x94) sendmsg$nl_route(r10, &(0x7f0000001840)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)=@newlinkprop={0xd8, 0x6c, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x4402, 0x1400}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_PHYS_SWITCH_ID={0xa, 0x24, "740e00771a0b"}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2120}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r11}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r12}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x8, 0x1, r13}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r14}]}, @IFLA_IFALIASn={0x4}, @IFLA_PORT_SELF={0x54, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "2281bff8e9922e1fa7a1dd5694870b2a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7d697c9a316a187c334424a0dd6cdf93"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6gre0\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "477ff6b5dbccbc6ce2a40e753d751683"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000051) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'nr0\x00'}) r15 = openat$cgroup_procs(r11, &(0x7f00000018c0)='cgroup.procs\x00', 0x2, 0x0) r16 = getpid() write$cgroup_pid(r15, &(0x7f0000001900)=r16, 0x12) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000001940)='bic', 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001a80)={@ifindex=r5, 0x2b, 0x1, 0x7, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000019c0)=[0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001ac0)={@fallback, r11, 0x1f, 0x24, 0x0, @void, @void, @void, @value, r17}, 0x20) 21.675592ms ago: executing program 0 (id=815): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) unshare(0xa020480) unshare(0x42000000) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x1}}, 0xfffffffffffffed4) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000305c0ab0e455f5a8e00080002400000000038000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000004000380080007400400"], 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x31) close(r1) 0s ago: executing program 5 (id=816): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) close(0x3) (async, rerun: 32) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000b00)="0527b8a6c9cc3f", 0x7}], 0x1) (rerun: 32) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 65.099354][ T5806] cgroup: Unknown subsys name 'net' [ 65.229834][ T5806] cgroup: Unknown subsys name 'cpuset' [ 65.238139][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.549139][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.413224][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.428110][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.446299][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.454328][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.455400][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.462260][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.470371][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.476590][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.490323][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.492118][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.498581][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.504862][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.519031][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.520847][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.527161][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.534392][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.542027][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.549191][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.555333][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.561462][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.569132][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.582570][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.590275][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.598418][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.612809][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.089801][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 69.140645][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 69.234491][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 69.303569][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.311447][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.318842][ T5821] bridge_slave_0: entered allmulticast mode [ 69.325815][ T5821] bridge_slave_0: entered promiscuous mode [ 69.361869][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.369081][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.376304][ T5821] bridge_slave_1: entered allmulticast mode [ 69.383516][ T5821] bridge_slave_1: entered promiscuous mode [ 69.390618][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.472811][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.487657][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.494809][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.502793][ T5820] bridge_slave_0: entered allmulticast mode [ 69.509724][ T5820] bridge_slave_0: entered promiscuous mode [ 69.538540][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.566336][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.573662][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.581054][ T5820] bridge_slave_1: entered allmulticast mode [ 69.588000][ T5820] bridge_slave_1: entered promiscuous mode [ 69.652402][ T5821] team0: Port device team_slave_0 added [ 69.660645][ T5821] team0: Port device team_slave_1 added [ 69.666326][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.673919][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.681083][ T5819] bridge_slave_0: entered allmulticast mode [ 69.687899][ T5819] bridge_slave_0: entered promiscuous mode [ 69.694899][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 69.707846][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.734029][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.741178][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.748541][ T5819] bridge_slave_1: entered allmulticast mode [ 69.755339][ T5819] bridge_slave_1: entered promiscuous mode [ 69.770295][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.826333][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.833586][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.841153][ T5826] bridge_slave_0: entered allmulticast mode [ 69.848189][ T5826] bridge_slave_0: entered promiscuous mode [ 69.855930][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.862988][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.889214][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.928663][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.935750][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.943863][ T5826] bridge_slave_1: entered allmulticast mode [ 69.950779][ T5826] bridge_slave_1: entered promiscuous mode [ 69.958368][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.965296][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.991442][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.004636][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.020598][ T5820] team0: Port device team_slave_0 added [ 70.047399][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.063557][ T5820] team0: Port device team_slave_1 added [ 70.114431][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.126154][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.144773][ T5819] team0: Port device team_slave_0 added [ 70.168664][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.175609][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.201686][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.235284][ T5819] team0: Port device team_slave_1 added [ 70.250375][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.257473][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.283484][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.308696][ T5821] hsr_slave_0: entered promiscuous mode [ 70.314923][ T5821] hsr_slave_1: entered promiscuous mode [ 70.330774][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.338189][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.345277][ T5818] bridge_slave_0: entered allmulticast mode [ 70.352327][ T5818] bridge_slave_0: entered promiscuous mode [ 70.368147][ T5826] team0: Port device team_slave_0 added [ 70.376025][ T5826] team0: Port device team_slave_1 added [ 70.389602][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.396816][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.403937][ T5818] bridge_slave_1: entered allmulticast mode [ 70.411200][ T5818] bridge_slave_1: entered promiscuous mode [ 70.439903][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.447053][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.472985][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.505595][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.540567][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.547593][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.573854][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.586938][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.607455][ T5830] Bluetooth: hci1: command tx timeout [ 70.615101][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.622130][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.648054][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.679464][ T5820] hsr_slave_0: entered promiscuous mode [ 70.685931][ T5820] hsr_slave_1: entered promiscuous mode [ 70.686965][ T5830] Bluetooth: hci3: command tx timeout [ 70.696930][ T51] Bluetooth: hci0: command tx timeout [ 70.697289][ T5834] Bluetooth: hci4: command tx timeout [ 70.702779][ T51] Bluetooth: hci2: command tx timeout [ 70.709616][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 70.719707][ T5820] Cannot create hsr debugfs directory [ 70.731689][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.738766][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.764827][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.795615][ T5818] team0: Port device team_slave_0 added [ 70.832806][ T5818] team0: Port device team_slave_1 added [ 70.905404][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.912384][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.938697][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.984210][ T5819] hsr_slave_0: entered promiscuous mode [ 70.990406][ T5819] hsr_slave_1: entered promiscuous mode [ 70.996338][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 71.002180][ T5819] Cannot create hsr debugfs directory [ 71.008637][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.015582][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.041680][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.058219][ T5826] hsr_slave_0: entered promiscuous mode [ 71.064369][ T5826] hsr_slave_1: entered promiscuous mode [ 71.070580][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 71.076312][ T5826] Cannot create hsr debugfs directory [ 71.230760][ T5818] hsr_slave_0: entered promiscuous mode [ 71.237457][ T5818] hsr_slave_1: entered promiscuous mode [ 71.243428][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 71.253079][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.257549][ T5818] Cannot create hsr debugfs directory [ 71.259738][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.470339][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.511894][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.551604][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.561365][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.619779][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.635629][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.645317][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.669627][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.729488][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.743644][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.753452][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.762825][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.867728][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.890757][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.916211][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.926325][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.007783][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.018395][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.028652][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.040118][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.054636][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.074691][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.115809][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.132538][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.139704][ T564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.153728][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.170283][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.185899][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.192998][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.224000][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.231178][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.265810][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.272914][ T564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.292758][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.323977][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.348256][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.355359][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.406989][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.414064][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.472181][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.491576][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.544336][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.564374][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.606159][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.613328][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.626236][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.633376][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.669786][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.676957][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.687139][ T51] Bluetooth: hci1: command tx timeout [ 72.764400][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.771646][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.779806][ T51] Bluetooth: hci4: command tx timeout [ 72.782014][ T5835] Bluetooth: hci3: command tx timeout [ 72.785209][ T51] Bluetooth: hci0: command tx timeout [ 72.790850][ T5834] Bluetooth: hci2: command tx timeout [ 72.822896][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.017481][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.081843][ T5820] veth0_vlan: entered promiscuous mode [ 73.146574][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.195936][ T5820] veth1_vlan: entered promiscuous mode [ 73.218726][ T5821] veth0_vlan: entered promiscuous mode [ 73.260759][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.283459][ T5821] veth1_vlan: entered promiscuous mode [ 73.317865][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.351193][ T5820] veth0_macvtap: entered promiscuous mode [ 73.402749][ T5826] veth0_vlan: entered promiscuous mode [ 73.421488][ T5821] veth0_macvtap: entered promiscuous mode [ 73.443563][ T5820] veth1_macvtap: entered promiscuous mode [ 73.459099][ T5821] veth1_macvtap: entered promiscuous mode [ 73.476918][ T5826] veth1_vlan: entered promiscuous mode [ 73.511273][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.557714][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.565406][ T5819] veth0_vlan: entered promiscuous mode [ 73.581457][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.602386][ T5819] veth1_vlan: entered promiscuous mode [ 73.619585][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.642095][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.651231][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.660736][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.685191][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.711118][ T564] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.738361][ T564] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.751941][ T564] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.764017][ T5826] veth0_macvtap: entered promiscuous mode [ 73.789019][ T564] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.802501][ T5819] veth0_macvtap: entered promiscuous mode [ 73.821820][ T5826] veth1_macvtap: entered promiscuous mode [ 73.834536][ T5819] veth1_macvtap: entered promiscuous mode [ 73.850835][ T5818] veth0_vlan: entered promiscuous mode [ 73.882609][ T564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.892464][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.896312][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.925413][ T564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.942761][ T5818] veth1_vlan: entered promiscuous mode [ 73.954568][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.985624][ T564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.994684][ T564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.012609][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.019989][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.030541][ T564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.039631][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.040073][ T564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.056624][ T564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.065783][ T564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.095113][ T564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.104734][ T564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.136018][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.188578][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.196406][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.220883][ T5818] veth0_macvtap: entered promiscuous mode [ 74.231711][ T5818] veth1_macvtap: entered promiscuous mode [ 74.294040][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.303170][ T5933] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 74.311286][ T5933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.328693][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.336511][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.338857][ T5933] geneve2: entered promiscuous mode [ 74.350307][ T5933] geneve2: entered allmulticast mode [ 74.362906][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.372635][ T1082] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 74.423131][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.440255][ T1082] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 74.483078][ T1082] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 74.497994][ T49] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 74.524609][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.534417][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.542601][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.598810][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.615173][ T5940] rdma_op ffff88802a9789f0 conn xmit_rdma 0000000000000000 [ 74.631441][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.639934][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.642782][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.660662][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.717933][ T5937] syzkaller0: entered promiscuous mode [ 74.728390][ T5937] syzkaller0: entered allmulticast mode [ 74.779523][ T5834] Bluetooth: hci1: command tx timeout [ 74.793596][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.818250][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.848125][ T5834] Bluetooth: hci0: command tx timeout [ 74.853535][ T5834] Bluetooth: hci4: command tx timeout [ 74.858984][ T5835] Bluetooth: hci2: command tx timeout [ 74.862277][ T5830] Bluetooth: hci3: command tx timeout [ 74.890908][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.917971][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.019862][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.036503][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.154124][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9'. [ 75.182732][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 75.223734][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 75.310951][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.328167][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.755192][ T5981] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 75.808316][ T5970] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 75.880673][ T5974] warning: `syz.1.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.938763][ T5978] bridge_slave_0: left allmulticast mode [ 75.944443][ T5978] bridge_slave_0: left promiscuous mode [ 75.952941][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.971417][ T5978] bridge_slave_1: left allmulticast mode [ 75.977301][ T5978] bridge_slave_1: left promiscuous mode [ 75.983110][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.047655][ T5978] bond0: (slave bond_slave_0): Releasing backup interface [ 76.064379][ T5978] bond0: (slave bond_slave_1): Releasing backup interface [ 76.093413][ T5978] team0: Port device team_slave_0 removed [ 76.111393][ T5978] team0: Port device team_slave_1 removed [ 76.119550][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.188372][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.201083][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.216843][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.230228][ T5978] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.302346][ T5981] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 76.358200][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.369393][ T5981] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 76.405058][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 76.857112][ T5830] Bluetooth: hci1: command tx timeout [ 76.927574][ T5830] Bluetooth: hci3: command tx timeout [ 76.933077][ T51] Bluetooth: hci4: command tx timeout [ 76.933129][ T5834] Bluetooth: hci2: command tx timeout [ 76.938851][ T51] Bluetooth: hci0: command tx timeout [ 76.963094][ T6044] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 77.063090][ T6043] syzkaller0: entered promiscuous mode [ 77.098979][ T6043] syzkaller0: entered allmulticast mode [ 77.131927][ T6042] Illegal XDP return value 4294967274 on prog (id 4) dev N/A, expect packet loss! [ 77.519953][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 77.757222][ T6070] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 77.837152][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 77.886272][ T6070] Zero length message leads to an empty skb [ 77.917205][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 77.917902][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 77.989326][ T6074] netlink: 'syz.1.26': attribute type 1 has an invalid length. [ 78.009974][ T6074] netlink: 'syz.1.26': attribute type 2 has an invalid length. [ 78.033398][ T6082] Cannot find set identified by id 65534 to match [ 78.155866][ T6076] netlink: 'syz.1.26': attribute type 1 has an invalid length. [ 78.177598][ T6076] netlink: 'syz.1.26': attribute type 2 has an invalid length. [ 78.378294][ T6057] sctp: [Deprecated]: syz.3.21 (pid 6057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.378294][ T6057] Use struct sctp_sack_info instead [ 78.458802][ T6094] nbd: must specify at least one socket [ 79.153833][ T6121] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 79.436549][ T6109] netlink: 'syz.0.36': attribute type 4 has an invalid length. [ 79.457667][ T6109] netlink: 'syz.0.36': attribute type 4 has an invalid length. [ 79.979927][ T6145] __nla_validate_parse: 4 callbacks suppressed [ 79.979945][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 80.143623][ T6152] netlink: 84 bytes leftover after parsing attributes in process `syz.3.48'. [ 80.251278][ T6160] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.574009][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 80.862957][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 80.884914][ T6188] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 80.892940][ T5930] IPVS: starting estimator thread 0... [ 80.921482][ T6188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.55'. [ 80.931083][ T6192] netlink: 'syz.2.58': attribute type 13 has an invalid length. [ 80.954627][ T6192] netlink: 'syz.2.58': attribute type 17 has an invalid length. [ 80.959349][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 80.996851][ T6190] IPVS: using max 30 ests per chain, 72000 per kthread [ 81.114008][ T6201] netlink: 64 bytes leftover after parsing attributes in process `syz.3.60'. [ 81.144946][ T6192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.219242][ T6188] vlan2: entered allmulticast mode [ 81.226757][ T6188] hsr0: entered allmulticast mode [ 81.231885][ T6188] hsr_slave_0: entered allmulticast mode [ 81.239359][ T6188] hsr_slave_1: entered allmulticast mode [ 81.424576][ T6220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 81.737268][ T6227] Bluetooth: MGMT ver 1.23 [ 82.158052][ T6243] netlink: 6856 bytes leftover after parsing attributes in process `syz.0.76'. [ 82.167304][ T6243] netlink: 6856 bytes leftover after parsing attributes in process `syz.0.76'. [ 82.646841][ T6266] netlink: 'syz.4.82': attribute type 5 has an invalid length. [ 82.686303][ T6266] netlink: 'syz.4.82': attribute type 5 has an invalid length. [ 82.695996][ T3533] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.730880][ T6036] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.801593][ T6036] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.819265][ T6036] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.084736][ T6293] pim6reg: tun_chr_ioctl cmd 1074812118 [ 83.194021][ T6294] pim6reg: tun_chr_ioctl cmd 1074812118 [ 83.252427][ T6298] xt_bpf: check failed: parse error [ 83.498227][ T981] cfg80211: failed to load regulatory.db [ 83.832602][ T6320] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.346567][ T6340] IPVS: set_ctl: invalid protocol: 2 172.20.20.28:20001 [ 84.497801][ T6348] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 84.522305][ T6348] team0: Device vxcan1 is of different type [ 84.592682][ T6354] macvtap0: entered promiscuous mode [ 84.669825][ T6354] veth0_macvtap: left promiscuous mode [ 84.765708][ T6359] syzkaller0: entered promiscuous mode [ 84.771291][ T6359] syzkaller0: entered allmulticast mode [ 84.807264][ T6372] pim6reg99999999: entered allmulticast mode [ 85.155215][ T6394] netlink: 'syz.0.118': attribute type 4 has an invalid length. [ 85.209527][ T6390] __nla_validate_parse: 81 callbacks suppressed [ 85.209545][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 85.605075][ T6417] xt_hashlimit: size too large, truncated to 1048576 [ 85.626180][ T6419] Unsupported ieee802154 address type: 0 [ 86.022708][ T6435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 86.182705][ T6449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.132'. [ 86.322254][ T6458] xt_bpf: check failed: parse error [ 86.348554][ T6458] syzkaller0: entered promiscuous mode [ 86.354045][ T6458] syzkaller0: entered allmulticast mode [ 86.462028][ T6462] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.540121][ T6464] Bluetooth: MGMT ver 1.23 [ 86.610986][ T6462] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.646075][ T6467] bridge_slave_0: left allmulticast mode [ 86.654709][ T6467] bridge_slave_0: left promiscuous mode [ 86.661267][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.681906][ T6467] bridge_slave_1: left allmulticast mode [ 86.690649][ T6467] bridge_slave_1: left promiscuous mode [ 86.696454][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.711939][ T6467] bond0: (slave bond_slave_0): Releasing backup interface [ 86.724241][ T6467] bond0: (slave bond_slave_1): Releasing backup interface [ 86.738987][ T6467] team0: Port device team_slave_0 removed [ 86.751044][ T6467] team0: Port device team_slave_1 removed [ 86.758448][ T6467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.765914][ T6467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.777830][ T6467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.790207][ T6467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.800070][ T6467] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.861042][ T6462] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.929192][ T6476] syz.3.140 (6476) used greatest stack depth: 17472 bytes left [ 86.973739][ T6480] pimreg3: entered allmulticast mode [ 87.099442][ T6462] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.127347][ T6471] infiniband syz1: set down [ 87.132993][ T6471] infiniband syz1: added ipvlan0 [ 87.182552][ T6471] RDS/IB: syz1: added [ 87.187003][ T6471] smc: adding ib device syz1 with port count 1 [ 87.198063][ T6471] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 87.424206][ T3533] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.466317][ T3533] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.526021][ T3533] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.554208][ T6499] ipvlan2: entered promiscuous mode [ 87.667299][ T3533] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.773132][ T6511] netlink: 100 bytes leftover after parsing attributes in process `syz.3.150'. [ 87.956934][ T6518] openvswitch: netlink: IP tunnel dst address not specified [ 87.986077][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 87.995127][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'. [ 88.032384][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 88.047048][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'. [ 88.058934][ T6524] macvlan1: entered allmulticast mode [ 88.064736][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 88.074629][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'. [ 88.596341][ T6542] pimreg: entered allmulticast mode [ 88.618770][ T6540] pimreg: left allmulticast mode [ 89.347905][ T6574] netlink: 'syz.3.170': attribute type 1 has an invalid length. [ 89.382567][ T6580] netlink: 'syz.4.171': attribute type 20 has an invalid length. [ 90.290799][ T6621] __nla_validate_parse: 133 callbacks suppressed [ 90.290817][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 90.321522][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 90.485456][ T6628] netlink: 'syz.3.182': attribute type 13 has an invalid length. [ 90.529247][ T6628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.182'. [ 90.670314][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 91.126897][ T6646] netlink: 496 bytes leftover after parsing attributes in process `syz.2.186'. [ 91.266601][ T6655] netlink: 'syz.4.189': attribute type 58 has an invalid length. [ 91.351813][ T6659] xt_connbytes: Forcing CT accounting to be enabled [ 91.636529][ T6671] netlink: 29 bytes leftover after parsing attributes in process `syz.4.192'. [ 92.548679][ T6677] syzkaller0: entered promiscuous mode [ 92.555760][ T6677] syzkaller0: entered allmulticast mode [ 92.837828][ T6697] netlink: 'syz.2.196': attribute type 13 has an invalid length. [ 94.032923][ T6707] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 94.064431][ T6708] dvmrp1: entered allmulticast mode [ 94.513598][ T6727] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.207'. [ 94.549485][ T6727] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.207'. [ 94.591385][ T6727] netlink: 64 bytes leftover after parsing attributes in process `syz.0.207'. [ 94.683792][ T1082] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.727066][ T1082] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.735299][ T1082] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.757823][ T1082] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.855368][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 95.189823][ T6756] xt_CT: No such helper "snmp_trap" [ 95.461513][ T6768] __nla_validate_parse: 1 callbacks suppressed [ 95.461532][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.219'. [ 95.526489][ T6773] netlink: 32 bytes leftover after parsing attributes in process `syz.0.220'. [ 95.565445][ T6772] tipc: Started in network mode [ 95.576759][ T6772] tipc: Node identity ac14140f, cluster identity 4711 [ 95.594395][ T6772] tipc: New replicast peer: 255.255.255.255 [ 95.613671][ T6772] tipc: Enabled bearer , priority 10 [ 95.696593][ T6777] trusted_key: syz.0.220 sent an empty control message without MSG_MORE. [ 96.348434][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 96.388793][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 96.592636][ T6794] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.611186][ T6794] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.666271][ T6799] veth0_to_bond: entered promiscuous mode [ 96.672698][ T6799] veth0_to_bond: entered allmulticast mode [ 96.721322][ T6794] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.737527][ T6794] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.774067][ T6050] tipc: Node number set to 2886997007 [ 96.878052][ T6813] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 96.929098][ T6794] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.945834][ T6794] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.039816][ T6794] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.055487][ T6794] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.104424][ T6813] sctp: [Deprecated]: syz.3.232 (pid 6813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.104424][ T6813] Use struct sctp_sack_info instead [ 97.908867][ T6833] syzkaller1: entered promiscuous mode [ 97.914817][ T6833] syzkaller1: entered allmulticast mode [ 98.034774][ T151] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.048294][ T151] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.161464][ T151] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.170669][ T6838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.241'. [ 98.182176][ T151] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.233551][ T151] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.242441][ T151] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.293094][ T6036] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.303845][ T6839] netlink: 'syz.0.240': attribute type 10 has an invalid length. [ 98.313113][ T6036] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.363954][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'. [ 98.408090][ T6853] netlink: 44 bytes leftover after parsing attributes in process `syz.4.244'. [ 98.464680][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 98.518730][ T6853] : entered promiscuous mode [ 98.641018][ T6864] ip6tnl0: Caught tx_queue_len zero misconfig [ 98.687460][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 98.754675][ T6868] netlink: 'syz.1.249': attribute type 4 has an invalid length. [ 98.916828][ T6875] netlink: 36 bytes leftover after parsing attributes in process `syz.4.251'. [ 98.990963][ T6870] syzkaller0: entered promiscuous mode [ 98.997122][ T6870] syzkaller0: entered allmulticast mode [ 99.129531][ T6891] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.137120][ T6891] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.152948][ T6891] bridge0: entered allmulticast mode [ 99.345267][ T6901] IPv6: Can't replace route, no match found [ 99.439508][ T6909] Bluetooth: MGMT ver 1.23 [ 99.666433][ T6918] IPv6: addrconf: prefix option has invalid lifetime [ 99.673324][ T6918] IPv6: addrconf: prefix option has invalid lifetime [ 99.869906][ T6929] netlink: 'syz.2.267': attribute type 1 has an invalid length. [ 99.880126][ T6929] netlink: 'syz.2.267': attribute type 1 has an invalid length. [ 99.884266][ T6930] netlink: 'syz.0.266': attribute type 16 has an invalid length. [ 99.926813][ T6930] netlink: 'syz.0.266': attribute type 17 has an invalid length. [ 100.031489][ T6930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.083213][ T6937] geneve2: entered promiscuous mode [ 100.092746][ T6937] geneve2: entered allmulticast mode [ 100.418316][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.426044][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.477296][ T6962] bridge0: entered allmulticast mode [ 100.519681][ T6962] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 101.094779][ T7001] ip6gre2: entered promiscuous mode [ 101.104228][ T7001] ip6gre2: entered allmulticast mode [ 101.486841][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 101.492982][ T5834] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 101.829539][ T7044] __nla_validate_parse: 9 callbacks suppressed [ 101.829556][ T7044] netlink: 72 bytes leftover after parsing attributes in process `syz.1.299'. [ 102.233226][ T7060] xt_hashlimit: size too large, truncated to 1048576 [ 102.292069][ T7062] x9: renamed from bridge_slave_0 (while UP) [ 102.911603][ T7089] bond_slave_0: Caught tx_queue_len zero misconfig [ 103.133940][ T7103] netlink: 56 bytes leftover after parsing attributes in process `syz.1.318'. [ 103.326861][ T7108] netlink: 124 bytes leftover after parsing attributes in process `syz.1.320'. [ 103.576072][ T7118] dvmrp1: entered allmulticast mode [ 103.762461][ T7125] openvswitch: netlink: Key type 4102 is out of range max 32 [ 103.935232][ T7129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.328'. [ 104.019257][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 104.067008][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.330'. [ 104.116379][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 104.321798][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 104.654195][ T7162] netlink: 'syz.3.340': attribute type 1 has an invalid length. [ 104.664015][ T7169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'. [ 104.672951][ T7169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'. [ 104.782654][ T797] IPVS: starting estimator thread 0... [ 104.877695][ T7175] IPVS: using max 28 ests per chain, 67200 per kthread [ 105.327600][ T7200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.601495][ T7213] x_tables: duplicate underflow at hook 3 [ 105.895102][ T7231] x_tables: duplicate underflow at hook 1 [ 106.151647][ T7237] syzkaller0: entered promiscuous mode [ 106.157289][ T7237] syzkaller0: entered allmulticast mode [ 106.362077][ T7246] syzkaller1: entered promiscuous mode [ 106.368377][ T7246] syzkaller1: entered allmulticast mode [ 106.486556][ T7253] bridge1: entered allmulticast mode [ 106.558547][ T7263] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 106.740449][ T7277] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 106.859760][ T7288] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 107.233952][ T7312] __nla_validate_parse: 9 callbacks suppressed [ 107.233968][ T7312] netlink: 452 bytes leftover after parsing attributes in process `syz.3.379'. [ 107.294096][ T7312] openvswitch: netlink: Flow key attr not present in new flow. [ 107.479367][ T7322] tipc: Started in network mode [ 107.507544][ T7322] tipc: Node identity 1a5e0363d94b, cluster identity 4711 [ 107.514864][ T7322] tipc: Enabled bearer , priority 0 [ 107.551859][ T7330] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 107.577312][ T7327] syzkaller0: entered promiscuous mode [ 107.595523][ T7327] syzkaller0: entered allmulticast mode [ 107.669941][ T7322] tipc: Resetting bearer [ 107.688728][ T7321] tipc: Resetting bearer [ 107.715237][ T7321] tipc: Disabling bearer [ 107.941102][ T7354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.961818][ T7356] x_tables: duplicate underflow at hook 1 [ 108.105563][ T7363] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 108.122132][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.394'. [ 108.206163][ T7369] netlink: 56 bytes leftover after parsing attributes in process `syz.4.397'. [ 108.461709][ T7385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.616190][ T30] audit: type=1800 audit(1773031420.727:2): pid=7379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.398" name="memory.events" dev="tmpfs" ino=508 res=0 errno=0 [ 108.784544][ T7394] syzkaller0: entered promiscuous mode [ 108.795024][ T7394] syzkaller0: entered allmulticast mode [ 108.957139][ T7404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.404'. [ 109.005130][ T7404] gre0: entered promiscuous mode [ 109.016589][ T7404] gre0: entered allmulticast mode [ 109.377589][ T7426] netlink: 'syz.1.411': attribute type 21 has an invalid length. [ 109.385352][ T7426] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.414219][ T7427] netlink: 'syz.1.411': attribute type 21 has an invalid length. [ 109.455970][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 109.465853][ T7427] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.494028][ T7427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.501322][ T7427] IPv6: NLM_F_CREATE should be set when creating new route [ 109.508605][ T7427] IPv6: NLM_F_CREATE should be set when creating new route [ 109.515820][ T7427] IPv6: NLM_F_CREATE should be set when creating new route [ 109.546730][ T7426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.561069][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.413'. [ 109.633813][ T7439] netlink: 212 bytes leftover after parsing attributes in process `syz.2.416'. [ 110.094465][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 110.150372][ T7467] netlink: 44 bytes leftover after parsing attributes in process `syz.2.421'. [ 110.168483][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 110.375380][ T7474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.928903][ T7497] syzkaller0: entered promiscuous mode [ 110.940472][ T7497] syzkaller0: entered allmulticast mode [ 113.378434][ T7536] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 113.871854][ T7558] __nla_validate_parse: 2 callbacks suppressed [ 113.871872][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.444'. [ 113.888354][ T7558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.444'. [ 113.918881][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.444'. [ 113.934280][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.447'. [ 113.940888][ T7558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.444'. [ 113.971192][ T7568] netlink: 10 bytes leftover after parsing attributes in process `syz.1.447'. [ 114.051386][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'. [ 114.089814][ T7570] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.097475][ T7570] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.381041][ T7570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.426415][ T7570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.560996][ T7570] macvlan1: left allmulticast mode [ 114.678671][ T7570] geneve2: left promiscuous mode [ 114.686957][ T7570] geneve2: left allmulticast mode [ 114.716878][ T7568] vlan3: entered promiscuous mode [ 114.721935][ T7568] geneve1: entered promiscuous mode [ 114.772585][ T7568] vlan3: entered allmulticast mode [ 114.800730][ T7568] geneve1: entered allmulticast mode [ 114.924613][ T7584] bridge1: port 1(veth7) entered blocking state [ 114.947265][ T7584] bridge1: port 1(veth7) entered disabled state [ 114.963873][ T7584] veth7: entered allmulticast mode [ 114.996542][ T7584] veth7: entered promiscuous mode [ 115.015802][ T7584] bridge1: port 1(veth7) entered blocking state [ 115.022432][ T7584] bridge1: port 1(veth7) entered forwarding state [ 115.033245][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 115.052113][ T151] bridge1: port 1(veth7) entered disabled state [ 115.059189][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.090273][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.190228][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.212009][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.685292][ T7627] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.890251][ T7627] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.168428][ T7645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.219020][ T7627] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.519804][ T7627] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.644963][ T7675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.468'. [ 116.684654][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.467'. [ 116.711602][ T7679] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 116.772187][ T7679] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.815034][ T7679] bond0: (slave team0): Enslaving as an active interface with an up link [ 116.907511][ T7685] ip6gretap0: refused to change device tx_queue_len [ 116.983895][ T1082] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.024575][ T1082] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.079942][ T151] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.116537][ T151] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.294051][ T7700] sctp: [Deprecated]: syz.1.475 (pid 7700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.294051][ T7700] Use struct sctp_sack_info instead [ 117.366718][ T7706] netlink: 'syz.3.477': attribute type 61 has an invalid length. [ 117.378465][ T7705] netlink: 'syz.2.476': attribute type 7 has an invalid length. [ 117.411601][ T1082] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.423903][ T1082] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.450312][ T1082] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.496271][ T1082] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.970426][ T7734] veth1_macvtap: renamed from veth0_vlan [ 118.052591][ T7739] netlink: 'syz.1.484': attribute type 16 has an invalid length. [ 118.883605][ T7780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.940503][ T5488] veth1_macvtap: left promiscuous mode [ 118.983398][ T5488] veth1_macvtap: entered promiscuous mode [ 120.134028][ T7822] __nla_validate_parse: 4 callbacks suppressed [ 120.134046][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 120.174885][ T7822] openvswitch: netlink: Flow actions attr not present in new flow. [ 120.371402][ T7834] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.412684][ T7840] netlink: 'syz.1.502': attribute type 83 has an invalid length. [ 120.574904][ T7846] netlink: 'syz.3.503': attribute type 10 has an invalid length. [ 120.587294][ T7846] team0: Port device dummy0 added [ 120.601555][ T7846] netlink: 'syz.3.503': attribute type 10 has an invalid length. [ 120.670355][ T7846] team0: Port device dummy0 removed [ 120.682883][ T7846] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 120.727721][ T7854] netlink: 'syz.2.506': attribute type 2 has an invalid length. [ 120.878496][ T7863] netlink: 'syz.2.508': attribute type 5 has an invalid length. [ 121.000766][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.509'. [ 121.869511][ T7896] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 121.888024][ T7896] bond1 (unregistering): Released all slaves [ 122.550468][ T7930] netlink: 'syz.3.526': attribute type 1 has an invalid length. [ 122.599380][ T7928] bond2: option arp_all_targets: invalid value (129) [ 122.627050][ T7928] bond2 (unregistering): Released all slaves [ 122.785741][ T6034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.797150][ T6034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.805864][ T6034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.815269][ T6034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.904894][ T7941] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 123.096828][ T7941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.318013][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 123.320055][ T6034] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.353887][ T7956] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 123.367179][ T6034] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.375754][ T6034] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.393272][ T6034] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.687646][ T7967] team0 (unregistering): Port device team_slave_0 removed [ 123.710505][ T7967] team0 (unregistering): Port device team_slave_1 removed [ 124.091743][ T7988] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 124.218539][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 124.276135][ T7995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.542'. [ 124.285584][ T7995] netlink: 332 bytes leftover after parsing attributes in process `syz.0.542'. [ 124.320414][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.542'. [ 124.382125][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.542'. [ 124.479212][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.545'. [ 124.615594][ T8004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.545'. [ 124.642320][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.650760][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.660011][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.697402][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.705372][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.361976][ T8038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.817215][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 126.133687][ T8065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.206015][ T8065] __nla_validate_parse: 2 callbacks suppressed [ 126.206033][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 126.303858][ T8070] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 126.468277][ T8010] chnl_net:caif_netlink_parms(): no params data found [ 126.567653][ T8081] netlink: 92 bytes leftover after parsing attributes in process `syz.2.563'. [ 126.704915][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.736341][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.752512][ T8010] bridge_slave_0: entered allmulticast mode [ 126.812262][ T8010] bridge_slave_0: entered promiscuous mode [ 126.821748][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.830667][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.838176][ T8010] bridge_slave_1: entered allmulticast mode [ 126.847381][ T5834] Bluetooth: hci5: command tx timeout [ 126.899754][ T8010] bridge_slave_1: entered promiscuous mode [ 127.079094][ T8010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.119015][ T8010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.288253][ T8010] team0: Port device team_slave_0 added [ 127.307001][ T8010] team0: Port device team_slave_1 added [ 127.579507][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.596748][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.628423][ T8010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.658541][ T8099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.569'. [ 127.774712][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.786657][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.795249][ T8102] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.857317][ T8010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.913894][ T8102] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.934991][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.570'. [ 127.978261][ T151] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.997578][ T151] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.099642][ T151] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.116714][ T151] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.345604][ T8010] hsr_slave_0: entered promiscuous mode [ 128.357663][ T8010] hsr_slave_1: entered promiscuous mode [ 128.385116][ T8010] debugfs: 'hsr0' already exists in 'hsr' [ 128.402424][ T8010] Cannot create hsr debugfs directory [ 128.425861][ T151] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.446836][ T151] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.623569][ T151] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.664800][ T151] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.930685][ T5834] Bluetooth: hci5: command tx timeout [ 129.337230][ T8141] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 129.363211][ T8141] bond3 (unregistering): Released all slaves [ 129.665997][ T151] pimreg3: left allmulticast mode [ 129.694014][ T8150] netlink: 252 bytes leftover after parsing attributes in process `syz.3.577'. [ 129.891630][ T151] bond0 (unregistering): Released all slaves [ 129.990172][ T151] : left promiscuous mode [ 130.071015][ T8010] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.298357][ T8010] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.332867][ T8010] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.364153][ T8010] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.999345][ T8192] IPv6: sit1: Disabled Multicast RS [ 131.029694][ T5834] Bluetooth: hci5: command tx timeout [ 131.203874][ T151] hsr_slave_0: left promiscuous mode [ 131.220437][ T151] hsr_slave_1: left promiscuous mode [ 131.249246][ T151] veth1_macvtap: left promiscuous mode [ 131.266374][ T151] veth0_macvtap: left promiscuous mode [ 131.286721][ T151] veth1_vlan: left promiscuous mode [ 131.292018][ T151] veth0_vlan: left promiscuous mode [ 131.396494][ T151] pim6reg99999999 (unregistering): left allmulticast mode [ 131.664341][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.713045][ T8203] ip6gre1: entered promiscuous mode [ 131.755515][ T8010] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.791477][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.798663][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.849304][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.856446][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.622589][ T8010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.692675][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.699206][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.964626][ T8263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.599'. [ 133.089632][ T5834] Bluetooth: hci5: command tx timeout [ 133.750829][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 133.842072][ T8010] veth0_vlan: entered promiscuous mode [ 133.865483][ T8010] veth1_vlan: entered promiscuous mode [ 133.935440][ T8010] veth0_macvtap: entered promiscuous mode [ 133.946325][ T8010] veth1_macvtap: entered promiscuous mode [ 133.988759][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.022939][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.054357][ T1082] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.074492][ T1082] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.105472][ T1082] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.109507][ T8315] Cannot find set identified by id 1 to match [ 134.133764][ T1082] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.311025][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 134.486334][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.514955][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.595373][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.615803][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.664795][ T8333] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 134.721427][ T8333] bond1 (unregistering): Released all slaves [ 135.042143][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.546'. [ 135.051810][ T8356] netlink: 72 bytes leftover after parsing attributes in process `syz.5.546'. [ 135.105011][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.546'. [ 135.115199][ T8360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.167710][ T5834] Bluetooth: hci5: command tx timeout [ 135.265733][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 135.718596][ T8367] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 136.176939][ T8385] netlink: 180 bytes leftover after parsing attributes in process `syz.5.617'. [ 136.215431][ T8387] netlink: 292 bytes leftover after parsing attributes in process `syz.3.619'. [ 136.238769][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.617'. [ 136.855072][ T8424] 5gQ[: renamed from lo (while UP) [ 137.142568][ T8440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.219769][ T8440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.799486][ T8456] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 137.826020][ T8456] bond3 (unregistering): Released all slaves [ 138.044762][ T8461] __nla_validate_parse: 3 callbacks suppressed [ 138.044779][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'. [ 138.153421][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 138.179248][ T8477] syzkaller0: entered promiscuous mode [ 138.184736][ T8477] syzkaller0: entered allmulticast mode [ 138.227658][ T8477] syz.2.635 (8477) used obsolete PPPIOCDETACH ioctl [ 138.258423][ T8481] netlink: 16 bytes leftover after parsing attributes in process `syz.5.636'. [ 138.859759][ T8489] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.049119][ T8489] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.120314][ T8509] syzkaller0: entered allmulticast mode [ 139.260568][ T8516] bridge0: left allmulticast mode [ 139.369664][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.648'. [ 139.430427][ T8527] netlink: 60 bytes leftover after parsing attributes in process `syz.0.649'. [ 139.460976][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 139.472621][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.649'. [ 139.519677][ T8516] veth0_to_bond: left promiscuous mode [ 139.540731][ T8516] veth0_to_bond: left allmulticast mode [ 139.597254][ T8516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.667720][ T8516] veth1_macvtap: left promiscuous mode [ 139.788808][ T8516] geneve2: left promiscuous mode [ 139.795270][ T8516] geneve2: left allmulticast mode [ 139.806507][ T8516] ip6gre2: left promiscuous mode [ 139.813186][ T8516] ip6gre2: left allmulticast mode [ 139.870014][ T8489] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.956280][ T8533] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 139.966143][ T8533] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 139.993845][ T6036] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.008353][ T6036] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.037742][ T6036] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 140.046563][ T6036] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.062938][ T6036] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.072926][ T6036] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 140.082418][ T8504] syzkaller0: left allmulticast mode [ 140.165462][ T8489] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.205054][ T8544] netlink: 'syz.1.652': attribute type 1 has an invalid length. [ 140.232297][ T6036] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.264789][ T6036] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.277897][ T6036] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 140.291495][ T6036] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.303161][ T8548] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 140.333383][ T6036] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.351918][ T6036] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 140.473393][ T8548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.570299][ T8552] bond1: (slave veth7): Enslaving as an active interface with a down link [ 140.630296][ T8553] bond1: (slave veth9): Enslaving as an active interface with a down link [ 140.655437][ T8567] netlink: 'syz.1.659': attribute type 29 has an invalid length. [ 140.942288][ T8576] syz_tun: entered allmulticast mode [ 140.963311][ T1082] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.053734][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 141.132989][ T1082] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.164380][ T1082] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.192970][ T8597] syz_tun (unregistering): left allmulticast mode [ 141.294275][ T6036] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.371811][ T8616] netlink: 'syz.2.671': attribute type 2 has an invalid length. [ 141.383275][ T8616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.671'. [ 141.967565][ T8652] netlink: 64 bytes leftover after parsing attributes in process `syz.5.680'. [ 142.098254][ T8656] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.191517][ T8656] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.281371][ T8672] netlink: 'syz.5.683': attribute type 1 has an invalid length. [ 142.343089][ T8656] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.503996][ T8656] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.585195][ T8686] tipc: Enabling of bearer rejected, failed to enable media [ 142.697830][ T6036] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.736746][ T6036] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.864554][ T151] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.107778][ T3549] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.529232][ T8735] __nla_validate_parse: 2 callbacks suppressed [ 143.529249][ T8735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.694'. [ 143.625810][ T8741] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 143.675337][ T8741] netlink: 'syz.0.697': attribute type 3 has an invalid length. [ 143.685554][ T8744] netlink: 52 bytes leftover after parsing attributes in process `syz.2.695'. [ 143.708496][ T8741] netlink: 224 bytes leftover after parsing attributes in process `syz.0.697'. [ 143.754935][ T8741] netlink: 76 bytes leftover after parsing attributes in process `syz.0.697'. [ 143.787135][ T8748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.794358][ T8748] IPv6: NLM_F_CREATE should be set when creating new route [ 143.822928][ T8735] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 143.862101][ T8735] bond3 (unregistering): Released all slaves [ 144.162973][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.691'. [ 144.272922][ T8767] vlan0: entered promiscuous mode [ 144.285452][ T8767] veth1_macvtap: entered promiscuous mode [ 144.762348][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 144.950155][ T8811] netlink: 'syz.1.710': attribute type 19 has an invalid length. [ 144.961943][ T8810] netlink: 72 bytes leftover after parsing attributes in process `syz.2.711'. [ 144.973123][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 145.181820][ T8823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.715'. [ 145.228476][ T8824] netlink: 20 bytes leftover after parsing attributes in process `syz.5.714'. [ 145.282426][ T8824] ip6gre1: entered promiscuous mode [ 145.315054][ T8824] ip6gre1: entered allmulticast mode [ 145.543729][ T8840] raw_sendmsg: syz.1.717 forgot to set AF_INET. Fix it! [ 146.042807][ T8864] syzkaller0: entered promiscuous mode [ 146.049214][ T8864] syzkaller0: entered allmulticast mode [ 146.163292][ T8874] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 146.704813][ T8893] xt_hashlimit: size too large, truncated to 1048576 [ 146.923321][ T8912] netlink: 'syz.0.737': attribute type 12 has an invalid length. [ 146.951584][ T8912] netlink: 'syz.0.737': attribute type 13 has an invalid length. [ 147.739952][ T8943] IPVS: persistence engine module ip_vs_pe_ not found [ 148.426645][ T8992] netlink: 'syz.1.754': attribute type 1 has an invalid length. [ 148.440148][ T8994] netlink: 'syz.3.755': attribute type 34 has an invalid length. [ 148.496574][ T8992] blkio.reset_stats is deprecated [ 148.655150][ T9006] __nla_validate_parse: 16 callbacks suppressed [ 148.655167][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 149.285607][ T9035] netlink: 'syz.0.762': attribute type 2 has an invalid length. [ 149.474563][ T9040] netlink: 'syz.5.764': attribute type 1 has an invalid length. [ 149.567217][ T9050] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.767'. [ 149.582477][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.765'. [ 149.650238][ T9040] bond1: entered promiscuous mode [ 149.684847][ T9040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.794269][ T9051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.804423][ T9058] netlink: 4988 bytes leftover after parsing attributes in process `syz.3.770'. [ 149.808158][ T9051] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 149.844618][ T9051] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 149.859997][ T9051] bond1: (slave vcan1): making interface the new active one [ 149.868316][ T9051] vcan1: entered promiscuous mode [ 149.875365][ T9051] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 150.623320][ T9118] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 150.650304][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 151.069945][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.789'. [ 151.173927][ T9136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.316972][ T9163] netlink: 'syz.2.792': attribute type 13 has an invalid length. [ 151.343027][ T9163] netlink: 'syz.2.792': attribute type 17 has an invalid length. [ 151.362398][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.793'. [ 151.422758][ T9163] erspan0: entered promiscuous mode [ 151.541872][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.551205][ T9163] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.568707][ T9163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.289605][ T9211] netlink: 'syz.2.803': attribute type 1 has an invalid length. [ 152.414603][ T9222] netlink: 210960 bytes leftover after parsing attributes in process `syz.3.804'. [ 152.425992][ T9225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.805'. [ 152.482989][ T9215] bond4 (unregistering): Released all slaves [ 152.489719][ T9223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.803'. [ 152.575653][ T9218] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.598870][ T9218] bond4: (slave bond5): making interface the new active one [ 152.613709][ T9218] bond4: (slave bond5): Enslaving as an active interface with an up link [ 152.696193][ T9211] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 152.708490][ T9223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.729714][ T9231] vlan2: entered promiscuous mode [ 152.736701][ T9231] bond4: entered promiscuous mode [ 152.758254][ T9231] bond5: entered promiscuous mode [ 152.791215][ T9209] tipc: Started in network mode [ 152.796195][ T9209] tipc: Node identity 6ad31492f0b5, cluster identity 4711 [ 152.827740][ T9209] tipc: Enabled bearer , priority 0 [ 153.050866][ T9212] tipc: Disabling bearer [ 153.128039][ T9260] bond0: invalid ARP target 0.0.0.0 specified for addition [ 153.165858][ T9260] bond0: option arp_ip_target: invalid value (0) [ 153.391636][ T9259] [ 153.394000][ T9259] ====================================================== [ 153.401011][ T9259] WARNING: possible circular locking dependency detected [ 153.408024][ T9259] syzkaller #0 Not tainted [ 153.412419][ T9259] ------------------------------------------------------ [ 153.419411][ T9259] syz.1.811/9259 is trying to acquire lock: [ 153.425280][ T9259] ffffffff8e85f168 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 153.434849][ T9259] [ 153.434849][ T9259] but task is already holding lock: [ 153.442191][ T9259] ffff888025fb72c0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 153.452446][ T9259] [ 153.452446][ T9259] which lock already depends on the new lock. [ 153.452446][ T9259] [ 153.462828][ T9259] [ 153.462828][ T9259] the existing dependency chain (in reverse order) is: [ 153.471820][ T9259] [ 153.471820][ T9259] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 153.480408][ T9259] blk_alloc_queue+0x546/0x680 [ 153.485691][ T9259] __blk_mq_alloc_disk+0x197/0x390 [ 153.491304][ T9259] nbd_dev_add+0x499/0xb50 [ 153.496230][ T9259] nbd_init+0x168/0x1f0 [ 153.500889][ T9259] do_one_initcall+0x250/0x8d0 [ 153.506160][ T9259] do_initcall_level+0x104/0x190 [ 153.511597][ T9259] do_initcalls+0x59/0xa0 [ 153.516427][ T9259] kernel_init_freeable+0x2a6/0x3e0 [ 153.522124][ T9259] kernel_init+0x1d/0x1d0 [ 153.526968][ T9259] ret_from_fork+0x51e/0xb90 [ 153.532061][ T9259] ret_from_fork_asm+0x1a/0x30 [ 153.537344][ T9259] [ 153.537344][ T9259] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 153.544535][ T9259] fs_reclaim_acquire+0x71/0x100 [ 153.549978][ T9259] prepare_alloc_pages+0x152/0x650 [ 153.555603][ T9259] __alloc_frozen_pages_noprof+0x12f/0x380 [ 153.561941][ T9259] __alloc_pages_noprof+0xa/0x30 [ 153.567387][ T9259] pcpu_populate_chunk+0x182/0xb30 [ 153.573004][ T9259] pcpu_alloc_noprof+0xc6c/0x19c0 [ 153.578531][ T9259] xt_percpu_counter_alloc+0x161/0x220 [ 153.584493][ T9259] translate_table+0x134a/0x2110 [ 153.589934][ T9259] ipt_register_table+0x11b/0x7f0 [ 153.595461][ T9259] iptable_raw_table_init+0x54/0x80 [ 153.601162][ T9259] xt_find_table_lock+0x30c/0x3e0 [ 153.606694][ T9259] xt_request_find_table_lock+0x26/0x100 [ 153.612837][ T9259] do_ipt_get_ctl+0x716/0x1240 [ 153.618103][ T9259] nf_getsockopt+0x26e/0x290 [ 153.623197][ T9259] ip_getsockopt+0x19e/0x230 [ 153.628288][ T9259] do_sock_getsockopt+0x2d3/0x3f0 [ 153.633821][ T9259] __x64_sys_getsockopt+0x1a4/0x240 [ 153.639528][ T9259] do_syscall_64+0x14d/0xf80 [ 153.644617][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.651016][ T9259] [ 153.651016][ T9259] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 153.658734][ T9259] __lock_acquire+0x15a5/0x2cf0 [ 153.664093][ T9259] lock_acquire+0xf0/0x2e0 [ 153.669017][ T9259] __mutex_lock+0x19f/0x1300 [ 153.674110][ T9259] pcpu_alloc_noprof+0x218/0x19c0 [ 153.679641][ T9259] sbitmap_init_node+0x1e1/0x640 [ 153.685086][ T9259] sbitmap_queue_init_node+0x3e/0x4d0 [ 153.690969][ T9259] blk_mq_init_tags+0x15c/0x2d0 [ 153.696330][ T9259] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 153.702291][ T9259] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 153.708603][ T9259] nbd_start_device+0x17f/0xb10 [ 153.713962][ T9259] nbd_genl_connect+0x165b/0x1cf0 [ 153.719495][ T9259] genl_family_rcv_msg_doit+0x22a/0x330 [ 153.725553][ T9259] genl_rcv_msg+0x61c/0x7a0 [ 153.730570][ T9259] netlink_rcv_skb+0x232/0x4b0 [ 153.735845][ T9259] genl_rcv+0x28/0x40 [ 153.740329][ T9259] netlink_unicast+0x80f/0x9b0 [ 153.745594][ T9259] netlink_sendmsg+0x813/0xb40 [ 153.750865][ T9259] ____sys_sendmsg+0x972/0x9f0 [ 153.756132][ T9259] ___sys_sendmsg+0x2a5/0x360 [ 153.761317][ T9259] __x64_sys_sendmsg+0x1bd/0x2a0 [ 153.766759][ T9259] do_syscall_64+0x14d/0xf80 [ 153.771855][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.778251][ T9259] [ 153.778251][ T9259] other info that might help us debug this: [ 153.778251][ T9259] [ 153.788458][ T9259] Chain exists of: [ 153.788458][ T9259] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 153.788458][ T9259] [ 153.802178][ T9259] Possible unsafe locking scenario: [ 153.802178][ T9259] [ 153.809611][ T9259] CPU0 CPU1 [ 153.814957][ T9259] ---- ---- [ 153.820301][ T9259] lock(&q->q_usage_counter(io)#49); [ 153.825666][ T9259] lock(fs_reclaim); [ 153.832151][ T9259] lock(&q->q_usage_counter(io)#49); [ 153.840031][ T9259] lock(pcpu_alloc_mutex); [ 153.844517][ T9259] [ 153.844517][ T9259] *** DEADLOCK *** [ 153.844517][ T9259] [ 153.852644][ T9259] 6 locks held by syz.1.811/9259: [ 153.857648][ T9259] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 153.865814][ T9259] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 153.874757][ T9259] #2: ffff88802632d9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 153.886147][ T9259] #3: ffff88802632d8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 153.897104][ T9259] #4: ffff888025fb72c0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 153.907799][ T9259] #5: ffff888025fb72f8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 153.918753][ T9259] [ 153.918753][ T9259] stack backtrace: [ 153.924639][ T9259] CPU: 0 UID: 0 PID: 9259 Comm: syz.1.811 Not tainted syzkaller #0 PREEMPT(full) [ 153.924654][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.924669][ T9259] Call Trace: [ 153.924675][ T9259] [ 153.924681][ T9259] dump_stack_lvl+0xe8/0x150 [ 153.924701][ T9259] print_circular_bug+0x2e1/0x300 [ 153.924724][ T9259] check_noncircular+0x12e/0x150 [ 153.924746][ T9259] __lock_acquire+0x15a5/0x2cf0 [ 153.924770][ T9259] lock_acquire+0xf0/0x2e0 [ 153.924785][ T9259] ? pcpu_alloc_noprof+0x218/0x19c0 [ 153.924803][ T9259] __mutex_lock+0x19f/0x1300 [ 153.924816][ T9259] ? pcpu_alloc_noprof+0x218/0x19c0 [ 153.924831][ T9259] ? stack_depot_save_flags+0x3f3/0x810 [ 153.924849][ T9259] ? kasan_save_track+0x4f/0x80 [ 153.924862][ T9259] ? kasan_save_track+0x3e/0x80 [ 153.924875][ T9259] ? pcpu_alloc_noprof+0x218/0x19c0 [ 153.924888][ T9259] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 153.924902][ T9259] ? blk_mq_init_tags+0x83/0x2d0 [ 153.924919][ T9259] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 153.924933][ T9259] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 153.924949][ T9259] ? __pfx___mutex_lock+0x10/0x10 [ 153.924960][ T9259] ? genl_rcv+0x28/0x40 [ 153.924972][ T9259] ? ____sys_sendmsg+0x972/0x9f0 [ 153.924984][ T9259] ? ___sys_sendmsg+0x2a5/0x360 [ 153.925000][ T9259] pcpu_alloc_noprof+0x218/0x19c0 [ 153.925019][ T9259] sbitmap_init_node+0x1e1/0x640 [ 153.925042][ T9259] sbitmap_queue_init_node+0x3e/0x4d0 [ 153.925063][ T9259] blk_mq_init_tags+0x15c/0x2d0 [ 153.925081][ T9259] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 153.925097][ T9259] ? kfree+0x1c1/0x630 [ 153.925108][ T9259] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 153.925124][ T9259] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 153.925145][ T9259] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 153.925164][ T9259] ? sysfs_add_file_mode_ns+0x259/0x300 [ 153.925183][ T9259] nbd_start_device+0x17f/0xb10 [ 153.925204][ T9259] ? device_create_file+0xf4/0x1b0 [ 153.925223][ T9259] nbd_genl_connect+0x165b/0x1cf0 [ 153.925245][ T9259] ? __pfx_nbd_genl_connect+0x10/0x10 [ 153.925266][ T9259] ? rcu_is_watching+0x15/0xb0 [ 153.925287][ T9259] ? __nla_parse+0x40/0x60 [ 153.925306][ T9259] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 153.925323][ T9259] genl_family_rcv_msg_doit+0x22a/0x330 [ 153.925339][ T9259] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 153.925357][ T9259] ? __lock_acquire+0x6b5/0x2cf0 [ 153.925374][ T9259] genl_rcv_msg+0x61c/0x7a0 [ 153.925389][ T9259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.925401][ T9259] ? __pfx_nbd_genl_connect+0x10/0x10 [ 153.925419][ T9259] ? __lock_acquire+0x6b5/0x2cf0 [ 153.925438][ T9259] netlink_rcv_skb+0x232/0x4b0 [ 153.925457][ T9259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.925470][ T9259] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.925491][ T9259] ? down_read+0x272/0x2e0 [ 153.925504][ T9259] ? genl_rcv+0xd/0x40 [ 153.925516][ T9259] genl_rcv+0x28/0x40 [ 153.925527][ T9259] netlink_unicast+0x80f/0x9b0 [ 153.925546][ T9259] ? __pfx_netlink_unicast+0x10/0x10 [ 153.925561][ T9259] ? netlink_sendmsg+0x650/0xb40 [ 153.925577][ T9259] ? skb_put+0x11b/0x210 [ 153.925597][ T9259] netlink_sendmsg+0x813/0xb40 [ 153.925617][ T9259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.925635][ T9259] ? aa_sock_msg_perm+0xf1/0x1b0 [ 153.925652][ T9259] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 153.925668][ T9259] ____sys_sendmsg+0x972/0x9f0 [ 153.925683][ T9259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.925698][ T9259] ? import_iovec+0x73/0xa0 [ 153.925720][ T9259] ___sys_sendmsg+0x2a5/0x360 [ 153.925734][ T9259] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.925757][ T9259] ? __fget_files+0x2a/0x420 [ 153.925775][ T9259] ? __fget_files+0x3a0/0x420 [ 153.925797][ T9259] __x64_sys_sendmsg+0x1bd/0x2a0 [ 153.925810][ T9259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.925822][ T9259] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 153.925843][ T9259] ? do_user_addr_fault+0xc6f/0x1340 [ 153.925864][ T9259] do_syscall_64+0x14d/0xf80 [ 153.925876][ T9259] ? trace_irq_disable+0x3b/0x150 [ 153.925895][ T9259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.925909][ T9259] ? clear_bhb_loop+0x40/0x90 [ 153.925923][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.925936][ T9259] RIP: 0033:0x7f216c59c799 [ 153.925953][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.925965][ T9259] RSP: 002b:00007f216d425028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.925979][ T9259] RAX: ffffffffffffffda RBX: 00007f216c816090 RCX: 00007f216c59c799 [ 153.925988][ T9259] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 153.925997][ T9259] RBP: 00007f216c632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 153.926006][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.926013][ T9259] R13: 00007f216c816128 R14: 00007f216c816090 R15: 00007ffe3c81e208 [ 153.926028][ T9259] [ 154.415798][ T9274] __nla_validate_parse: 2 callbacks suppressed [ 154.415815][ T9274] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.815'. [ 154.478994][ T5834] block nbd0: Receive control failed (result -32) [ 154.485507][ T5834] block nbd0: Receive control failed (result -32) [ 154.493294][ T5830] block nbd0: Receive control failed (result -32) [ 154.493306][ T51] block nbd0: Receive control failed (result -32) [ 154.518927][ T9259] nbd0: detected capacity change from 0 to 63 [ 154.536868][ T5810] block nbd0: Dead connection, failed to find a fallback [ 154.559582][ T5810] block nbd0: shutting down sockets [ 154.564790][ T5810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.585089][ T5810] Buffer I/O error on dev nbd0, logical block 0, async page read [ 154.593989][ T5810] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.603569][ T5810] Buffer I/O error on dev nbd0, logical block 1, async page read [ 154.611450][ T5810] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.622730][ T5810] Buffer I/O error on dev nbd0, logical block 2, async page read [ 154.630521][ T5810] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.643323][ T5810] Buffer I/O error on dev nbd0, logical block 3, async page read [ 154.651240][ T5810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.660920][ T5810] Buffer I/O error on dev nbd0, logical block 0, async page read [ 154.668718][ T5810] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.678622][ T5810] Buffer I/O error on dev nbd0, logical block 1, async page read [ 154.686371][ T5810] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.695963][ T5810] Buffer I/O error on dev nbd0, logical block 2, async page read [ 154.703739][ T5810] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.713327][ T5810] Buffer I/O error on dev nbd0, logical block 3, async page read [ 154.721151][ T5810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.730778][ T5810] Buffer I/O error on dev nbd0, logical block 0, async page read [ 154.738548][ T5810] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.748099][ T5810] Buffer I/O error on dev nbd0, logical block 1, async page read [ 154.756274][ T5810] ldm_validate_partition_table(): Disk read failed. [ 154.763526][ T5810] Dev nbd0: unable to read RDB block 0 [ 154.769533][ T5810] nbd0: unable to read partition table [ 154.778071][ T5810] ldm_validate_partition_table(): Disk read failed. [ 154.785328][ T5810] Dev nbd0: unable to read RDB block 0 [ 154.791306][ T5810] nbd0: unable to read partition table