last executing test programs: 3.840916721s ago: executing program 3 (id=4907): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="1400000016000b63d25a80f77311d12022508ec9a280c1877fb9494b3efd6422b3a1471c070000000000000036a8ec7284e9dfa4b143947091460dfed9682a69b7bf85496a94ac7112c28b08d44b0045d1fcb429e2ec1e9c50e35076de3005251d18ff1c7cc04617871e6bf72833bbcb401f3b770a565f40920055535cd3bf29b167a87d03372f25f602f6d4241d514230dbedc2fbf390266b0d031f00977dc116e966d4b0c2106b8febbfc97038253fc92255723d706166950fa8", 0xbb}], 0x1}, 0x20000080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6005}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x29, 0x7, 0x1, 0x0, "59e73d6066a3336fea9cf849c356a54fdb5ee62ba567e8a81582c23d2be58141d91f336869"}]}], {0x14}}, 0xac}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="1000ff010000150f2abd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20004008) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xa, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @mss={0x2, 0xff}], 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='vlan0\x00', 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r3, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x1ff, 0x4) close(r5) syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x0, 0xa, 0x3}) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000001f0000070000000900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f44001280200001800a00010071756f7461000000100002800c0001400000000000000009200001800e000100636f6e6e6c696d69740000000c00028008000140000007ff0800034000000106340000000c0a01040000000000000000070000010c000380080000800400018009"], 0x104}}, 0x20050800) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000200)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000041000100fcff070004000000010000000400488014000180100010800c0000000300000000000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3.835491313s ago: executing program 3 (id=4913): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="832887dd13d0677893f5ff28f28c24d6343c2c18f949cf1447af1c6eabfcaea5daa9b559ae4b76f792b47aca3588b222", @ANYRES16=r0, @ANYBLOB="000425bd7000fedbdf25820000000c009900c300000080000000"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20048005) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) socket$kcm(0x2c, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000000108010400000000000000000500000805000302110000000900010073797a30"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20e9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x8}]}}}]}, 0x3c}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="3000000000000000840000000100000006000000040000b700a7d6b32f010261e8b6d9a3572f041d17e963dcbe"], 0x30}, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0x4, 0x2e}}], 0x38, 0x800}], 0x1, 0x4008080) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000004c0)=""/75, 0x93e000, 0x1000}, 0x20) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1800}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xb6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) close(r8) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bdfbfffcdbdf251d0000001800018014000200626f6e645f7300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bind$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r1, 0x0, 0x10001) 3.835102316s ago: executing program 4 (id=4914): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) getsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3.154143855s ago: executing program 1 (id=4917): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r0, 0x5c2a7000) openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x7f}, [@generic={0x81, 0x1, 0x1, 0x6b}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x50, 0x0, 0x0, 0xffeffffc}, {0x6, 0x0, 0x0, 0x8}]}) write$ppp(r2, &(0x7f0000000300)="5af9", 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x9, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0x11, 0xffffffff, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xa4f, 0x2, 0xc, 0x3, 0x0, 0xffffffef, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x71d, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x0, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x8, 0x4, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xa000, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0xfffffffe, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x7f, 0x385, 0x400, 0x100, 0x2, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x39, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x9, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x2, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x10001, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0x8, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff26, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x3, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000010000104000000000f00000000000000", @ANYRES32=0x0, @ANYBLOB="000004007573443b4c0012800b00010069703667726500003c000280080004006d00000008000d00b0ed000006000200060000000500080001000000060010004e210000060011"], 0x6c}}, 0x40000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @fwd={0x7}, @func_proto, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x61}, 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x7, 0x6, {{0x37, 0x4, 0x2, 0x8, 0xdc, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @loopback, {[@noop, @noop, @timestamp_prespec={0x44, 0x3c, 0xb9, 0x3, 0x5, [{@broadcast, 0xff}, {@private=0xa010101, 0x788}, {@local, 0xfffffffe}, {@rand_addr=0x64010102, 0x633}, {@private=0xa010102, 0xc}, {@multicast2, 0x30}, {@remote, 0x40}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xc, 0x1, [{0x4, 0x3, '&'}, {0x2, 0x3, '1'}]}, @timestamp_prespec={0x44, 0x34, 0xc3, 0x3, 0x8, [{@remote, 0x1}, {@multicast1, 0x7}, {@rand_addr=0x64010101, 0x8}, {@empty, 0x8}, {@broadcast, 0x9}, {@remote, 0xf}]}, @timestamp_addr={0x44, 0xc, 0x47, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0x34, 0xad, 0x1, 0xc, [{@broadcast, 0x4}, {@remote, 0x7}, {@broadcast, 0x3}, {@local, 0x6}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @end]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="5c766b0b2cf7cb228981f6a9a38c4c0a3f16209f49246b282e0cc6a75c79188a6bc2dc9712a95f6b687eae4dd0de88eaa5bc7e04aae6f327f69fb188e8e2bbc0353ff6b46fadb7d60ada2ba1a29937b82c565876871bbaaaed1e6144e54e24ac8f596136d1548cbe141e244033f355ae880dd6c1", 0x74, 0x2, &(0x7f0000000400)={0x11, 0xf7, r11, 0x1, 0x4}, 0x14) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) 3.094808015s ago: executing program 3 (id=4918): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x1ff, 0x7, {{0x10, 0x4, 0x2, 0x4, 0x40, 0x66, 0x0, 0xe6, 0x4, 0x0, @empty, @local, {[@generic={0x0, 0x4, "fdb3"}, @timestamp_addr={0x44, 0x1c, 0xf8, 0x1, 0x8, [{@empty, 0x3c7}, {@multicast2, 0x4}, {@remote, 0x6}]}, @noop, @generic={0x94, 0xa, "a6e3bbb9b998ffeb"}, @end]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newtclass={0xb4, 0x28, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x7, 0xe}, {0x0, 0x10}, {0x4, 0xf}}, [@tclass_kind_options=@c_htb={{0x8}, {0x4c, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x7f}, @TCA_HTB_PARMS={0x30, 0x1, {{0x70, 0x0, 0x5, 0xa28, 0x5, 0x6}, {0x6, 0x1, 0x58, 0xc, 0x1, 0x2}, 0x3, 0x9, 0x7f, 0x10001, 0x7}}, @TCA_HTB_RATE64={0xc, 0x6, 0xfffffffffffffffc}]}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x81}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x200}}}, @tclass_kind_options=@c_cake={0x9}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000280)=r2) pselect6(0x40, &(0x7f00000002c0)={0xffffffffffffffff, 0x9, 0x6, 0x81, 0xf2, 0x9, 0x0, 0xfffffffffffffff4}, &(0x7f0000000300)={0x7fffffffffffffff, 0x400, 0x2000, 0x5a1f8b43, 0x0, 0xb4, 0x2, 0x8}, &(0x7f0000000340)={0x4, 0x0, 0x14afe0000000000, 0x40, 0x2, 0x8000000000000001, 0x4, 0x7b34}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x3]}, 0x8}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000480)=0xffffffffffffffff, 0x4) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=[{0x8000, 0x0, 0xb, 0xa}, {0x0, 0x28, 0x3, 0x3}, {0xf, 0x38, 0x2}, {0x7, 0x6, 0x8, 0xfffffff7}]}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NFT_BATCH(r1, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x301, 0x0, 0x0, {0x8, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xa7}]}]}, @NFT_MSG_DELOBJ={0xc8, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0x8c, 0x8, "2922c78ea96364dcd7fa98761e4d6dc21ba41733f33a523c7ba784811cf0e4d71ae355c040db4da06e0911b192d69cb54eaf8192885dc3d978eab393e462cea06400200806aebb0be746021f2216bd7c97ef41fc3035f568209fc365d2d65b0413b7f7cdae4c1577feab1d5f1ab4ad4c5cf8fb9a1c862248665054877a96e7bc7634eff3004dcb0c"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x178}, 0x1, 0x0, 0x0, 0x810}, 0x4008800) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x3, 0x2, 0x4148adfe}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000000900)={r1, &(0x7f0000000800)='\x00', 0x200000, &(0x7f0000000840)={@_ha_fsid={[0x56b2, 0x9]}, {0x100, 0x6, 0x5, 0x7fffffffffffffff}}, 0xfffffff1, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x6}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000940)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000d40)={0x0, 0x2, 0x9}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001140)={0x8, 0x2, {0xfffffffffffffffa, @struct={0x5, 0x4}, r6, 0x7ff, 0xffff, 0xa5, 0x8, 0x2, 0x0, @struct={0x72d5, 0x5}, 0x4, 0xdd, [0x0, 0x8, 0x8, 0x6, 0x2, 0x100]}, {0x5, @struct={0x5, 0x1}, r7, 0x944d, 0xe1a, 0xcda7, 0x12, 0x6, 0x402, @usage=0x8, 0x9, 0x5, [0x0, 0x4, 0x8, 0x6, 0x7, 0x285d]}, {0x5, @usage=0x6, 0x0, 0xff, 0x5, 0x9, 0x4, 0x3ff, 0x10, @struct={0xd2cb, 0xf9b4}, 0x73, 0x49ba, [0x8, 0x3, 0xfffffffffffffff9, 0x9, 0x7fffffffffffffff, 0x4c]}, {0x5, 0x5, 0x7}}) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000001540)) r8 = socket(0x21, 0x5, 0x4) bind$inet6(r8, &(0x7f0000001580)={0xa, 0x4e20, 0x200, @private1, 0x1}, 0x1c) bind$bt_hci(r8, &(0x7f00000015c0)={0x1f, 0xffffffffffffffff}, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001600)={{{@in6=@remote, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000001700)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001740)={{{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x800, 0x4e24, 0x3, 0x2, 0x0, 0x0, 0x3c, r0, r9}, {0x9, 0x771, 0x67e577f4, 0x3, 0x9, 0x6, 0x100000000, 0x1}, {0x6, 0x8000000000000001, 0x1, 0x90b}, 0x0, 0x6e6bb2, 0x1, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0xff}, 0x2, @in6=@local, 0x3504, 0x1, 0x0, 0x0, 0x4, 0x6, 0x9}}, 0xe8) ppoll(&(0x7f0000001840)=[{r3, 0x4000}, {r4, 0x8420}, {r8, 0x4080}, {r5, 0x5f452a0463177447}, {r1, 0x4}], 0x5, &(0x7f0000001880)={0x77359400}, &(0x7f00000018c0)={[0x7ff]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001900)) connect$inet6(r8, &(0x7f0000001940)={0xa, 0x4e20, 0x0, @empty, 0x81f8}, 0x1c) socket(0x27, 0x80000, 0x1) 2.994406518s ago: executing program 4 (id=4920): r0 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e000"], 0x20000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000080)=0x80) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r7, &(0x7f0000000400)="0000ffffffffffff", 0x8, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) 2.948311097s ago: executing program 2 (id=4921): r0 = socket(0x1e, 0x805, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000400)={0xfffffffc, 0x4, 0x5, 0x81, 0x85}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000000c0)={"d0942af5df8606a6af15b416ea66c7e1", 0x0, 0x0, {0x1, 0x1}, {0x1, 0x3}, 0x9, [0xfff, 0x6, 0x1, 0x3, 0x5, 0x6, 0x8, 0x7, 0x198, 0x80, 0x9, 0x6, 0x2, 0x7fff, 0x10000, 0x35]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x200, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x20, 0x80, 0x7, 0xfe, 0x3, 0x36, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8800) unshare(0x2a060400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e00"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 2.770556833s ago: executing program 2 (id=4924): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x0, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11, 0x1000000}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_newroute={0x60, 0x18, 0x100, 0x70bd2a, 0x25dfdbfc, {0xa, 0x14, 0x20, 0x2a, 0xff, 0x2, 0xc8, 0x4, 0x1600}, [@RTA_MARK={0x8, 0x10, 0x6}, @RTA_IIF={0x8, 0x3, r7}, @RTA_EXPIRES={0x8, 0x17, 0x3}, @RTA_ENCAP={0x1c, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x18, 0x1, [{0x9, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x6}, {0x1ff, 0x0, 0x1}, {0xd}]}}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_UID={0x8, 0x19, r12}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x20008000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe(&(0x7f0000000000)) r13 = socket$can_raw(0x1d, 0x3, 0x1) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r14, 0x1, 0x1, &(0x7f0000000340)={0x7}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) getsockopt$CAN_RAW_LOOPBACK(r13, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.713345417s ago: executing program 4 (id=4925): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) syz_emit_ethernet(0x535, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x4ff, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7", 0x7, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000002c80)=ANY=[@ANYBLOB="cc060000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="400002803c000100240001006c6212d8357c805f74785f6d6574686f640000001b000000000000000000050003000500000009000400686173680000002e938aaacaafb7b3084599c3e94ccf86662bd056e163fe121852be56f7f3c0ac3f7a13ea6b6c639cb77eb24b84a31530a749a9fe8827e1abbf3580a936", @ANYRES32=r2, @ANYBLOB="f401028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000010000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040002", @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="8402028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040007000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000001000008000600", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400e600000008000600", @ANYRES32=r2, @ANYBLOB="4c000100240201006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019683aee4ea4679106ca2a3ea8000400689904d1dfcdfd536173685f856f5f706f72745f6d617070696e67000000003c00010024000100656e61626c656400"/126, @ANYRES32=r2, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=r2, @ANYBLOB="c800028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400050000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040002005c0007000000f20008050800000004000107fbffffff", @ANYRES32=r2, @ANYBLOB="c0000280400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300033700000000000000ffffff08000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f74785f686173685f746f7d706f72745f6d617070696e67000000000000050003000300000008000400ba8520ac7f5e58702da6548eee1fcfc26a9ec203dedd7818cb9a9bda2cccc0a470ae7ae7d8e540a03ea56a72543a215def97a308ca38470e94f5acfcc9cb0df497f5d75dd4c576e0b201bb105bd865ca8cc160269c4a1138f2f7d66df273b168bc3bf398a81ea29cb8cc2642883d54ef6563a48b9f0904a5c526cd4b4a7ea147f73c1039e6d4290c104da294a158081336c7037d30a8", @ANYRES32=r2, @ANYBLOB="080400000000000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400faffffff08000100", @ANYRES32=r2, @ANYBLOB="04000280"], 0x6cc}, 0x1, 0x0, 0x0, 0x44}, 0x41) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x0, @private=0xa010100, 0x4e21, 0x4, 'lc\x00', 0x5, 0x8, 0x74}, {@multicast2, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r6, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x24040000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)=ANY=[], 0x0, 0x3c, 0x0, 0x1, 0x5}, 0x28) 2.656745275s ago: executing program 1 (id=4926): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800001301"], 0x48) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) close(r4) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 2.479021565s ago: executing program 3 (id=4927): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0xffffff00) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000400000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000001000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x8, 0x7, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/7, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x6, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) unshare(0x28000600) r10 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r10, 0x0, 0x53, 0x0, &(0x7f0000000080)) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)=0x3) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) sendmsg$IEEE802154_SET_MACPARAMS(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x14, r12, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8c4) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0x0, 0x5}, {0x6, 0x60, 0x0, 0x8}]}) ioctl$PPPIOCSDEBUG(r9, 0x40047440, &(0x7f0000000240)=0x6) write$ppp(r9, &(0x7f0000000300)="5af9", 0x2) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64=r5], 0x2c}, 0x1, 0x0, 0x0, 0x20004851}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) close(r0) 1.915615432s ago: executing program 4 (id=4928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000}, 0x8c0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xfff7, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r8, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x2004c890) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x42) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) 1.873171635s ago: executing program 0 (id=4929): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400001d000080000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e0000", @ANYRES32, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_newroute={0x3c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, 0xfd, 0x0, 0xc8, 0x7}, [@RTA_GATEWAY={0x14, 0x5, @private0}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x10, 0x80}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@delqdisc={0x1c0, 0x25, 0x200, 0x70bd25, 0x25dfdbf8, {0x0, 0x0, 0x0, r6, {0xd, 0xffe0}, {0xffff, 0xfff2}, {0x6, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}, @qdisc_kind_options=@q_atm={0x8}, @qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x9}]}}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0x3, 0x8000, 0x1, 0x6, 0x5, 0x1}}, {0x6, 0x2, [0xffa8]}}, {{0x1c, 0x1, {0x2, 0x9, 0x6, 0xc, 0x2, 0x6, 0x2, 0x5}}, {0xe, 0x2, [0x3ff, 0x5, 0x0, 0x5, 0x5]}}, {{0x1c, 0x1, {0x3, 0x6, 0x1b91, 0x7, 0x2, 0x401058d3, 0x5, 0x2}}, {0x8, 0x2, [0x1003, 0xa9]}}, {{0x1c, 0x1, {0x5, 0x1, 0x6, 0x1, 0x0, 0x6, 0x8, 0x5}}, {0xe, 0x2, [0x2, 0x9, 0x8, 0x2, 0x80]}}, {{0x1c, 0x1, {0x4b, 0x5, 0x4, 0x6, 0x1, 0x0, 0x81}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x2, 0x9, 0x4, 0x1, 0x410, 0x8, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0x1b, 0xb, 0xf9b7, 0x6, 0x0, 0xfffffffe, 0x2, 0x6}}, {0x10, 0x2, [0x2, 0x7, 0x7fff, 0x800, 0x100, 0x7]}}, {{0x1c, 0x1, {0x7, 0xe, 0x5, 0x4, 0x2, 0xff, 0x5, 0x3}}, {0xa, 0x2, [0x8, 0x3, 0xfffb]}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc) socket$rds(0x15, 0x5, 0x0) ioctl$XFS_IOC_GOINGDOWN(r8, 0x8004587d, &(0x7f00000000c0)=0x247) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r10, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c659900", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000002c00"/20], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.746532167s ago: executing program 1 (id=4930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r2, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v&U', 0x3}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r7}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) syz_emit_ethernet(0x3e, &(0x7f00000043c0)=ANY=[], 0x0) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)={0x480, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x386, 0x12, 0x0, 0x1, [@generic="d660088e59148c15ec5cfe605079a22cb53caa207f3231d4453a2b7a18a1eb6dd13d27414baa179bf659f92c16aa9782ace808bff2b6f2b5e9a4b0f94d110648c1213c6de5f9a5c0d5d4519cb3ff8a6978ab39666b84d81d089bbaa5842b29710029", @generic="5ef33c5881b467b1c3336abae16cea01b7897b4d5bea8b752eba6b05228e3e1a1a13023bcc9966cd69da58eadaff5d7aac32bdc0b7a34d58cd7c954adc20980e79058129ee46d5152bffd0be713686d559c72ed54d522e8287d4a7ebadbba1ce525ce05f09ad8108bc07c4b5850d73749ebb04910e3c92cfa46f5e8491a5f033f3980d04af1937c8590dd34d8f6ab0b699e60fcd12ae4fc6b762099a3f206d6ad33eaee0275a8d582c7e870be5ac4c23172ca6421200f9634a97ac0210dfbfe49654c7111fe3f0ecf2ad", @generic="b3cd529ea4734fe79d090d69b88b1424cc9d7572d115d615fff952f84d5b7265b6f5a9c75c794cad0ceffae4987d2d46ca671e2c8254891680ef25a5a304ec3705f94b1327cc3146637fb76c5d7beb95bf5cdf0f958a66f92e210934cd8d618dd1b34aeee11a90a80e1be05846f1dbf6f54b520454a70377a6e85c86bb4c185975a9975e0909a31e93973a932fee9897c301f3ac968b273df659284232346022f849ae500f02d246f8e8", @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xc, 0xbc, 0x0, 0x0, @u64=0x7fff}, @nested={0x121, 0x7f, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @fd=r8}, @generic="4aa09a56f27e3acd33292354d3cfa790e9c5debfa7c910fa80d4745f8a3cde17941fc93d3fbe21731fd25e751e67002586718d147f80a0a4d46641530deda85a23bc7bf30f0936dc49d64b0e5d689d104db9d8664a995001c88fb490999111137441147951a462ae1d252a7279294eef0963f454b213d1c47f2f17f27b330f7d8eae9efbb7acefaeb6efe144c21b6bc1be9d145c61d02a225c42be1d2b1386", @generic="db9f40088b9b618b5785445a6dfeead00581c4b87c27e3e711c86b87e2ad3857ef611363c1524bcf6cacc552dffe725212e4606370e810f53e56c4532d3398ccf6ea0b556af8aeaa304e97f91b002c1bc569a1f6393da5bc3591afc4b61234308d3b64df271ed5d44841d1696fa655d0ad0ecb913a3f"]}, @nested={0x73, 0x86, 0x0, 0x1, [@nested={0x4, 0x8f}, @typed={0x8, 0x132, 0x0, 0x0, @fd=r5}, @generic="be4f85fbc1cfac396b2f660869c7172735dc1f5bd74472a7ff49135e99984ae1ee1712e872a57d8b3ed46f1ff5e1ccf048d5fe05c2347fe3e1da042e3092ca24e5e69a942e114574806bf0f36594a57e0869fb", @typed={0xfffffffffffffdbf, 0xb2, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x53}]}]}, @nested={0xe4, 0x9, 0x0, 0x1, [@typed={0xe0, 0xae, 0x0, 0x0, @binary="360548c8d9f4eee1ca50bb994780dbddeff50ede01eaacd2377ebf9fd2f688ae240bd3c7068e6c41827a8adc17830b1b4bf58aa87445b7ef440f2eeed0820e9989ff4f8f0321f4a450647d04eec8d852cb6cd63dc3f968a906f9bfaa60b9364a8e0c82bda6f2e6ee3b849dcb714dd160a9cbb6b18196775d4a1fcda88078cd6b3674439123dc74d2b4e468149dbc953c32c1583688d3951a8d92a49120c8ff566c5cd4a18becdfa152db8873cc188f71463216b50782e042d2d643465118dcaec7092c642b0d633fa74cf124e75c6d938cf1ced47a5f0f8d805df3bb"}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.734790208s ago: executing program 2 (id=4931): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x9, 0x0, @void}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000a80)={0x0, 0xfffffffffffffe40, &(0x7f0000000a40)={&(0x7f0000000000)={0x24, 0x0, 0x603, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0x38, 0x0, 0x200, 0x7ae, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x14000) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000003cec8293cf119ac4d909e691954c03a6eb3cf7bb9f5962537f6fbf64d357fbc588c72623d10b919750eec93e6bad0b4e0d6ec13f45e4ba1b44c415afbcc4ad2c275451d5ee68ab43f45a0ea7efa95e4c68b1571c54274898c2c27ccd30974bf56b1d0aa98416e084637d2e32296d49ce8ca75b9c2419d5447672a", @ANYRES16=r7, @ANYBLOB="110b00000000fedbdf2524000000"], 0x14}}, 0x8000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000000010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000002"], 0xf}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r9, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r3}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0xffffffffffffffb2, 0x0, 0x0, 0x3}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c00000400fc800c000180080106fe", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c3ff0000000000002400128009001100626f6e640000000014000280fdffffffffffffff0500010006000000"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r2, 0x0) 1.540210504s ago: executing program 0 (id=4932): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/4109, 0x100d}, 0x40002120) close(r6) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_proto_private(r8, 0x89e0, 0x0) 1.43469392s ago: executing program 0 (id=4933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000004000000000800040001000000", 0x24) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000001a00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00100", 0x18, 0x0, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, {[@routing={0x3a, 0x2, 0x1, 0x0, 0x0, [@private2]}]}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="08000500020000000500530001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002500010026bd7002ffdbb9250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4048854}, 0x40044) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r9, 0x4048587b, &(0x7f0000000bc0)={{0xffffffffffffffff, &(0x7f0000000080)=']1$\\\x00', 0x40, &(0x7f00000000c0)={@align=0x800, {0x400, 0x6, 0x6, 0xffffffff}}, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x3}, 0x7, &(0x7f0000000ac0)=[{0x1, 0x5a577919, &(0x7f0000000340)='\x00', &(0x7f0000000500)="c1dfbafbff4b31e8bfdbd279a65aee9eb3d0363dc25823ffd161255a527c281cf613386c92bee6d1f8be409fe0311ebfb14d94cb79d875464a2942753ceead9938db3caa0e1a4f7cff3553b9cd9ba945c2d0a1b552c07c4d20463e61370266aa49fec515a0c2d7d238892921ea6e9d6f7345568c720109821b6d9f93075e54657416d00036bcaf5430d3236ebb0bdb7a7c75d58cb97687c5f1678056bc75cabd15ca9e86251f47826843673852f7e899f709effe7c9a2a46a66a8928f7b6305a42d1e6563a521e81734d55c608752584e6aa5305db492a8b8aa7", 0xda, 0x18}, {0x3, 0x80000, &(0x7f0000000600)='{*\x00', &(0x7f0000000640)="0480747e1150f925a3ac35faa9dec1ea4b749fcba9c1a68f9149b0bb6c9badf203532bd814107f526c42b08e00262131c27a48c10224cd07c87d9b0b11aa0fab", 0x40, 0x24}, {0x6, 0x56bf, &(0x7f00000006c0)='\'}[$%\'\x00', &(0x7f0000000700)="70ce817d148fddc41f8c1504d80cf1add80a945134e6b781ae48ce343cef6207e3a5e8e986ee524d6564f089aeed0e5e686fc24d0b54eb304d8bdb73d4549f2a049cc993e81f4685bfe01ebe2390e518d529a4c80533b069e1b0944c0cc473e80d03463eb5c2dd0cee5759ef1cd376e6ba128ffbd3a418cb2278f6d5e8ea02561e68515e2c788d54067ad0c63b7fda91f482eee29690365f29e3a96bc98211587dc7a725225c58cc8d28ac28d2ca4381b3e8bb5d18cb1fcd40bdce55c8b457eb9282e092ad18c0ef6fea2abf54f78d6826ebb73a9c84cd31bed42221c81ee42c22", 0xe1, 0x2}, {0x2, 0x5, &(0x7f0000000800)='\\@{+\\.-\x00', &(0x7f0000000840)="b259a0db4d1decace9a7f6c45eb81f3a5b7bc39e11e82e57e724e4ce341c0b3a7ce47879fec004bc36666436a63491af9c675734f7ebd47408329a2043dd155137f979e24799f5b6769dd215038de519c63e732397a6b6180be554", 0x5b, 0x20}, {0x2, 0x40, 0x0, &(0x7f0000000380)="00007e51c1e72fd40d6409de8b253258ceefaf2d655d5c11d1b0ad0417e24b2760c4bc9ad8bfdac35f14b662560207652a1c168470bf8cb18d8204ed305f53", 0x3f, 0x8}, {0x2, 0xe54, &(0x7f0000000940)='[,/\x00', &(0x7f0000000980)="149383f5cbba8c9a254e82b2", 0xc, 0x1a}, {0x3, 0x80000001, &(0x7f00000009c0)='\x00', &(0x7f0000000a00)="d44bf060a68b5d694be07d50760f01f742a2821e2cfc49d8c71038e1c8289369d3f2ea6b403fd50cd1b23eb4d653dd4c01ba2c12a1940fdde5716bb9f95abaaca17a1dae3ed353954a3a2909c438f4b161f2c8ac722ecb178015447fc1ad5c1a3ad4b7b51ca6d0f75f28901ded5db000bb56f48fc354337b10bb9006842f2d3d2b696d350bdfe844320e0af88e1d2eeb9beb59a3f79cbb5491069626eb8cf7da401472bf3cba7e649262983b68a397c694", 0xb1, 0x32}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e80)={'syztnl1\x00', &(0x7f0000000e00)={'syztnl0\x00', 0x0, 0x4, 0xea, 0x9, 0x80000001, 0x0, @local, @mcast1, 0x7, 0x611ac25b2c3866aa, 0x200, 0x3137}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x16, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000dc0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', r13, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000f00)={0x4, 0x8, 0x9, 0x89}, 0x10, r14, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38147316}, 0x94) 1.155348529s ago: executing program 1 (id=4934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000f9ff0b9bffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc0adcb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_int(r1, 0x1, 0x2b, 0x0, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1c, r4, 0x10, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000040)="05000000010000", 0x7) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r8 = getpid() write$cgroup_pid(r7, &(0x7f0000000180)=r8, 0x12) write$cgroup_pid(r7, &(0x7f00000001c0)=r8, 0xfffffffffffffdd1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r10, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r10, 0x1000) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0xfffffffffffffffa) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x1, @remote}, 0xa}}, 0x26) 1.090873948s ago: executing program 3 (id=4935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x2000810) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff00000005001f0001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000002a40)={0x0, 0x7, 0x20, 0x100, 0x8}, &(0x7f0000002a80)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000002d80)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x1, 0xb}, &(0x7f0000002e40)=0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x164, 0x30, 0x1, 0x0, 0x0, {}, [{0x150, 0x1, [@m_mpls={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x18}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x4, 0x4}, {0xc}, {0xc}}}, @m_mpls={0x104, 0x6, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xffffffff, 0x7, 0x4, 0x2, 0xe}, 0x3}}]}, {0xb4, 0x6, "dc4f947ce3b072695f95ce7e739e6e499a9b1d907b5a4f4185f0d27db8dffe1aa098cce75d48a2f73bf24d033f0ffe6c4fc84e47eddf6e5c0647b7f4a76e492e6568f119bcac73d6343b18013970f640b1d956b7467a36488e7a882337040ecec2278a08860e3652f6eb327176b508d59398bb6869e621546a31f380b6b2bd6a2885d37eff6ea6d032cce882877a2f9acb4424c8ecb74ed274bfce4065334c0fde5c40370fceb0dfc6ba8f55149519df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000011}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000004740)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x5, 0x101, 0x8, 0x4, 0x22, 0x0, 0x4}, &(0x7f0000004800)=0x9c) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r9, 0xfffffc48}, 0x8) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x82, &(0x7f0000000300)={r11, 0x10, 0x7}, 0x8) sendmmsg$inet_sctp(r2, &(0x7f0000004d00)=[{&(0x7f0000000280)=@in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}, 0x2}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000000380)="5ae132a179e90a3fafe72e833662e57eda7a383aad3f767d4ed7e155f1cd05ac87796ce14df9e51758e6f66334a95d2882555070da1800be8452a5e4271aa286cf0a56be82afaa4424366ec193be8c7a3066da63d14f0e6fe13031b40f", 0x5d}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="8a5169dfed66a6274fef0a8270e627b7dcd23f2a84bd57fd26d7b60a2218ce4daf3eb997990150ff19ec67ff16e4bd9dc34528400a0c72000a19bff6e4257c06b12046fab6183162147fee1e1570478eb36b6ec9a142f3282c94031980e6e7de0f1dde1d9312e1d778ca50533f5b54f78d68776f255d80fc1ae006ff8fbd84e380f536d1cab4d1a86d557dee5bf2dabfd2a6cc40ccdedc2d413af25962cf5bb7ea5679066200fc55ec7497bf8c2df903dfa8f5a0dab399c3ef9b19c5", 0xbc}, {&(0x7f0000001a00)="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", 0x1000}], 0x4, &(0x7f0000002ac0), 0x0, 0x40000}, {&(0x7f0000002b00)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000002b40)="f02ab7f7112ee5b76520fc3b93c9275421e10d98be663524ac96bafdd8aee4ba203b2e3152fbb43f309fb65b7e9d1f6773cf680c6fdcd7379cea52857d84acdc13a8974e1f5e5bb1bc763cb82126019727f60cd1e79b0c1724d8c1efa8abaa45f6abeeaa90bce1a09da7140a38cf65fa09af6eac4ce10deb1de37d34a3886d19d76974db6d4d4c842cc55eb2ccb465d764992cadfb53b6ec960f68ef46a955be94e0ee5e4d6bf435e929131c7d40734f40eb9631ca0f61680b6c7b1331ff4890727bd1f07f0584127212c6f395fff149efc0ff7b02be4af1ef83a7d896b49c969ced36447b561b330521be568f9f7351f039b9147468fe", 0xf7}, {&(0x7f0000002c40)="8764546e8d085c4bdc43550aaf988055de7088bdbe02a825cd89ab0c9854d3f3afc81b72ca9ecf0f559865104d9840953d25248308b19a51aa8fdae4c2cca548070c6b1fdf057f8793b2d87a95", 0x4d}, {&(0x7f0000002cc0)}, {&(0x7f0000002d00)="1c0187c33b3b41311d77094e58548d5f324f02bb1d", 0x15}], 0x4, &(0x7f0000002e80)=[@sndrcv={0x30, 0x84, 0x1, {0xa, 0x2, 0x200, 0x8000, 0x0, 0x8, 0xfff, 0xd, r4}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x5}}], 0x48, 0x2000000}, {&(0x7f0000002f00)=@in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000003300)=[{&(0x7f0000002f40)="52313078bd46a47a904e6fcdf61f249df0e734ff73261561a9fde078e44f1b265bbeb5822cde24ea9f75eb955501a20f07356ceba3dee1085c1cbd7d066d0eeb9dd9708ac80229761a8e9f53127c8ae69ed68690ac64210ff1d1d7c6f3cd20587f82b122bc3608a9aec160a8d77f8714f1b27b334d6f16d5dc2a4a94e756878671e4c9b54c224ee311810b3a9fdf840a5cf64f121f989768d55f96ad15d27514db87d433568f0e1b61b0e137fc4566aa56fd78ddb56fd834b5b5eb94019a0ea46f79f7f66d191921e010eaf249019836d72cb3e01aefe8d6", 0xd8}, {&(0x7f0000003040)="bac4e9925e2389501c916c5675bc562b86167ba19a79eaba6d74b869a6ca7b98436499d2abb5098ea64681a2ab4bb22a9a052728876c321f8ec5293bd964ba618b4a379274dddc7e65ca83887e6c1578f3a9e397ac98d78fa5013262365cb13bdf2b55f3ecfec834e7ed6229d2f7e0c39613ba09a5888b0fb5051e1d5c7c3b4cf5e2b1efdbd6d8909b041462aa4a3f593b1b625a29b4cb5ef478c7e5a02a03a0d131943e8abc177f04de59076ba9d0d912af5a212555803a621a5d70e623a7be315e22e836a5ada1deec045b640e1d67a21935b17b93621b870cd024324690", 0xdf}, {&(0x7f0000000400)="1846ee6d9238ba0ed2e6e1830d0a78f434ea11608c07b40f2c7e04721dd81b92983d5358b7f950c34393a8b6236b131171514ac94a70035374311d056fd5ec40e4bef57b087fcbeaf7b1a855a6", 0x4d}, {&(0x7f00000031c0)="71e15497da8e0cb34f3ddad44f538087f608a84ca2bc5295fb5c68a415467bb8ae516c554d2109ae5423fb2bbf886c272a8518f22addfac224d01970ed49214cffa5624df61262d4ad17cc94a29f41", 0x4f}, {&(0x7f0000003240)="5cd6b803ccfba999adabeb084314074fdfc30ad803c119760ca72ab73d8b3788b6e7694d8ad39db284151599f5d2d3a346bf290323e2c0616487664ee07fbe46befec60b026444d48a75c2fad0ade908870c2b3e4e430e134c36e5e45a703a8d31fd4585d8bd147ad3f3a7392119d42c38a1e9c5862925a8c30bcea2f2cf7bba5bf52a4254d75d1090857d5877fb17a39a4aa8", 0x93}], 0x5, 0x0, 0x0, 0x82}, {&(0x7f0000003380)=@in6={0xa, 0x4e24, 0x101, @local, 0x7ffd}, 0x1c, &(0x7f00000046c0)=[{&(0x7f00000033c0)="ce8fd0fb25cd711eebbe419c82202ddfd40083d6427dd12e3c83d00a644a0c74f5a569b27604cadf5257469fe7c8c4fe02ac9752b22bca9a940930aebb1eab5a6bdc9c58e47658637ebe3ca469906500", 0x50}, {&(0x7f0000003440)="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", 0x1000}, {&(0x7f0000004440)="71ef36e5698dbce3242993608b9115e0a089e37cfee3e131c0266bc5797583d5537265c744e2d25ff93ee3e4af31b595ab1bbc3bba8e57960b9f37bf49b257b2ae72e30dd5064824c3406bbb0a3abe55ca2929fa11f8062ce88e5e57e5cb93dd5ec3330ab58d1840e66ef299e6ae6b6e7ce9dcbe6fb196b9153ef9468f5ad4e5bb39197bddda1b0a1233f60a6465a40793ac36cf01882ff32d", 0x99}, {&(0x7f0000004500)="d7e6d046d6a607a0cfa02860bd7a2f653559e494f6f8e7729a6a5aa8f94d6a709ea1652b569b55628c63cd31558e6352ee16ef40789c7455", 0x38}, {&(0x7f0000004540)="0959e1f1f38fe27180822c6e86c9823480d35c94092508daa4527b76901d6163304ecce19048ee6cf1a964b4b1e75994db82adf261cd6dd684bdd221ecdb24e30b97b815ac34b9090072353a243b7fea09b12e975f882c4b5ced6005a0a2dac8bb28f689237f31bd9afd3dba486a3a402938ce530584508347d558a653cbe5553ca111c9a4e9013ac28059bf6f5d8d0074a0b9ac4912dd6d8f38c4d43482811554a32a6e2e380d7a5cc1d920bd46be10b53035e559dedddd613612", 0xbb}, {&(0x7f0000004600)="28af21edd29b393a4412a5002c16763dec6e84216b0f940923be1553eb772084160d3d63bd4dde424151399bd45620027592981c60ec8693f9dc42595f1f44a545202618991605730c6ffcaa53b7484d4a7946c16673dcaceb3ad72fe097587d4ae65f5c0c78fad1b661a29323841de5a26feb6b4c4b156af63c57801fed2721c0a419", 0x83}], 0x6, &(0x7f0000004840)=ANY=[@ANYBLOB="3000000000000000840000000100000000020104000000000300000003000000001000004f4a8e5902000000", @ANYRES32=r6, @ANYBLOB="1800000000000000840000000500000030000000a005000018000000000000008400000000000000b5d4ffff00000700180000000000000084000000000000000400010402000300200000000000000084000000080000000000000000000000000000000000000018000000000000008400000007000000ac1414bb00000000"], 0xb0, 0x4000050}, {&(0x7f0000004900)=@in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c, &(0x7f0000004b80)=[{&(0x7f0000004940)="11449e4ac37d31117e368166f9a6aaa3da8c72ae54b54b579b7b961f88404b6839d5bdeab7d02293f2d5827a8aeef2f9a7bc82204485686ae4de0af648ad72019f06b3e2bc87a2e4217188713d155e93294fc072e4689372103f28af7bd6a6b1ae0885dd1fd4fc3d561ace201ce997387329cf291c4337a6c858f81835c5935f327be1a70e3efe540f8688113d3c476fef326b08520af1a021073f2ef2e01009051caa8d4f1d", 0xa6}, {&(0x7f0000004a00)="32c67f158bc78deba96e797e8f7e65e47a6deb168108ee852bfc76a7adbb1a368f9a83b56fb8b910bfc9d6d1cd2b39e1adba78aec3f1fa1d1a858f42070a71a74435d885e34e5fddbb6f8659bfc816a9d7985d25cee13d05f647debf7cbd152ebf57", 0x62}, {&(0x7f0000004a80)="015f1220d8a86e819384fcf657067c06e30e61276ab4efa5efe62bf29c98951bd867c8255c51e493137cf2121927bfaa150a93bec2f52cb48212be9b275740", 0x3f}, {&(0x7f0000004ac0)="6813e35fcef75ed2c5b8c906bb2475bba0a24a9228450a2796955d0e51ebc111fefa1ef0d45c2c7c5c4442efe1c002f068a458", 0x33}, {&(0x7f0000004b00)="8ba25b74b9ea81dd83a81f8555f7", 0xe}, {&(0x7f0000004b40)="0155b7416aeffe0902263c0df9f6729fbb38b321b2a455c137fe9a4d1398e30fefbd9bf51b3ccb51fefa4757db2b6885b57121", 0x33}], 0x6, &(0x7f0000004e40)=ANY=[@ANYBLOB="20000000000000008400000008000000fc020000000000000000000000000000300000000000080038050102000003000000f600000001000000060000000000000023e4475dd58728958b0fae1f2afebf99199fad6ade6cdd22eaf52b83987844b31fe4f61e3b0703089f215cf9c8ae035a62b5cda9e158574ed074f3577acd7754dc8184c00e77f462128ebdc2b4c45fe08fa99bb0d763a24db84551a68ba5e9c5b113991ae7c4810670da3f5d73a82a7c633a57122d9b88d78e1ae570937fdf0c8d344c01d6fd6d9c99ea57841665bd398ea696754a4482376d347ce49b66e2223bf5ae860fe2684d83d19559132ec7eed635890f5aa8ebc671fac414f137400eec74f30ffd26fe9a0c0753a6caa10992bc7b82234b668f18fbd4778b9b92796fbc5f01482f52e200d17e993bd0a44433d53eedd6df676e7f7e5f00"/326, @ANYRES32=r9, @ANYBLOB="18000000000000008400000006000000feff00000000000018000000000000008400000006000000080000000000000018000000000000008400000000000000f7680300ff000000200000000000000084000000020000000400000002000080ffffff7f", @ANYRES32=0x0, @ANYBLOB="300000000000000084000000010000000500faff00800000ffff000004000000fdffffff0500000008000000", @ANYRES32=r11], 0xe8, 0x800}], 0x5, 0x20000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r12, 0x10e, 0xc, &(0x7f0000000200)=""/53, &(0x7f0000000240)=0x35) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @random="57c77b086a4d"}, 0x44, {0x2, 0x4e24, @rand_addr=0x64010101}, 'ip6tnl0\x00'}) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 980.772177ms ago: executing program 1 (id=4936): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) epoll_create1(0x80000) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f00006c2000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) shutdown(r0, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) (rerun: 64) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000080)=0x84) 978.336378ms ago: executing program 4 (id=4937): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/4109, 0x100d}, 0x40002120) close(r6) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_proto_private(r8, 0x89e0, 0x0) 890.557831ms ago: executing program 0 (id=4938): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x4}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4040000) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0x12}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) 777.104559ms ago: executing program 3 (id=4939): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe(0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x53, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c00018008000100060000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x3c, @rand_addr=0x64010105, 0x4e24, 0x3, 'lblcr\x00', 0x35, 0xfffffffe, 0xd}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0}, 0x0) 644.165112ms ago: executing program 0 (id=4940): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0xd03, 0xffffffff, 0x76f1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x7, 0x0, 0x8000, 0x4}, 0x6, 0x0, 0x7c1, 0x0, 0x1, 0x15, 0x12, 0x1d, 0x87, 0x7fffffff, {0x8, 0x1, 0x6, 0x3, 0x6, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, 0x0, &(0x7f0000000280)}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x27, 0x7, &(0x7f0000000340)="e3bfd1e01f123fc15d0c576ca7705ae34f36b60808dcc704fb794b6c87f2f96a5c96b4d77c547a", &(0x7f0000000780)=""/7, 0x1, 0x0, 0x0, 0xa2, &(0x7f0000000940), &(0x7f00000009c0)="cb3e03c7f60e9e72b2df79943c821e00cf72655c65281b8db0e8ea349c69eb86104ca71a772dec882f9c572c67654578650a3d6c40384833dd7ff0f04ecf9869938a43e92742731f682e7efdf23b3d18f235cdd760b61a51991550b9cfcdf2c482abdbbfa224e6efba3328b3f881bb927be0d3fed489cae1492daa836af926731cfb591df64f237b524059701ae0866bda16daeb0087225fe6f9fa1e56ec884a36f7", 0x1, 0x0, 0x7}, 0x50) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020040490900010073797a30a000000014000000020a05"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) ioctl$OCFS2_IOC_RESVSP64(r8, 0x4030582a, &(0x7f0000000380)={0x1, 0x0, 0x273, 0xf, 0x5, 0x9}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe3a) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1809000000000000009aaa0000181500006d66d44e8bc3be99000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 427.238027ms ago: executing program 2 (id=4941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0xb, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd}, @IPSET_ATTR_COMMENT={0x7, 0x1a, '}^\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x400}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x54}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040810}, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000208000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 302.210168ms ago: executing program 2 (id=4942): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}, [@func, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x1, 0x0, 0xb, 0x1, 0xffffffffffffffc0, 0xfffffffffffffff0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x8d}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xc, 0x4a27, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x3, 0x4, 0xa}], 0x10, 0x5}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x1, 0x2, {{0x26, 0x4, 0x1, 0x7, 0x98, 0x67, 0x0, 0xf7, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x44, 0x3, 'f'}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x6a, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x5741}, {@empty, 0x9}, {@broadcast, 0x6ae}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2891}, {@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0xcb, 0x3, 0xf, [{@empty, 0x1d3}, {@multicast1, 0xf4e}]}, @timestamp={0x44, 0xc, 0xf4, 0x0, 0x1, [0x6, 0x7fff]}, @end, @cipso={0x86, 0x1e, 0x2, [{0x7, 0x8, "4f48540df0ad"}, {0x2, 0x3, ']'}, {0x0, 0xd, "3c9f3b821a2b151618d481"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b70200001a000000bfa3000000000000070300000080ffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e44010000a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392111fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4491a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba64e52c43692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03ad596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06af08b24d70718542ac5ffdc5b2136d23132ad237ef68911f5f44db5f9fd4de6d24e0decf57527bcb4d5f1d0293c357233"], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x16, '\x00', r1, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 301.639232ms ago: executing program 0 (id=4943): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ppoll(0x0, 0x0, 0x0, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000280)={0x0, 0xff, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r2}, 0x2) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@ptr]}, {0x0, [0x2e, 0x2e, 0x30]}}, &(0x7f0000000300)=""/77, 0x29, 0x4d, 0x0, 0x4}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) 237.140777ms ago: executing program 2 (id=4944): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) read(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x14000001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004dc0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="158804000301040008001b"], 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 154.076223ms ago: executing program 1 (id=4945): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) unshare(0x20480) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r3, &(0x7f0000000380), 0xe) unshare(0x22020600) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013f00000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6b, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x9, 0x400, 0x8, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, r8, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x3, 0x4, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7, 0x4, 0x7}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r8, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000018000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r10], 0x24}}, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000100), &(0x7f00000001c0)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f0000000140)="16f7bd9cb1e85a2df3978dd71a51860faaf2ba6cf59fa43fbf67a06312a0e51620c3021120f3dcf4dacb105032cdabdea0b969891274468074d9a28fb2bdfb29900c77d36b2f1e9bbec21459987ba03e52c3b78d8ce74d", &(0x7f0000000100)=@udp6, 0x1}, 0x20) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048090}, 0x489c) socket$inet6_sctp(0xa, 0x801, 0x84) 0s ago: executing program 4 (id=4946): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1f000000000000dc7b00000000000010000000004baf3449de104c3e97ae1bf19902000141d41fd2e8cd62abe1"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f0000000280)={@empty, @mcast2}) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x14, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b0000000181100002c6f5a3c7f9e7cef4f73445a137341b651585be3ce64318c77ed35a5aa1b75d412f3cb45a3543239c1d63647930e96c27ffbbfff928d3541cc95673d7f6c693334518b12b1ff5f", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ff000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f00000003c0)="79933ba8190000e5ffa53b00008f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) sendfile(r0, r3, 0x0, 0x20000000002) kernel console output (not intermixed with test programs): with an up link [ 459.241501][T19166] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 459.399585][T19146] batadv_slave_0: left promiscuous mode [ 459.467262][T19062] team0: Port device team_slave_0 added [ 459.513828][T19062] team0: Port device team_slave_1 added [ 459.787897][T19062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.810421][T19062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.897913][T19062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.906646][T19174] netlink: 'syz.1.3324': attribute type 26 has an invalid length. [ 459.932157][T19062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.955195][T19062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.026329][T19062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.316922][T19182] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3326'. [ 460.347501][T19183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3326'. [ 460.372273][T19062] hsr_slave_0: entered promiscuous mode [ 460.387280][T19062] hsr_slave_1: entered promiscuous mode [ 460.414575][T19062] debugfs: 'hsr0' already exists in 'hsr' [ 460.432045][T19062] Cannot create hsr debugfs directory [ 460.783855][T19198] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3330'. [ 461.271523][ T5629] Bluetooth: hci3: command tx timeout [ 461.447159][T19062] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.485604][T19062] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.605178][T19192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.753640][T19062] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.770703][T19062] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.020743][T19062] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.032942][T19062] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.136861][T19062] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.158774][T19062] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.554217][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3340'. [ 462.963649][T19062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 462.994876][T19243] netlink: 'syz.0.3343': attribute type 21 has an invalid length. [ 463.006602][T19062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.069535][T19062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 463.108339][T19062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.135335][T19244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3343'. [ 463.159824][ T3351] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.196184][ T3351] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.232034][T19062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 463.282090][T19062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.301129][T19062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 463.344154][T19062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.352029][ T5629] Bluetooth: hci3: command tx timeout [ 463.381973][ T3351] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.429000][T19253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3346'. [ 463.474965][ T3351] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.619899][T19253] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3346'. [ 463.674179][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 463.707570][T19253] bond2: (slave dummy0): Releasing active interface [ 463.749681][T19254] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3346'. [ 463.862386][ T4937] block nbd5: Receive control failed (result -32) [ 463.870380][ T5629] block nbd5: Receive control failed (result -32) [ 464.126831][T19261] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 464.173585][T19270] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 464.182500][T19258] lo speed is unknown, defaulting to 1000 [ 464.199288][T19258] xfrm0 speed is unknown, defaulting to 1000 [ 464.204895][T19270] veth0_to_bridge: entered promiscuous mode [ 464.221090][T19270] veth0_to_bridge: entered allmulticast mode [ 464.432980][T19272] netlink: 'syz.0.3350': attribute type 49 has an invalid length. [ 464.719579][T19258] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 464.955191][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 465.707245][T19062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.772217][T19062] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.806907][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.814172][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.845498][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.852767][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.787987][T19324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3361'. [ 466.815751][T19062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.830970][T19324] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3361'. [ 466.923134][T19062] veth0_vlan: entered promiscuous mode [ 466.948178][T19062] veth1_vlan: entered promiscuous mode [ 466.987535][T19329] bridge1: entered promiscuous mode [ 466.993245][T19329] bridge1: entered allmulticast mode [ 467.003922][T19329] team0: Port device bridge1 added [ 467.045278][T19329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3362'. [ 467.085470][T19062] veth0_macvtap: entered promiscuous mode [ 467.113397][T19062] veth1_macvtap: entered promiscuous mode [ 467.185053][T19062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.253139][T19062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.295675][ T429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.332091][ T429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.342038][ T429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.355582][ T6002] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.747063][ T429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.778045][ T429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.895583][ T3351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.919253][ T3351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.019541][T19402] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 469.066577][T19393] batadv1: entered promiscuous mode [ 469.077878][T19393] batadv1: entered allmulticast mode [ 469.225965][T19404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'. [ 469.417910][T19411] bond1: entered promiscuous mode [ 469.423936][T19411] bond1: entered allmulticast mode [ 469.429777][T19411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.448178][T19403] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3379'. [ 469.642526][T19418] x_tables: duplicate underflow at hook 3 [ 470.055732][T19437] netlink: 'syz.2.3390': attribute type 1 has an invalid length. [ 470.212922][T19437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.377666][T19447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3392'. [ 470.388876][T19441] lo speed is unknown, defaulting to 1000 [ 470.410041][T19441] xfrm0 speed is unknown, defaulting to 1000 [ 470.420123][T19447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3392'. [ 470.478710][T19454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3394'. [ 470.665004][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3393'. [ 470.810366][T19462] syzkaller0: entered promiscuous mode [ 470.820240][T19462] syzkaller0: entered allmulticast mode [ 470.829577][T19467] Bluetooth: MGMT ver 1.23 [ 470.838809][T19466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.898859][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3396'. [ 470.998335][T19466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.153379][T19469] erspan0: entered promiscuous mode [ 471.264557][T19441] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 471.388668][T19481] FAULT_INJECTION: forcing a failure. [ 471.388668][T19481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.402978][T19481] CPU: 1 UID: 0 PID: 19481 Comm: syz.4.3401 Not tainted syzkaller #0 PREEMPT(full) [ 471.403006][T19481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.403016][T19481] Call Trace: [ 471.403024][T19481] [ 471.403031][T19481] dump_stack_lvl+0xe8/0x150 [ 471.403065][T19481] should_fail_ex+0x40c/0x560 [ 471.403092][T19481] _copy_from_user+0x2d/0xb0 [ 471.403120][T19481] generic_map_update_batch+0x6a3/0x9a0 [ 471.403150][T19481] ? __pfx_generic_map_update_batch+0x10/0x10 [ 471.403170][T19481] ? __fget_files+0x2a/0x420 [ 471.403201][T19481] ? __pfx_generic_map_update_batch+0x10/0x10 [ 471.403220][T19481] bpf_map_do_batch+0x391/0x630 [ 471.403250][T19481] __sys_bpf+0xbe5/0xd90 [ 471.403280][T19481] ? __pfx___sys_bpf+0x10/0x10 [ 471.403314][T19481] ? __fget_files+0x2a/0x420 [ 471.403354][T19481] ? ksys_write+0x242/0x270 [ 471.403384][T19481] ? __pfx_ksys_write+0x10/0x10 [ 471.403417][T19481] __x64_sys_bpf+0xba/0xd0 [ 471.403439][T19481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.403459][T19481] do_syscall_64+0x174/0x580 [ 471.403483][T19481] ? trace_irq_disable+0x3b/0x140 [ 471.403506][T19481] ? clear_bhb_loop+0x40/0x90 [ 471.403538][T19481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.403557][T19481] RIP: 0033:0x7ff64919de59 [ 471.403575][T19481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.403591][T19481] RSP: 002b:00007ff649fb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 471.403612][T19481] RAX: ffffffffffffffda RBX: 00007ff649425fa0 RCX: 00007ff64919de59 [ 471.403625][T19481] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 471.403637][T19481] RBP: 00007ff649fb3090 R08: 0000000000000000 R09: 0000000000000000 [ 471.403649][T19481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.403660][T19481] R13: 00007ff649426038 R14: 00007ff649425fa0 R15: 00007ffef88f82e8 [ 471.403690][T19481] [ 471.616131][T19479] netlink: 'syz.0.3400': attribute type 1 has an invalid length. [ 471.705208][T19479] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 472.083407][T19495] openvswitch: netlink: Message has 12 unknown bytes. [ 472.144599][T19495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.865766][T19512] netlink: 'syz.0.3410': attribute type 4 has an invalid length. [ 473.320931][T19519] __nla_validate_parse: 2 callbacks suppressed [ 473.320951][T19519] netlink: 98 bytes leftover after parsing attributes in process `syz.4.3412'. [ 473.809304][T19540] netlink: 'syz.4.3420': attribute type 1 has an invalid length. [ 474.024488][T19546] netlink: 'syz.2.3421': attribute type 1 has an invalid length. [ 474.069346][T19546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3421'. [ 474.268955][T19538] bond3: (slave gretap1): making interface the new active one [ 474.297583][T19557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3424'. [ 474.321973][T19557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3424'. [ 474.344622][T19538] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 474.354921][T19559] netlink: 'syz.3.3424': attribute type 4 has an invalid length. [ 474.401426][T19559] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3424'. [ 474.562570][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3426'. [ 475.249888][T19592] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 475.610511][T19583] bridge_slave_0: left allmulticast mode [ 475.662187][T19583] bridge_slave_0: left promiscuous mode [ 475.672965][T19583] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.722093][T19583] bridge_slave_1: left allmulticast mode [ 475.730246][T19583] bridge_slave_1: left promiscuous mode [ 475.738484][T19583] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.766362][T19583] bond0: (slave bond_slave_0): Releasing backup interface [ 475.770692][T19611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.844578][T19583] bond0: (slave bond_slave_1): Releasing backup interface [ 475.927387][T19583] team0: Port device team_slave_0 removed [ 475.965362][T19583] team0: Port device team_slave_1 removed [ 475.985552][T19583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.011480][T19583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.034448][T19583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.061549][T19583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.090685][T19583] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 476.335956][T19607] syzkaller0: entered promiscuous mode [ 476.342178][T19607] syzkaller0: entered allmulticast mode [ 476.432636][T19632] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3440'. [ 476.685439][T19635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3442'. [ 476.913270][T19635] netlink: 'syz.4.3442': attribute type 1 has an invalid length. [ 477.016342][T19640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3442'. [ 479.034881][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 480.964931][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 481.126582][T19635] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 481.304624][T19653] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3446'. [ 481.327505][T19653] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3446'. [ 481.373145][T19653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3446'. [ 481.564559][T19666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3451'. [ 481.771828][T19668] veth1_macvtap: left promiscuous mode [ 482.228049][T19690] netlink: 'syz.0.3457': attribute type 142 has an invalid length. [ 482.418810][T19705] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3459'. [ 482.724949][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3462'. [ 482.802104][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3462'. [ 482.840313][T19713] netlink: 'syz.0.3462': attribute type 30 has an invalid length. [ 482.899292][T19719] netlink: 'syz.0.3462': attribute type 30 has an invalid length. [ 482.990582][T19701] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 483.400969][T19721] syzkaller1: entered allmulticast mode [ 483.666757][ T5283] veth1_macvtap: entered promiscuous mode [ 483.742828][T19746] FAULT_INJECTION: forcing a failure. [ 483.742828][T19746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.806184][T19746] CPU: 0 UID: 0 PID: 19746 Comm: syz.0.3465 Not tainted syzkaller #0 PREEMPT(full) [ 483.806211][T19746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 483.806223][T19746] Call Trace: [ 483.806231][T19746] [ 483.806239][T19746] dump_stack_lvl+0xe8/0x150 [ 483.806272][T19746] should_fail_ex+0x40c/0x560 [ 483.806309][T19746] _copy_from_user+0x2d/0xb0 [ 483.806337][T19746] generic_map_update_batch+0x651/0x9a0 [ 483.806368][T19746] ? __pfx_generic_map_update_batch+0x10/0x10 [ 483.806389][T19746] ? __fget_files+0x2a/0x420 [ 483.806419][T19746] ? __pfx_generic_map_update_batch+0x10/0x10 [ 483.806438][T19746] bpf_map_do_batch+0x391/0x630 [ 483.806474][T19746] __sys_bpf+0xbe5/0xd90 [ 483.806507][T19746] ? __pfx___sys_bpf+0x10/0x10 [ 483.806542][T19746] ? __fget_files+0x2a/0x420 [ 483.806587][T19746] ? ksys_write+0x242/0x270 [ 483.806615][T19746] ? __pfx_ksys_write+0x10/0x10 [ 483.806647][T19746] __x64_sys_bpf+0xba/0xd0 [ 483.806669][T19746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.806690][T19746] do_syscall_64+0x174/0x580 [ 483.806716][T19746] ? clear_bhb_loop+0x40/0x90 [ 483.806739][T19746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.806759][T19746] RIP: 0033:0x7f8fc5b9de59 [ 483.806777][T19746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.806792][T19746] RSP: 002b:00007f8fc6998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 483.806812][T19746] RAX: ffffffffffffffda RBX: 00007f8fc5e25fa0 RCX: 00007f8fc5b9de59 [ 483.806826][T19746] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 483.806838][T19746] RBP: 00007f8fc6998090 R08: 0000000000000000 R09: 0000000000000000 [ 483.806849][T19746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.806861][T19746] R13: 00007f8fc5e26038 R14: 00007f8fc5e25fa0 R15: 00007ffeeeb8a8d8 [ 483.806892][T19746] [ 484.114150][T19756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3468'. [ 484.220918][T19751] syzkaller1: entered promiscuous mode [ 484.246661][T19751] syzkaller1: entered allmulticast mode [ 484.546217][T19776] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 484.558463][T19776] bond4 (unregistering): Released all slaves [ 484.642918][T19762] netlink: 'syz.3.3470': attribute type 1 has an invalid length. [ 484.658655][T19762] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3470'. [ 484.706552][T19762] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.713942][T19762] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.721095][T19762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.835783][T19760] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 484.848428][T19760] bond4 (unregistering): Released all slaves [ 485.139744][T19816] FAULT_INJECTION: forcing a failure. [ 485.139744][T19816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.155385][T19816] CPU: 1 UID: 0 PID: 19816 Comm: syz.1.3478 Not tainted syzkaller #0 PREEMPT(full) [ 485.155413][T19816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 485.155424][T19816] Call Trace: [ 485.155432][T19816] [ 485.155439][T19816] dump_stack_lvl+0xe8/0x150 [ 485.155473][T19816] should_fail_ex+0x40c/0x560 [ 485.155500][T19816] _copy_from_user+0x2d/0xb0 [ 485.155527][T19816] generic_map_update_batch+0x6a3/0x9a0 [ 485.155557][T19816] ? __pfx_generic_map_update_batch+0x10/0x10 [ 485.155577][T19816] ? __fget_files+0x2a/0x420 [ 485.155608][T19816] ? __pfx_generic_map_update_batch+0x10/0x10 [ 485.155627][T19816] bpf_map_do_batch+0x391/0x630 [ 485.155658][T19816] __sys_bpf+0xbe5/0xd90 [ 485.155693][T19816] ? __pfx___sys_bpf+0x10/0x10 [ 485.155726][T19816] ? __fget_files+0x2a/0x420 [ 485.155767][T19816] ? ksys_write+0x242/0x270 [ 485.155796][T19816] ? __pfx_ksys_write+0x10/0x10 [ 485.155829][T19816] __x64_sys_bpf+0xba/0xd0 [ 485.155851][T19816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.155871][T19816] do_syscall_64+0x174/0x580 [ 485.155895][T19816] ? trace_irq_disable+0x3b/0x140 [ 485.155919][T19816] ? clear_bhb_loop+0x40/0x90 [ 485.155941][T19816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.155960][T19816] RIP: 0033:0x7f258c59de59 [ 485.155977][T19816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.155993][T19816] RSP: 002b:00007f258d4b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.156013][T19816] RAX: ffffffffffffffda RBX: 00007f258c825fa0 RCX: 00007f258c59de59 [ 485.156026][T19816] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 485.156038][T19816] RBP: 00007f258d4b8090 R08: 0000000000000000 R09: 0000000000000000 [ 485.156050][T19816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.156061][T19816] R13: 00007f258c826038 R14: 00007f258c825fa0 R15: 00007ffe0a8361b8 [ 485.156090][T19816] [ 485.912520][T19840] openvswitch: netlink: IPv4 tunnel dst address is zero [ 485.920532][T19840] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 486.049089][T19846] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3487'. [ 486.076509][T19844] tipc: Started in network mode [ 486.091336][T19844] tipc: Node identity 161135f31b1e, cluster identity 4711 [ 486.111342][T19844] tipc: Enabled bearer , priority 0 [ 486.188807][T19844] syzkaller0: entered promiscuous mode [ 486.194847][T19844] syzkaller0: entered allmulticast mode [ 486.204692][T19844] tipc: Resetting bearer [ 486.216464][T19843] tipc: Resetting bearer [ 486.327015][T19858] FAULT_INJECTION: forcing a failure. [ 486.327015][T19858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.362739][T19858] CPU: 0 UID: 0 PID: 19858 Comm: syz.2.3491 Not tainted syzkaller #0 PREEMPT(full) [ 486.362766][T19858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 486.362776][T19858] Call Trace: [ 486.362783][T19858] [ 486.362791][T19858] dump_stack_lvl+0xe8/0x150 [ 486.362826][T19858] should_fail_ex+0x40c/0x560 [ 486.362853][T19858] _copy_from_user+0x2d/0xb0 [ 486.362881][T19858] generic_map_update_batch+0x651/0x9a0 [ 486.362912][T19858] ? __pfx_generic_map_update_batch+0x10/0x10 [ 486.362933][T19858] ? __fget_files+0x2a/0x420 [ 486.362964][T19858] ? __pfx_generic_map_update_batch+0x10/0x10 [ 486.362984][T19858] bpf_map_do_batch+0x391/0x630 [ 486.363017][T19858] __sys_bpf+0xbe5/0xd90 [ 486.363070][T19858] ? __pfx___sys_bpf+0x10/0x10 [ 486.363106][T19858] ? __fget_files+0x2a/0x420 [ 486.363153][T19858] ? ksys_write+0x242/0x270 [ 486.363184][T19858] ? __pfx_ksys_write+0x10/0x10 [ 486.363217][T19858] __x64_sys_bpf+0xba/0xd0 [ 486.363238][T19858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.363258][T19858] do_syscall_64+0x174/0x580 [ 486.363282][T19858] ? trace_irq_disable+0x3b/0x140 [ 486.363300][T19858] ? clear_bhb_loop+0x40/0x90 [ 486.363316][T19858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.363329][T19858] RIP: 0033:0x7fc347b9de59 [ 486.363343][T19858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.363355][T19858] RSP: 002b:00007fc348ad1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.363370][T19858] RAX: ffffffffffffffda RBX: 00007fc347e25fa0 RCX: 00007fc347b9de59 [ 486.363380][T19858] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 486.363389][T19858] RBP: 00007fc348ad1090 R08: 0000000000000000 R09: 0000000000000000 [ 486.363397][T19858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 486.363406][T19858] R13: 00007fc347e26038 R14: 00007fc347e25fa0 R15: 00007ffc174d4278 [ 486.363429][T19858] [ 489.606031][T19843] tipc: Disabling bearer [ 489.636144][T19861] __nla_validate_parse: 1 callbacks suppressed [ 489.636162][T19861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3492'. [ 489.652653][T19861] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3492'. [ 489.681363][T19861] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3492'. [ 489.690531][T19861] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3492'. [ 489.711492][ T5729] tipc: Node number set to 219100659 [ 489.763956][T19869] netlink: 'syz.4.3493': attribute type 1 has an invalid length. [ 489.823006][T19869] 8021q: adding VLAN 0 to HW filter on device bond4 [ 489.853555][T19868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3493'. [ 489.877743][T19879] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3497'. [ 490.421050][T19897] bond5: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 490.478829][T19897] bond5 (unregistering): Released all slaves [ 490.753581][T19911] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 490.959966][ T5629] block nbd6: Receive control failed (result -32) [ 491.426521][T19921] syzkaller0: entered promiscuous mode [ 491.432040][T19921] syzkaller0: entered allmulticast mode [ 491.479622][T19945] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3514'. [ 491.515270][T19921] tipc: Enabled bearer , priority 0 [ 491.627803][T19954] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3517'. [ 491.650713][T19956] x_tables: duplicate underflow at hook 3 [ 491.861389][T19915] tipc: Resetting bearer [ 491.959575][T19915] tipc: Disabling bearer [ 492.042557][T19963] bond2: Removing last arp target with arp_interval on [ 492.289224][T19975] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.296503][T19975] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 492.304472][T19975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3524'. [ 492.314155][T19977] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 492.362574][T19975] hsr_slave_0: left promiscuous mode [ 492.380669][T19975] hsr_slave_1: left promiscuous mode [ 492.616101][T19989] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3528'. [ 492.672282][T19989] openvswitch: netlink: IP tunnel dst address not specified [ 492.851681][T20006] netlink: 'syz.1.3532': attribute type 1 has an invalid length. [ 492.924687][T20009] bridge0: mtu less than device minimum [ 492.946070][T20009] netlink: 'syz.0.3534': attribute type 1 has an invalid length. [ 493.186357][T20025] syzkaller0: entered promiscuous mode [ 493.220617][T20025] syzkaller0: entered allmulticast mode [ 493.678737][T20036] syzkaller1: entered promiscuous mode [ 493.684472][T20036] syzkaller1: entered allmulticast mode [ 493.767137][T20041] Bluetooth: MGMT ver 1.23 [ 493.898297][T20043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 493.959869][T20021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.264583][T20047] syzkaller1: entered promiscuous mode [ 494.270332][T20047] syzkaller1: entered allmulticast mode [ 494.278911][T20054] netlink: 'syz.0.3547': attribute type 1 has an invalid length. [ 494.298839][T20054] bond5: entered promiscuous mode [ 494.317234][T20054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 494.404929][T20054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 494.413038][T20054] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 494.425700][T20054] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 494.438381][T20054] bond5: (slave gre1): making interface the new active one [ 494.446252][T20054] gre1: entered promiscuous mode [ 494.455263][T20054] bond5: (slave gre1): Enslaving as an active interface with an up link [ 494.550390][T20068] netlink: 'syz.3.3550': attribute type 1 has an invalid length. [ 494.606487][T20068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.167210][T20090] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 495.403005][T20099] bond6: option all_slaves_active: invalid value (127) [ 495.483018][T20099] bond6 (unregistering): Released all slaves [ 495.680830][T20107] ip6gretap2: entered allmulticast mode [ 495.702155][T20104] syzkaller0: entered promiscuous mode [ 495.707683][T20104] syzkaller0: entered allmulticast mode [ 495.716959][T20114] syzkaller0: entered promiscuous mode [ 495.726819][T20114] syzkaller0: entered allmulticast mode [ 495.819349][T20117] __nla_validate_parse: 10 callbacks suppressed [ 495.819369][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3562'. [ 495.833427][ T5629] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 495.854730][ T4937] Bluetooth: hci2: command 0x0401 tx timeout [ 496.285756][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3566'. [ 496.304372][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3566'. [ 496.374794][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3566'. [ 496.416990][T20148] netlink: 'syz.1.3566': attribute type 29 has an invalid length. [ 496.424853][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3566'. [ 496.539778][T20131] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3566'. [ 496.797129][ T5727] IPVS: starting estimator thread 0... [ 496.799815][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'. [ 496.830401][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3574'. [ 496.842263][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3574'. [ 497.110409][T20171] IPVS: using max 26 ests per chain, 62400 per kthread [ 497.284325][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3574'. [ 497.287180][ T6003] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.360890][ T6003] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.369649][ T6003] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.378368][ T6003] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.617081][T20210] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 497.683412][T20214] xt_hashlimit: size too large, truncated to 1048576 [ 497.803611][T20221] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.867052][T20221] bridge_slave_0 (unregistering): left allmulticast mode [ 497.880326][T20227] netlink: 'syz.1.3580': attribute type 11 has an invalid length. [ 497.933000][T20221] bridge_slave_0 (unregistering): left promiscuous mode [ 498.004931][T20221] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.334955][T20240] netlink: 'syz.0.3584': attribute type 3 has an invalid length. [ 498.354985][T20240] netlink: 'syz.0.3584': attribute type 2 has an invalid length. [ 498.386894][T20240] netlink: 'syz.0.3584': attribute type 2 has an invalid length. [ 498.464380][T20255] netlink: 'syz.3.3585': attribute type 2 has an invalid length. [ 498.938639][T20233] sit2: left promiscuous mode [ 498.949155][T20233] ip6gretap2: left allmulticast mode [ 499.089237][ T159] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.115917][ T159] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.139775][ T159] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.318188][T20278] vlan2: entered allmulticast mode [ 499.333984][T20278] dummy0: entered allmulticast mode [ 499.374815][ T159] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.479220][T20292] syzkaller0: entered promiscuous mode [ 499.485130][T20292] syzkaller0: entered allmulticast mode [ 499.626855][T20300] tipc: Started in network mode [ 499.633497][T20300] tipc: Node identity 84e, cluster identity 4711 [ 499.646666][T20300] tipc: Node number set to 2126 [ 500.452649][T20306] syzkaller0: entered promiscuous mode [ 500.458288][T20306] syzkaller0: entered allmulticast mode [ 500.558736][T20311] netlink: 'syz.4.3594': attribute type 1 has an invalid length. [ 501.079154][T20316] bond5: (slave dummy0): making interface the new active one [ 501.092818][T20316] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 501.101775][T20311] bond5: entered promiscuous mode [ 501.106869][T20311] dummy0: entered promiscuous mode [ 501.113818][T20321] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 501.144854][T20322] bond5: (slave dummy0): Releasing active interface [ 501.171733][T20322] dummy0: left promiscuous mode [ 501.208818][T20322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 501.258390][T20310] bond5: left promiscuous mode [ 501.384556][T20334] __nla_validate_parse: 12 callbacks suppressed [ 501.384577][T20334] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3601'. [ 501.703954][ T6001] nci: nci_rx_work: unknown MT 0x7 [ 501.746916][T20361] netlink: 'syz.4.3608': attribute type 61 has an invalid length. [ 501.768689][T20359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3605'. [ 501.803661][T20359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3605'. [ 501.832955][T20359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3605'. [ 501.855353][T20359] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3605'. [ 501.884912][T20359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 503.035382][T20399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3616'. [ 503.046302][T20399] netlink: 'syz.0.3616': attribute type 7 has an invalid length. [ 503.055765][T20399] netlink: 'syz.0.3616': attribute type 8 has an invalid length. [ 503.064909][T20399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3616'. [ 504.556294][T20351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.780019][T20414] netlink: 'syz.2.3620': attribute type 6 has an invalid length. [ 504.902303][T20431] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 505.054231][T20442] syzkaller0: entered promiscuous mode [ 505.091096][T20442] syzkaller0: entered allmulticast mode [ 505.139036][T20449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3630'. [ 505.181710][T20453] netlink: 'syz.2.3631': attribute type 16 has an invalid length. [ 505.232728][T20453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3631'. [ 505.322665][T20458] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 505.377914][T20461] 8021q: VLANs not supported on ip6gre0 [ 505.983326][T20495] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 507.128540][T20547] __nla_validate_parse: 2 callbacks suppressed [ 507.128559][T20547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3657'. [ 507.149246][T20543] xt_CT: No such helper "syz0" [ 507.346220][T20559] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3660'. [ 507.585485][T20566] vcan0: entered promiscuous mode [ 507.612613][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3661'. [ 507.751663][T20583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3666'. [ 507.873092][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 507.980247][T20582] bond6 (unregistering): Released all slaves [ 508.054973][T20593] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3668'. [ 508.082585][T20592] bond0: (slave bond_slave_1): Releasing backup interface [ 508.129193][T20593] netlink: 'syz.3.3668': attribute type 11 has an invalid length. [ 508.265620][T20592] block nbd0: NBD_DISCONNECT [ 508.277546][T20574] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 508.287604][T20592] block nbd0: Send disconnect failed -107 [ 508.296559][T20598] netlink: 'syz.1.3670': attribute type 4 has an invalid length. [ 508.342237][T20603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3668'. [ 508.350600][T20605] netlink: 'syz.1.3670': attribute type 4 has an invalid length. [ 508.401247][ T5743] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 508.428294][ T5819] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 508.635838][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 509.007674][T20642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3678'. [ 509.049910][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3678'. [ 509.086480][T20626] syzkaller0: entered promiscuous mode [ 509.103463][T20626] syzkaller0: entered allmulticast mode [ 509.111750][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 509.184808][T20647] netlink: 'syz.2.3679': attribute type 2 has an invalid length. [ 509.277590][T20653] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 509.594498][ T4937] Bluetooth: hci1: command 0x0401 tx timeout [ 509.877681][T20658] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3683'. [ 512.317335][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 512.504543][T20647] þ: entered promiscuous mode [ 512.789171][T20704] netlink: 'syz.0.3692': attribute type 1 has an invalid length. [ 512.793322][T20700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3690'. [ 512.879415][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3693'. [ 512.913854][T20713] netlink: 'syz.2.3688': attribute type 16 has an invalid length. [ 512.976896][T20713] netlink: 'syz.2.3688': attribute type 17 has an invalid length. [ 513.001879][T20707] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.011913][T20707] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.142414][T20714] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.167041][T20714] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.366391][T20713] vcan0: left promiscuous mode [ 513.395163][T20713] veth0_to_bridge: left promiscuous mode [ 513.400937][T20713] veth0_to_bridge: left allmulticast mode [ 513.412458][T20713] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.419651][T20713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.433620][T20713] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.440842][T20713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.490731][T20713] bridge1: left promiscuous mode [ 513.505285][T20713] bridge1: left allmulticast mode [ 513.525355][T20713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.615427][T20727] lo speed is unknown, defaulting to 1000 [ 513.638324][T20738] xfrm1: entered allmulticast mode [ 513.708582][T20727] xfrm0 speed is unknown, defaulting to 1000 [ 513.828787][T20745] netlink: 'syz.4.3701': attribute type 3 has an invalid length. [ 513.850633][T20745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3701'. [ 513.998047][T20752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3703'. [ 514.570205][T20727] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 514.789460][T20792] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3711'. [ 514.804737][T20792] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3711'. [ 514.815206][T20795] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.827166][T20795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 514.834522][T20795] IPv6: NLM_F_CREATE should be set when creating new route [ 514.842427][T20795] IPv6: NLM_F_CREATE should be set when creating new route [ 514.849755][T20795] IPv6: NLM_F_CREATE should be set when creating new route [ 514.876668][T20797] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3712'. [ 515.074302][T20806] netlink: 'syz.2.3714': attribute type 32 has an invalid length. [ 515.139031][T20801] bond6: entered promiscuous mode [ 515.155268][T20801] bond6: entered allmulticast mode [ 515.166732][T20801] 8021q: adding VLAN 0 to HW filter on device bond6 [ 515.201813][T20811] netlink: 'syz.3.3716': attribute type 3 has an invalid length. [ 515.228168][T20811] netlink: 'syz.3.3716': attribute type 3 has an invalid length. [ 515.242637][T20812] netlink: 'syz.3.3716': attribute type 3 has an invalid length. [ 515.254198][T20811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3716'. [ 515.325803][T20815] A link change request failed with some changes committed already. Interface ªªªªªªª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 515.441055][T20826] xt_hashlimit: size too large, truncated to 1048576 [ 515.536651][T20830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3721'. [ 515.538364][T20829] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.556827][T20834] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3720'. [ 515.649780][T20829] bridge_slave_0 (unregistering): left allmulticast mode [ 515.683086][T20843] netlink: 'syz.0.3721': attribute type 1 has an invalid length. [ 515.722571][T20844] netlink: 'syz.2.3723': attribute type 1 has an invalid length. [ 515.726359][T20843] netlink: 'syz.0.3721': attribute type 8 has an invalid length. [ 515.748608][T20829] bridge_slave_0 (unregistering): left promiscuous mode [ 515.847282][T20829] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.339463][T20865] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 516.449594][T20870] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 516.992023][T20899] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:21 [ 517.014536][T20899] xt_hashlimit: size too large, truncated to 1048576 [ 517.133134][T20908] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.260919][T20908] bridge_slave_0 (unregistering): left allmulticast mode [ 517.325072][T20908] bridge_slave_0 (unregistering): left promiscuous mode [ 517.372495][T20908] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.417297][T20895] netlink: 'syz.1.3726': attribute type 2 has an invalid length. [ 517.449491][T20895] netlink: 'syz.1.3726': attribute type 8 has an invalid length. [ 518.020145][T20926] lo speed is unknown, defaulting to 1000 [ 518.046566][T20936] __nla_validate_parse: 3 callbacks suppressed [ 518.046587][T20936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3740'. [ 518.076551][T20926] xfrm0 speed is unknown, defaulting to 1000 [ 518.283564][T20943] lo speed is unknown, defaulting to 1000 [ 518.329042][T20948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3744'. [ 518.441496][T20950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.488169][T20955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3746'. [ 518.498737][T20947] lo speed is unknown, defaulting to 1000 [ 518.611597][T20955] bond7: (slave geneve2): making interface the new active one [ 518.652107][T20955] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 518.700295][T20943] xfrm0 speed is unknown, defaulting to 1000 [ 518.701239][T20961] lo speed is unknown, defaulting to 1000 [ 518.706681][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 518.736939][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 518.764484][T20926] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 518.766045][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 518.832344][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 518.952518][T20968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3747'. [ 519.231106][T20943] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 519.234438][T20947] xfrm0 speed is unknown, defaulting to 1000 [ 519.770476][T20961] xfrm0 speed is unknown, defaulting to 1000 [ 519.905527][T20981] syzkaller0: entered promiscuous mode [ 519.912484][T20981] syzkaller0: entered allmulticast mode [ 520.002265][T20961] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 520.105940][T20947] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 520.724416][T21000] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3753'. [ 521.258875][T21011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3755'. [ 521.566978][T21021] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 521.567592][T21024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3757'. [ 521.689595][T21031] C: renamed from veth1_to_team (while UP) [ 521.704931][T21031] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3761'. [ 521.856121][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3765'. [ 521.908572][T21039] macvtap1: entered promiscuous mode [ 521.929139][T21039] vlan0: entered promiscuous mode [ 521.940525][T21039] vlan0: left promiscuous mode [ 521.997476][T21044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.115525][T21049] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3767'. [ 522.360106][T21066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.379719][T21067] syzkaller0: entered promiscuous mode [ 522.395822][T21067] syzkaller0: entered allmulticast mode [ 522.470191][T21067] tc action pedit 'at' offset 20 out of bounds [ 522.519111][T21076] validate_nla: 1 callbacks suppressed [ 522.519129][T21076] netlink: 'syz.0.3774': attribute type 4 has an invalid length. [ 522.561542][T21076] netlink: 'syz.0.3774': attribute type 8 has an invalid length. [ 522.597973][T21076] netlink: 'syz.0.3774': attribute type 30 has an invalid length. [ 522.714232][T21066] lo speed is unknown, defaulting to 1000 [ 522.783389][T21066] xfrm0 speed is unknown, defaulting to 1000 [ 523.089103][T21104] sctp: [Deprecated]: syz.1.3780 (pid 21104) Use of int in max_burst socket option. [ 523.089103][T21104] Use struct sctp_assoc_value instead [ 523.626209][T21130] __nla_validate_parse: 1 callbacks suppressed [ 523.626228][T21130] netlink: 17780 bytes leftover after parsing attributes in process `syz.2.3787'. [ 523.755143][T21132] netlink: 'syz.1.3788': attribute type 12 has an invalid length. [ 523.787567][T21066] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 523.852355][T21138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3788'. [ 523.991518][ T4937] Bluetooth: hci2: command 0x0401 tx timeout [ 524.164414][T21149] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3794'. [ 524.174390][T21150] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3794'. [ 524.202865][T21147] tipc: Started in network mode [ 524.209995][T21147] tipc: Node identity aac431702903, cluster identity 4711 [ 524.234168][T21147] tipc: Enabled bearer , priority 0 [ 524.260991][T21151] syzkaller0: entered promiscuous mode [ 524.290100][T21151] syzkaller0: entered allmulticast mode [ 524.335398][T21147] tipc: Resetting bearer [ 524.387199][T21146] tipc: Resetting bearer [ 524.517642][T21146] tipc: Disabling bearer [ 524.713226][T21171] netlink: 'syz.3.3801': attribute type 1 has an invalid length. [ 524.725720][T21172] netlink: 'syz.2.3800': attribute type 1 has an invalid length. [ 524.734671][T21172] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3800'. [ 524.757005][T21172] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3800'. [ 524.789727][T21171] bond5: entered promiscuous mode [ 524.806302][T21171] 8021q: adding VLAN 0 to HW filter on device bond5 [ 524.816340][T21177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3800'. [ 524.978470][T21172] team0 (unregistering): Port device team_slave_0 removed [ 525.008717][T21172] team0 (unregistering): Port device team_slave_1 removed [ 525.039650][T21172] team0 (unregistering): Port device bridge1 removed [ 525.107275][T21171] bond5: (slave veth3): making interface the new active one [ 525.117558][T21171] veth3: entered promiscuous mode [ 525.141072][T21171] bond5: (slave veth3): Enslaving as an active interface with an up link [ 525.275916][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'. [ 525.285663][T21190] netlink: 'syz.0.3806': attribute type 5 has an invalid length. [ 525.294136][T21190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3806'. [ 525.308667][T21193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3807'. [ 525.357073][T21190] geneve3: entered promiscuous mode [ 525.381241][T21190] geneve3: entered allmulticast mode [ 525.403361][ T6003] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36631 - 0 [ 525.433798][ T6003] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36631 - 0 [ 525.460256][ T6003] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36631 - 0 [ 525.490542][ T6003] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36631 - 0 [ 525.869454][T21230] netlink: 'syz.1.3816': attribute type 2 has an invalid length. [ 527.059258][T21281] netlink: 'syz.0.3827': attribute type 1 has an invalid length. [ 527.073238][T21278] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø¦% [ 527.097732][T21281] 8021q: adding VLAN 0 to HW filter on device bond8 [ 527.783707][T21319] sctp: [Deprecated]: syz.0.3834 (pid 21319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.783707][T21319] Use struct sctp_sack_info instead [ 528.362606][T21338] macsec1: entered promiscuous mode [ 528.833002][T21361] netlink: 'syz.0.3845': attribute type 1 has an invalid length. [ 528.844873][T21361] __nla_validate_parse: 8 callbacks suppressed [ 528.844890][T21361] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3845'. [ 528.915106][T21367] netlink: 'syz.0.3846': attribute type 4 has an invalid length. [ 529.060698][T21373] siw: device registration error -23 [ 529.072331][T21373] netlink: 'syz.0.3847': attribute type 2 has an invalid length. [ 529.080464][T21373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3847'. [ 529.095975][T21373] nbd: must specify at least one socket [ 529.228936][T21377] syzkaller0: entered promiscuous mode [ 529.245245][T21377] syzkaller0: entered allmulticast mode [ 529.355249][T21380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3850'. [ 529.375177][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3854'. [ 529.521584][T21401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3858'. [ 529.545867][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3859'. [ 529.548580][T21407] netlink: 'syz.4.3855': attribute type 3 has an invalid length. [ 529.585845][T21401] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3858'. [ 529.638059][T21414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3859'. [ 529.671552][T21407] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3855'. [ 529.727001][T21414] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 530.107790][T21431] netlink: 'syz.4.3865': attribute type 3 has an invalid length. [ 530.209695][T21444] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 530.466726][T21455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3872'. [ 530.803458][T21468] bond0: (slave wlan0): Opening slave failed [ 531.089261][T21485] netlink: 'syz.3.3883': attribute type 9 has an invalid length. [ 531.314097][T21498] netlink: 'syz.4.3886': attribute type 1 has an invalid length. [ 531.347681][T21495] lo speed is unknown, defaulting to 1000 [ 531.412768][T21505] openvswitch: netlink: Flow key attr not present in new flow. [ 531.444782][T21495] xfrm0 speed is unknown, defaulting to 1000 [ 531.788307][T21515] xt_hl: Unknown Hop Limit match mode: 206 [ 532.280569][T21537] lo speed is unknown, defaulting to 1000 [ 532.494775][T21560] netlink: 'syz.2.3901': attribute type 1 has an invalid length. [ 532.515296][T21560] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 532.541748][T21537] xfrm0 speed is unknown, defaulting to 1000 [ 532.543784][T21495] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 533.224915][T21537] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 533.227323][T21586] netlink: 'syz.4.3905': attribute type 39 has an invalid length. [ 533.425275][T21568] syzkaller0: entered promiscuous mode [ 533.431053][T21568] syzkaller0: entered allmulticast mode [ 533.692486][T21595] netlink: 'syz.4.3908': attribute type 8 has an invalid length. [ 534.068754][T21604] __nla_validate_parse: 12 callbacks suppressed [ 534.068774][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3909'. [ 534.087436][T21604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3909'. [ 534.415003][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3915'. [ 534.555606][T21623] syzkaller0: entered promiscuous mode [ 534.570844][T21623] syzkaller0: entered allmulticast mode [ 534.610368][T21623] tipc: Enabled bearer , priority 0 [ 534.623871][T21626] netlink: 'syz.2.3919': attribute type 11 has an invalid length. [ 534.659854][T21629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3921'. [ 534.675468][T21630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3921'. [ 534.686717][T21631] netlink: 'syz.2.3919': attribute type 11 has an invalid length. [ 534.690130][T21630] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3921'. [ 534.713768][T21629] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3921'. [ 534.719413][T21623] tipc: Resetting bearer [ 534.772227][T21629] geneve2: entered promiscuous mode [ 534.787682][T21629] geneve2: entered allmulticast mode [ 534.845879][T21626] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 534.885173][T21622] tipc: Resetting bearer [ 534.923825][T21645] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3924'. [ 534.944489][T21622] tipc: Disabling bearer [ 535.037870][T21655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3927'. [ 535.211621][T21661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3929'. [ 535.813210][T21676] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.072275][ T4937] Bluetooth: hci3: command 0x0405 tx timeout [ 536.850508][T21676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.888289][T21676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.671393][T20679] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 537.678346][T20679] syú2: Port: 1 Link DOWN [ 537.690006][T21701] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 537.715486][ T6003] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.740184][ T6003] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.768310][ T6003] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.810813][ T6003] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.173873][T21734] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.585391][T21765] syzkaller1: entered promiscuous mode [ 538.596835][T21765] syzkaller1: entered allmulticast mode [ 539.270869][T21782] __nla_validate_parse: 3 callbacks suppressed [ 539.270888][T21782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3958'. [ 539.386403][T21788] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3960'. [ 539.406246][T21788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3960'. [ 539.495781][T21791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.523557][T21791] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.526033][T21799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'. [ 539.563313][T21791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.580530][T21804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3964'. [ 539.618240][T21791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 539.630388][T21791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 539.645149][T21791] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 539.691067][T21799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3964'. [ 539.788920][T21804] bond3 (unregistering): Released all slaves [ 539.844125][T21818] sctp: [Deprecated]: syz.1.3967 (pid 21818) Use of int in max_burst socket option deprecated. [ 539.844125][T21818] Use struct sctp_assoc_value instead [ 539.906089][T21826] netlink: 'syz.0.3969': attribute type 3 has an invalid length. [ 539.933988][T21820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3968'. [ 539.941805][T21826] netlink: 'syz.0.3969': attribute type 4 has an invalid length. [ 539.964121][T21826] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3969'. [ 540.110062][T21856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3970'. [ 540.125494][T21820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3968'. [ 540.152278][T21856] netlink: 'syz.3.3970': attribute type 1 has an invalid length. [ 540.305694][T21856] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.359072][T21869] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 540.464600][T21870] bond6 (unregistering): (slave syz_tun): Releasing backup interface [ 540.486795][T21870] bond6 (unregistering): Released all slaves [ 540.578087][T21874] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 541.107882][T21906] tipc: Enabling of bearer rejected, failed to enable media [ 541.174156][T21904] lo speed is unknown, defaulting to 1000 [ 541.185978][T21904] xfrm0 speed is unknown, defaulting to 1000 [ 541.446123][T21923] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 541.455837][T21845] IPVS: starting estimator thread 0... [ 541.569648][T21908] netlink: zone id is out of range [ 541.575103][T21928] IPVS: using max 36 ests per chain, 86400 per kthread [ 541.592934][T21908] netlink: zone id is out of range [ 541.617751][T21908] netlink: zone id is out of range [ 541.643162][T21908] netlink: zone id is out of range [ 541.652423][T21908] netlink: zone id is out of range [ 541.677943][T21908] netlink: zone id is out of range [ 541.689631][T21908] netlink: zone id is out of range [ 541.708875][T21908] netlink: zone id is out of range [ 541.730354][T21904] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 543.115884][ T14] team0: Port device bridge4 removed [ 543.125480][ T14] bond4 (unregistering): (slave bridge5): Releasing active interface [ 543.149067][ T14] bond1 (unregistering): Released all slaves [ 543.167489][ T14] bond0 (unregistering): Released all slaves [ 543.189389][ T14] bond2 (unregistering): (slave veth3): Releasing active interface [ 543.203861][ T14] bond2 (unregistering): Released all slaves [ 543.218379][ T14] bond3 (unregistering): Released all slaves [ 543.236460][ T14] bond4 (unregistering): Released all slaves [ 543.250821][ T14] bond5 (unregistering): Released all slaves [ 543.265811][ T14] bond6 (unregistering): Released all slaves [ 543.281070][ T14] bond7 (unregistering): Released all slaves [ 543.295981][ T14] bond8 (unregistering): Released all slaves [ 543.459755][ T14] tipc: Left network mode [ 543.625884][ T14] IPVS: stopping backup sync thread 17627 ... [ 543.774323][T21997] batman_adv: batadv0: Adding interface: macsec1 [ 543.794512][T21997] batman_adv: batadv0: The MTU of interface macsec1 is too small (1418) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.821217][T21997] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 544.135653][ T14] hsr_slave_0: left promiscuous mode [ 544.141895][ T14] hsr_slave_1: left promiscuous mode [ 544.149787][ T14] veth0_macvtap: left promiscuous mode [ 544.157728][ T14] veth1_vlan: left promiscuous mode [ 544.166909][ T14] veth0_vlan: left promiscuous mode [ 544.941896][ T14] IPVS: stop unused estimator thread 0... [ 545.596571][T21982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.782156][T22004] macvlan0: entered promiscuous mode [ 545.788313][T22004] macvlan0: entered allmulticast mode [ 545.807973][T22004] __nla_validate_parse: 79 callbacks suppressed [ 545.807991][T22004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4010'. [ 545.831062][T22008] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 545.842337][T22012] netlink: 'syz.2.4013': attribute type 11 has an invalid length. [ 545.853985][T22004] macvlan0 (unregistering): left promiscuous mode [ 545.865370][T22004] macvlan0 (unregistering): left allmulticast mode [ 546.025297][T22021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4015'. [ 546.149921][T22032] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4018'. [ 546.194231][T22033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4017'. [ 546.251623][T22035] netlink: 'syz.1.4019': attribute type 11 has an invalid length. [ 546.329654][T22035] netlink: 'syz.1.4019': attribute type 11 has an invalid length. [ 546.495616][ T6001] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 546.507224][T22052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.511992][T22045] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4022'. [ 546.518505][T22052] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.563517][T22052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.609181][T22052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.623925][T22052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.637128][T22052] veth1_vlan: left promiscuous mode [ 546.643513][T22052] veth0_vlan: left promiscuous mode [ 546.649881][T22052] veth0_vlan: entered promiscuous mode [ 546.658368][T22052] veth1_vlan: entered promiscuous mode [ 546.668535][T22052] veth1_macvtap: left promiscuous mode [ 546.675188][T22052] veth0_macvtap: left promiscuous mode [ 546.682260][T22052] veth0_macvtap: entered promiscuous mode [ 546.688728][T22058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4023'. [ 546.699154][T22052] veth1_macvtap: entered promiscuous mode [ 546.709599][T22052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.718823][T22052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.727669][T22052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.735858][T22052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.743564][T22052] net_ratelimit: 377 callbacks suppressed [ 546.743575][T22052] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 546.766261][T21845] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 546.775507][T21845] syú2: Port: 1 Link ACTIVE [ 546.785449][ T730] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.792667][ T730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.834729][ T6001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.844047][ T6001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.957076][T22064] x_tables: duplicate underflow at hook 2 [ 546.974809][ T6001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.991921][ T730] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.160477][T22044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.358444][T22082] netlink: 'syz.0.4030': attribute type 11 has an invalid length. [ 547.398368][T22082] netlink: 'syz.0.4030': attribute type 11 has an invalid length. [ 547.424454][T22082] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4030'. [ 547.460590][T22082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4030'. [ 547.483423][T22082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4030'. [ 547.517527][T22082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4030'. [ 547.549368][T22082] netlink: 'syz.0.4030': attribute type 6 has an invalid length. [ 547.711473][T22114] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 547.744465][T22114] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 547.791788][T22114] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 548.025620][T22137] netlink: 'syz.2.4043': attribute type 2 has an invalid length. [ 548.214420][T22150] syzkaller0: entered promiscuous mode [ 548.220203][T22150] syzkaller0: entered allmulticast mode [ 548.475772][T22171] netlink: 'syz.1.4052': attribute type 1 has an invalid length. [ 548.520856][T22171] vlan2: entered allmulticast mode [ 548.527137][T22171] bond2: entered allmulticast mode [ 548.743901][T22185] xt_hashlimit: size too large, truncated to 1048576 [ 549.248160][T22214] "syz.2.4060" (22214) uses obsolete ecb(arc4) skcipher [ 549.490458][T22230] x_tables: duplicate underflow at hook 1 [ 549.780788][T22243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.114234][T22260] bond3: entered promiscuous mode [ 550.122172][T22260] bond3: entered allmulticast mode [ 550.135279][T22260] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.154540][T22269] 8021q: VLANs not supported on ip6_vti0 [ 550.189851][T21851] IPVS: starting estimator thread 0... [ 550.199626][T22267] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 550.302300][T22271] IPVS: using max 41 ests per chain, 98400 per kthread [ 550.448770][T22283] SET target dimension over the limit! [ 550.598949][T22284] 8021q: VLANs not supported on ip6tnl0 [ 551.463306][T22317] __nla_validate_parse: 8 callbacks suppressed [ 551.463322][T22317] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4088'. [ 551.664633][T22316] tipc: Started in network mode [ 551.690744][T22316] tipc: Node identity d6d77987b6e4, cluster identity 4711 [ 551.739629][T22316] tipc: Enabled bearer , priority 0 [ 551.867922][T22320] syzkaller0: entered promiscuous mode [ 551.877935][T22320] syzkaller0: entered allmulticast mode [ 551.884546][T22320] tipc: Resetting bearer [ 551.937815][T22313] tipc: Resetting bearer [ 555.455886][T22313] tipc: Disabling bearer [ 555.466275][T22330] lo speed is unknown, defaulting to 1000 [ 555.495924][T22350] tipc: Enabling of bearer rejected, failed to enable media [ 555.505732][ T5729] tipc: Node number set to 1613986183 [ 555.548323][T22330] xfrm0 speed is unknown, defaulting to 1000 [ 555.628469][T22376] syzkaller0: entered promiscuous mode [ 555.638130][T22376] syzkaller0: entered allmulticast mode [ 555.656977][T22376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4100'. [ 555.878259][T22330] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 564.951501][ T5637] Bluetooth: hci1: command 0x0401 tx timeout [ 573.111721][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 573.114567][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 578.235747][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 631.511425][ T5637] Bluetooth: hci3: command 0x0405 tx timeout [ 634.198754][T22408] syzkaller0: entered promiscuous mode [ 634.215986][T22408] syzkaller0: entered allmulticast mode [ 634.422660][T22418] netlink: 'syz.1.4107': attribute type 1 has an invalid length. [ 634.461609][T22422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4109'. [ 634.582661][T22418] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 634.834119][T22446] sctp: [Deprecated]: syz.4.4115 (pid 22446) Use of int in max_burst socket option. [ 634.834119][T22446] Use struct sctp_assoc_value instead [ 634.874406][T22449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4116'. [ 635.004579][T22449] bond4: Invalid ad_actor_system MAC address. [ 635.032098][T22449] bond4: option ad_actor_system: invalid value (7) [ 635.072783][T22449] bond4 (unregistering): Released all slaves [ 635.147247][T22447] lo speed is unknown, defaulting to 1000 [ 635.194677][T22447] xfrm0 speed is unknown, defaulting to 1000 [ 635.238831][T22443] netlink: 'syz.0.4114': attribute type 2 has an invalid length. [ 635.261665][T22443] netlink: 'syz.0.4114': attribute type 8 has an invalid length. [ 635.288451][T22443] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4114'. [ 635.360109][T22467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4120'. [ 635.380408][T22469] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4121'. [ 635.783363][T22489] netlink: 'syz.0.4125': attribute type 1 has an invalid length. [ 636.029606][T22489] bond9: entered promiscuous mode [ 636.050789][T22489] 8021q: adding VLAN 0 to HW filter on device bond9 [ 636.055797][T22503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4127'. [ 636.081755][T22500] block nbd0: server does not support multiple connections per device. [ 636.094900][T22500] block nbd0: shutting down sockets [ 636.103331][T22494] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 636.151413][T22494] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 636.178401][T22494] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 636.275085][T22495] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 636.321629][T22495] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 636.450367][T22447] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 636.600234][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4131'. [ 636.622138][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4131'. [ 636.763105][T22518] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 637.109460][T22536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4134'. [ 637.404304][T22520] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 637.446517][T22542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4136'. [ 637.790701][T22562] lo speed is unknown, defaulting to 1000 [ 637.808426][T22562] xfrm0 speed is unknown, defaulting to 1000 [ 637.929899][T22580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.015602][T22580] netlink: 'syz.4.4144': attribute type 2 has an invalid length. [ 638.045791][T22566] syzkaller0: entered promiscuous mode [ 638.062782][T22566] syzkaller0: entered allmulticast mode [ 640.847812][T22598] netlink: 'syz.3.4150': attribute type 1 has an invalid length. [ 640.931648][T22599] __nla_validate_parse: 2 callbacks suppressed [ 640.931670][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4150'. [ 642.536265][T22598] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 642.544078][T22562] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 642.589322][T22586] lo speed is unknown, defaulting to 1000 [ 642.635807][T22586] xfrm0 speed is unknown, defaulting to 1000 [ 642.804882][T22618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4156'. [ 642.848079][T22618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4156'. [ 643.068083][T22626] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4158'. [ 643.085976][T22586] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 643.166967][T22632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.225506][T22622] lo speed is unknown, defaulting to 1000 [ 643.316095][T22622] xfrm0 speed is unknown, defaulting to 1000 [ 643.439584][T22623] netlink: 'syz.2.4157': attribute type 4 has an invalid length. [ 643.694060][T22622] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 644.085989][T22646] batman_adv: batadv0: Adding interface: vlan3 [ 644.096702][T22646] batman_adv: batadv0: The MTU of interface vlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.122376][T22646] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 644.173991][T22646] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4164'. [ 644.323126][T22646] bridge0: left allmulticast mode [ 644.375664][T22654] netlink: 'syz.1.4166': attribute type 5 has an invalid length. [ 644.412471][T22655] netlink: 'syz.1.4166': attribute type 5 has an invalid length. [ 644.655640][T22667] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4169'. [ 644.724228][T22669] xt_limit: Overflow, try lower: 324382443/0 [ 644.788952][T22669] sctp: [Deprecated]: syz.0.4171 (pid 22669) Use of int in max_burst socket option deprecated. [ 644.788952][T22669] Use struct sctp_assoc_value instead [ 645.215869][T22698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4179'. [ 645.455040][T22716] syzkaller0: entered promiscuous mode [ 645.479650][T22716] syzkaller0: entered allmulticast mode [ 645.520436][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4186'. [ 645.685336][T22720] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4188'. [ 645.987011][T22739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4193'. [ 646.557946][T22753] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 646.837665][T22762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4200'. [ 646.938264][T22768] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4201'. [ 647.059804][T22768] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4201'. [ 647.075860][T22768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4201'. [ 647.120147][T22774] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 647.517405][T22805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4213'. [ 647.537785][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4212'. [ 647.543640][T22805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4213'. [ 648.678506][T22864] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4229'. [ 648.785052][T22861] tun0: tun_chr_ioctl cmd 1074025675 [ 648.797240][T22861] tun0: persist enabled [ 648.803882][T22861] tun0: tun_chr_ioctl cmd 1074025675 [ 648.810374][T22861] tun0: persist enabled [ 648.820502][T22861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.973235][T22879] netlink: 'syz.4.4234': attribute type 1 has an invalid length. [ 648.993335][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'. [ 649.020630][T22882] ip6gretap0: entered promiscuous mode [ 649.148502][T22886] vlan2: entered allmulticast mode [ 649.159961][T22886] bridge0: entered allmulticast mode [ 650.000199][T22946] sctp: [Deprecated]: syz.3.4251 (pid 22946) Use of int in max_burst socket option. [ 650.000199][T22946] Use struct sctp_assoc_value instead [ 650.694959][T22986] lo speed is unknown, defaulting to 1000 [ 650.703167][T22986] xfrm0 speed is unknown, defaulting to 1000 [ 651.054133][T22986] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 651.313675][T23002] syzkaller1: entered promiscuous mode [ 651.335714][T23002] syzkaller1: entered allmulticast mode [ 651.484102][T23010] __nla_validate_parse: 4 callbacks suppressed [ 651.484122][T23010] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4269'. [ 651.606695][T23014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4271'. [ 651.710719][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4274'. [ 651.726106][T23025] bond8: entered promiscuous mode [ 651.741894][T23025] bond8: entered allmulticast mode [ 651.953733][T23041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4278'. [ 651.970788][T23043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4279'. [ 651.989868][T23041] vlan2: entered promiscuous mode [ 652.006183][T23041] syz_tun: entered promiscuous mode [ 652.415890][T23068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4286'. [ 652.686452][T20679] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 652.701001][T23079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4289'. [ 652.714198][T23079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4289'. [ 652.725040][T23079] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4289'. [ 652.764762][T23082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4290'. [ 652.808018][T23082] 8021q: adding VLAN 0 to HW filter on device bond3 [ 652.844809][T23085] bond3: (slave veth5): Enslaving as an active interface with an up link [ 652.908833][T23079] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 652.965985][T23082] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 653.126734][T23079] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 653.420833][T23104] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 653.626489][T23079] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 654.436759][T23127] netlink: 'syz.1.4300': attribute type 9 has an invalid length. [ 655.998099][T23079] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 656.088771][T23138] pimreg1: renamed from bridge0 (while UP) [ 656.116553][T23138] pimreg1: entered allmulticast mode [ 656.131674][T23138] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 656.135013][T23140] x_tables: duplicate underflow at hook 1 [ 656.160599][T23141] netlink: 'syz.0.4304': attribute type 4 has an invalid length. [ 656.205590][T23139] netlink: 'syz.0.4304': attribute type 6 has an invalid length. [ 656.234442][ T5729] IPVS: starting estimator thread 0... [ 656.343476][T23148] IPVS: using max 35 ests per chain, 84000 per kthread [ 656.529780][ T14] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 656.593969][ T14] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 656.624277][T23168] __nla_validate_parse: 16 callbacks suppressed [ 656.624400][T23168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4311'. [ 656.663039][ T730] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 656.774081][ T730] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 656.809272][T23180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4315'. [ 656.993305][T23186] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 657.012961][T23200] bridge0: port 3(macvlan2) entered blocking state [ 657.032765][T23200] bridge0: port 3(macvlan2) entered disabled state [ 657.040833][T23200] macvlan2: entered allmulticast mode [ 657.047598][T23200] ip6gretap0: entered allmulticast mode [ 657.056722][T23200] macvlan2: entered promiscuous mode [ 657.121693][T23204] x_tables: duplicate underflow at hook 1 [ 657.416994][T23213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4322'. [ 657.427084][T23222] ip6t_rpfilter: unknown options [ 657.429182][T23214] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4321'. [ 657.452715][T23213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4322'. [ 657.465631][T23214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4321'. [ 657.484003][T23213] openvswitch: netlink: Actions may not be safe on all matching packets [ 657.585561][T23232] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4327'. [ 657.780634][T23239] netlink: 'syz.4.4330': attribute type 1 has an invalid length. [ 657.910867][T23239] 8021q: adding VLAN 0 to HW filter on device bond9 [ 657.979897][T23257] team0: Device vlan2 is already an upper device of the team interface [ 658.113368][T23265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4337'. [ 658.194142][T23276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4337'. [ 658.234934][T23275] xt_hashlimit: size too large, truncated to 1048576 [ 658.259990][T23268] syzkaller0: entered promiscuous mode [ 658.278315][T23268] syzkaller0: entered allmulticast mode [ 658.285700][T23278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4337'. [ 658.322558][T23279] netlink: 'syz.3.4339': attribute type 3 has an invalid length. [ 658.399882][T23286] syzkaller0: entered promiscuous mode [ 658.417358][T23286] syzkaller0: entered allmulticast mode [ 658.434390][T23276] bridge0: entered allmulticast mode [ 658.610502][T23276] macvlan2: left allmulticast mode [ 658.622530][T23276] ip6gretap0: left allmulticast mode [ 658.635450][T23276] macvlan2: left promiscuous mode [ 658.640978][T23276] bridge0: port 3(macvlan2) entered disabled state [ 658.654104][T23276] bridge_slave_1: left allmulticast mode [ 658.661071][T23276] bridge_slave_1: left promiscuous mode [ 658.668552][T23276] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.680510][T23276] bridge_slave_0: left allmulticast mode [ 658.687796][T23276] bridge_slave_0: left promiscuous mode [ 658.695275][T23276] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.915302][T23304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.250783][T23328] bond4: entered promiscuous mode [ 659.256582][T23328] 8021q: adding VLAN 0 to HW filter on device bond4 [ 659.529914][T23347] tipc: Started in network mode [ 659.539845][T23347] tipc: Node identity 5690a7779c4f, cluster identity 4711 [ 659.548441][T23347] tipc: Enabled bearer , priority 0 [ 659.596054][T23347] syzkaller0: entered promiscuous mode [ 659.601705][T23347] syzkaller0: entered allmulticast mode [ 659.608084][T23347] tipc: Resetting bearer [ 660.477312][T23354] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 660.576483][T23372] sctp: [Deprecated]: syz.1.4362 (pid 23372) Use of int in maxseg socket option. [ 660.576483][T23372] Use struct sctp_assoc_value instead [ 663.011945][ T14] tipc: Resetting bearer [ 663.036904][T21849] tipc: Node number set to 3403655031 [ 663.060988][T23346] tipc: Resetting bearer [ 663.128131][T23346] tipc: Disabling bearer [ 663.149974][T23383] IPVS: Unknown mcast interface: vcan0 [ 663.239817][T23390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.836794][T23412] netlink: 'syz.3.4375': attribute type 1 has an invalid length. [ 663.850114][T23409] __nla_validate_parse: 7 callbacks suppressed [ 663.850132][T23409] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4374'. [ 664.680266][T23413] bridge_slave_1: left allmulticast mode [ 664.700167][T23413] bridge_slave_1: left promiscuous mode [ 664.712333][T23413] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.760117][T23413] bond0: (slave bond_slave_0): Releasing backup interface [ 664.803729][T23413] bond0: (slave bond_slave_1): Releasing backup interface [ 664.850331][T23413] team0: Port device team_slave_0 removed [ 664.898302][T23413] team0: Port device team_slave_1 removed [ 664.930377][T23413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.964621][T23413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.014612][T23413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.065839][T23413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.145864][T23413] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 665.177893][T23412] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 665.407455][T23462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.525594][T23465] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4386'. [ 665.568576][T23466] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4385'. [ 665.817218][T23474] vxcan0: entered allmulticast mode [ 666.083344][T23493] syzkaller0: entered promiscuous mode [ 666.112634][T23493] syzkaller0: entered allmulticast mode [ 666.166520][T23501] IPv6: Can't replace route, no match found [ 666.282164][T23509] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 666.342253][T23511] netdevsim netdevsim0 €Â: renamed from netdevsim0 (while UP) [ 666.387820][T23511] netlink: 'syz.0.4402': attribute type 2 has an invalid length. [ 666.447594][T23511] : entered promiscuous mode [ 666.535123][T23522] team0: Port device xfrm0 added [ 666.559999][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4406'. [ 666.577169][T23519] IPVS: Scheduler module ip_vs_sip not found [ 666.603723][T23519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4404'. [ 666.658530][T23530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4407'. [ 666.695801][T23519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 666.738407][T23519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4404'. [ 666.801053][T23526] 8021q: adding VLAN 0 to HW filter on device bond6 [ 666.828070][T23526] bond5: (slave bond6): Enslaving as an active interface with an up link [ 666.840530][T23530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.863957][T23530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.922374][T23519] bond5 (unregistering): (slave bond6): Releasing backup interface [ 666.948288][T23519] bond5 (unregistering): Released all slaves [ 666.994723][T23539] syzkaller0: entered promiscuous mode [ 667.001325][T23539] syzkaller0: entered allmulticast mode [ 667.024825][T23539] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 667.304152][T23560] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4416'. [ 667.468866][T23570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4419'. [ 667.647220][T23582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4422'. [ 667.733766][T23584] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 668.027590][T23599] netlink: 'syz.4.4428': attribute type 21 has an invalid length. [ 668.036753][T23599] netlink: 'syz.4.4428': attribute type 4 has an invalid length. [ 668.046123][T23599] netlink: 'syz.4.4428': attribute type 5 has an invalid length. [ 668.179155][T23606] lo: entered allmulticast mode [ 668.239547][T23605] geneve0: entered promiscuous mode [ 668.245443][T23605] macvlan2: entered promiscuous mode [ 668.258059][T23606] lo: left allmulticast mode [ 668.893466][T23619] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 669.136599][T23619] bond5: left promiscuous mode [ 669.152593][T23619] veth3: left promiscuous mode [ 669.227961][T23653] __nla_validate_parse: 4 callbacks suppressed [ 669.227982][T23653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4441'. [ 669.254621][T23619] geneve0: left promiscuous mode [ 669.264813][T23619] macvlan2: left promiscuous mode [ 669.310653][ T6001] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.347490][ T6001] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.503032][ T6001] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.538789][ T6001] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.560282][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4442'. [ 669.681853][T23670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4444'. [ 669.951523][T23695] netlink: 'syz.2.4450': attribute type 1 has an invalid length. [ 669.969220][T23695] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4450'. [ 669.988107][T23695] netlink: 'syz.2.4450': attribute type 1 has an invalid length. [ 670.047384][T23701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4448'. [ 670.360229][T23710] erspan0: left promiscuous mode [ 670.531134][T23710] mac80211_hwsim hwsim31 wlan0: left promiscuous mode [ 670.543005][T23710] mac80211_hwsim hwsim31 wlan0: left allmulticast mode [ 670.555175][T23710] bond5: left promiscuous mode [ 670.559986][T23710] gre1: left promiscuous mode [ 670.578857][T23710] geneve3: left promiscuous mode [ 670.584482][T23710] geneve3: left allmulticast mode [ 670.596803][T23710] bond9: left promiscuous mode [ 670.605799][T23702] syzkaller1: entered promiscuous mode [ 670.612006][T23702] syzkaller1: entered allmulticast mode [ 670.619552][T23715] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 670.670419][ T6003] netdevsim netdevsim0 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.679270][ T6003] netdevsim netdevsim0 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.688298][ T6003] netdevsim netdevsim0 €Â: unset [1, 1] type 2 family 0 port 36631 - 0 [ 670.698254][ T6003] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.708003][ T6003] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.717693][ T6003] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 36631 - 0 [ 670.727638][ T6003] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.737257][ T6003] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.747252][ T6003] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 36631 - 0 [ 670.776326][ T6003] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.785906][ T6003] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.799640][ T6003] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 36631 - 0 [ 671.000991][T23732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.050785][T23740] atomic_op ffff888034cd9998 conn xmit_atomic 0000000000000000 [ 671.310822][T23752] bridge_slave_1: left allmulticast mode [ 671.340925][T23752] bridge_slave_1: left promiscuous mode [ 671.390404][T23752] pimreg1: port 2(bridge_slave_1) entered disabled state [ 671.455032][T23752] bond0: (slave bond_slave_0): Releasing backup interface [ 671.504643][T23752] bond0: (slave bond_slave_1): Releasing backup interface [ 671.560819][T23752] team0: Port device team_slave_0 removed [ 671.580219][T23774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4462'. [ 671.617691][T23752] team0: Port device team_slave_1 removed [ 671.644489][T23752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.674007][T23752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.687114][T23752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.708430][T23752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.710760][T23780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4465'. [ 671.737342][T23752] batman_adv: batadv0: Removing interface: macsec1 [ 671.772438][T23774] erspan0: entered allmulticast mode [ 672.289662][T23814] gtp0: entered promiscuous mode [ 672.309359][T23814] gtp0: entered allmulticast mode [ 672.369915][T23814] team0: Port device gtp0 added [ 672.381890][T23810] lo speed is unknown, defaulting to 1000 [ 672.396101][T23810] xfrm0 speed is unknown, defaulting to 1000 [ 672.776734][T23841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4477'. [ 672.893227][T23841] bond_slave_0: entered promiscuous mode [ 672.903732][T23841] bond_slave_0: entered allmulticast mode [ 672.917391][T23849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4478'. [ 672.954338][T23843] xt_CT: No such helper "syz0" [ 673.011402][T23854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4480'. [ 673.117283][T23810] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 673.436295][T23875] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 673.822136][T23892] bridge0: port 1(bond0) entered blocking state [ 673.844341][T23892] bridge0: port 1(bond0) entered disabled state [ 673.861939][T23892] bond0: entered allmulticast mode [ 673.877099][T23892] bond0: entered promiscuous mode [ 674.254467][T23901] __nla_validate_parse: 4 callbacks suppressed [ 674.254484][T23901] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4489'. [ 674.273060][T23901] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4489'. [ 674.282934][T23901] netlink: 'syz.4.4489': attribute type 5 has an invalid length. [ 674.293779][T23901] netlink: 'syz.4.4489': attribute type 6 has an invalid length. [ 674.301697][T23901] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4489'. [ 690.871950][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 701.113147][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 751.634564][T23966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4496'. [ 751.685541][T23968] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4495'. [ 751.730941][T23968] macvlan0: entered promiscuous mode [ 751.760391][T23969] siw: device registration error -23 [ 752.024856][T23996] netlink: 'syz.4.4503': attribute type 1 has an invalid length. [ 752.042914][T23996] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4503'. [ 752.183643][T24007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4506'. [ 752.199189][T24007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4506'. [ 752.212128][T24011] netlink: 'syz.0.4507': attribute type 29 has an invalid length. [ 752.230576][T24011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4507'. [ 752.327974][T24017] netlink: 'syz.1.4509': attribute type 1 has an invalid length. [ 752.342417][T24017] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4509'. [ 752.358547][T24020] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 752.416381][T24023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4509'. [ 752.628965][T24032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4514'. [ 752.697043][T24032] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4514'. [ 752.982647][T24052] tc_dump_action: action bad kind [ 753.301960][T24062] netlink: 'syz.2.4523': attribute type 3 has an invalid length. [ 753.514826][T24083] veth1_macvtap: entered allmulticast mode [ 753.872979][T24058] bond0: (slave netdevsim1): Releasing backup interface [ 753.899788][T24109] netlink: 'syz.1.4535': attribute type 1 has an invalid length. [ 754.089267][T24109] bond5: entered promiscuous mode [ 754.096523][T24109] 8021q: adding VLAN 0 to HW filter on device bond5 [ 754.119556][T24113] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 754.137865][T24113] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 754.148929][T24113] bond5: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 754.212296][T24117] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 754.235329][T24117] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 754.810348][T24158] netlink: 'syz.2.4549': attribute type 1 has an invalid length. [ 755.086964][T24171] syzkaller0: entered promiscuous mode [ 755.092788][T24171] syzkaller0: entered allmulticast mode [ 755.319271][T24179] syzkaller0: entered promiscuous mode [ 755.325605][T24179] syzkaller0: entered allmulticast mode [ 755.563306][T24192] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 755.645100][T24196] pim6reg99999999: entered allmulticast mode [ 755.709951][T24199] veth0: entered promiscuous mode [ 755.748616][T24199] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 755.867653][T24199] veth0: left promiscuous mode [ 756.113022][T24232] tipc: Enabled bearer , priority 10 [ 756.713338][T24259] bond7: entered promiscuous mode [ 756.726107][T24259] bond7: entered allmulticast mode [ 757.038284][T24272] __nla_validate_parse: 5 callbacks suppressed [ 757.038302][T24272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4579'. [ 757.137873][T24276] syzkaller1: entered promiscuous mode [ 757.144585][T24276] syzkaller1: entered allmulticast mode [ 757.293862][T24280] žÿ: renamed from team_slave_1 [ 757.598858][T24311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4591'. [ 757.642282][T24311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4591'. [ 757.898393][T24331] netlink: 'syz.1.4596': attribute type 2 has an invalid length. [ 757.906815][T24331] netlink: 'syz.1.4596': attribute type 2 has an invalid length. [ 757.926826][T24318] syzkaller1: entered promiscuous mode [ 757.947337][T24318] syzkaller1: entered allmulticast mode [ 758.048499][T24335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 758.062203][T24333] team_slave_0: mtu less than device minimum [ 758.079556][T24333] syzkaller0: entered promiscuous mode [ 758.093737][T24333] syzkaller0: entered allmulticast mode [ 758.205405][T24345] netlink: 'syz.4.4601': attribute type 1 has an invalid length. [ 758.362385][T24349] macvtap1: entered allmulticast mode [ 758.415567][T24345] macvtap2: entered allmulticast mode [ 758.480690][T24360] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 758.586346][T24361] bond10: (slave bridge4): making interface the new active one [ 758.614144][T24361] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 758.644796][T24367] netlink: 64587 bytes leftover after parsing attributes in process `syz.2.4607'. [ 758.676314][T24345] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 758.758818][T24369] netlink: 'syz.3.4608': attribute type 1 has an invalid length. [ 758.786515][T24369] netlink: 'syz.3.4608': attribute type 2 has an invalid length. [ 758.797431][T24345] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 758.816632][T24371] netlink: 'syz.3.4608': attribute type 5 has an invalid length. [ 758.936004][T24345] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 759.061134][T24388] netlink: 'syz.0.4615': attribute type 32 has an invalid length. [ 759.070919][T24345] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 759.179844][ T58] tipc: Subscription rejected, illegal request [ 759.263427][T24398] netlink: 'syz.3.4618': attribute type 40 has an invalid length. [ 759.295691][ T14] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 759.387010][ T159] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 759.484914][T24416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'. [ 759.501403][ T58] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 759.504615][T24416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'. [ 759.554856][ T14] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 759.706904][T24428] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 759.758412][T24434] syzkaller0: entered promiscuous mode [ 759.781630][T24434] syzkaller0: entered allmulticast mode [ 759.846621][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4627'. [ 759.887838][T24436] lo speed is unknown, defaulting to 1000 [ 759.895708][T24436] xfrm0 speed is unknown, defaulting to 1000 [ 760.090635][T24436] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 760.162664][T24447] netlink: 'syz.1.4628': attribute type 1 has an invalid length. [ 760.188755][T24447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4628'. [ 760.298019][T24445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4628'. [ 760.345170][ T730] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.364861][ T730] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.403963][ T730] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.434874][ T730] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.453466][T24461] netlink: 'syz.0.4631': attribute type 2 has an invalid length. [ 760.569972][T24468] Cannot find del_set index 2 as target [ 761.021008][T24484] tipc: Enabled bearer , priority 0 [ 761.043719][T24484] syzkaller0: entered promiscuous mode [ 761.049710][T24484] syzkaller0: entered allmulticast mode [ 761.080043][T24484] tipc: Resetting bearer [ 761.109700][T24483] tipc: Resetting bearer [ 761.150960][T24483] tipc: Disabling bearer [ 761.964959][T24556] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 762.417097][T24585] __nla_validate_parse: 8 callbacks suppressed [ 762.417117][T24585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4663'. [ 762.445366][T24588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4663'. [ 763.257988][T24612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4664'. [ 767.115807][ T730] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.139477][ T730] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.167966][ T730] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.237343][ T730] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.288259][T24628] syzkaller0: entered promiscuous mode [ 767.294674][T24628] syzkaller0: entered allmulticast mode [ 767.327606][T24628] tipc: Enabled bearer , priority 0 [ 767.344654][T24628] netlink: zone id is out of range [ 767.348367][T24646] validate_nla: 1 callbacks suppressed [ 767.348385][T24646] netlink: 'syz.0.4673': attribute type 1 has an invalid length. [ 767.365158][T24628] netlink: zone id is out of range [ 767.378291][T24628] netlink: get zone limit has 8 unknown bytes [ 767.400572][T24627] tipc: Resetting bearer [ 767.462820][T24627] tipc: Disabling bearer [ 767.493168][T24652] netlink: 'syz.3.4674': attribute type 6 has an invalid length. [ 767.506877][T24650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4675'. [ 767.860283][T24676] tipc: Enabled bearer , priority 0 [ 767.869111][T24671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4680'. [ 767.887382][T24676] syzkaller0: entered promiscuous mode [ 767.900326][T24676] syzkaller0: entered allmulticast mode [ 768.030340][T24673] lo speed is unknown, defaulting to 1000 [ 768.038325][T24673] xfrm0 speed is unknown, defaulting to 1000 [ 768.064548][T24669] tipc: Resetting bearer [ 768.085607][T24668] tipc: Resetting bearer [ 768.119105][T24668] tipc: Disabling bearer [ 768.198948][T24690] bond6 (unregistering): Released all slaves [ 768.289243][T24697] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4686'. [ 768.310934][T24697] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4686'. [ 768.336568][T24697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4686'. [ 768.536017][T24673] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 768.551488][T24708] tipc: Enabled bearer , priority 0 [ 768.576840][T24706] syzkaller0: entered promiscuous mode [ 768.583821][T24706] syzkaller0: entered allmulticast mode [ 768.639514][T24709] tipc: Resetting bearer [ 768.709155][T24703] tipc: Resetting bearer [ 768.775051][T24703] tipc: Disabling bearer [ 768.875388][T24720] netlink: 'syz.4.4692': attribute type 1 has an invalid length. [ 768.894341][T24720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 768.952208][T24725] netlink: 1012 bytes leftover after parsing attributes in process `syz.0.4693'. [ 768.994709][T24725] team0: entered promiscuous mode [ 769.015372][T24725] team_slave_0: entered promiscuous mode [ 769.039147][T24725] žÿ: entered promiscuous mode [ 769.060775][T24725] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.064130][T24729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4693'. [ 769.093701][T24725] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 769.150956][T24729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4693'. [ 769.354428][T24740] lo speed is unknown, defaulting to 1000 [ 769.364025][T24740] xfrm0 speed is unknown, defaulting to 1000 [ 769.379450][T24744] netlink: 'syz.0.4698': attribute type 13 has an invalid length. [ 769.397332][T24744] netlink: 'syz.0.4698': attribute type 17 has an invalid length. [ 769.649159][T24759] xt_HMARK: proto mask must be zero with L3 mode [ 769.714934][T24744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.735794][T24761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4700'. [ 769.739541][T24744] team0: left promiscuous mode [ 769.755547][T24744] team_slave_0: left promiscuous mode [ 769.777536][T24744] žÿ: left promiscuous mode [ 769.798357][T24744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.059348][T24785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.235404][T24744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 770.246354][T24744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 770.317733][T24744] veth1_vlan: left promiscuous mode [ 770.324521][T24744] veth0_vlan: left promiscuous mode [ 770.331060][T24744] veth0_vlan: entered promiscuous mode [ 770.338989][T24744] veth1_vlan: entered promiscuous mode [ 770.348693][T24744] veth1_macvtap: left promiscuous mode [ 770.356133][T24744] veth0_macvtap: left promiscuous mode [ 770.363071][T24744] veth0_macvtap: entered promiscuous mode [ 770.375855][T24744] veth1_macvtap: entered promiscuous mode [ 770.389527][T24744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 770.404566][T24744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 770.417621][T24744] 8021q: adding VLAN 0 to HW filter on device bond3 [ 770.426027][T24744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 770.448437][T24744] 8021q: adding VLAN 0 to HW filter on device bond5 [ 770.459312][T24744] 8021q: adding VLAN 0 to HW filter on device bond6 [ 770.467710][T24744] 8021q: adding VLAN 0 to HW filter on device bond7 [ 770.485991][T24744] 8021q: adding VLAN 0 to HW filter on device bond8 [ 770.501933][T24744] 8021q: adding VLAN 0 to HW filter on device bond9 [ 770.510201][T24744] batman_adv: batadv0: Interface activated: vlan3 [ 770.538184][T24744] 8021q: adding VLAN 0 to HW filter on device eth0 [ 770.549630][T24744] 8021q: adding VLAN 0 to HW filter on device eth1 [ 770.563537][T24744] 8021q: adding VLAN 0 to HW filter on device eth2 [ 770.577295][T24744] 8021q: adding VLAN 0 to HW filter on device eth3 [ 770.656434][T24740] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 770.669126][ T14] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.680314][ T14] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.711825][ T14] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 35492 - 0 [ 770.727515][ T14] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.748781][ T14] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.759907][ T14] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 35492 - 0 [ 770.813450][ T14] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.821479][T24795] netlink: 'syz.4.4707': attribute type 1 has an invalid length. [ 770.828253][ T14] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.839148][ T14] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 35492 - 0 [ 770.895985][ T14] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.897882][T24796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4706'. [ 770.914174][ T14] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.930864][ T14] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 35492 - 0 [ 770.994132][T24803] sch_fq: defrate 4294967295 ignored. [ 771.859167][T24841] lo speed is unknown, defaulting to 1000 [ 771.867423][T24841] xfrm0 speed is unknown, defaulting to 1000 [ 772.008986][T24841] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 772.917402][T24859] lo speed is unknown, defaulting to 1000 [ 772.936052][T24859] xfrm0 speed is unknown, defaulting to 1000 [ 773.261033][T24885] tc action pedit 'at' offset 9 out of bounds [ 773.362537][T24859] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 773.608659][T24894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 773.617939][T24894] bridge0: port 1(bond6) entered blocking state [ 773.625146][T24894] bridge0: port 1(bond6) entered disabled state [ 773.632854][T24894] bond6: entered allmulticast mode [ 773.641022][T24894] bond6: entered promiscuous mode [ 773.876618][T24904] __nla_validate_parse: 3 callbacks suppressed [ 773.876637][T24904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4737'. [ 773.925786][T24916] x_tables: duplicate entry at hook 1 [ 773.969733][T24918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4738'. [ 773.986040][T24886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 774.019461][T24912] netlink: 'syz.1.4738': attribute type 1 has an invalid length. [ 774.062088][T24912] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4738'. [ 774.172038][T24916] netlink: 'syz.3.4740': attribute type 1 has an invalid length. [ 774.290883][T24929] pim6reg1: entered promiscuous mode [ 774.306200][T24929] pim6reg1: entered allmulticast mode [ 774.533237][T24929] erspan0: entered promiscuous mode [ 774.587254][T24929] macsec1: entered promiscuous mode [ 774.608231][T24929] erspan0: left promiscuous mode [ 775.179173][T24964] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 775.186623][T24964] netlink: 'syz.3.4750': attribute type 1 has an invalid length. [ 775.198006][T24964] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4750'. [ 775.244257][T24979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4752'. [ 776.196314][T25019] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 776.330348][T25027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4766'. [ 776.398562][T25030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4767'. [ 776.520824][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4767'. [ 776.565871][T25046] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4771'. [ 776.608689][T25046] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4771'. [ 776.772955][T25058] IPVS: length: 80 != 8 [ 778.279306][T25105] netlink: 'syz.2.4784': attribute type 1 has an invalid length. [ 778.479856][T25116] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 778.870566][T25139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 778.910027][T25151] __nla_validate_parse: 8 callbacks suppressed [ 778.910055][T25151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4796'. [ 779.081829][T25126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4791'. [ 779.158685][T25163] bond4: option fail_over_mac: invalid value (127) [ 779.184890][T25163] bond4 (unregistering): Released all slaves [ 779.493492][T25184] lo speed is unknown, defaulting to 1000 [ 779.501801][T25184] xfrm0 speed is unknown, defaulting to 1000 [ 779.661608][ T30] audit: type=1804 audit(1783421205.162:8): pid=25193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4807" name="/newroot/331/cgroup.controllers" dev="tmpfs" ino=1716 res=1 errno=0 [ 779.666309][T25197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4804'. [ 779.731450][ T30] audit: type=1800 audit(1783421205.192:9): pid=25193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4807" name="cgroup.controllers" dev="tmpfs" ino=1716 res=0 errno=0 [ 779.892147][T25202] macsec1: entered promiscuous mode [ 780.186458][T25184] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 780.585597][T25236] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 780.596118][T25235] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 781.419228][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4828'. [ 781.431633][T25277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4825'. [ 781.613709][T25289] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4830'. [ 781.686152][T25289] team0 (unregistering): Port device team_slave_0 removed [ 781.718401][T25289] team0 (unregistering): Port device 76žÿ removed [ 781.980322][T25273] netlink: zone id is out of range [ 782.005870][T25273] netlink: zone id is out of range [ 782.022545][T25273] netlink: zone id is out of range [ 782.043720][T25273] netlink: zone id is out of range [ 782.062320][T25273] netlink: zone id is out of range [ 782.085914][T25273] netlink: zone id is out of range [ 782.111006][T25273] netlink: zone id is out of range [ 782.136413][T25273] netlink: zone id is out of range [ 782.163400][T25273] netlink: zone id is out of range [ 782.213036][T25273] netlink: zone id is out of range [ 782.657276][T25339] syzkaller0: entered promiscuous mode [ 782.675501][T25339] syzkaller0: entered allmulticast mode [ 782.712499][T25339] netlink: 1036 bytes leftover after parsing attributes in process `syz.2.4835'. [ 783.085593][T25365] bond0: (slave bond_slave_0): Releasing backup interface [ 783.133358][T25365] bond0: (slave bond_slave_1): Releasing backup interface [ 783.236913][T25361] bond4: entered promiscuous mode [ 783.252894][T25361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 783.536068][T25393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4849'. [ 784.005020][T25421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4857'. [ 784.006012][T25411] lo speed is unknown, defaulting to 1000 [ 784.059960][T25411] xfrm0 speed is unknown, defaulting to 1000 [ 784.183858][T25425] bond0: (slave ip6tnl0): refused to change device type [ 784.219991][T25425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4858'. [ 784.224050][T25427] netlink: 'syz.3.4859': attribute type 1 has an invalid length. [ 784.249190][T25425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4858'. [ 784.358946][T25428] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 784.372834][T25430] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 784.508359][T25411] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 784.700963][T25442] syzkaller0: entered promiscuous mode [ 784.710669][T25442] syzkaller0: entered allmulticast mode [ 784.998135][T25454] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4866'. [ 785.605274][T25475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4872'. [ 785.666889][T25477] netlink: 'syz.1.4873': attribute type 10 has an invalid length. [ 785.685614][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 785.740493][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 785.775855][T25482] netlink: 'syz.2.4875': attribute type 2 has an invalid length. [ 785.785968][T25477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4873'. [ 785.810066][T25483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4872'. [ 785.810093][T25482] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4875'. [ 785.843886][T25483] netlink: 'syz.0.4872': attribute type 5 has an invalid length. [ 785.926776][T25492] netlink: 'syz.3.4874': attribute type 10 has an invalid length. [ 785.928523][T25482] sctp: [Deprecated]: syz.2.4875 (pid 25482) Use of int in max_burst socket option. [ 785.928523][T25482] Use struct sctp_assoc_value instead [ 786.706579][T25528] 8021q: VLANs not supported on ip6_vti0 [ 787.374971][T25541] tipc: Trying to set illegal importance in message [ 787.440494][T25544] netlink: 'syz.1.4892': attribute type 1 has an invalid length. [ 787.565628][T25544] 8021q: adding VLAN 0 to HW filter on device bond8 [ 787.574686][T25555] netlink: 'syz.0.4895': attribute type 1 has an invalid length. [ 787.849625][T25555] bond10: entered promiscuous mode [ 787.855435][T25555] 8021q: adding VLAN 0 to HW filter on device bond10 [ 787.889784][T25557] veth9: entered allmulticast mode [ 787.900002][T25557] bond8: (slave veth9): Enslaving as an active interface with a down link [ 787.945067][T25563] bond10: (slave veth7): making interface the new active one [ 787.952835][T25563] veth7: entered promiscuous mode [ 787.960041][T25563] bond10: (slave veth7): Enslaving as an active interface with an up link [ 788.004040][T25567] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 788.035439][T25544] bond8: entered allmulticast mode [ 788.457563][T25593] net_ratelimit: 378 callbacks suppressed [ 788.457582][T25593] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 788.761731][T25611] openvswitch: netlink: IP tunnel dst address not specified [ 834.233377][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 864.916701][T25637] netlink: zone id is out of range [ 864.924081][T25637] netlink: zone id is out of range [ 864.933378][T25635] __nla_validate_parse: 10 callbacks suppressed [ 864.933396][T25635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4911'. [ 864.933838][T25637] netlink: zone id is out of range [ 864.949274][T25643] netlink: 'syz.4.4914': attribute type 1 has an invalid length. [ 864.960406][T25642] netlink: 'syz.2.4912': attribute type 1 has an invalid length. [ 864.963308][T25637] netlink: zone id is out of range [ 864.978002][T25637] netlink: zone id is out of range [ 864.985454][T25637] netlink: zone id is out of range [ 864.990872][T25637] netlink: zone id is out of range [ 864.991708][T25647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4911'. [ 864.998080][T25637] netlink: zone id is out of range [ 865.010845][T25637] netlink: zone id is out of range [ 865.017323][T25637] netlink: zone id is out of range [ 865.037155][T25649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4914'. [ 865.039145][T25643] bond12: entered promiscuous mode [ 865.057750][T25643] 8021q: adding VLAN 0 to HW filter on device bond12 [ 865.071093][T25651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4911'. [ 865.118834][T25635] 8021q: adding VLAN 0 to HW filter on device bond9 [ 865.176734][T25642] 8021q: adding VLAN 0 to HW filter on device bond5 [ 865.199600][T25648] vlan0: entered allmulticast mode [ 865.206595][T25648] bond5: entered allmulticast mode [ 865.241556][T25657] block nbd0: server does not support multiple connections per device. [ 865.250082][T25650] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 865.252009][T25657] block nbd0: shutting down sockets [ 865.271293][T25650] bond8 (unregistering): Released all slaves [ 865.293332][T25663] netlink: 'syz.0.4915': attribute type 8 has an invalid length. [ 865.367417][T25649] bond12: entered allmulticast mode [ 865.398566][T25653] bond5: (slave geneve0): making interface the new active one [ 865.407478][T25653] geneve0: entered allmulticast mode [ 865.434043][T25653] bond5: (slave geneve0): Enslaving as an active interface with an up link [ 865.473052][T25651] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 865.527885][T25659] bond12: (slave bridge6): making interface the new active one [ 865.552740][T25659] bridge6: entered promiscuous mode [ 865.558231][T25659] bridge6: entered allmulticast mode [ 865.581487][T25659] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 865.674996][T25668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4917'. [ 866.027879][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 866.051405][T25684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.067586][T25685] netlink: 'syz.0.4923': attribute type 111 has an invalid length. [ 866.076123][T25684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.103112][T25684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.139792][T25684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.149901][T25694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4923'. [ 866.434479][T25708] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4927'. [ 866.464473][T25706] tipc: Failed to remove unknown binding: 66,0,0/1613986183:2044207855/2044207857 [ 866.489313][T25708] netlink: 'syz.3.4927': attribute type 9 has an invalid length. [ 866.519042][T25706] tipc: Failed to remove unknown binding: 66,0,0/1613986183:2044207855/2044207856 [ 866.577270][T25708] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4927'. [ 866.633977][T25708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4927'. [ 866.699962][T25715] tipc: Failed to remove unknown binding: 66,0,0/1613986183:2044207855/2044207857 [ 866.712877][T25715] tipc: Failed to remove unknown binding: 66,0,0/1613986183:2044207855/2044207856 [ 867.855033][T25742] lo speed is unknown, defaulting to 1000 [ 867.882272][T25742] xfrm0 speed is unknown, defaulting to 1000 [ 868.040222][T25752] lo speed is unknown, defaulting to 1000 [ 868.435301][T25752] xfrm0 speed is unknown, defaulting to 1000 [ 868.442571][T25742] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 868.604461][T25753] x_tables: duplicate entry at hook 1 [ 868.689339][T25767] lo speed is unknown, defaulting to 1000 [ 868.714716][T25764] IPVS: set_ctl: invalid protocol: 60 100.1.1.5:20004 [ 869.328978][ T4937] block nbd0: Receive control failed (result -1) [ 869.338822][ T4937] [ 869.341186][ T4937] ====================================================== [ 869.348206][ T4937] WARNING: possible circular locking dependency detected [ 869.355243][ T4937] syzkaller #0 Not tainted [ 869.359666][ T4937] ------------------------------------------------------ [ 869.366686][ T4937] kworker/u9:1/4937 is trying to acquire lock: [ 869.372829][ T4937] ffff888032a5ee60 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 869.382339][ T4937] [ 869.382339][ T4937] but task is already holding lock: [ 869.389691][ T4937] ffff888036784068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 869.398651][ T4937] [ 869.398651][ T4937] which lock already depends on the new lock. [ 869.398651][ T4937] [ 869.409131][ T4937] [ 869.409131][ T4937] the existing dependency chain (in reverse order) is: [ 869.418130][ T4937] [ 869.418130][ T4937] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 869.425763][ T4937] __mutex_lock+0x19d/0x1550 [ 869.430972][ T4937] nbd_queue_rq+0x373/0x1150 [ 869.436115][ T4937] blk_mq_dispatch_rq_list+0x499/0x1990 [ 869.442237][ T4937] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 869.449158][ T4937] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 869.455656][ T4937] blk_mq_run_work_fn+0x16c/0x300 [ 869.461204][ T4937] process_scheduled_works+0xa8e/0x14e0 [ 869.467298][ T4937] worker_thread+0xa47/0xfb0 [ 869.472397][ T4937] kthread+0x388/0x470 [ 869.476980][ T4937] ret_from_fork+0x514/0xb70 [ 869.482120][ T4937] ret_from_fork_asm+0x1a/0x30 [ 869.487399][ T4937] [ 869.487399][ T4937] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 869.494713][ T4937] __mutex_lock+0x19d/0x1550 [ 869.499834][ T4937] nbd_queue_rq+0xc1/0x1150 [ 869.504865][ T4937] blk_mq_dispatch_rq_list+0x499/0x1990 [ 869.511016][ T4937] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 869.517856][ T4937] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 869.524354][ T4937] blk_mq_run_work_fn+0x16c/0x300 [ 869.529891][ T4937] process_scheduled_works+0xa8e/0x14e0 [ 869.535945][ T4937] worker_thread+0xa47/0xfb0 [ 869.541042][ T4937] kthread+0x388/0x470 [ 869.545634][ T4937] ret_from_fork+0x514/0xb70 [ 869.550785][ T4937] ret_from_fork_asm+0x1a/0x30 [ 869.556069][ T4937] [ 869.556069][ T4937] -> #4 (set->srcu){.+.+}-{0:0}: [ 869.563189][ T4937] __synchronize_srcu+0xc9/0x2f0 [ 869.568863][ T4937] elevator_switch+0x1e8/0x7b0 [ 869.574262][ T4937] elevator_change+0x2fa/0x480 [ 869.579541][ T4937] elevator_set_default+0x375/0x440 [ 869.585258][ T4937] blk_register_queue+0x3f3/0x4e0 [ 869.590883][ T4937] __add_disk+0x6cb/0xe30 [ 869.595718][ T4937] add_disk_fwnode+0xfb/0x4b0 [ 869.600900][ T4937] nbd_dev_add+0x733/0xb60 [ 869.605851][ T4937] nbd_init+0x15f/0x1e0 [ 869.610663][ T4937] do_one_initcall+0x250/0x870 [ 869.615951][ T4937] do_initcall_level+0x10a/0x1a0 [ 869.621504][ T4937] do_initcalls+0x59/0xa0 [ 869.626355][ T4937] kernel_init_freeable+0x29d/0x3e0 [ 869.632068][ T4937] kernel_init+0x1d/0x1d0 [ 869.636911][ T4937] ret_from_fork+0x514/0xb70 [ 869.642014][ T4937] ret_from_fork_asm+0x1a/0x30 [ 869.647291][ T4937] [ 869.647291][ T4937] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 869.655098][ T4937] __mutex_lock+0x19d/0x1550 [ 869.660207][ T4937] elevator_change+0x1af/0x480 [ 869.665486][ T4937] elevator_set_none+0xb5/0x140 [ 869.670848][ T4937] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 869.677194][ T4937] nbd_start_device+0x189/0xb30 [ 869.682577][ T4937] nbd_genl_connect+0x1597/0x1c10 [ 869.688131][ T4937] genl_family_rcv_msg_doit+0x233/0x340 [ 869.694235][ T4937] genl_rcv_msg+0x614/0x7a0 [ 869.699259][ T4937] netlink_rcv_skb+0x226/0x4a0 [ 869.704538][ T4937] genl_rcv+0x28/0x40 [ 869.709039][ T4937] netlink_unicast+0x7bb/0x940 [ 869.714313][ T4937] netlink_sendmsg+0x813/0xb40 [ 869.719593][ T4937] sock_sendmsg_nosec+0x13a/0x180 [ 869.725151][ T4937] ____sys_sendmsg+0x54e/0x850 [ 869.730439][ T4937] ___sys_sendmsg+0x2a5/0x360 [ 869.735633][ T4937] __x64_sys_sendmsg+0x1b1/0x290 [ 869.741084][ T4937] do_syscall_64+0x174/0x580 [ 869.746273][ T4937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.752702][ T4937] [ 869.752702][ T4937] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 869.761306][ T4937] blk_alloc_queue+0x544/0x690 [ 869.766593][ T4937] __blk_mq_alloc_disk+0x194/0x390 [ 869.772222][ T4937] nbd_dev_add+0x494/0xb60 [ 869.777152][ T4937] nbd_init+0x15f/0x1e0 [ 869.781822][ T4937] do_one_initcall+0x250/0x870 [ 869.787102][ T4937] do_initcall_level+0x10a/0x1a0 [ 869.792548][ T4937] do_initcalls+0x59/0xa0 [ 869.797387][ T4937] kernel_init_freeable+0x29d/0x3e0 [ 869.803147][ T4937] kernel_init+0x1d/0x1d0 [ 869.807985][ T4937] ret_from_fork+0x514/0xb70 [ 869.813088][ T4937] ret_from_fork_asm+0x1a/0x30 [ 869.818358][ T4937] [ 869.818358][ T4937] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 869.825564][ T4937] fs_reclaim_acquire+0x71/0x100 [ 869.831042][ T4937] __kmalloc_noprof+0xbc/0x720 [ 869.836321][ T4937] tls_sw_sendmsg+0x599/0x2860 [ 869.841700][ T4937] sock_sendmsg_nosec+0x90/0x180 [ 869.847148][ T4937] sock_sendmsg+0x1ca/0x2d0 [ 869.852159][ T4937] splice_to_socket+0xb5e/0x12a0 [ 869.857629][ T4937] direct_splice_actor+0x101/0x160 [ 869.863254][ T4937] splice_direct_to_actor+0x57b/0xcb0 [ 869.869138][ T4937] do_splice_direct+0x195/0x290 [ 869.874507][ T4937] do_sendfile+0x52e/0x7c0 [ 869.879487][ T4937] __se_sys_sendfile64+0x144/0x1a0 [ 869.885129][ T4937] do_syscall_64+0x174/0x580 [ 869.890238][ T4937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.896651][ T4937] [ 869.896651][ T4937] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 869.904737][ T4937] __lock_acquire+0x1520/0x2cf0 [ 869.910134][ T4937] lock_acquire+0x106/0x350 [ 869.915161][ T4937] lock_sock_nested+0x41/0x100 [ 869.920439][ T4937] inet_shutdown+0x6a/0x390 [ 869.925456][ T4937] nbd_mark_nsock_dead+0x2cb/0x550 [ 869.931082][ T4937] recv_work+0x1cee/0x1e10 [ 869.936004][ T4937] process_scheduled_works+0xa8e/0x14e0 [ 869.942071][ T4937] worker_thread+0xa47/0xfb0 [ 869.947171][ T4937] kthread+0x388/0x470 [ 869.951750][ T4937] ret_from_fork+0x514/0xb70 [ 869.956901][ T4937] ret_from_fork_asm+0x1a/0x30 [ 869.962173][ T4937] [ 869.962173][ T4937] other info that might help us debug this: [ 869.962173][ T4937] [ 869.972384][ T4937] Chain exists of: [ 869.972384][ T4937] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 869.972384][ T4937] [ 869.985410][ T4937] Possible unsafe locking scenario: [ 869.985410][ T4937] [ 869.992851][ T4937] CPU0 CPU1 [ 869.998202][ T4937] ---- ---- [ 870.003558][ T4937] lock(&nsock->tx_lock); [ 870.007963][ T4937] lock(&cmd->lock); [ 870.014452][ T4937] lock(&nsock->tx_lock); [ 870.021377][ T4937] lock(sk_lock-AF_INET6-NBD); [ 870.026216][ T4937] [ 870.026216][ T4937] *** DEADLOCK *** [ 870.026216][ T4937] [ 870.034344][ T4937] 3 locks held by kworker/u9:1/4937: [ 870.039610][ T4937] #0: ffff8880213ee140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 870.050824][ T4937] #1: ffffc9000faa7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 870.062555][ T4937] #2: ffff888036784068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 870.071864][ T4937] [ 870.071864][ T4937] stack backtrace: [ 870.077748][ T4937] CPU: 0 UID: 0 PID: 4937 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 870.077767][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 870.077777][ T4937] Workqueue: nbd0-recv recv_work [ 870.077795][ T4937] Call Trace: [ 870.077802][ T4937] [ 870.077808][ T4937] dump_stack_lvl+0xe8/0x150 [ 870.077830][ T4937] print_circular_bug+0x2e1/0x300 [ 870.077847][ T4937] check_noncircular+0x12e/0x150 [ 870.077871][ T4937] __lock_acquire+0x1520/0x2cf0 [ 870.077892][ T4937] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 870.077987][ T4937] ? try_to_wake_up+0x8c5/0x14d0 [ 870.078013][ T4937] ? inet_shutdown+0x6a/0x390 [ 870.078032][ T4937] lock_acquire+0x106/0x350 [ 870.078049][ T4937] ? inet_shutdown+0x6a/0x390 [ 870.078068][ T4937] ? __queue_work+0x1ea/0x10a0 [ 870.078096][ T4937] lock_sock_nested+0x41/0x100 [ 870.078112][ T4937] ? inet_shutdown+0x6a/0x390 [ 870.078130][ T4937] inet_shutdown+0x6a/0x390 [ 870.078148][ T4937] nbd_mark_nsock_dead+0x2cb/0x550 [ 870.078172][ T4937] recv_work+0x1cee/0x1e10 [ 870.078186][ T4937] ? __lock_acquire+0x683/0x2cf0 [ 870.078205][ T4937] ? register_lock_class+0x31/0x2e0 [ 870.078224][ T4937] ? __lock_acquire+0x683/0x2cf0 [ 870.078246][ T4937] ? __pfx_recv_work+0x10/0x10 [ 870.078259][ T4937] ? do_raw_spin_lock+0x12b/0x2f0 [ 870.078275][ T4937] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 870.078290][ T4937] ? process_scheduled_works+0xa20/0x14e0 [ 870.078309][ T4937] ? rcu_is_watching+0x15/0xb0 [ 870.078331][ T4937] ? process_scheduled_works+0xa20/0x14e0 [ 870.078346][ T4937] process_scheduled_works+0xa8e/0x14e0 [ 870.078371][ T4937] ? __pfx_process_scheduled_works+0x10/0x10 [ 870.078389][ T4937] ? assign_work+0x3cf/0x5d0 [ 870.078405][ T4937] worker_thread+0xa47/0xfb0 [ 870.078425][ T4937] ? __kthread_parkme+0x71/0x1f0 [ 870.078447][ T4937] kthread+0x388/0x470 [ 870.078465][ T4937] ? __pfx_worker_thread+0x10/0x10 [ 870.078480][ T4937] ? __pfx_kthread+0x10/0x10 [ 870.078499][ T4937] ret_from_fork+0x514/0xb70 [ 870.078519][ T4937] ? __pfx_ret_from_fork+0x10/0x10 [ 870.078538][ T4937] ? __switch_to+0xc89/0x1420 [ 870.078556][ T4937] ? __pfx_kthread+0x10/0x10 [ 870.078575][ T4937] ret_from_fork_asm+0x1a/0x30 [ 870.078594][ T4937] [ 870.378122][T25767] xfrm0 speed is unknown, defaulting to 1000 [ 870.386068][T25752] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000 [ 870.536548][T25767] ªªªªªªª¨úrBº“ speed is unknown, defaulting to 1000