last executing test programs: 13.289044133s ago: executing program 2 (id=3228): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000000), 0x0, 0x40000181, &(0x7f0000000040)={0x0, 0x3938700}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)={0x30, r7, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000680)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r11, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x404c040) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000a40)={{r3, &(0x7f0000000700)='wlan1\x00', 0x4003, &(0x7f0000000740)={@_ha_fsid={[0x7f, 0x3]}, {0x1, 0x68e2, 0x0, 0x1}}, 0x7, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)}, 0x3, &(0x7f00000009c0)=[{0x2, 0x7f, &(0x7f0000000800)='nl80211\x00', &(0x7f0000000840)="009b42cfc71d3027003e2b1216da944b472380467ec13d4dac47d9b41a65", 0x1e, 0x8}, {0x2, 0x6, &(0x7f0000000880)='&\\^[,\x00', &(0x7f00000008c0)="0c9d1a0e0a5eb2f0c4a553f1e4dca193f6361fd8531e438906ec5d5bef845af8a05827aa6848e8ff4f64a43110a4fbb27a1011c1fd0da02f58f3855f5fe5f1648d1386311c7b784adce72e0785", 0x4d, 0x8}, {0x2, 0x0, &(0x7f0000000940)='\x00', &(0x7f0000000980)="dabe17abb935e537472240cbfafb8c0b3b09c6ddff78ed1ca919a94e573de95c829f826b90", 0x25, 0x18}]}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @empty}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'geneve0\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x55}, 0x0, 0xd0, 0x100, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@cgroup0={{0x28}, {0x92e, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x7}, {0x0, 0x3, 0x2}, 0xfffffff7, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0x0, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {}, {}, 0x87, 0x2, 0x4}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x41, 0x6, {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r15, @ANYBLOB="010625bd70000400000009000000"], 0x14}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="080000000000000000000000000000003a75f2f533000000007c0f949b844c2ac107c68da999a1fcf26ca4625b3729c73168c0a2f059ba6ec7426248bcac953c65eb5f22e971794df075b4e3a8a856d12d85b17c2e6fa95994ab0239ed3a9cadf1a375245ef053bf28a053d8855cf0ca4eae9daaee2622daf488fae0f0e3f97be2df98bccd9ce84038341a1f3f2c347c6af106f38e7bc84937516bb5d9c30fbf0c253c223465624d660d03b5da463fb85eb8567609d1132dac46fcc51aa066a5323a659e65d683233f12e93a5461b493c8924d03cd9f76886e24f346803efe616587caa18b66afc57042cde8f30f93142a5c391726e850912dd83028bd8a2d20", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000400"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x1f, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x100006}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff8}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x1}, @ldst={0x1, 0x3, 0x5, 0x6, 0x8, 0xffffffffffffffc0, 0xfffffffffffffff5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x4, 0xe8, &(0x7f0000000540)=""/232, 0x41100, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xa, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[r12, r8, 0xffffffffffffffff, r4], &(0x7f0000000b80)=[{0x0, 0x5, 0xf, 0xb}, {0x4, 0x2, 0xb, 0xc}, {0x4, 0x3, 0x2, 0x3}], 0x10, 0x1}, 0x94) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x24}], 0x1}, 0x0) 12.858773917s ago: executing program 2 (id=3235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}]}, 0x40}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000200010c000280050001"], 0x58}}, 0x0) 12.764936334s ago: executing program 2 (id=3238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x44040) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x20040811) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}]}, 0x1c}}, 0x1) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xc0, r5, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x1, 0x0, 0x0, {0xffffffffffffffff, 0xaa6, 0x0, 0x26, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x8, 0x51, 0x7}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x400, 0xd0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, {0x2c, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x6}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x2}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xff}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5}}]}}, @NL80211_ATTR_SSID={0x23, 0x34, @random="9e092ebcb00b374d36b52ff8c27cb24bb17a5afdd14f70370445ca54ca96bc"}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x971}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x4c014) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000680)={0x0, 0x6}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004060}, 0x40010) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r6, 0xccfcce22d46e61bf, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x5acfd55c6e7b0b0}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040070}, 0x40800) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r4) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80008200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb4, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5e4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9581ad72631a54af772f2746f3a95a5dd0b89cc18261b1dc7815e2f3457bc2c28b4dc8"}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xef6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xfd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d00), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), r3) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x5c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x10, 0xa, "6de3ad60aa713b40a1046e5e"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c76c1ad2523cb0327d6ba49923"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5aed0587bd"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r11 = accept4$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001140)=0x14, 0x800) getsockname$packet(r11, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000011c0)=0x14) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000001200)) 12.352957606s ago: executing program 2 (id=3242): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x87, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x19, @private1, 0x1000}], 0x1c) (async) getpeername$inet6(r4, 0x0, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540100001a0001000000000000000000fe8000000000000000000000000000aaff02000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c001700000000000000000000000000000000000000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b809049a0e8848b2219e770ee25496c849de3ad41d8cdeed4f2ce4d2f2ace334c78eeb14e2d54c84523389f64d50ce"], 0x154}}, 0x0) 9.609374323s ago: executing program 2 (id=3244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x303, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038a440dd11f61de80e000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120008000100ff6602baf76b3e70b6023b8bc2b784b4829f74fc80f82c87a671cc19d5574e7d3113ff1a5c63652b6e0c51d286a22c347108fa8180a075280d4dd1bf4106bffd3dab2da2b0a308553bcd6dd80000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) recvmsg$unix(r4, &(0x7f0000001900)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000240)=""/157, 0x9d}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f00000015c0)=""/63, 0x3f}, {&(0x7f0000001600)=""/90, 0x5a}, {&(0x7f0000001680)=""/151, 0x97}], 0x7, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00', 0x5}, 0x94) 9.371306102s ago: executing program 2 (id=3249): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111aa00000000008510000002000000850000002a00000095000000000000009500a505000000003d7166e0b5bd98e243651c8826fb6e65bdaa3aa122844daecbcf896350320695f082c5e8ba4da3f5e8d0d25343cfbf31901795a99bbc8a261d137d65f0"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) unshare(0x20000400) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x6, 0x80000004, 0x8, 0x2, 0x0, r0, 0x2000f1c}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r4, 0x0, 0x0, 0x4}, 0x20) getsockopt$inet6_mreq(r2, 0x29, 0x1d, 0x0, &(0x7f0000000240)) setsockopt$sock_int(r3, 0x1, 0x13, &(0x7f0000000000)=0x8, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080007"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000830000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) getpeername$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000210000000071094700000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x22}, 0x94) r9 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000280)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a473500767810000000000000f4de70cda7846a6fba4b4276143e8d3e00000000000081f95b5a693e50a33152fa82b7fe5e1ccaa0d8ebc322e48ca01d8ea96a92c27a74685173505c907046eeca4f486b9fe57e819be0f8f969b222a327816c17d639c50115ca3da89f3fef5db904cc4a5a35ff9a807b4d207d1113d19f0c7dea15132292427c4dc66d153cc6241a193eba5b479d1378971b1bf85b574683cbbb27ac8a38b6ca5eac1314d5b8619d7e88c8f61d88b9f52229727400c3eabe93b58ec5e5272b0878e279a63a2f2bbc1149ff7bc55dd64ada1afa3482f0ad0878ce4ec78b2122bfe7", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000011000000"], 0x28}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.266852083s ago: executing program 3 (id=3342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="3ed55c5fe39eedaffc9f0757a4e6caff0f7bfaf900400700000000fffc8a0d05", 0x20) writev(r0, &(0x7f0000001a80)=[{&(0x7f0000000780)="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", 0xfee}, {&(0x7f0000001780)="0bd962d9ae883ca2b6e42114bc2564a8de05ec", 0x13}], 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3, 0x9}}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8}}}]}, 0x40}}, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000040)=0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc, 0x0, r7}, {@in6=@local, 0x20000, 0x32}, @in=@broadcast, {0x800, 0x0, 0x800000000, 0x0, 0x8, 0x0, 0x0, 0xf}, {0xffffffffffffffff, 0x3, 0xa}, {0x0, 0x21}, 0x70bd28, 0x0, 0xa}, 0x0, 0xfffffffe}, [@tfcpad={0x8, 0x24, 0x7fff}]}, 0x100}}, 0x4000) 2.019533296s ago: executing program 3 (id=3344): socketpair(0x1, 0x4, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0xd, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x7fffffff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r3, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}}, &(0x7f0000000440)=0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) close(0x3) 1.906619669s ago: executing program 3 (id=3346): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getlink={0x28, 0x12, 0xb07, 0x70b92c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xa81, 0x8000}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x400c000, &(0x7f0000000080)={0x11, 0x3, r4, 0x1, 0xfa, 0x6, @random="76caa646ae4c"}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x24, r7, 0x101, 0x70bd2e, 0x7ffff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_IE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0x17, 0x0, @random="a60aee518a225f3699e3e9bc28472c513fad28"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xbf}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) 1.619051594s ago: executing program 4 (id=3350): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061190400000000050000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x880) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r10, 0x2b5}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r10, &(0x7f0000000680)=0x4) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0x20, &(0x7f00000016c0)={&(0x7f0000000680), 0x0, 0x0, &(0x7f00000006c0)=""/4096, 0x1000}}, 0x10) r12 = socket(0x11, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000040)=0xc9ba, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0xf, 0x45c, 0x800, 0x2, 0x10080, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{0x1, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)='%-5lx \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001c40)={'gretap0\x00', &(0x7f0000001c00)={'syztnl2\x00', r5, 0x7, 0x8, 0xd, 0x5, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@ra={0x94, 0x4, 0x1}]}}}}}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r17, 0x5761, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x18, 0x6, &(0x7f0000001a40)=@raw=[@call={0x85, 0x0, 0x0, 0x31}, @jmp={0x5, 0x1, 0x0, 0x7, 0x4, 0x4, 0x10}, @map_fd={0x18, 0x0, 0x1, 0x0, r14}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f0000001ac0)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000001b00)=""/205, 0x41000, 0x0, '\x00', r16, @fallback=0x12, r17, 0x8, &(0x7f0000001c80)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001cc0)={0x0, 0xf, 0x6, 0x2}, 0x10, r11, r1, 0x0, &(0x7f0000001d00)=[r13, r13, r15, r14, r15], 0x0, 0x10, 0x700}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x1, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x8, 0xbc, &(0x7f0000000480)=""/188, 0x41100, 0x8, '\x00', r5, @fallback=0xb, r6, 0x8, &(0x7f0000000580)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x7, 0x4, 0xdb71}, 0x10, r11, r1, 0x5, &(0x7f00000018c0)=[r13, r14, r15, 0x1], &(0x7f0000001900)=[{0x1, 0x5, 0xa, 0xc}, {0x5, 0x4, 0x0, 0xb}, {0x2, 0x5, 0xe, 0x4}, {0x1, 0x5, 0x6, 0xc}, {0x0, 0x2, 0xe, 0x6}], 0x10, 0x8000}, 0x94) 1.598541607s ago: executing program 3 (id=3352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r4, 0x0, 0x0, 0x1, 0x6, 0x15, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendfile(r5, r6, 0x0, 0xffffffff004) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ' \x01\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x190, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'bond0\x00'}]}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf29}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xb}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7fffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfffffffb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x15}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xbe8a99f0c42c9998}, 0x2048045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000010000000000b40000610008000000000091b99c6c55950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000072c000000180a05000000000000000000010000000900010073797a30000000000c0005"], 0xc8}}, 0x0) 1.506918552s ago: executing program 0 (id=3353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x26}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0d96bb75312b441}, 0x4000001) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000bc0d1fbb1300000000", @ANYRES32=r0, @ANYRESHEX=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x4008000) 1.294710846s ago: executing program 0 (id=3355): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f29f057acc54d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) 1.272517045s ago: executing program 4 (id=3356): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) 1.17912103s ago: executing program 0 (id=3357): r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000f80)=""/4100, 0x1004}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000000000)=""/32, 0x20}], 0xb}, 0x10000fff}, {{0x0, 0x0, 0x0}, 0x10000004}], 0x2, 0x0, 0x0) 1.082513991s ago: executing program 4 (id=3358): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x24, 0x2, 0x1, 0x2, 0x200, 0x7ff}, {0x5, 0x0, 0xf, 0x7ff}, 0x6, 0x1aec, 0xf39}}, @TCA_TBF_RATE64={0xc, 0x4, 0xd71f3c2e6ceb9ec4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x140f, 0x1, 0x0, 0x1, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0xffffffffffffffaa}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000804) 1.080906723s ago: executing program 1 (id=3359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000f9ff108f526f848b2b438d812c53486ea418618018a427caffda946d121bd7cf278fc860523032aedc880ce2aee8a86695432f008d7919af7a57a3442646177471ec080733486dcaead110e7c50b086c907bd4cac1d172edf23ff09cef7731904e88acc3dafa28bb8e6e871c9847e9e5afd49a89532c6995f764c72d71ab13c94f9adb2b6d6f31cac0527e28db896385e5b94a77"], 0x14}}, 0x0) 998.27342ms ago: executing program 0 (id=3360): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x201, 0x70bd28, 0x25dfdbfe, {0x2, 0x8, 0x43}}, 0x18}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001640)={&(0x7f0000000800)=@newtclass={0xe18, 0x28, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe9, 0x3}, {0xf}, {0xffe0, 0xffe0}}, [@c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}]}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x1, 0x0, 0x9, 0x2, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffff, 0x3}, 0x40, 0x4}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9a0f, 0x0, 0xff, 0x8, 0x2c, 0xd, 0x200, 0x4, 0x0, 0x3, 0x1, 0x1e1, 0x4, 0x2, 0x5, 0x3, 0x5, 0x3, 0x3, 0xfffffffa, 0x1, 0x86a, 0x0, 0x9, 0x7, 0x0, 0x5, 0x2, 0x7bf, 0x6, 0x5, 0xffffffff, 0x8, 0x3, 0x7f, 0x9, 0xfffffff9, 0x1000, 0x4, 0x4, 0x3, 0xb6, 0x6, 0x4, 0x0, 0x422, 0x8, 0x9, 0x4, 0x6, 0x5, 0xffff, 0x4, 0xffffff17, 0x0, 0x2, 0x7, 0x8, 0x3, 0x8, 0x0, 0x8, 0x6b7c5093, 0x200, 0x3, 0xa7f4, 0xa, 0x2, 0x7, 0x9, 0xe, 0x0, 0x1, 0xb, 0x2, 0x1, 0x7f, 0x8, 0x6, 0x9, 0x1, 0x800, 0x3, 0xe, 0x1, 0x7, 0xb48e, 0x0, 0x1, 0x2, 0x80, 0x3, 0x9, 0xfffffffb, 0x0, 0x3, 0x1, 0x5, 0x80, 0x2, 0x7, 0x3, 0xfffffffb, 0xfffffffe, 0xc9, 0x1, 0x400, 0xe55a, 0x2, 0x771, 0x2, 0x5, 0x8, 0x0, 0xdf, 0x5, 0xffffff46, 0xa, 0x1, 0x5, 0x9, 0x9, 0x4, 0x0, 0x9, 0x3, 0x1, 0x7, 0x40, 0xfffffff9, 0x6, 0x0, 0x8, 0x7, 0x8, 0x3, 0xc296, 0x80000001, 0xd, 0x2, 0x4222, 0x1, 0x4, 0x5, 0x0, 0x7ff, 0xd973, 0x7b, 0x400, 0x7, 0x7, 0xffffa8ae, 0x401, 0x7, 0xffffffff, 0x1, 0x1, 0x3ff, 0xc0, 0xb, 0x80, 0x9b, 0x5, 0x0, 0x2, 0xff, 0x3, 0x7, 0x5, 0x6, 0x7fffffff, 0x1000, 0x9, 0x1, 0x2, 0x5, 0x5, 0xfc000000, 0xe246, 0x80000001, 0x401, 0x8000, 0x0, 0x7, 0x3, 0x0, 0x8, 0x496, 0x5, 0x4, 0x81, 0x22, 0x1, 0x1a8e06ff, 0x4, 0x2, 0x1, 0x9, 0x400, 0x0, 0x8, 0x5, 0x3, 0x1, 0x1, 0x3d, 0x800, 0x1000, 0x6, 0x5, 0x4, 0xa, 0x1, 0x0, 0xb, 0x8, 0xe8a6, 0x0, 0x7fff, 0x4147fd57, 0x2800, 0x3, 0x10, 0x40, 0x9, 0x4c4c, 0x8, 0xfffffffe, 0x8, 0x1, 0x3, 0x1, 0xf306, 0x5, 0x98e, 0x2, 0x0, 0x5, 0x0, 0x9, 0xf03, 0x6, 0x9, 0x8, 0xf629, 0x80, 0x9, 0x4, 0x0, 0x0, 0x7, 0x4, 0x7fff, 0x3, 0x3, 0x9]}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x9}}}, @c_cbq={{0x8}, {0x480, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x2, 0x7, 0x80, 0x9, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x2, 0x6, 0xb7, 0x40, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff0, 0x10}, 0xc, 0x10001}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x6, 0xb}, 0x2f6ef7c5, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x4, 0x9a, 0x80, 0x2, 0x3}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x64b0, 0x4, 0x4, 0x80, 0x5, 0x26bf9102, 0xffffffff, 0x0, 0x200, 0x2, 0x7, 0x5, 0xbd9, 0x6, 0x700c, 0x5, 0x2, 0x1, 0x4, 0x20b, 0x0, 0x401, 0x8, 0x3, 0x2, 0x3, 0xfffffffa, 0x7, 0x946, 0x100, 0x1c, 0xffffffff, 0xc, 0x4, 0x6, 0xe5e, 0x8001, 0x9, 0xffffffff, 0x9, 0x2, 0x41b6, 0x0, 0xff, 0xae10, 0xd1de, 0x0, 0x2, 0x9, 0x4, 0x1, 0x3, 0x3, 0x10001, 0x800, 0x9, 0x7, 0x2, 0xe7f, 0x80, 0x401, 0x6, 0x6, 0xffffffff, 0x3, 0x7, 0x7, 0x101, 0x1ff, 0x3, 0x7, 0xafe, 0x4, 0x7fffffff, 0x7f, 0x1, 0xe, 0xf, 0x1, 0x8, 0x0, 0x0, 0x5, 0x1, 0x101, 0x5, 0x80, 0x7, 0x8, 0x401, 0x3, 0xffde, 0x6, 0x3, 0x4, 0x599, 0x2e, 0x400, 0x7, 0x7, 0x1, 0x99d, 0x0, 0x2a, 0x3, 0x4290, 0x9, 0x3ff, 0x9, 0x0, 0xc8ba, 0x6, 0x9, 0x43, 0x9, 0x401, 0x7fffffff, 0x0, 0x6, 0x2, 0x1000, 0xe, 0x85, 0x4, 0x0, 0x8, 0x29, 0x2, 0x7ff, 0x10001, 0x7ff, 0x7, 0xa9b6, 0xf, 0x5, 0x3, 0x75d4, 0xf4eb, 0x6, 0x8, 0x80, 0x1, 0x1, 0x1, 0x982, 0xfffffff9, 0x1, 0xb4, 0xd, 0xfffffff8, 0xffff, 0x7fff, 0xee9, 0x9, 0x4, 0x3, 0x7, 0x9, 0x7, 0x7, 0x8, 0x100, 0x49c1, 0x1c6, 0xf, 0xffffffff, 0x7, 0x1, 0x5, 0x44, 0x3, 0x4, 0x7ecb0000, 0x400000, 0x7, 0x5, 0xdd3e, 0x217, 0x1, 0xfffffff7, 0x5, 0x6, 0x5, 0x5, 0x80000000, 0x4, 0x400, 0x10, 0x8, 0x200, 0xbef4, 0x0, 0x0, 0x0, 0x8, 0x147, 0x80000000, 0x8, 0x65, 0xe, 0x0, 0x1, 0x6, 0x2, 0x1, 0x5, 0xfffffff9, 0x5, 0x7, 0x7, 0x419, 0x6, 0x7eb3, 0x3, 0x2, 0x26, 0x4, 0x7, 0x7d, 0x9, 0x3, 0x6af4a0e7, 0x8, 0xda, 0x2, 0xff, 0x0, 0x3, 0x4e2, 0x80000000, 0x7f, 0x4, 0x3, 0x6, 0x0, 0x1, 0x5, 0x2, 0x3, 0x4, 0x5, 0x8001, 0xfffffffd, 0xa, 0x80000001, 0x8, 0xf4, 0x6, 0x20, 0x2f, 0x80, 0x1, 0xecfb, 0x74, 0x9, 0x100]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x26, 0x1, 0xf, 0x5, 0x0, 0x4, 0xffff, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x0, 0x4, 0x8, 0x7, 0x4}}]}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xd, 0x2}, 0x81, 0x2f836c4}}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0xf}}]}}, @c_cbq={{0x8}, {0x420, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x4, 0x9, 0x1000, 0x8000, 0x3, 0x31a6, 0x5b, 0x6, 0xf, 0x9, 0x5, 0x7ff, 0x7, 0x0, 0x7, 0x40, 0x6, 0xeca, 0x9, 0x10001, 0x8, 0x9, 0x9, 0x3, 0x1, 0x0, 0x7, 0x5, 0x1ff, 0x6, 0x9, 0x9, 0x148c, 0x6, 0x0, 0xffffffff, 0x7, 0x8, 0x7, 0x1ff, 0x6, 0x2, 0x90, 0x5, 0x2, 0xffffffff, 0x9, 0xd0, 0xfe68612, 0x3, 0x1ff, 0x4, 0x37, 0xe, 0x9, 0x5, 0x8, 0x0, 0x20, 0xf, 0xf09c, 0x6, 0x944, 0x2, 0x6, 0x3, 0x1, 0x9, 0x4, 0x401, 0x5, 0x1, 0xfb2b, 0x334, 0xb6e, 0x1, 0x3ff, 0xfff, 0x20000, 0x1, 0xfffffffc, 0x3, 0xfffffff7, 0x3, 0xb0d9, 0x3, 0x9, 0xf, 0x66, 0x4, 0x9e, 0x1, 0xd7, 0x1, 0x9c, 0x5, 0x0, 0xffffffff, 0xc, 0x7, 0x10000, 0x7f, 0x5, 0x5, 0x9, 0x0, 0xfffffff9, 0x6, 0xfffff797, 0x1, 0x6, 0x7, 0x35, 0x7, 0x3, 0x1, 0x9, 0x3, 0x1, 0x1, 0x50, 0x84ed, 0x1000, 0x80000000, 0x7, 0x5, 0x5, 0xb, 0x1, 0xc96, 0x4, 0x2, 0xcc, 0xfffffffe, 0x7, 0x800, 0x12f, 0x9, 0x9, 0xcfd, 0x1, 0x3, 0x0, 0x3, 0x4, 0xd8, 0xf11f, 0x1e, 0xb, 0x3, 0x810, 0x6, 0x5d, 0x7f, 0xaf, 0x200, 0x7, 0x7, 0x2, 0x5, 0x7, 0x7cc, 0x70, 0x5, 0x5, 0x2, 0x8, 0x4, 0x522, 0x1, 0x80000001, 0x0, 0xc, 0x0, 0x0, 0x3, 0x1, 0x4, 0x0, 0xa1, 0x5, 0x80000000, 0x80000001, 0x0, 0x2, 0x6, 0x2, 0xfffffffa, 0x9, 0x0, 0x8, 0xffffff80, 0x4, 0x5, 0x8, 0x7, 0x234, 0x3, 0x6, 0x5, 0x4, 0x4, 0x3, 0x7, 0xfffffffb, 0x5, 0xd, 0xffffffff, 0xfffffffe, 0x7284ce20, 0x9, 0x8, 0x9, 0xc, 0x4, 0x7b, 0x1, 0x7453, 0x0, 0xfd, 0x4b, 0x9, 0x9, 0x7, 0x0, 0x3, 0xd0, 0x8a, 0x2, 0xaf31, 0xf89d, 0x0, 0x80000000, 0x2, 0xfffffff9, 0xfffff000, 0x6, 0x3, 0xce, 0x2, 0x10001, 0xfb, 0x8e28, 0xfffffffd, 0xd, 0x8, 0xe, 0x101, 0x5, 0xe, 0xffffffe7, 0x6, 0x9, 0x9, 0x10]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x4, 0x1, 0x1d, 0x1, 0x6, 0x9, 0x62, 0x8}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x9}}}, @c_atm={{0x8}, {0x90, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0x5}}, @TCA_ATM_HDR={0x2c, 0x3, "21ef58a7012bab9f7f363c05b4ca59d5f13bf4206660fd000153509135d33d1b910fb203e060cd1d"}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_HDR={0xb, 0x3, "04dc4409bc5d9f"}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x34, 0x3, "6bf032c69f144ea1984aee73e6a679af381515f7340f2b8ce422244e2bf4f081636e18c6bcd9e1f9c909593334ca3454"}]}}]}, 0xe18}}, 0x4048000) syz_emit_ethernet(0x3a, &(0x7f00000030c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x2, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x7}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x50}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r7 = accept4(r2, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x8031, 0xffffffffffffffff, 0x5e25c000) close(0x4) sendto$inet(r7, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r7, 0x0, 0x0, 0x800) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 944.038233ms ago: executing program 1 (id=3361): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x3, &(0x7f0000000040)={@empty, @multicast1}, 0xc) 916.703267ms ago: executing program 4 (id=3362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x7c}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x11a, 0x4, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x11a, 0x4, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r4, 0x604ae000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000180)='%+9llu \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%+9llu \x00'}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000003c0)={r1, 0x1b, 0x5, 0x1}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{r4, &(0x7f0000000480)='\xff\xff', 0x101041, &(0x7f00000004c0)={@align, {0x10, 0xffff, 0x40, 0x2}}, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0x2}, 0x7, &(0x7f0000000c40)=[{0x3, 0x1, &(0x7f0000000580)='\\-\'!\x00', &(0x7f00000005c0)="c6c7aaa588512e31ea5aa0de8e570aaba0f8f22a2cc360252544f9f6cea36f6c168382c06da830c66a657c0050745839c7f15be1e357497d39830f7c2aa8d1bc3bf0ebf57e247d5436e07ca264b9784b2c1412a218b74c1b4ea12457da0bffa15e72c2a7ca3e662fe22349943a0cd2c37d333d6fb983b2ecbefccaceaaa5daec0bd549f5a5b7835d18931031cee6cf883c72426926f68ab29e734c9e3733c7c8f9976451284d9409990c4236c7712f4baec8459d45fd07faba958b65afb0d723bfbaeaee6cb09b5d8108fe11fc21c5a21f5133b5c31e61d769121dbc4f2cbd2fadca7caad5bb3625f2458cd4832ec68e9c53c03c", 0xf4, 0x10}, {0x3, 0x1, &(0x7f00000006c0)='}.^\x80-*(\x00', &(0x7f0000000700)="2a53b2ddac0dc2a577ad23a1af2ef7676a4bd968a8b55a326dc38fa0421cc47659c0afbf3a1865a856baf4ee2ab4e861091306afab33e2607778f4f784e23ce91af93857637e565d9656504cf7e96be824497e3355b6c260960517b3286df71b4cb8283bebeabef225c3debe2f861853478dde3e5e22e56b3719730126dac30f33e9d0d437ad9790bcfdfedd6971e0b81453e17efbd81d3f4258e6a4a0c740af125b565846501208bcd3c9b71df01fb53bce0580217fd285f20d6d90ab6a3254eb71703ef4ab07a2ccaaa6839676b4fc167824d86693f37761beb4", 0xdb, 0x10}, {0x1, 0x5, &(0x7f0000000800)='(&(\x00', &(0x7f0000000840)="e508fce1637fa6fb162c2425ba7d90c2c156bf26251e5ce46a7a3bc248aac56955c8582bdcc91082ae19d86e990ba9b3bcfe379d6be30361e3625e8e7d89938b1c36afcb9a1476fe5a55cfdab1543385119161d395d613394795bbf22b829042b783bc9a4943c58ddb543bcc00f4c35ef327006a93b478e24f5413aa831dce4208705e47ed3a592fea10837eca33dc4762c06dfaefa48a933c5a60fee2774f65e4ab0b9e2335437ce05973c6", 0xac, 0x10}, {0x3, 0x401, &(0x7f0000000900)='$:{\x00', &(0x7f0000000940)="47a44f75c73655e30ba17ec1795002dc28e4b2a71aa292556b1df222cda97bc5100f882a8fe08780facbf6ec5df38dfe8ae223f1667c710d705682b97a0a09ad1bb910355ba847438a04e0757bc8c0b94b76596f41af2499c0d143e16e89a29a27053ff37f819f7aba9db7b14d3e483db52c2fd68b67a5523912d538bfe5ca192d48195c158989da37508fab55c61b9ed5cf6b40ed15e1e2ab9fb3b298ee649a47", 0xa1}, {0x3, 0x79e, &(0x7f0000000a00)=')$\x00', &(0x7f0000000a40)="adb078ef3b0f04d2e49c827699c2644c72a223bb38fd173229fe163cbedbb5657ed1e074ae3593b86161cdadfc3bfb57950ca12ba02ad8a71c5be726ad8a85d9a49d30f61fcc9bcc797e87f1f888d439ff1a9f1ade86808502725a336e6f570dc758858984ebadfd1b603faa5e90534886630385bdcea78e0a6148ce23e0679f6cbe2c0d05e954e32874046e3844d7287372d83046d8b29cda9007e09b55b11a", 0xa0, 0xe8911a4a6aa0e98b}, {0x3, 0x3, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="67ba966aa01abe006bd2e6f7e25e2f7034390f001a621b094cad409f1d66498ddd2f6a4941c94074371109fa9286bb9bcf36a76bf240c4904dfb03ae6ca109d1be0f9603", 0x44, 0x28}, {0x2, 0x6, &(0x7f0000000bc0)=',\'-,@\\,},/-!#.\x00', &(0x7f0000000c00)="096a27be3af1a38430b8d6459a5b997c80dbf6d89bdfb9da4dadf4198d1d7f804b33761fe948c08f", 0x28}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{r4, &(0x7f0000000480)='\xff\xff', 0x101041, &(0x7f00000004c0)={@align, {0x10, 0xffff, 0x40, 0x2}}, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0x2}, 0x7, &(0x7f0000000c40)=[{0x3, 0x1, &(0x7f0000000580)='\\-\'!\x00', &(0x7f00000005c0)="c6c7aaa588512e31ea5aa0de8e570aaba0f8f22a2cc360252544f9f6cea36f6c168382c06da830c66a657c0050745839c7f15be1e357497d39830f7c2aa8d1bc3bf0ebf57e247d5436e07ca264b9784b2c1412a218b74c1b4ea12457da0bffa15e72c2a7ca3e662fe22349943a0cd2c37d333d6fb983b2ecbefccaceaaa5daec0bd549f5a5b7835d18931031cee6cf883c72426926f68ab29e734c9e3733c7c8f9976451284d9409990c4236c7712f4baec8459d45fd07faba958b65afb0d723bfbaeaee6cb09b5d8108fe11fc21c5a21f5133b5c31e61d769121dbc4f2cbd2fadca7caad5bb3625f2458cd4832ec68e9c53c03c", 0xf4, 0x10}, {0x3, 0x1, &(0x7f00000006c0)='}.^\x80-*(\x00', &(0x7f0000000700)="2a53b2ddac0dc2a577ad23a1af2ef7676a4bd968a8b55a326dc38fa0421cc47659c0afbf3a1865a856baf4ee2ab4e861091306afab33e2607778f4f784e23ce91af93857637e565d9656504cf7e96be824497e3355b6c260960517b3286df71b4cb8283bebeabef225c3debe2f861853478dde3e5e22e56b3719730126dac30f33e9d0d437ad9790bcfdfedd6971e0b81453e17efbd81d3f4258e6a4a0c740af125b565846501208bcd3c9b71df01fb53bce0580217fd285f20d6d90ab6a3254eb71703ef4ab07a2ccaaa6839676b4fc167824d86693f37761beb4", 0xdb, 0x10}, {0x1, 0x5, &(0x7f0000000800)='(&(\x00', &(0x7f0000000840)="e508fce1637fa6fb162c2425ba7d90c2c156bf26251e5ce46a7a3bc248aac56955c8582bdcc91082ae19d86e990ba9b3bcfe379d6be30361e3625e8e7d89938b1c36afcb9a1476fe5a55cfdab1543385119161d395d613394795bbf22b829042b783bc9a4943c58ddb543bcc00f4c35ef327006a93b478e24f5413aa831dce4208705e47ed3a592fea10837eca33dc4762c06dfaefa48a933c5a60fee2774f65e4ab0b9e2335437ce05973c6", 0xac, 0x10}, {0x3, 0x401, &(0x7f0000000900)='$:{\x00', &(0x7f0000000940)="47a44f75c73655e30ba17ec1795002dc28e4b2a71aa292556b1df222cda97bc5100f882a8fe08780facbf6ec5df38dfe8ae223f1667c710d705682b97a0a09ad1bb910355ba847438a04e0757bc8c0b94b76596f41af2499c0d143e16e89a29a27053ff37f819f7aba9db7b14d3e483db52c2fd68b67a5523912d538bfe5ca192d48195c158989da37508fab55c61b9ed5cf6b40ed15e1e2ab9fb3b298ee649a47", 0xa1}, {0x3, 0x79e, &(0x7f0000000a00)=')$\x00', &(0x7f0000000a40)="adb078ef3b0f04d2e49c827699c2644c72a223bb38fd173229fe163cbedbb5657ed1e074ae3593b86161cdadfc3bfb57950ca12ba02ad8a71c5be726ad8a85d9a49d30f61fcc9bcc797e87f1f888d439ff1a9f1ade86808502725a336e6f570dc758858984ebadfd1b603faa5e90534886630385bdcea78e0a6148ce23e0679f6cbe2c0d05e954e32874046e3844d7287372d83046d8b29cda9007e09b55b11a", 0xa0, 0xe8911a4a6aa0e98b}, {0x3, 0x3, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="67ba966aa01abe006bd2e6f7e25e2f7034390f001a621b094cad409f1d66498ddd2f6a4941c94074371109fa9286bb9bcf36a76bf240c4904dfb03ae6ca109d1be0f9603", 0x44, 0x28}, {0x2, 0x6, &(0x7f0000000bc0)=',\'-,@\\,},/-!#.\x00', &(0x7f0000000c00)="096a27be3af1a38430b8d6459a5b997c80dbf6d89bdfb9da4dadf4198d1d7f804b33761fe948c08f", 0x28}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1000003b068004000111a2c65dc4a6f72fdc2a9aaaacdb17dc3185a70a38e6ec316735631130b02a472bfab36e78dd2a265c922d9dffa5443efab22ab1ad8ebccb46583a74f65d8250aa92b9513d1c8b9c114bfe67", @ANYRES32=r5, @ANYBLOB="0300"/20, @ANYRES32, @ANYRES32=r6, @ANYBLOB="01000000020000000100"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x50) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc4, 0x0, 0x0}, &(0x7f0000000100)=0x35) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc4, 0x0, 0x0}, &(0x7f0000000100)=0x35) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "78e1054910d8a0f0efd0d4c0ba321cff5db0aac6"}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000100)={0x3, 0x40, 0x6, 0xc}) (async) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000100)={0x3, 0x40, 0x6, 0xc}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x100) 790.47126ms ago: executing program 1 (id=3363): r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000340)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x95}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 705.80028ms ago: executing program 1 (id=3364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)={0x28, r2, 0x411, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x2a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00fcfc61521d015f28d1732853d4ace9d00200f5770b713219ee201c2e0b925029bd703b2220ad8b75e895d942d5f6ff433e7daf30686b47d169a1328d957d44948f5369f38d9ecca6256b6e0fcb669ab3eaf815fa87db69f17e17427d5fb865fc5afed30cd902068bc46a8031ebfa64b7bb99873e74789a4533336bc7f5e6f430b8a679bbfe080f1d0e397df36f1eedf31b27883a906365dc1dbb9c6f05b864a01265f2c5b66df3b25392f6b9c7a0473ad355279961318d55639d7704871c58bf7f79ed6e0cde3944450f97", @ANYRES32=0x0, @ANYBLOB="000000003062000020001280080001006774700014000280050005000100000005000600040000000a0003003a712f0756b80000"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)={0x28, r2, 0x411, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x2a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00fcfc61521d015f28d1732853d4ace9d00200f5770b713219ee201c2e0b925029bd703b2220ad8b75e895d942d5f6ff433e7daf30686b47d169a1328d957d44948f5369f38d9ecca6256b6e0fcb669ab3eaf815fa87db69f17e17427d5fb865fc5afed30cd902068bc46a8031ebfa64b7bb99873e74789a4533336bc7f5e6f430b8a679bbfe080f1d0e397df36f1eedf31b27883a906365dc1dbb9c6f05b864a01265f2c5b66df3b25392f6b9c7a0473ad355279961318d55639d7704871c58bf7f79ed6e0cde3944450f97", @ANYRES32=0x0, @ANYBLOB="000000003062000020001280080001006774700014000280050005000100000005000600040000000a0003003a712f0756b80000"], 0x4c}}, 0x0) (async) 617.784362ms ago: executing program 3 (id=3365): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000100)={"99983dd61d6e484b249c23089f5bcb3d", 0x0, 0x0, {0x4, 0xd}, {0x2, 0x80000001}, 0x4, [0xffff, 0x7fff, 0x3, 0xc57, 0x7f, 0x4, 0x2, 0x9, 0x4, 0x7f, 0x1, 0x6b7, 0xaf, 0x6, 0xe23a, 0xcfd2]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000240)=r2) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x3a) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}}, 0x0) 550.450947ms ago: executing program 4 (id=3366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000101400200000000000000000defffffeff0000000008000a000000000014001f0000000000000000000000000000000000060002000000000006001b004e20000005002100"], 0x6c}, 0x1, 0x620b}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x8, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fdf, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x7f}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x8000007, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x407, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) 545.764279ms ago: executing program 1 (id=3367): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40100000000000061110a0d000000001600000000f17c85b983f1e01a000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x20000800) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)={'b', ' *:* ', 'wm\x00'}, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f50020068720010000000000000000000000000002fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ff0300"], 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r5 = accept4$inet(r0, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) listen(r5, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @sack_perm, @window={0x3, 0x590, 0x3}, @window={0x3, 0x53d9, 0x6}, @timestamp, @mss={0x2, 0x9}], 0x6) 194.721543ms ago: executing program 0 (id=3368): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000000)={0x0, "77738e2131e8276297a1eadb5b8bc1fe"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001000)={{}, 0x0, 0x0, @unused=[0x2, 0x0, 0x4, 0x9], @devid=r1}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001000)={{}, 0x0, 0x0, @unused=[0x2, 0x0, 0x4, 0x9], @devid=r1}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002000)={r0, 0x0, 0x40eb, 0x81}) write$cgroup_int(r2, &(0x7f0000002040)=0x8, 0x12) write$bt_hci(0xffffffffffffffff, &(0x7f0000002080)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) getsockname$tipc(r2, &(0x7f00000020c0), &(0x7f0000002100)=0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000002140)={0x16, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x975}]}, 0x10) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000021c0)={@remote}, &(0x7f0000002200)=0x14) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000021c0)={@remote, 0x0}, &(0x7f0000002200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000022c0)={'syztnl2\x00', &(0x7f0000002240)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x10, 0x10000, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x7800, 0x8, 0xa}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002340)={'sit0\x00', &(0x7f0000002300)={'tunl0\x00', 0x0, 0x41, 0x80, 0x8, 0x8, {{0x6, 0x4, 0x3, 0x33, 0x18, 0x68, 0x0, 0x10, 0x29, 0x0, @multicast2, @remote, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000002480)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002440)={&(0x7f0000002380)={0xac, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x5}, @ETHTOOL_A_COALESCE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xd}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000024c0)=[@timestamp, @timestamp, @sack_perm, @sack_perm, @window={0x3, 0x5f, 0xe}, @timestamp, @timestamp, @window={0x3, 0x86fe, 0x3}, @timestamp], 0x9) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000024c0)=[@timestamp, @timestamp, @sack_perm, @sack_perm, @window={0x3, 0x5f, 0xe}, @timestamp, @timestamp, @window={0x3, 0x86fe, 0x3}, @timestamp], 0x9) accept$packet(r2, &(0x7f0000002540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002580)=0x14) (async) r6 = accept$packet(r2, &(0x7f0000002540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002580)=0x14) getsockname$packet(r6, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002600)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000002640)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x7, 0x19, 0x80, 0xffffffff, 0x8}, &(0x7f0000002700)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000002740)={r8, 0xa, 0x10}, &(0x7f0000002780)=0xc) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000002740)={r8, 0xa, 0x10}, &(0x7f0000002780)=0xc) sendto$packet(r0, &(0x7f00000027c0)="79b7f677be72904e3178f85fa82c6968c733e6fec9fbfde5206705d51350e61eda836b3c030bfa03816757d5114297a4987b8d3cb03d57a2ab065cc2620f4942a1f8398bcf5edfd72ac8039fe7f4beb3e77ecdcadda36be87fd95870fdbd0653ea6a1bb6376d98d7efcad0b7fce626b0cd71eeb100aaa2dbc93beea58728c28ef62b118368", 0x85, 0x4c800, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000028c0), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002bc0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b80)={&(0x7f0000002900)={0x25c, r10, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x13c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7e, 0x5, "68409924a5612305304d5fd5e2a42f9418194487e0acfedd53dc0212dab35bcd5da31b91932f67147b2fd3723a99e4f244b32eedc7c9fde1bc3d8a9cf46968aef3a1fb1cbcec4d4af5ff69791675e33d78757f710391a38f95dc7a0cc19ca734e7d288d0ddf8ef487a02fdfa8d447aaf24190bdfb40e338e150b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "0d9c94aa716d9050b89cfb0eca5201b7e206fd2d4b54c8d28a116d3b75f03d3e53578333d9e0c87c58d9a2fbcae85eb0913558eb0975f09c015b2ab2be2d7f311a349d556429c74e3c8a833f19e805bebcccd3560dcaeaed4f2e8786da821bdfcf0d876c898ef04180be4eabeca45500015def0a053f286bb0e225b248bda31208621530d801f6d301da81fb7b1ddf0908ae29d14fb4027a5d7361b632c7b4"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0xc5}, 0x8146421fa9981650) ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f0000002c00)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000002d00)={&(0x7f0000002c40), 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x38, 0x1403, 0x10, 0x70bd26, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000002d00)={&(0x7f0000002c40), 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x38, 0x1403, 0x10, 0x70bd26, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0x3, &(0x7f0000002d40)=0x6, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002e00)={'syztnl2\x00', &(0x7f0000002d80)={'syztnl2\x00', r3, 0x29, 0xc3, 0x42, 0x8, 0x15, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7, 0x80000000, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002e00)={'syztnl2\x00', &(0x7f0000002d80)={'syztnl2\x00', r3, 0x29, 0xc3, 0x42, 0x8, 0x15, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7, 0x80000000, 0x8}}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000002e40)={r12, 0x1, 0x6, @random="2b88d4d73102"}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x40, 0x1, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000002f80)={r9, 0x80000001}, 0x8) ioctl$XFS_IOC_OPEN_BY_HANDLE(r11, 0xc038586b, &(0x7f00000030c0)={r6, &(0x7f0000002fc0)='\x00', 0x201, &(0x7f0000003000)={@align=0x8, {0x4a, 0x5, 0x1, 0x2}}, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0xf}) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r11, 0xc038586b, &(0x7f00000030c0)={r6, &(0x7f0000002fc0)='\x00', 0x201, &(0x7f0000003000)={@align=0x8, {0x4a, 0x5, 0x1, 0x2}}, 0x4, &(0x7f0000003040), &(0x7f0000003080)=0xf}) syz_genetlink_get_family_id$ethtool(&(0x7f0000003100), r11) 87.360667ms ago: executing program 3 (id=3369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r2, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@restrict={0xb, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x5f, 0x61]}}, &(0x7f00000000c0)=""/94, 0x29, 0x5e, 0x1, 0x1cd, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x24, r5}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 35.132134ms ago: executing program 1 (id=3370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="df325cdc0cef329d7541d2b7f7068a"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000140)=""/197, 0xc5}, {&(0x7f0000000000)=""/91, 0x5b}], 0x4}}, {{0x0, 0x0, 0x0}, 0x53d4}], 0x3, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r3, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x3c}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r4], 0x78}}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_MTU={0x8, 0x4, 0x80}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40c0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r12, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x4, 0x40, {{0x7, 0x4, 0x1, 0x3, 0x1c, 0x64, 0x0, 0xfe, 0x2f, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x7, 0xb0, [@private=0xa010100]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x48, r7, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x48}}, 0x40) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010103, @dev={0xac, 0x14, 0x14, 0x31}}, {0x4e24, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "dae0118e94607471261b4c267e0c204b56dec5016dfc3846", "dad3ccc4345efce08b03fe283a2f1ad9ba4f4b0312abca8581395cf9ddb72edb"}}}}, 0x6a) 34.34658ms ago: executing program 4 (id=3371): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff4}], 0x1c) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x810, r5, 0x9ad11000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) ioctl$sock_SIOCETHTOOL(r7, 0x89ff, &(0x7f00000003c0)={'bridge0\x00', &(0x7f0000000580)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x10, 0x4}}) listen(r2, 0x800) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYRESOCT=r9, @ANYBLOB="07b2", @ANYBLOB="341c46"], 0x78) listen(r0, 0xfffff789) socket$can_bcm(0x1d, 0x2, 0x2) r10 = accept(r0, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r11, 0x0, 0x29, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) 0s ago: executing program 0 (id=3372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601030000000900000000000000000500010007000000050005000a00000014000300686173683a69702c706f72742c6970000900020073797a32000000001400078008000600000001000800134000000000050004"], 0x60}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast2, @in, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0xa262, 0x180000000}, 0x2}}, 0xb8}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000000a64000000060a0904000000000000000002000006280004802401006d65746100000000140002800800034000000012080003400000000c0c00064000000000000000051c000580080001400000884c08000240000000030800014000000021140000001100010000000000000000000000000a00"/135], 0x8c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r9) r11 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x8}, 0x1c) kernel console output (not intermixed with test programs): ributes in process `syz.1.1463'. [ 242.117162][T11282] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1467'. [ 242.163022][T11284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1468'. [ 242.706591][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 242.741484][T11316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1476'. [ 242.744880][T11313] netlink: 'syz.3.1474': attribute type 29 has an invalid length. [ 242.769864][T11316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1476'. [ 242.787434][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 242.803279][T11327] netlink: 'syz.3.1474': attribute type 29 has an invalid length. [ 243.270691][T11358] xt_limit: Overflow, try lower: 271964/0 [ 255.629148][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 303.206316][T11401] netlink: 'syz.1.1495': attribute type 1 has an invalid length. [ 303.218977][T11401] __nla_validate_parse: 17 callbacks suppressed [ 303.218993][T11401] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1495'. [ 303.247608][T11401] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1495'. [ 303.270875][T11401] netlink: 'syz.1.1495': attribute type 1 has an invalid length. [ 303.304399][T11401] netlink: 'syz.1.1495': attribute type 8 has an invalid length. [ 303.335293][T11401] netlink: 582 bytes leftover after parsing attributes in process `syz.1.1495'. [ 303.352970][T11419] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1495'. [ 303.497574][T11430] pimreg: entered allmulticast mode [ 303.521497][T11431] macvtap2: entered allmulticast mode [ 303.533995][T11431] veth0_macvtap: entered allmulticast mode [ 303.711812][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'. [ 303.734662][T11443] bridge_slave_1: left allmulticast mode [ 303.740616][T11443] bridge_slave_1: left promiscuous mode [ 303.747218][T11443] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.764871][T11443] bridge_slave_0: left allmulticast mode [ 303.781686][T11443] bridge_slave_0: left promiscuous mode [ 303.792098][T11443] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.042531][T11460] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1511'. [ 304.182145][T11468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1512'. [ 304.218925][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 304.552188][T11489] ipvlan2: entered promiscuous mode [ 304.735707][ T29] audit: type=1107 audit(1778938851.387:8): pid=11496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='$|j¼¶#Ε5+øûÀ*öOyõƬ¿ÆuÕýý¼E<¹X¹O°0|ñ4Á@‹_÷¤+ùØœÓÎä¶añIn' [ 304.770411][ T29] audit: type=1107 audit(1778938851.407:9): pid=11496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='$|j¼¶#Ε5+øûÀ*öOyõƬ¿ÆuÕýý¼E<¹X¹O°0|ñ4Á@‹_÷¤+ùØœÓÎä¶añIn' [ 304.812607][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 304.823418][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 304.998969][T11507] tipc: Started in network mode [ 305.009354][T11507] tipc: Node identity ac1414aa, cluster identity 4711 [ 305.044968][T11507] tipc: Enabled bearer , priority 10 [ 305.056102][T11516] openvswitch: netlink: VLAN attribute unexpected. [ 306.158642][ T10] tipc: Node number set to 2886997162 [ 306.340798][T11592] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 306.384740][T11586] veth7: entered allmulticast mode [ 306.442502][T11598] xt_NFQUEUE: number of total queues is 0 [ 307.087579][T11644] netlink: 'syz.2.1558': attribute type 7 has an invalid length. [ 307.122933][T11644] netlink: 'syz.2.1558': attribute type 8 has an invalid length. [ 307.802415][T11667] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 307.828994][T11667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.270550][T11696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.320336][T11701] __nla_validate_parse: 74 callbacks suppressed [ 308.320352][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 308.401915][T11701] macvtap1: entered allmulticast mode [ 308.435953][T11701] veth0_macvtap: entered allmulticast mode [ 308.459019][T11703] veth0_to_bridge: entered promiscuous mode [ 308.593977][T11712] bridge_slave_1: Device is already in use. [ 308.605865][T11714] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 308.729039][T11722] TCP: TCP_TX_DELAY enabled [ 308.782481][T11724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1584'. [ 308.800727][T11724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1584'. [ 309.075144][T11736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1590'. [ 309.135188][T11740] veth5: entered allmulticast mode [ 309.158433][T11698] veth0_to_bridge: left promiscuous mode [ 309.253763][T11742] syzkaller0: entered promiscuous mode [ 309.273809][T11742] syzkaller0: entered allmulticast mode [ 309.354355][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b6d0000: rx timeout, send abort [ 309.377797][T11749] bond3: entered promiscuous mode [ 309.436684][T11756] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 309.474749][T11756] bond2 (unregistering): Released all slaves [ 309.493398][T11762] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 309.493536][T11761] netlink: 'syz.3.1597': attribute type 1 has an invalid length. [ 309.502780][T11762] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1596'. [ 309.530167][T11761] netlink: 'syz.3.1597': attribute type 1 has an invalid length. [ 309.646195][T11762] vlan2: entered allmulticast mode [ 309.651777][T11762] gretap0: entered allmulticast mode [ 309.674489][T11766] syzkaller1: entered allmulticast mode [ 309.855210][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 309.855222][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b6d0c00: rx timeout, send abort [ 309.864659][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1602'. [ 309.872887][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b6d0000: abort rx timeout. Force session deactivation [ 309.953233][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 309.974100][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1602'. [ 310.080621][T11787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.113915][T11787] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 310.356178][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1612'. [ 310.372458][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b6d0c00: abort rx timeout. Force session deactivation [ 310.536906][T11816] xt_hashlimit: overflow, rate too high: 0 [ 311.000941][T11848] netlink: 'syz.4.1628': attribute type 1 has an invalid length. [ 311.022419][T11852] netlink: 'syz.2.1627': attribute type 8 has an invalid length. [ 311.174692][T11863] 8021q: VLANs not supported on ip_vti0 [ 311.266551][T11872] netlink: Unknown conntrack attr (0) [ 311.325765][T11861] syzkaller0: entered promiscuous mode [ 311.333550][T11861] syzkaller0: entered allmulticast mode [ 312.145706][T11910] : entered promiscuous mode [ 312.620644][T11932] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.975796][T11956] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20004 [ 313.272040][T11972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.279371][T11972] IPv6: NLM_F_CREATE should be set when creating new route [ 313.482041][T11985] __nla_validate_parse: 14 callbacks suppressed [ 313.482067][T11985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1666'. [ 313.502485][T11987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.562682][T11982] netlink: 'syz.1.1665': attribute type 3 has an invalid length. [ 313.584974][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 313.585636][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1666'. [ 313.603345][T11982] netlink: 'syz.1.1665': attribute type 1 has an invalid length. [ 313.603383][T11982] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1665'. [ 313.659772][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 313.684843][T11994] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1668'. [ 313.732260][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1668'. [ 313.774645][T11994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1668'. [ 314.113605][T12001] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 314.292530][T12018] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 314.420335][T12018] 8021q: adding VLAN 0 to HW filter on device bond10 [ 314.716452][ T5640] Bluetooth: hci4: link tx timeout [ 314.724378][ T5640] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.736730][ T5640] Bluetooth: hci4: link tx timeout [ 314.743981][ T5640] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.759620][ T5640] Bluetooth: hci4: link tx timeout [ 314.765317][ T5640] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.773143][ T5640] Bluetooth: hci4: link tx timeout [ 314.778327][ T5640] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.785984][ T5640] Bluetooth: hci4: link tx timeout [ 314.791328][ T5640] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.792831][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1681'. [ 314.799022][ T5640] Bluetooth: hci4: link tx timeout [ 314.799057][ T5640] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.807876][T12044] netlink: 'syz.2.1680': attribute type 9 has an invalid length. [ 314.828971][ T5640] Bluetooth: hci4: link tx timeout [ 314.834118][ T5640] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.842249][ T5640] Bluetooth: hci4: link tx timeout [ 314.847910][ T5640] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.860259][ T5640] Bluetooth: hci4: link tx timeout [ 314.865423][ T5640] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 315.116228][T12061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1685'. [ 315.403429][T12078] netlink: 'syz.2.1691': attribute type 1 has an invalid length. [ 316.178578][T12129] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 316.211907][T12129] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 316.259319][T12135] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 316.266768][T12135] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 316.292257][T12134] netem: change failed [ 316.655643][T12154] nbd: device at index 64 is going down [ 316.747773][ T5640] Bluetooth: hci4: command 0x0405 tx timeout [ 316.782879][T12169] netlink: 'syz.4.1717': attribute type 11 has an invalid length. [ 316.904936][T11418] udevd[11418]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 316.958688][T11663] udevd[11663]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 317.077590][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.541379][T12208] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 317.550597][T12203] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 317.728022][T12216] netlink: 'syz.0.1729': attribute type 3 has an invalid length. [ 317.902881][T12221] bond7: Invalid ad_actor_system MAC address. [ 317.915498][T12221] bond7: option ad_actor_system: invalid value (1) [ 317.953037][T12221] bond7 (unregistering): Released all slaves [ 318.151588][T12246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.256078][T12252] openvswitch: netlink: Flow key attr not present in new flow. [ 318.468665][T12262] tipc: Enabled bearer , priority 0 [ 318.583351][T12272] __nla_validate_parse: 16 callbacks suppressed [ 318.583368][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 318.626493][T12262] syzkaller0: entered promiscuous mode [ 318.635241][T12262] syzkaller0: entered allmulticast mode [ 318.641962][T12262] tipc: Resetting bearer [ 318.849529][ T3276] tipc: Resetting bearer [ 318.969440][T12296] ip6t_srh: unknown srh invflags 4000 [ 318.975199][T12270] tipc: Resetting bearer [ 319.193599][T12305] netlink: 'syz.0.1755': attribute type 1 has an invalid length. [ 320.686757][T12270] tipc: Disabling bearer [ 320.696320][T12305] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 320.910046][T12334] netlink: 'syz.2.1763': attribute type 10 has an invalid length. [ 320.930510][T12334] team0: Device ipvlan0 failed to register rx_handler [ 320.944754][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'. [ 320.954840][T12338] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1765'. [ 320.975016][T12338] netlink: Unknown conntrack attr (0) [ 321.099219][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 321.128903][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 321.169811][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 321.210926][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1769'. [ 321.227000][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 321.585676][T12383] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 321.775104][T12385] xt_TPROXY: Can be used only with -p tcp or -p udp [ 321.803870][T12400] netlink: 'syz.1.1778': attribute type 10 has an invalid length. [ 322.314263][ T5732] hid-generic 0005:10CF:7FFF.0002: item fetching failed at offset 0/1 [ 322.339617][ T5732] hid-generic 0005:10CF:7FFF.0002: probe with driver hid-generic failed with error -22 [ 322.890995][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'. [ 323.075659][T12475] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1802'. [ 323.183188][T12481] bond12: entered promiscuous mode [ 323.192550][T12481] bond12: entered allmulticast mode [ 323.512192][T12502] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 323.783309][T12527] __nla_validate_parse: 3 callbacks suppressed [ 323.783327][T12527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1813'. [ 323.821770][T12526] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.913564][T12521] netlink: 'syz.2.1817': attribute type 5 has an invalid length. [ 324.068101][T12532] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 324.083041][T12532] bond10 (unregistering): Released all slaves [ 326.983563][T12538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.240961][T12608] pim6reg: entered allmulticast mode [ 327.258212][T12608] pim6reg: left allmulticast mode [ 327.471978][T12616] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 327.553725][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'. [ 327.692251][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1843'. [ 327.707453][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1843'. [ 327.866152][T12637] macsec0: entered promiscuous mode [ 327.876366][T12641] veth1_macvtap: entered allmulticast mode [ 327.885146][T12641] macsec0: left promiscuous mode [ 327.891439][T12641] macsec0: left allmulticast mode [ 327.896561][T12641] veth1_macvtap: left allmulticast mode [ 327.971848][T12647] netlink: 'syz.0.1847': attribute type 10 has an invalid length. [ 327.980253][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 328.059977][T12652] sock: sock_timestamping_bind_phc: sock not bind to device [ 328.071996][T12652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1849'. [ 328.331415][T12676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.433669][T12684] syzkaller0: entered promiscuous mode [ 328.455804][T12684] syzkaller0: entered allmulticast mode [ 328.802745][T12702] FAULT_INJECTION: forcing a failure. [ 328.802745][T12702] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 328.844799][T12702] CPU: 0 UID: 0 PID: 12702 Comm: syz.1.1863 Not tainted syzkaller #0 PREEMPT(full) [ 328.844821][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.844842][T12702] Call Trace: [ 328.844850][T12702] [ 328.844857][T12702] dump_stack_lvl+0xe8/0x150 [ 328.844882][T12702] should_fail_ex+0x412/0x560 [ 328.844906][T12702] _copy_from_user+0x2d/0xb0 [ 328.844928][T12702] ___sys_sendmsg+0x1c6/0x360 [ 328.844948][T12702] ? __lock_acquire+0x6b5/0x2cf0 [ 328.844970][T12702] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.845024][T12702] ? __fget_files+0x2a/0x420 [ 328.845042][T12702] ? __fget_files+0x3a0/0x420 [ 328.845069][T12702] __x64_sys_sendmsg+0x1bd/0x2a0 [ 328.845091][T12702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.845117][T12702] ? __pfx_ksys_write+0x10/0x10 [ 328.845146][T12702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.845162][T12702] do_syscall_64+0x15f/0xf80 [ 328.845184][T12702] ? clear_bhb_loop+0x40/0x90 [ 328.845202][T12702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.845217][T12702] RIP: 0033:0x7f462239ce59 [ 328.845233][T12702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.845245][T12702] RSP: 002b:00007f4623208028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.845262][T12702] RAX: ffffffffffffffda RBX: 00007f4622615fa0 RCX: 00007f462239ce59 [ 328.845272][T12702] RDX: 0000000000040000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 328.845282][T12702] RBP: 00007f4623208090 R08: 0000000000000000 R09: 0000000000000000 [ 328.845290][T12702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.845299][T12702] R13: 00007f4622616038 R14: 00007f4622615fa0 R15: 00007ffeeee7d5a8 [ 328.845326][T12702] [ 329.102431][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 329.229431][ T5640] Bluetooth: hci4: command 0x0405 tx timeout [ 329.242099][T12720] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 329.242099][T12720] Please contact the netfilter-devel mailing list or update your nftables rules. [ 329.278274][T12723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.474655][T12720] tipc: Enabling of bearer rejected, failed to enable media [ 329.904405][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 329.992267][T12776] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1882'. [ 330.382607][T12807] netlink: 'syz.0.1890': attribute type 8 has an invalid length. [ 330.390914][T12808] netlink: 'syz.0.1890': attribute type 8 has an invalid length. [ 330.408697][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 330.423942][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 330.583564][T12824] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 330.592751][T12824] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 330.601000][T12824] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 330.609829][T12824] netlink: 'syz.0.1895': attribute type 2 has an invalid length. [ 330.618458][T12824] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1895'. [ 330.704922][T12831] : entered promiscuous mode [ 330.972699][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 331.027383][T12846] openvswitch: netlink: IP tunnel dst address not specified [ 331.439125][T12865] xt_l2tp: invalid flags combination: 0 [ 331.454357][T12865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1912'. [ 331.455965][T12867] netlink: 'syz.3.1913': attribute type 3 has an invalid length. [ 331.473074][T12862] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 331.491681][T12862] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 332.152368][T12910] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 332.164238][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 332.215125][T12910] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.233104][T12909] tipc: Started in network mode [ 332.246162][T12909] tipc: Node identity ce54789639ba, cluster identity 4711 [ 332.255251][T12909] tipc: Enabled bearer , priority 0 [ 332.293536][T12918] lo: entered promiscuous mode [ 332.314383][T12918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.359645][T12924] syzkaller0: entered promiscuous mode [ 332.387568][T12924] syzkaller0: entered allmulticast mode [ 332.436695][T12916] bond4: (slave geneve2): making interface the new active one [ 332.450565][T12916] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 332.466283][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 332.500711][T12924] tipc: Resetting bearer [ 332.519037][T12916] netlink: 'syz.1.1927': attribute type 39 has an invalid length. [ 332.561360][T12916] hsr_slave_0: left promiscuous mode [ 332.576701][T12916] hsr_slave_1: left promiscuous mode [ 332.603218][T12907] tipc: Resetting bearer [ 332.628356][T12907] tipc: Disabling bearer [ 332.665527][T12942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.080068][T12959] ipt_ECN: cannot use operation on non-tcp rule [ 333.097491][T12963] Cannot find del_set index 3 as target [ 333.436312][T12987] veth0_to_bond: default FDB implementation only supports local addresses [ 333.515580][T12996] veth0: entered promiscuous mode [ 333.605883][T12995] veth0: left promiscuous mode [ 333.716696][T13003] nbd3: detected capacity change from 0 to 127 [ 333.768379][ T4947] block nbd3: Receive control failed (result -104) [ 333.997104][T13020] bond10: option all_slaves_active: invalid value (222) [ 334.014707][T13020] bond10 (unregistering): Released all slaves [ 334.059679][T13034] xt_hashlimit: size too large, truncated to 1048576 [ 335.223326][T13096] netlink: 'syz.2.1985': attribute type 10 has an invalid length. [ 335.439331][T13105] sctp: [Deprecated]: syz.2.1989 (pid 13105) Use of int in maxseg socket option. [ 335.439331][T13105] Use struct sctp_assoc_value instead [ 335.764496][T13132] __nla_validate_parse: 6 callbacks suppressed [ 335.764507][T13132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'. [ 335.800194][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'. [ 335.913824][T13141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2000'. [ 335.937386][T13141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2000'. [ 336.081173][T13153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2004'. [ 336.635171][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2009'. [ 336.698082][T13191] block nbd4: Unsupported socket: should be TCP or UNIX. [ 336.953173][T13025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.333498][T13225] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2020'. [ 337.392503][T13227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2021'. [ 337.437725][T13227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2021'. [ 337.463132][T13224] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2021'. [ 338.134991][T13266] netlink: 'syz.4.2035': attribute type 1 has an invalid length. [ 338.165373][T13266] 8021q: adding VLAN 0 to HW filter on device bond7 [ 338.175957][T13266] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 338.187191][T13266] bond7: entered allmulticast mode [ 338.263577][T13273] xt_hashlimit: size too large, truncated to 1048576 [ 338.317207][T13276] netlink: 'syz.3.2038': attribute type 30 has an invalid length. [ 338.438495][T13282] IPv6: NLM_F_CREATE should be specified when creating new route [ 339.058040][T13318] netlink: 'syz.0.2053': attribute type 1 has an invalid length. [ 339.088581][T13318] netlink: 'syz.0.2053': attribute type 7 has an invalid length. [ 339.112178][T13318] netlink: 'syz.0.2053': attribute type 8 has an invalid length. [ 339.140211][T13318] NCSI netlink: No device for ifindex 65584 [ 339.455058][T13336] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 339.471150][T13342] openvswitch: netlink: Message has 8 unknown bytes. [ 339.485986][T13342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.947533][T13370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.970317][T13366] syzkaller1: entered promiscuous mode [ 339.995732][T13366] syzkaller1: entered allmulticast mode [ 340.262138][T13390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.332515][T13386] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 340.638803][T13412] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 340.665039][T13415] veth0: entered promiscuous mode [ 340.913990][T13413] veth0: left promiscuous mode [ 340.961596][T13434] __nla_validate_parse: 23 callbacks suppressed [ 340.961613][T13434] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2083'. [ 341.082490][T13440] tipc: Started in network mode [ 341.103629][T13440] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 341.116875][T13440] tipc: Enabled bearer , priority 14 [ 341.271547][ T29] audit: type=1804 audit(1778938887.917:10): pid=13461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2087" name="/newroot/441/cgroup.controllers" dev="tmpfs" ino=2270 res=1 errno=0 [ 341.303886][T13461] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2087'. [ 341.323602][ T29] audit: type=1800 audit(1778938887.917:11): pid=13461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2087" name="cgroup.controllers" dev="tmpfs" ino=2270 res=0 errno=0 [ 341.323781][T13450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 341.347997][T13461] netlink: 9004 bytes leftover after parsing attributes in process `syz.4.2087'. [ 341.399360][T13450] bridge0: port 1(bond5) entered blocking state [ 341.415598][T13450] bridge0: port 1(bond5) entered disabled state [ 341.435841][T13450] bond5: entered allmulticast mode [ 341.463759][T13450] bond5: entered promiscuous mode [ 341.473357][T13450] bridge0: port 1(bond5) entered blocking state [ 341.479806][T13450] bridge0: port 1(bond5) entered forwarding state [ 341.541482][ T58] bridge0: port 1(bond5) entered disabled state [ 341.789230][T13488] bond1: (slave 26±ÿª¨úrBº“): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 341.878308][T13497] ieee802154 phy1 wpan1: encryption failed: -90 [ 341.899101][T13488] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 342.099462][T13511] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2103'. [ 342.161431][T13499] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.199973][T13499] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.237389][ T5717] tipc: Node number set to 10463914 [ 342.382125][T13499] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.403901][T13499] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.539218][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 342.550098][T13517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.581605][T13499] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.592734][T13499] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.696296][T13526] bond4: (slave geneve2): Releasing active interface [ 342.738868][T13526] bond5: left allmulticast mode [ 342.749223][T13526] bond5: left promiscuous mode [ 342.756420][T13526] bridge0: port 1(bond5) entered disabled state [ 342.793785][T13526] vlan0: entered promiscuous mode [ 342.894874][T13499] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.916001][T13499] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.961806][T13526] tipc: Enabling of bearer rejected, failed to enable media [ 343.036025][T13544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2112'. [ 343.071020][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'. [ 343.122275][T13549] ipt_REJECT: TCP_RESET invalid for non-tcp [ 343.157677][T13549] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2112'. [ 343.187739][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'. [ 343.330155][ T1178] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.351349][ T1178] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.413765][ T3358] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.430264][ T3358] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.469467][ T3358] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.491330][ T3358] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.526510][ T3358] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.555272][ T3358] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.643860][T13580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.651189][T13580] IPv6: NLM_F_CREATE should be set when creating new route [ 343.692964][T13580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2122'. [ 343.905596][T13601] xt_hashlimit: max too large, truncated to 1048576 [ 344.061063][T13607] bond3: entered promiscuous mode [ 344.071911][T13607] bond3: entered allmulticast mode [ 344.093772][T13608] netlink: 'syz.0.2130': attribute type 3 has an invalid length. [ 344.116946][T13619] syzkaller0: entered promiscuous mode [ 344.127879][T13619] syzkaller0: entered allmulticast mode [ 344.643339][T13642] lo: entered allmulticast mode [ 344.745006][T13649] sit0: entered promiscuous mode [ 344.765979][T13649] netlink: 'syz.0.2142': attribute type 1 has an invalid length. [ 344.787625][T13648] netlink: 'syz.0.2142': attribute type 1 has an invalid length. [ 345.195051][T13677] netlink: 'syz.3.2154': attribute type 1 has an invalid length. [ 345.236618][T13677] 8021q: adding VLAN 0 to HW filter on device bond10 [ 345.284694][T13677] vlan0: entered allmulticast mode [ 345.309819][T13677] bond10: entered allmulticast mode [ 345.322342][T13682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.335744][T13684] netlink: 'syz.4.2155': attribute type 3 has an invalid length. [ 345.600743][T13694] syz.4.2159 (13694) used greatest stack depth: 17944 bytes left [ 346.226789][T13748] netlink: 'syz.1.2171': attribute type 1 has an invalid length. [ 346.475831][T13755] __nla_validate_parse: 18 callbacks suppressed [ 346.475851][T13755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2173'. [ 346.676272][T13763] netlink: 'syz.3.2174': attribute type 1 has an invalid length. [ 346.737408][T13769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2176'. [ 346.749101][T13769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2176'. [ 346.823164][T13763] 8021q: adding VLAN 0 to HW filter on device bond11 [ 346.911404][T13770] bond11: (slave gretap1): making interface the new active one [ 346.950934][T13770] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 347.049140][T13791] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 347.219930][T13801] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2188'. [ 347.253709][T13804] netlink: 'syz.4.2186': attribute type 4 has an invalid length. [ 347.271892][T13804] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2186'. [ 347.304539][T13804] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 347.531099][T13828] team_slave_0: entered promiscuous mode [ 347.538495][T13828] batadv0: entered promiscuous mode [ 347.545982][T13828] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.557882][T13828] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 347.576899][T13828] team_slave_0: left promiscuous mode [ 347.583206][T13828] batadv0: left promiscuous mode [ 363.788727][ T11] block nbd3: Possible stuck request ffff888027400000: control (read@0,1024B). Runtime 30 seconds [ 363.800565][ T11] block nbd3: Possible stuck request ffff8880274001c0: control (read@1024,1024B). Runtime 30 seconds [ 363.811524][ T11] block nbd3: Possible stuck request ffff888027400380: control (read@2048,1024B). Runtime 30 seconds [ 363.822624][ T11] block nbd3: Possible stuck request ffff888027400540: control (read@3072,1024B). Runtime 30 seconds [ 378.518622][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.867619][ T11] block nbd3: Possible stuck request ffff888027400000: control (read@0,1024B). Runtime 60 seconds [ 393.878356][ T11] block nbd3: Possible stuck request ffff8880274001c0: control (read@1024,1024B). Runtime 60 seconds [ 393.889489][ T11] block nbd3: Possible stuck request ffff888027400380: control (read@2048,1024B). Runtime 60 seconds [ 393.900445][ T11] block nbd3: Possible stuck request ffff888027400540: control (read@3072,1024B). Runtime 60 seconds [ 396.196647][ T4997] udevd[4997]: worker [11663] /devices/virtual/block/nbd3 is taking a long time [ 404.762396][T13848] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2199'. [ 404.792710][T13850] gtp3: entered promiscuous mode [ 404.808865][T13850] gtp3: entered allmulticast mode [ 404.966118][T13864] vcan0: entered promiscuous mode [ 404.977101][T13864] vcan0: entered allmulticast mode [ 405.436656][T13893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2210'. [ 405.478638][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2210'. [ 405.828585][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'. [ 406.036956][T13929] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 406.222102][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2224'. [ 406.239094][T13948] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2225'. [ 406.349470][T13948] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2225'. [ 406.349660][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2226'. [ 406.391348][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 406.414039][T13948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2225'. [ 406.722617][T13967] netlink: 'syz.2.2229': attribute type 9 has an invalid length. [ 406.868150][T13974] netlink: 'syz.2.2231': attribute type 3 has an invalid length. [ 407.121135][T13987] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 407.138160][T13987] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 407.153303][T13987] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 407.368357][T14006] nbd: must specify at least one socket [ 407.413800][T14010] netlink: 'syz.3.2242': attribute type 4 has an invalid length. [ 407.784582][T14038] netlink: 'syz.4.2247': attribute type 26 has an invalid length. [ 407.819257][T14038] netlink: 'syz.4.2247': attribute type 26 has an invalid length. [ 407.835694][T14030] tc_dump_action: action bad kind [ 407.865053][T14040] IPVS: Unknown mcast interface: netpci0 [ 408.051176][T14052] netlink: 'syz.4.2253': attribute type 83 has an invalid length. [ 408.089174][T14057] syzkaller1: entered promiscuous mode [ 408.109403][T14057] syzkaller1: entered allmulticast mode [ 408.208199][T14063] netlink: 'syz.3.2256': attribute type 11 has an invalid length. [ 408.363247][T14074] 0·: renamed from hsr0 [ 408.387140][T14074] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.422005][T14074] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.462283][T14074] 0·: entered allmulticast mode [ 408.476617][T14074] hsr_slave_0: entered allmulticast mode [ 408.494570][T14074] hsr_slave_1: entered allmulticast mode [ 408.519763][T14074] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 408.531553][T14078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.546908][T14082] xt_bpf: check failed: parse error [ 408.768071][T14095] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.825191][T14101] syzkaller1: entered promiscuous mode [ 408.836756][T14101] syzkaller1: entered allmulticast mode [ 409.560821][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.568197][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.594991][T14144] wg2: left allmulticast mode [ 409.604344][T14144] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 409.673607][T14156] bond12: peer notification delay (25) is not a multiple of miimon (517), value rounded to 0 ms [ 409.686808][T14156] bond12: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 409.701223][T14156] bond12 (unregistering): Released all slaves [ 409.840875][T14163] __nla_validate_parse: 21 callbacks suppressed [ 409.840894][T14163] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2288'. [ 410.004090][T14174] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2293'. [ 410.017919][T14174] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2293'. [ 410.111659][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2295'. [ 410.247168][T14179] 8021q: adding VLAN 0 to HW filter on device bond5 [ 410.257194][T14179] bond4: (slave bond5): Enslaving as an active interface with an up link [ 410.348287][T14195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2298'. [ 410.376152][T14205] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2301'. [ 410.665805][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'. [ 410.711646][T14210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2303'. [ 410.963764][T14235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2309'. [ 411.040163][T14242] netlink: 'syz.0.2311': attribute type 21 has an invalid length. [ 411.090055][T14242] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2311'. [ 411.305743][T14255] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 411.332208][T14255] bond6 (unregistering): Released all slaves [ 411.473765][T14274] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 411.490689][T14274] syzkaller1: linktype set to 823 [ 411.496696][T14271] syzkaller1: tun_chr_ioctl cmd 35108 [ 411.717564][T14286] netlink: 'syz.2.2327': attribute type 10 has an invalid length. [ 411.772465][T14286] team0: Port device dummy0 added [ 412.006498][T14302] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 412.120059][T14310] gretap1: entered promiscuous mode [ 412.128392][T14310] gretap1: entered allmulticast mode [ 413.092007][T14354] netlink: 'syz.2.2339': attribute type 1 has an invalid length. [ 413.176940][T14350] syzkaller0: entered promiscuous mode [ 413.192189][T14350] syzkaller0: entered allmulticast mode [ 413.462049][T14375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.976678][ T5753] IPVS: starting estimator thread 0... [ 414.081881][T14415] IPVS: using max 35 ests per chain, 84000 per kthread [ 414.095338][T14421] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 414.249631][T14430] bond6: entered promiscuous mode [ 414.270241][T14430] bond6: entered allmulticast mode [ 414.449692][T14444] netlink: 'syz.3.2362': attribute type 1 has an invalid length. [ 414.490720][T14444] netlink: 'syz.3.2362': attribute type 1 has an invalid length. [ 414.601720][T14454] netlink: 'syz.0.2365': attribute type 280 has an invalid length. [ 414.620887][ T29] audit: type=1804 audit(1778938961.267:12): pid=14449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2364" name="/newroot/509/cgroup.controllers" dev="tmpfs" ino=2614 res=1 errno=0 [ 414.664249][ T29] audit: type=1800 audit(1778938961.267:13): pid=14449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2364" name="cgroup.controllers" dev="tmpfs" ino=2614 res=0 errno=0 [ 414.716091][T14458] netlink: 'syz.3.2367': attribute type 16 has an invalid length. [ 414.891847][T14472] netlink: 'syz.0.2369': attribute type 1 has an invalid length. [ 414.939760][T14476] smc: net device team0 applied user defined pnetid SYZ2 [ 415.037388][T14481] __nla_validate_parse: 53 callbacks suppressed [ 415.037405][T14481] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2374'. [ 415.073080][T14482] netlink: 'syz.3.2372': attribute type 4 has an invalid length. [ 415.148872][T14483] netlink: 'syz.3.2372': attribute type 1 has an invalid length. [ 415.156883][T14483] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2372'. [ 415.187494][T14483] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2372'. [ 415.367180][T14498] netlink: 'syz.1.2378': attribute type 1 has an invalid length. [ 415.705823][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2386'. [ 415.740024][T14513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2386'. [ 415.912922][T14527] tipc: Enabled bearer , priority 0 [ 416.096775][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2397'. [ 416.109046][T14544] openvswitch: netlink: Unknown nsh attribute 0 [ 416.123913][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2395'. [ 416.243040][T14550] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2400'. [ 416.265829][T14550] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2400'. [ 416.356719][T14555] raw_sendmsg: syz.1.2401 forgot to set AF_INET. Fix it! [ 416.566274][T14569] syzkaller0: entered promiscuous mode [ 416.572724][T14569] syzkaller0: entered allmulticast mode [ 416.772506][T14576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2407'. [ 416.923971][T14589] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 417.068483][T14596] bond7: (slave bridge3): making interface the new active one [ 417.086568][T14596] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 417.217138][T14601] erspan0: entered promiscuous mode [ 417.253516][T14601] erspan0: left promiscuous mode [ 417.520940][T14616] syzkaller1: entered promiscuous mode [ 417.539225][T14630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 417.547517][T14616] syzkaller1: entered allmulticast mode [ 417.564897][T14629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 417.759614][T14628] bond8: Removing last ns target with arp_interval on [ 418.024969][T14643] syzkaller0: entered promiscuous mode [ 418.036009][T14643] syzkaller0: entered allmulticast mode [ 419.965472][T14645] validate_nla: 3 callbacks suppressed [ 419.965485][T14645] netlink: 'syz.0.2428': attribute type 2 has an invalid length. [ 420.000569][T14652] syzkaller0: entered promiscuous mode [ 420.006097][T14652] syzkaller0: entered allmulticast mode [ 420.031970][T14670] bridge5: entered allmulticast mode [ 420.039819][T14675] smc: net device team0 applied user defined pnetid SYZ2 [ 420.226671][T14687] __nla_validate_parse: 10 callbacks suppressed [ 420.226690][T14687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2439'. [ 420.497522][T14702] tipc: Failed to remove unknown binding: 66,0,0/10463914:3434353479/3434353480 [ 420.512735][T14702] tipc: Failed to remove unknown binding: 66,0,0/10463914:3434353479/3434353480 [ 420.560791][T14706] Cannot find add_set index 46338 as target [ 420.736715][T14719] netlink: 'syz.1.2445': attribute type 28 has an invalid length. [ 420.754257][T14719] netlink: 'syz.1.2445': attribute type 3 has an invalid length. [ 420.765258][T14719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2445'. [ 422.335952][T14728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2451'. [ 422.382642][T14728] bridge_slave_0: entered promiscuous mode [ 422.392436][T14732] netlink: 'syz.0.2452': attribute type 1 has an invalid length. [ 422.404791][T14728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2451'. [ 422.462280][T14732] bond8: entered promiscuous mode [ 422.467833][T14732] 8021q: adding VLAN 0 to HW filter on device bond8 [ 422.559451][T14735] xt_hashlimit: size too large, truncated to 1048576 [ 422.564093][T14744] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2456'. [ 422.581143][T14744] xt_CONNSECMARK: invalid mode: 0 [ 422.594210][T14728] veth7: entered allmulticast mode [ 422.753814][T14732] bond8: (slave bridge4): making interface the new active one [ 422.787512][T14732] bridge4: entered promiscuous mode [ 422.814017][T14732] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 422.842921][T14756] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 422.851134][T14756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.874505][T14756] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2459'. [ 422.904649][T14756] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2459'. [ 423.123949][T14771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2465'. [ 423.156595][T14771] netlink: 4328 bytes leftover after parsing attributes in process `syz.4.2465'. [ 423.386078][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'. [ 423.479903][T14798] netlink: 'syz.3.2474': attribute type 1 has an invalid length. [ 423.598842][T14809] netlink: 'syz.1.2472': attribute type 9 has an invalid length. [ 423.609773][T14809] netlink: 'syz.1.2472': attribute type 6 has an invalid length. [ 423.644500][T14804] 8021q: adding VLAN 0 to HW filter on device bond13 [ 423.659986][T14804] bond12: (slave bond13): making interface the new active one [ 423.693866][T14804] bond12: (slave bond13): Enslaving as an active interface with an up link [ 423.742637][T14810] bond12: (slave gretap2): Enslaving as a backup interface with an up link [ 423.774644][T14798] 8021q: adding VLAN 0 to HW filter on device bond12 [ 423.947853][ T11] block nbd3: Possible stuck request ffff888027400000: control (read@0,1024B). Runtime 90 seconds [ 423.959080][ T11] block nbd3: Possible stuck request ffff8880274001c0: control (read@1024,1024B). Runtime 90 seconds [ 423.960196][T14803] syzkaller0: entered promiscuous mode [ 423.970312][ T11] block nbd3: Possible stuck request ffff888027400380: control (read@2048,1024B). Runtime 90 seconds [ 423.981945][T14803] syzkaller0: entered allmulticast mode [ 423.986597][ T11] block nbd3: Possible stuck request ffff888027400540: control (read@3072,1024B). Runtime 90 seconds [ 424.103778][T14838] netlink: 'syz.4.2483': attribute type 1 has an invalid length. [ 425.790486][T14838] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 425.990165][T14874] netlink: 'syz.3.2491': attribute type 3 has an invalid length. [ 426.006466][T14874] netlink: 'syz.3.2491': attribute type 3 has an invalid length. [ 426.071926][T14874] __nla_validate_parse: 2 callbacks suppressed [ 426.071944][T14874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2491'. [ 426.267078][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 426.640081][T14913] Bluetooth: MGMT ver 1.23 [ 426.671343][T14916] netlink: 'syz.3.2502': attribute type 39 has an invalid length. [ 427.043656][T14944] xt_hl: Unknown TTL match mode: 255 [ 427.696400][T14985] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2522'. [ 430.140035][T14952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.353886][T15001] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2528'. [ 430.371794][T15002] netlink: 'syz.1.2525': attribute type 25 has an invalid length. [ 430.378272][T14997] netlink: 'syz.2.2526': attribute type 1 has an invalid length. [ 430.389509][T14995] sit0: left promiscuous mode [ 430.396081][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'. [ 430.408404][T14995] veth0_to_bond: left allmulticast mode [ 430.414766][T14995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 430.423228][T15005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2529'. [ 430.433001][T15001] nbd: nbd3 already in use [ 430.507143][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 430.526359][T14997] 8021q: adding VLAN 0 to HW filter on device bond15 [ 430.637469][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2531'. [ 430.721775][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2531'. [ 430.741374][T15013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2531'. [ 430.897501][T15013] geneve3: entered promiscuous mode [ 430.906555][T15013] geneve3: entered allmulticast mode [ 430.930498][T15026] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 430.952472][ T3358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.982272][ T3358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.014204][ T3358] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.050084][ T3358] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.194837][T15051] xt_hashlimit: size too large, truncated to 1048576 [ 431.219302][T15053] __nla_validate_parse: 1 callbacks suppressed [ 431.219317][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 431.722855][T15078] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2548'. [ 431.764903][T15079] netlink: 'syz.2.2549': attribute type 18 has an invalid length. [ 431.789085][T15078] tipc: Resetting bearer [ 431.799690][T15078] syzkaller0: entered promiscuous mode [ 431.808348][T15078] syzkaller0: entered allmulticast mode [ 431.824655][T15078] tipc: Resetting bearer [ 431.839400][T15086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.865421][T15075] tipc: Resetting bearer [ 432.016277][T15092] IPVS: Unknown mcast interface: vcan0 [ 432.270377][T15118] Cannot find set identified by id 3 to match [ 432.277781][T15118] netlink: 'syz.4.2559': attribute type 1 has an invalid length. [ 432.345444][T15124] netlink: 'syz.3.2562': attribute type 1 has an invalid length. [ 432.382682][T15118] 8021q: adding VLAN 0 to HW filter on device bond9 [ 432.460795][T15122] vlan2: entered allmulticast mode [ 432.467012][T15122] bond9: entered allmulticast mode [ 432.522521][T15118] bond9: (slave geneve4): making interface the new active one [ 432.532591][T15118] geneve4: entered allmulticast mode [ 432.544218][T15118] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 432.578334][ T3358] tipc: Resetting bearer [ 432.706294][T15142] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2565'. [ 432.796936][T15150] netlink: 'syz.3.2565': attribute type 21 has an invalid length. [ 432.814505][T15150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2565'. [ 432.830825][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2567'. [ 433.078886][T15161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2570'. [ 433.090606][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2572'. [ 433.352708][T15185] netlink: 'syz.0.2575': attribute type 62 has an invalid length. [ 433.560968][T15198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2579'. [ 433.614476][T15198] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2579'. [ 433.742829][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. [ 433.820819][T15205] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.947192][T15205] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.087528][T15205] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.156318][T15205] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.248585][ T3358] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.265842][ T1343] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.283654][ T58] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.300752][ T58] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.545980][T15200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.834476][T15250] netlink: 'syz.2.2593': attribute type 1 has an invalid length. [ 436.857312][T15250] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2593'. [ 436.863106][T15247] netlink: 'syz.0.2592': attribute type 1 has an invalid length. [ 436.885375][T15250] ±ÿª¨úrBº“: entered promiscuous mode [ 436.893955][T15250] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 436.949390][T15254] netlink: 'syz.0.2592': attribute type 4 has an invalid length. [ 436.961300][T15254] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2592'. [ 437.274254][T15276] netlink: 'syz.2.2599': attribute type 13 has an invalid length. [ 437.285763][T15273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2598'. [ 437.331042][T15276] netlink: 'syz.2.2599': attribute type 58 has an invalid length. [ 437.360285][T15276] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2599'. [ 437.553830][T15285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2601'. [ 437.656163][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2602'. [ 437.752654][T15300] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2604'. [ 437.792760][T15302] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2604'. [ 437.975793][T15315] vcan0: tx address claim with dest, not broadcast [ 437.992332][T15315] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2609'. [ 438.060322][T15321] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 438.085807][T15327] netlink: 'syz.2.2612': attribute type 39 has an invalid length. [ 438.315909][T15335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2615'. [ 438.342453][T15335] tipc: Resetting bearer [ 438.499491][T15334] tipc: Resetting bearer [ 438.631259][T15353] tipc: Resetting bearer [ 438.759307][T15363] xt_TCPMSS: Only works on TCP SYN packets [ 439.225357][T15351] tipc: Resetting bearer [ 439.707109][T15407] bond14: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 439.892559][T15423] netlink: 'syz.0.2638': attribute type 58 has an invalid length. [ 439.949595][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.013325][T15432] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 440.092758][T15432] bond16: entered promiscuous mode [ 440.099195][T15432] 8021q: adding VLAN 0 to HW filter on device bond16 [ 440.116018][ T58] tipc: Resetting bearer [ 440.179031][T15432] 8021q: adding VLAN 0 to HW filter on device bond16 [ 440.199768][T15432] bond16: (slave vti1): The slave device specified does not support setting the MAC address [ 440.235204][T15432] bond16: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 440.236357][T15445] netlink: 'syz.4.2643': attribute type 16 has an invalid length. [ 440.252224][T15432] bond16: (slave vti1): making interface the new active one [ 440.262016][T15432] vti1: entered promiscuous mode [ 440.269551][T15432] bond16: (slave vti1): Enslaving as an active interface with an up link [ 440.280257][T15445] netlink: 'syz.4.2643': attribute type 16 has an invalid length. [ 440.572544][T15461] 0: reclassify loop, rule prio 0, protocol 700 [ 440.988329][T15488] bond18: entered promiscuous mode [ 440.994343][T15488] 8021q: adding VLAN 0 to HW filter on device bond18 [ 441.017798][T15494] bond18: (slave bridge8): making interface the new active one [ 441.025791][T15494] bridge8: entered promiscuous mode [ 441.036719][T15494] bond18: (slave bridge8): Enslaving as an active interface with an up link [ 441.213887][T13589] block nbd64: NBD_DISCONNECT [ 441.220648][T15494] nbd: device at index 64 is going down [ 441.480110][T13589] udevd[13589]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 441.644883][T15521] tipc: Resetting bearer [ 441.803759][T15521] bond6: option lp_interval: invalid value (0) [ 441.822230][T15521] bond6: option lp_interval: allowed values 1 - 2147483647 [ 441.860999][T15539] xt_limit: Overflow, try lower: 271964/0 [ 441.875468][T15521] bond6 (unregistering): Released all slaves [ 442.158314][T15519] tipc: Resetting bearer [ 442.403140][T15569] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 442.425449][T15567] validate_nla: 1 callbacks suppressed [ 442.425464][T15567] netlink: 'syz.3.2682': attribute type 1 has an invalid length. [ 442.515201][T15574] __nla_validate_parse: 17 callbacks suppressed [ 442.515221][T15574] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2685'. [ 442.647087][T15578] x_tables: duplicate underflow at hook 2 [ 443.056451][T15600] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2694'. [ 443.120413][T15600] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2694'. [ 443.176324][T15600] netem: change failed [ 443.241888][ T58] tipc: Resetting bearer [ 443.294813][T15622] openvswitch: netlink: Key type 30 is not supported [ 443.374346][T15620] tipc: Resetting bearer [ 443.393702][T15620] veth1_vlan (unregistering): left allmulticast mode [ 443.416159][T15628] openvswitch: netlink: Flow actions attr not present in new flow. [ 443.450316][T15620] tipc: Disabling bearer [ 443.732293][T15640] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2704'. [ 443.824855][T15649] xt_l2tp: v2 sid > 0xffff: 1114112 [ 443.834590][T15652] netlink: 'syz.1.2708': attribute type 1 has an invalid length. [ 443.845529][T15653] veth0: entered promiscuous mode [ 443.864942][T15651] veth0: left promiscuous mode [ 443.908542][T15657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2709'. [ 443.936348][T15652] bond6: entered promiscuous mode [ 443.942034][T15652] 8021q: adding VLAN 0 to HW filter on device bond6 [ 444.009138][T15659] bond6: (slave bridge7): making interface the new active one [ 444.031065][T15659] bridge7: entered promiscuous mode [ 444.051192][T15659] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 444.257683][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2717'. [ 444.289130][T15675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2715'. [ 444.388494][T15675] netlink: 'syz.3.2715': attribute type 13 has an invalid length. [ 444.403848][T15689] netlink: 'syz.2.2719': attribute type 3 has an invalid length. [ 444.405887][T15690] netlink: 'syz.3.2715': attribute type 13 has an invalid length. [ 444.458341][T15675] macsec0: entered allmulticast mode [ 444.608991][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 444.766842][T15707] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2722'. [ 445.054784][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2727'. [ 445.083364][T15722] netlink: 'syz.4.2727': attribute type 21 has an invalid length. [ 445.773105][T15768] netlink: 'syz.1.2733': attribute type 3 has an invalid length. [ 445.811318][T15775] netlink: 'syz.2.2737': attribute type 2 has an invalid length. [ 445.891546][T15773] syzkaller1: entered promiscuous mode [ 445.923951][T15773] syzkaller1: entered allmulticast mode [ 446.268514][T15791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.299635][T15791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.333679][T15791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.346765][T15791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.945791][T15839] IPv6: NLM_F_CREATE should be specified when creating new route [ 447.049078][T15842] syzkaller1: entered promiscuous mode [ 447.066852][T15842] syzkaller1: entered allmulticast mode [ 447.441185][T15860] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 447.804895][T15883] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 447.866102][T15883] bond15 (unregistering): Released all slaves [ 448.186833][T15920] __nla_validate_parse: 9 callbacks suppressed [ 448.186849][T15920] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2774'. [ 448.226324][T15923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'. [ 448.255686][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'. [ 448.418438][T15932] can: request_module (can-proto-0) failed. [ 448.742952][T15957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2786'. [ 448.759129][T15955] netlink: 'syz.4.2785': attribute type 24 has an invalid length. [ 448.770873][T15958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2786'. [ 449.256994][T15986] netlink: 'syz.1.2791': attribute type 4 has an invalid length. [ 449.483383][T15996] netlink: 'syz.1.2795': attribute type 21 has an invalid length. [ 449.491915][T15996] netlink: 'syz.1.2795': attribute type 22 has an invalid length. [ 449.501571][T15996] netlink: 'syz.1.2795': attribute type 23 has an invalid length. [ 449.511037][T15996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2795'. [ 449.735617][T16008] tipc: Resetting bearer [ 449.793155][T16015] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2800'. [ 449.886623][T16005] tipc: Resetting bearer [ 449.903941][T16020] netlink: zone id is out of range [ 449.927112][T16020] netlink: zone id is out of range [ 449.939081][T16020] netlink: zone id is out of range [ 449.945279][T16020] netlink: zone id is out of range [ 449.951177][T16020] netlink: zone id is out of range [ 449.963199][T16020] netlink: get zone limit has 4 unknown bytes [ 450.060601][T16029] tipc: Resetting bearer [ 450.634191][T16054] syzkaller1: entered promiscuous mode [ 450.640295][T16053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2815'. [ 450.653382][T16054] syzkaller1: entered allmulticast mode [ 450.683013][T16054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2814'. [ 450.782278][T16058] xt_limit: Overflow, try lower: 271964/0 [ 450.845452][ T58] tipc: Resetting bearer [ 450.892941][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2817'. [ 451.189524][T16078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.240700][T16081] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20257 [ 451.581855][T16109] netlink: 'syz.1.2832': attribute type 7 has an invalid length. [ 451.581855][T16108] netlink: 'syz.1.2832': attribute type 7 has an invalid length. [ 451.581876][T16108] netlink: 'syz.1.2832': attribute type 8 has an invalid length. [ 451.598040][T16109] netlink: 'syz.1.2832': attribute type 8 has an invalid length. [ 451.801029][T16122] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.038333][T16133] macsec0: left promiscuous mode [ 452.221775][T16144] netlink: 'syz.2.2846': attribute type 12 has an invalid length. [ 452.568731][T16167] 8021q: adding VLAN 0 to HW filter on device bond19 [ 452.642212][T16167] vlan0: entered allmulticast mode [ 452.664322][T16167] bond19: entered allmulticast mode [ 452.784470][T16172] bond19: (slave geneve3): making interface the new active one [ 452.813245][T16172] geneve3: entered allmulticast mode [ 452.861697][T16172] bond19: (slave geneve3): Enslaving as an active interface with an up link [ 452.891742][T16185] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 452.919316][T16185] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 452.942153][T16185] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 452.961193][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.977717][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.987010][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.996536][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.005456][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 453.293182][T16200] 8021q: adding VLAN 0 to HW filter on device bond7 [ 453.656492][T16238] __nla_validate_parse: 20 callbacks suppressed [ 453.656520][T16238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2872'. [ 453.675768][T16234] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2871'. [ 453.790368][T16234] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2871'. [ 453.828719][T16234] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2871'. [ 453.859924][T16234] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2871'. [ 453.910830][T16234] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2871'. [ 453.937835][T16234] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2871'. [ 453.971277][T16234] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2871'. [ 454.003467][T16234] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2871'. [ 454.028205][ T11] block nbd3: Possible stuck request ffff888027400000: control (read@0,1024B). Runtime 120 seconds [ 454.039673][ T11] block nbd3: Possible stuck request ffff8880274001c0: control (read@1024,1024B). Runtime 120 seconds [ 454.051007][ T11] block nbd3: Possible stuck request ffff888027400380: control (read@2048,1024B). Runtime 120 seconds [ 454.062925][ T11] block nbd3: Possible stuck request ffff888027400540: control (read@3072,1024B). Runtime 120 seconds [ 454.088073][T16234] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2871'. [ 454.516413][T16281] syzkaller1: entered promiscuous mode [ 454.524643][T16281] syzkaller1: entered allmulticast mode [ 454.586692][T16285] veth0_macvtap: entered allmulticast mode [ 454.596362][T16285] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 454.613592][T16298] sctp: [Deprecated]: syz.0.2886 (pid 16298) Use of int in max_burst socket option. [ 454.613592][T16298] Use struct sctp_assoc_value instead [ 455.068295][ T4947] Bluetooth: hci5: command tx timeout [ 455.121692][T16188] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.137181][T16188] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.160299][T16188] bridge_slave_0: entered allmulticast mode [ 455.189465][T16188] bridge_slave_0: entered promiscuous mode [ 455.223874][T16188] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.241077][T16188] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.255769][T16188] bridge_slave_1: entered allmulticast mode [ 455.271732][T16188] bridge_slave_1: entered promiscuous mode [ 455.456472][T16188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.505491][T16341] bond20: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 455.550338][T16341] bond20 (unregistering): Released all slaves [ 455.586877][T16188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.603781][T16346] gretap2: entered promiscuous mode [ 455.626148][T16349] syzkaller1: entered promiscuous mode [ 455.632634][T16349] syzkaller1: entered allmulticast mode [ 455.751408][T16188] team0: Port device team_slave_0 added [ 455.761561][T16188] team0: Port device team_slave_1 added [ 455.840491][T16188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.852144][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.913844][T16188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.930073][T16188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.940095][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.971871][T16188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.262962][T16381] xt_cgroup: path and classid specified [ 456.273362][T16376] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 456.288370][T16188] hsr_slave_0: entered promiscuous mode [ 456.300571][T16188] hsr_slave_1: entered promiscuous mode [ 456.456862][T16383] syzkaller1: entered promiscuous mode [ 456.463313][T16383] syzkaller1: entered allmulticast mode [ 456.800269][T16188] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.840346][T16402] tipc: Cannot configure node identity twice [ 456.920190][T16188] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.014512][T16188] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.106074][T16410] validate_nla: 5 callbacks suppressed [ 457.106092][T16410] netlink: 'syz.0.2919': attribute type 3 has an invalid length. [ 457.122229][T16410] netlink: 'syz.0.2919': attribute type 2 has an invalid length. [ 457.138040][T16410] ipt_REJECT: TCP_RESET invalid for non-tcp [ 457.148847][ T4947] Bluetooth: hci5: command tx timeout [ 457.206384][T16188] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.229783][T16414] bond1: (slave 26±ÿª¨úrBº“): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 457.252979][T16414] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 457.776174][T16427] syzkaller1: entered promiscuous mode [ 457.792766][T16427] syzkaller1: entered allmulticast mode [ 457.813374][T16188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 457.859240][T16188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.870703][T16188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 457.890007][T16188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.979819][T16188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 458.022568][T16188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.040561][T16188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 458.093346][T16188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.353875][T16188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.431234][T16188] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.484169][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.491451][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.643020][T16471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.694173][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.701493][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.227734][ T4947] Bluetooth: hci5: command tx timeout [ 459.302283][T16511] __nla_validate_parse: 73 callbacks suppressed [ 459.302301][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 459.483564][T16520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2946'. [ 459.684764][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2949'. [ 459.729015][T16525] bridge0: port 1(ipvlan3) entered blocking state [ 459.745812][T16525] bridge0: port 1(ipvlan3) entered disabled state [ 459.753932][T16525] ipvlan3: entered allmulticast mode [ 459.761634][T16525] bridge0: entered allmulticast mode [ 459.772382][T16525] ipvlan3: left allmulticast mode [ 459.777815][T16525] bridge0: left allmulticast mode [ 459.811826][T16534] netlink: 'syz.3.2951': attribute type 8 has an invalid length. [ 459.816305][T16188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.871766][T16536] tipc: Enabling of bearer rejected, failed to enable media [ 460.194196][T16542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.621406][T16575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2959'. [ 460.679934][T16575] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2959'. [ 460.885315][T16591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.892607][T16591] IPv6: NLM_F_CREATE should be set when creating new route [ 460.903928][T16565] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.919250][T16565] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.962679][T16597] netlink: 'syz.0.2965': attribute type 21 has an invalid length. [ 460.971153][T16597] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2965'. [ 461.025156][T16188] veth0_vlan: entered promiscuous mode [ 461.054474][T16188] veth1_vlan: entered promiscuous mode [ 461.248931][T16565] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.276163][T16565] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.307616][ T4947] Bluetooth: hci5: command tx timeout [ 461.343137][T16188] veth0_macvtap: entered promiscuous mode [ 461.485979][T16565] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.522728][T16565] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.575116][T16188] veth1_macvtap: entered promiscuous mode [ 461.684601][T16639] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2977'. [ 461.715464][T16565] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.736921][T16565] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.750535][T16639] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2977'. [ 461.769019][T16639] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2977'. [ 461.785897][T16639] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2977'. [ 461.847047][T16188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.888751][T16188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.938932][ T147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.963786][ T147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.019654][ T147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.065184][T16656] sctp: [Deprecated]: syz.0.2981 (pid 16656) Use of int in maxseg socket option. [ 462.065184][T16656] Use struct sctp_assoc_value instead [ 462.119136][ T147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.246780][T16666] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 462.331742][T16671] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 462.345307][ T58] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.364192][ T58] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.472620][ T58] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.483801][ T58] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.493323][ T58] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.509403][ T58] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.563392][ T1343] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.610178][ T1343] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.706840][T16681] vlan1: entered allmulticast mode [ 462.722204][T16681] bond0: entered allmulticast mode [ 462.744924][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.784902][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.906417][T16689] netlink: 'syz.2.2988': attribute type 1 has an invalid length. [ 462.923237][T16686] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 462.955767][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.965058][T16689] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 462.967330][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.092972][T16695] syzkaller0: entered promiscuous mode [ 463.099426][T16695] syzkaller0: entered allmulticast mode [ 463.294987][T16717] x_tables: duplicate underflow at hook 2 [ 463.455272][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 463.477136][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 463.486083][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 463.489643][T16726] netlink: 'syz.2.2995': attribute type 3 has an invalid length. [ 463.494497][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 463.511004][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 465.629635][ T5640] Bluetooth: hci4: command tx timeout [ 465.726426][T16741] netlink: 'syz.1.2998': attribute type 1 has an invalid length. [ 465.834188][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.868105][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.889209][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 465.909709][T16741] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 466.081093][T16767] __nla_validate_parse: 33 callbacks suppressed [ 466.081114][T16767] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3003'. [ 466.135998][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.172642][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.196906][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 466.219262][T16772] netlink: 'syz.0.3005': attribute type 32 has an invalid length. [ 466.236580][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3005'. [ 466.252818][T16765] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3002'. [ 466.325549][T16774] netlink: 'syz.1.3006': attribute type 1 has an invalid length. [ 466.364494][T16772] bond9: option coupled_control: invalid value (192) [ 466.390263][T16772] bond9 (unregistering): Released all slaves [ 466.442467][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.456094][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.464786][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3008'. [ 466.506662][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 466.587112][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'. [ 466.631674][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.642909][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.653485][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 467.293571][ T58] bridge_slave_1: left allmulticast mode [ 467.309533][ T58] bridge_slave_1: left promiscuous mode [ 467.318748][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.333623][ T58] bridge_slave_0: left allmulticast mode [ 467.350924][T16829] netlink: 'syz.4.3018': attribute type 9 has an invalid length. [ 467.360485][ T58] bridge_slave_0: left promiscuous mode [ 467.370167][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.422781][T16833] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3018'. [ 467.707363][ T5640] Bluetooth: hci4: command tx timeout [ 467.766359][ T58] bond11 (unregistering): (slave gretap1): Releasing active interface [ 467.790553][ T58] bond12 (unregistering): (slave gretap2): Releasing backup interface [ 467.815355][ T58] bond9 (unregistering): (slave geneve3): Releasing active interface [ 468.152194][ T58] bond1 (unregistering): (slave lo): Releasing backup interface [ 468.161048][ T58] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 468.172832][ T58] bond1 (unregistering): Released all slaves [ 468.188561][ T58] bond2 (unregistering): Released all slaves [ 468.202906][ T58] bond3 (unregistering): Released all slaves [ 468.222247][ T58] bond0 (unregistering): Released all slaves [ 468.241985][ T58] bond4 (unregistering): Released all slaves [ 468.258182][ T58] bond5 (unregistering): (slave veth3): Releasing active interface [ 468.272669][ T58] bond5 (unregistering): Released all slaves [ 468.285986][ T58] bond6 (unregistering): Released all slaves [ 468.299569][ T58] bond7 (unregistering): Released all slaves [ 468.313453][ T58] bond8 (unregistering): Released all slaves [ 468.331944][ T58] bond9 (unregistering): Released all slaves [ 468.355264][ T58] bond10 (unregistering): Released all slaves [ 468.370823][ T58] bond11 (unregistering): Released all slaves [ 468.385354][ T58] bond12 (unregistering): (slave bond13): Releasing backup interface [ 468.395186][ T58] bond12 (unregistering): Released all slaves [ 468.412210][ T58] bond13 (unregistering): Released all slaves [ 468.425773][ T58] bond14 (unregistering): Released all slaves [ 468.451466][T16838] tipc: Enabling of bearer rejected, media not registered [ 468.782758][T16856] ip6t_REJECT: ECHOREPLY is not supported [ 468.792176][ T58] : left promiscuous mode [ 468.826403][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3028'. [ 468.870776][T16864] netlink: 'syz.4.3027': attribute type 1 has an invalid length. [ 469.000528][T16860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3027'. [ 469.034609][T16850] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 469.141800][T16721] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.153878][T16721] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.168916][T16721] bridge_slave_0: entered allmulticast mode [ 469.175308][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3029'. [ 469.202699][T16721] bridge_slave_0: entered promiscuous mode [ 469.210789][T16879] netlink: 'syz.0.3029': attribute type 7 has an invalid length. [ 469.230701][ T58] tipc: Disabling bearer [ 469.242468][T16879] netlink: 'syz.0.3029': attribute type 8 has an invalid length. [ 469.261160][ T58] tipc: Left network mode [ 469.273446][T16721] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.282798][T16879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3029'. [ 469.295972][T16721] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.313465][T16721] bridge_slave_1: entered allmulticast mode [ 469.335629][T16721] bridge_slave_1: entered promiscuous mode [ 469.375546][ T58] IPVS: stopping backup sync thread 8073 ... [ 469.517641][T16721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.656565][T16721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.787400][ T5640] Bluetooth: hci4: command tx timeout [ 469.833970][T16721] team0: Port device team_slave_0 added [ 469.852729][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 469.872398][T16902] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 469.890064][T16902] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 469.966184][T16721] team0: Port device team_slave_1 added [ 470.112643][T16721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.146950][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.176372][T16721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.214128][ T5753] IPVS: starting estimator thread 0... [ 470.300725][T16721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.311026][T16939] IPVS: using max 29 ests per chain, 69600 per kthread [ 470.316094][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.365463][T16721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.765082][T16721] hsr_slave_0: entered promiscuous mode [ 470.786979][T16721] hsr_slave_1: entered promiscuous mode [ 470.806192][T16721] debugfs: 'hsr0' already exists in 'hsr' [ 470.834334][T16721] Cannot create hsr debugfs directory [ 471.104092][T17016] __nla_validate_parse: 2 callbacks suppressed [ 471.104122][T17016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3054'. [ 471.320448][ T58] hsr_slave_0: left promiscuous mode [ 471.434304][ T58] veth0_macvtap: left promiscuous mode [ 471.455878][T17032] FAULT_INJECTION: forcing a failure. [ 471.455878][T17032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.467401][ T5640] Bluetooth: hci3: command 0x0401 tx timeout [ 471.476389][T17032] CPU: 0 UID: 0 PID: 17032 Comm: syz.0.3059 Not tainted syzkaller #0 PREEMPT(full) [ 471.476412][T17032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.476425][T17032] Call Trace: [ 471.476435][T17032] [ 471.476442][T17032] dump_stack_lvl+0xe8/0x150 [ 471.476467][T17032] should_fail_ex+0x412/0x560 [ 471.476492][T17032] _copy_from_user+0x2d/0xb0 [ 471.476515][T17032] kstrtouint_from_user+0xd6/0x180 [ 471.476538][T17032] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 471.476583][T17032] proc_fail_nth_write+0x8e/0x210 [ 471.476604][T17032] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 471.476629][T17032] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 471.476647][T17032] vfs_write+0x29a/0xb90 [ 471.476679][T17032] ? __pfx_vfs_write+0x10/0x10 [ 471.476702][T17032] ? __fget_files+0x2a/0x420 [ 471.476725][T17032] ? __fget_files+0x3a0/0x420 [ 471.476741][T17032] ? __fget_files+0x2a/0x420 [ 471.476767][T17032] ksys_write+0x150/0x270 [ 471.476792][T17032] ? __pfx_ksys_write+0x10/0x10 [ 471.476821][T17032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.476839][T17032] do_syscall_64+0x15f/0xf80 [ 471.476860][T17032] ? trace_irq_disable+0x3b/0x140 [ 471.476883][T17032] ? clear_bhb_loop+0x40/0x90 [ 471.476903][T17032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.476919][T17032] RIP: 0033:0x7f517495d68e [ 471.476935][T17032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 471.476947][T17032] RSP: 002b:00007f517593afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.476964][T17032] RAX: ffffffffffffffda RBX: 00007f517593b6c0 RCX: 00007f517495d68e [ 471.476974][T17032] RDX: 0000000000000001 RSI: 00007f517593b0a0 RDI: 0000000000000004 [ 471.476983][T17032] RBP: 00007f517593b090 R08: 0000000000000000 R09: 0000000000000000 [ 471.476991][T17032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.477000][T17032] R13: 00007f5174c16038 R14: 00007f5174c15fa0 R15: 00007ffe7d814518 [ 471.477023][T17032] [ 471.480842][T17031] netlink: 'syz.4.3058': attribute type 1 has an invalid length. [ 471.717444][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3060'. [ 471.728254][T17034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3058'. [ 471.867571][ T5640] Bluetooth: hci4: command tx timeout [ 472.182830][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'. [ 472.192376][T17052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.374877][ T58] team0 (unregistering): Port device team_slave_1 removed [ 472.411021][ T58] team0 (unregistering): Port device team_slave_0 removed [ 472.707949][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 472.979436][T17086] macvlan0: left promiscuous mode [ 473.000014][T17086] netlink: 'syz.1.3070': attribute type 2 has an invalid length. [ 473.172521][T17092] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.259380][T17102] tipc: Enabled bearer , priority 10 [ 473.286960][T17105] netlink: 380 bytes leftover after parsing attributes in process `syz.1.3076'. [ 473.501673][T17092] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.507686][ T58] IPVS: stop unused estimator thread 0... [ 473.617097][T17121] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3079'. [ 473.719778][T17092] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.844432][T17137] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3081'. [ 473.860860][T17135] nbd: socks must be embedded in a SOCK_ITEM attr [ 473.952542][T17139] FAULT_INJECTION: forcing a failure. [ 473.952542][T17139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.986288][T17139] CPU: 0 UID: 0 PID: 17139 Comm: syz.4.3081 Not tainted syzkaller #0 PREEMPT(full) [ 473.986311][T17139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.986319][T17139] Call Trace: [ 473.986326][T17139] [ 473.986333][T17139] dump_stack_lvl+0xe8/0x150 [ 473.986356][T17139] should_fail_ex+0x412/0x560 [ 473.986380][T17139] _copy_from_iter+0x1d3/0x1670 [ 473.986398][T17139] ? unwind_next_frame+0xa6/0x2550 [ 473.986424][T17139] ? __lock_acquire+0x6b5/0x2cf0 [ 473.986441][T17139] ? __pfx__copy_from_iter+0x10/0x10 [ 473.986474][T17139] tun_get_user+0x267/0x43e0 [ 473.986496][T17139] ? aa_file_perm+0x192/0x15e0 [ 473.986527][T17139] ? aa_file_perm+0x192/0x15e0 [ 473.986551][T17139] ? aa_file_perm+0x50e/0x15e0 [ 473.986570][T17139] ? __pfx_tun_get_user+0x10/0x10 [ 473.986593][T17139] ? __lock_acquire+0x6b5/0x2cf0 [ 473.986612][T17139] ? kstrtoull+0x12f/0x1d0 [ 473.986637][T17139] ? ref_tracker_alloc+0x35c/0x4c0 [ 473.986661][T17139] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 473.986683][T17139] ? tun_get+0x1c/0x2f0 [ 473.986702][T17139] ? tun_get+0x1c/0x2f0 [ 473.986726][T17139] ? tun_get+0x1c/0x2f0 [ 473.986742][T17139] ? tun_get+0x1c/0x2f0 [ 473.986765][T17139] tun_chr_write_iter+0x113/0x200 [ 473.986787][T17139] vfs_write+0x61d/0xb90 [ 473.986816][T17139] ? __pfx_vfs_write+0x10/0x10 [ 473.986847][T17139] ? __fget_files+0x2a/0x420 [ 473.986874][T17139] ksys_write+0x150/0x270 [ 473.986896][T17139] ? __pfx_ksys_write+0x10/0x10 [ 473.986924][T17139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.986941][T17139] do_syscall_64+0x15f/0xf80 [ 473.986963][T17139] ? trace_irq_disable+0x3b/0x140 [ 473.986984][T17139] ? clear_bhb_loop+0x40/0x90 [ 473.987003][T17139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.987019][T17139] RIP: 0033:0x7f8785b9ce59 [ 473.987034][T17139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.987048][T17139] RSP: 002b:00007f8783dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 473.987065][T17139] RAX: ffffffffffffffda RBX: 00007f8785e16180 RCX: 00007f8785b9ce59 [ 473.987075][T17139] RDX: 000000000000006a RSI: 0000200000000100 RDI: 0000000000000003 [ 473.987084][T17139] RBP: 00007f8783dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 473.987093][T17139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.987103][T17139] R13: 00007f8785e16218 R14: 00007f8785e16180 R15: 00007ffdaf042cd8 [ 473.987131][T17139] [ 474.256495][T17092] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.296036][T17131] syzkaller1: entered promiscuous mode [ 474.302804][T17131] syzkaller1: entered allmulticast mode [ 474.475082][T17155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3086'. [ 474.635517][T16981] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.652519][T16981] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.784160][T16995] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.901038][ T58] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.990015][T17178] netlink: 'syz.2.3091': attribute type 12 has an invalid length. [ 475.256382][T17178] bond20: option primary_reselect: invalid value (255) [ 475.278250][T17178] bond20 (unregistering): Released all slaves [ 475.314506][T16721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 475.330522][T16721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.342193][T16721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 475.382975][T16721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 475.414460][T16721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 475.446788][T16721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 475.480795][T16721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 475.511972][T16721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.553389][T17210] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3098'. [ 475.608085][T17210] syzkaller1: entered promiscuous mode [ 475.616662][T17210] syzkaller1: entered allmulticast mode [ 475.639758][T17210] FAULT_INJECTION: forcing a failure. [ 475.639758][T17210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.640294][T17215] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 475.663012][T17215] syzkaller1: linktype set to 823 [ 475.680913][T17215] netlink: 'syz.2.3099': attribute type 1 has an invalid length. [ 475.695372][T17210] CPU: 0 UID: 0 PID: 17210 Comm: syz.1.3098 Not tainted syzkaller #0 PREEMPT(full) [ 475.695393][T17210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 475.695402][T17210] Call Trace: [ 475.695407][T17210] [ 475.695412][T17210] dump_stack_lvl+0xe8/0x150 [ 475.695435][T17210] should_fail_ex+0x412/0x560 [ 475.695457][T17210] _copy_from_iter+0x1d3/0x1670 [ 475.695476][T17210] ? unwind_next_frame+0xa6/0x2550 [ 475.695500][T17210] ? __lock_acquire+0x6b5/0x2cf0 [ 475.695518][T17210] ? __pfx__copy_from_iter+0x10/0x10 [ 475.695551][T17210] tun_get_user+0x6cf/0x43e0 [ 475.695586][T17210] ? aa_file_perm+0x192/0x15e0 [ 475.695611][T17210] ? aa_file_perm+0x50e/0x15e0 [ 475.695640][T17210] ? __pfx_tun_get_user+0x10/0x10 [ 475.695661][T17210] ? __lock_acquire+0x6b5/0x2cf0 [ 475.695681][T17210] ? kstrtoull+0x12f/0x1d0 [ 475.695706][T17210] ? ref_tracker_alloc+0x35c/0x4c0 [ 475.695729][T17210] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 475.695751][T17210] ? tun_get+0x1c/0x2f0 [ 475.695769][T17210] ? tun_get+0x1c/0x2f0 [ 475.695791][T17210] ? tun_get+0x1c/0x2f0 [ 475.695808][T17210] ? tun_get+0x1c/0x2f0 [ 475.695831][T17210] tun_chr_write_iter+0x113/0x200 [ 475.695853][T17210] vfs_write+0x61d/0xb90 [ 475.695882][T17210] ? __pfx_vfs_write+0x10/0x10 [ 475.695912][T17210] ? __fget_files+0x2a/0x420 [ 475.695937][T17210] ksys_write+0x150/0x270 [ 475.695961][T17210] ? __pfx_ksys_write+0x10/0x10 [ 475.695989][T17210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.696007][T17210] do_syscall_64+0x15f/0xf80 [ 475.696027][T17210] ? trace_irq_disable+0x3b/0x140 [ 475.696049][T17210] ? clear_bhb_loop+0x40/0x90 [ 475.696068][T17210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.696082][T17210] RIP: 0033:0x7f462239ce59 [ 475.696098][T17210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.696110][T17210] RSP: 002b:00007f4623208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 475.696127][T17210] RAX: ffffffffffffffda RBX: 00007f4622615fa0 RCX: 00007f462239ce59 [ 475.696138][T17210] RDX: 000000000000006a RSI: 0000200000000100 RDI: 0000000000000003 [ 475.696147][T17210] RBP: 00007f4623208090 R08: 0000000000000000 R09: 0000000000000000 [ 475.696156][T17210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.696165][T17210] R13: 00007f4622616038 R14: 00007f4622615fa0 R15: 00007ffeeee7d5a8 [ 475.696192][T17210] [ 475.737955][T17215] bond20: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 475.773417][T17224] netlink: 'syz.4.3100': attribute type 1 has an invalid length. [ 475.963882][T17215] bond20: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 475.979114][T17215] bond20: (slave ip6gre2): making interface the new active one [ 475.987874][T17215] bond20: (slave ip6gre2): Enslaving as an active interface with an up link [ 476.285865][T17241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3102'. [ 476.346261][T16721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.395102][T16721] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.416257][T16999] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.423459][T16999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.497105][T16981] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.504315][T16981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.561885][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'. [ 476.904326][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'. [ 476.950573][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3108'. [ 477.210358][T17285] netlink: 'syz.0.3113': attribute type 1 has an invalid length. [ 477.220804][T17283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3112'. [ 477.264052][T17289] Cannot find add_set index 4 as target [ 477.273735][T17292] netlink: 'syz.2.3112': attribute type 32 has an invalid length. [ 477.276017][T17285] bond9: entered promiscuous mode [ 477.285998][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3113'. [ 477.287433][T17285] 8021q: adding VLAN 0 to HW filter on device bond9 [ 477.322715][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'. [ 477.396991][T17297] netlink: 'syz.4.3115': attribute type 1 has an invalid length. [ 477.407265][T17297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3115'. [ 477.429883][T17292] bond21: Setting coupled_control to off (0) [ 477.528637][T17303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3117'. [ 477.541183][T17303] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3117'. [ 478.315289][T17348] netlink: 'syz.2.3124': attribute type 3 has an invalid length. [ 478.558191][T16721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.716748][T16721] veth0_vlan: entered promiscuous mode [ 478.732321][T16721] veth1_vlan: entered promiscuous mode [ 478.791595][T16721] veth0_macvtap: entered promiscuous mode [ 478.803392][T16721] veth1_macvtap: entered promiscuous mode [ 478.825103][T17379] openvswitch: netlink: Flow key attribute not present in set flow. [ 478.841590][T16721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.866583][T17379] syzkaller1: entered promiscuous mode [ 478.873309][T17379] syzkaller1: entered allmulticast mode [ 478.885668][T16721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.911324][T16977] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.927667][T16977] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.941439][T16977] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.976337][T16977] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.718910][T17370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.871031][T16995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.904450][T16995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.998331][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.008084][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.314904][T17518] __nla_validate_parse: 6 callbacks suppressed [ 482.314922][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'. [ 482.653505][ T4947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.668248][ T4947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.677388][ T4947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.686798][ T4947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.694777][ T4947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.034611][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'. [ 483.091967][T17557] netlink: 'syz.3.3150': attribute type 1 has an invalid length. [ 483.176878][T17558] 8021q: VLANs not supported on vxcan1 [ 483.551495][T17582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3158'. [ 483.594535][T17587] netlink: 'syz.4.3159': attribute type 1 has an invalid length. [ 483.678608][T17587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.720354][T17591] vlan2: entered allmulticast mode [ 483.725632][T17591] bond2: entered allmulticast mode [ 483.750087][T17594] bond2: (slave geneve2): making interface the new active one [ 483.776200][T17594] geneve2: entered allmulticast mode [ 483.797327][T17594] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 483.801489][T17596] block nbd4: server does not support multiple connections per device. [ 483.838372][T17596] block nbd4: shutting down sockets [ 483.973681][T17609] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3165'. [ 484.006412][T17605] vlan3: entered allmulticast mode [ 484.012923][T17605] bond0: entered allmulticast mode [ 484.018445][T17605] bond_slave_0: entered allmulticast mode [ 484.024234][T17605] bond_slave_1: entered allmulticast mode [ 484.080215][T17609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.108536][ T11] block nbd3: Possible stuck request ffff888027400000: control (read@0,1024B). Runtime 150 seconds [ 484.119715][ T11] block nbd3: Possible stuck request ffff8880274001c0: control (read@1024,1024B). Runtime 150 seconds [ 484.131831][ T11] block nbd3: Possible stuck request ffff888027400380: control (read@2048,1024B). Runtime 150 seconds [ 484.143021][ T11] block nbd3: Possible stuck request ffff888027400540: control (read@3072,1024B). Runtime 150 seconds [ 484.180672][T17609] bond_slave_0: left allmulticast mode [ 484.270219][T17609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.281879][T17609] bond_slave_1: left allmulticast mode [ 484.292613][T17609] bond0 (unregistering): Released all slaves [ 484.504702][T17626] netlink: 'syz.3.3170': attribute type 1 has an invalid length. [ 484.550326][T17629] can: request_module (can-proto-4) failed. [ 484.634582][T17642] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 484.734159][T17647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.750961][ T4947] Bluetooth: hci2: command tx timeout [ 484.751504][T17643] macvlan2: entered promiscuous mode [ 484.762506][T17643] macvlan2: entered allmulticast mode [ 484.778158][T17527] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.785540][T17527] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.795617][T17527] bridge_slave_0: entered allmulticast mode [ 484.803741][T17527] bridge_slave_0: entered promiscuous mode [ 484.905477][T17661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3173'. [ 484.945517][T17644] 8021q: adding VLAN 0 to HW filter on device bond23 [ 484.955045][T17644] bond22: (slave bond23): making interface the new active one [ 484.963430][T17644] bond22: (slave bond23): Enslaving as an active interface with an up link [ 484.983663][T17642] bond22: (slave gretap1): Enslaving as a backup interface with an up link [ 484.992889][T17527] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.000774][T17527] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.008099][T17527] bridge_slave_1: entered allmulticast mode [ 485.015224][T17527] bridge_slave_1: entered promiscuous mode [ 485.021471][T17665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3175'. [ 485.046042][T17661] 8021q: adding VLAN 0 to HW filter on device bond22 [ 485.083162][T17527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.130548][T17527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.223689][T17527] team0: Port device team_slave_0 added [ 485.232926][T17527] team0: Port device team_slave_1 added [ 485.335628][T17527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.365161][T17527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.418599][T17527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.520452][T17680] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3179'. [ 485.556385][T17527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.580833][T17527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.622465][T17527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.764169][T17527] hsr_slave_0: entered promiscuous mode [ 485.771693][T17527] hsr_slave_1: entered promiscuous mode [ 485.778925][T17527] debugfs: 'hsr0' already exists in 'hsr' [ 485.784796][T17527] Cannot create hsr debugfs directory [ 485.944187][T17698] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3186'. [ 486.296295][T17527] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.333411][T17527] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.496825][T17719] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3192'. [ 486.515551][T17717] xt_connbytes: Forcing CT accounting to be enabled [ 486.524036][T17527] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.557335][T17527] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.606975][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3192'. [ 486.822114][T17723] syzkaller1: entered promiscuous mode [ 486.828073][ T4947] Bluetooth: hci2: command tx timeout [ 486.828226][T17723] syzkaller1: entered allmulticast mode [ 486.861120][T17717] openvswitch: netlink: IP tunnel dst address not specified [ 486.871432][T17527] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.885961][T17527] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.053240][T17527] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.063804][T17527] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.663148][T17749] tipc: Enabled bearer , priority 0 [ 487.690683][T17749] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 487.701075][T17749] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 487.761908][T17761] __nla_validate_parse: 2 callbacks suppressed [ 487.761925][T17761] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3200'. [ 487.814527][T17761] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3200'. [ 487.883756][T17527] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 488.075728][T17527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.103262][T17527] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 488.165217][T17527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.193502][T17527] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 488.232168][T17527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.249187][T17527] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 488.262645][T17527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.312973][T17780] netlink: 'syz.0.3204': attribute type 3 has an invalid length. [ 488.732035][T17803] netlink: 'syz.3.3210': attribute type 1 has an invalid length. [ 488.742123][T17527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.836735][T17527] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.876027][T16999] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.883232][T16999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.909009][ T4947] Bluetooth: hci2: command tx timeout [ 488.997907][T16999] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.005097][T16999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.047008][T17819] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 489.076210][T17819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.212563][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3219'. [ 489.393612][T17838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3220'. [ 489.620778][T16995] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 489.655185][T17859] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 489.694952][T17854] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 490.143254][T17888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3232'. [ 490.235405][T17527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.341097][T17894] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3234'. [ 490.442065][T17527] veth0_vlan: entered promiscuous mode [ 490.454352][T17902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 490.528815][T17527] veth1_vlan: entered promiscuous mode [ 490.665987][T17527] veth0_macvtap: entered promiscuous mode [ 490.674766][T17916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3240'. [ 490.696601][T17527] veth1_macvtap: entered promiscuous mode [ 490.786056][T17527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.856113][T17527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.894025][T16996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.908728][T16996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.932490][T16996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.962184][T16996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.987726][ T4947] Bluetooth: hci2: command tx timeout [ 493.621417][T17948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.641141][T17952] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3244'. [ 493.759493][T16975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.806264][T16975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.859269][T17957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3247'. [ 493.875180][T16977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.904479][T17957] xt_ecn: cannot match TCP bits for non-tcp packets [ 493.909384][T16977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.933346][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3247'. [ 494.065175][T17960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3249'. [ 494.266389][T17979] netlink: 'syz.4.3252': attribute type 12 has an invalid length. [ 494.331711][T17979] netlink: 'syz.4.3252': attribute type 29 has an invalid length. [ 494.375772][T17979] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3252'. [ 494.458760][T17979] netlink: 'syz.4.3252': attribute type 3 has an invalid length. [ 494.522684][T17979] netlink: 'syz.4.3252': attribute type 2 has an invalid length. [ 494.577340][T17979] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3252'. [ 494.625899][T17980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3254'. [ 494.680531][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.694977][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 494.708760][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 494.724712][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 494.734701][T17983] netlink: 1368 bytes leftover after parsing attributes in process `syz.1.3254'. [ 494.734815][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 494.759913][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3254'. [ 495.416128][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3264'. [ 495.656089][T18040] netlink: 'syz.4.3267': attribute type 1 has an invalid length. [ 495.938837][T18057] netlink: 'syz.3.3275': attribute type 16 has an invalid length. [ 495.962444][T18057] netlink: 'syz.3.3275': attribute type 3 has an invalid length. [ 496.034970][T18061] netlink: 'syz.1.3277': attribute type 4 has an invalid length. [ 496.087784][T18065] netlink: 'syz.1.3277': attribute type 4 has an invalid length. [ 496.234302][T18073] tipc: Enabling of bearer rejected, failed to enable media [ 496.478534][T18085] netlink: 'syz.0.3283': attribute type 32 has an invalid length. [ 496.537082][T18085] bond10: option coupled_control: invalid value (20) [ 496.581562][T18085] bond10 (unregistering): Released all slaves [ 496.831532][ T4947] Bluetooth: hci1: command tx timeout [ 497.100287][T17993] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.115056][T17993] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.126973][T17993] bridge_slave_0: entered allmulticast mode [ 497.135567][T17993] bridge_slave_0: entered promiscuous mode [ 497.145267][T17993] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.153055][T17993] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.160367][T17993] bridge_slave_1: entered allmulticast mode [ 497.169167][T17993] bridge_slave_1: entered promiscuous mode [ 497.273753][T17993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.290433][T17993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.338095][T17993] team0: Port device team_slave_0 added [ 497.416132][T17993] team0: Port device team_slave_1 added [ 497.590878][T17993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.619864][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.679276][T17993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.739982][T17993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.761449][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.834232][T17993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.943237][T17993] hsr_slave_0: entered promiscuous mode [ 497.970558][T17993] hsr_slave_1: entered promiscuous mode [ 497.986039][T17993] debugfs: 'hsr0' already exists in 'hsr' [ 497.994429][T17993] Cannot create hsr debugfs directory [ 498.081639][T18149] syzkaller1: entered promiscuous mode [ 498.097689][T18149] syzkaller1: entered allmulticast mode [ 498.594513][T18178] nbd: illegal input index -8454144 [ 498.675907][T17993] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.714951][T17993] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.805316][T18194] __nla_validate_parse: 44 callbacks suppressed [ 498.805334][T18194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3309'. [ 498.806845][T18195] syzkaller1: entered promiscuous mode [ 498.828130][T18195] syzkaller1: entered allmulticast mode [ 498.829772][T18194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3309'. [ 498.907694][ T4947] Bluetooth: hci1: command tx timeout [ 498.929099][T18201] ±ÿª¨úrBº“: entered promiscuous mode [ 498.935087][T18201] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 498.972699][T18203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3313'. [ 498.994380][T17993] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.021263][T17993] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.107109][T18212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3316'. [ 499.129047][T18211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3316'. [ 499.285408][T17993] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.317589][T17993] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.520356][T17993] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.563953][T17993] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.673588][T18247] ip6t_srh: unknown srh match flags 4000 [ 499.696095][T18247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3324'. [ 499.764332][T18254] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3325'. [ 500.546605][T18289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'. [ 500.614614][T17993] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 500.668779][T17993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.716919][T18282] veth3: entered allmulticast mode [ 500.745479][T17993] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 500.773879][T17993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.789536][T18297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3337'. [ 500.809581][T17993] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 500.855578][T17993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.912614][T17993] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 500.944898][T17993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.976212][T18306] netlink: get zone limit has 4 unknown bytes [ 500.988643][ T4947] Bluetooth: hci1: command tx timeout [ 501.022181][T18306] xt_CONNSECMARK: invalid mode: 0 [ 501.233500][T18328] netlink: zone id is out of range [ 501.241361][T18328] netlink: zone id is out of range [ 501.251517][T18328] netlink: zone id is out of range [ 501.266634][T18328] netlink: zone id is out of range [ 501.289626][T18323] syzkaller0: entered promiscuous mode [ 501.299526][T18328] netlink: zone id is out of range [ 501.304753][T18323] syzkaller0: entered allmulticast mode [ 501.313362][T18328] netlink: zone id is out of range [ 501.331736][T18328] netlink: zone id is out of range [ 501.341457][T18328] netlink: zone id is out of range [ 501.393987][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.491758][T17993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.523773][T18340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3349'. [ 501.544785][T17993] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.582855][T16999] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.590107][T16999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.689603][T18349] sock: sock_timestamping_bind_phc: sock not bind to device [ 501.700098][T18352] validate_nla: 2 callbacks suppressed [ 501.700114][T18352] netlink: 'syz.0.3353': attribute type 21 has an invalid length. [ 501.728967][T18352] IPv6: NLM_F_CREATE should be specified when creating new route [ 501.741441][T16996] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.748657][T16996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.903437][T18361] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 501.922649][T18363] nbd: must specify an index to disconnect [ 502.915733][ T4947] block nbd4: Receive control failed (result -107) [ 503.077392][ T4947] Bluetooth: hci1: command tx timeout [ 503.130220][T17993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.233166][T18423] [ 503.235544][T18423] ====================================================== [ 503.242560][T18423] WARNING: possible circular locking dependency detected [ 503.249583][T18423] syzkaller #0 Not tainted [ 503.253983][T18423] ------------------------------------------------------ [ 503.260980][T18423] syz.3.3369/18423 is trying to acquire lock: [ 503.267044][T18423] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x44/0x80 [ 503.276242][T18423] [ 503.276242][T18423] but task is already holding lock: [ 503.283590][T18423] ffff88801be8d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 503.293406][T18423] [ 503.293406][T18423] which lock already depends on the new lock. [ 503.293406][T18423] [ 503.303793][T18423] [ 503.303793][T18423] the existing dependency chain (in reverse order) is: [ 503.312800][T18423] [ 503.312800][T18423] -> #11 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 503.321467][T18423] down_read+0x47/0x2e0 [ 503.326135][T18423] kernfs_remove_by_name_ns+0x3f/0x140 [ 503.332120][T18423] internal_create_group+0x587/0x1180 [ 503.338022][T18423] sysfs_update_groups+0x60/0x130 [ 503.343580][T18423] pmu_dev_alloc+0x29b/0x300 [ 503.348689][T18423] perf_event_sysfs_init+0x76/0x100 [ 503.354408][T18423] do_one_initcall+0x250/0x870 [ 503.359702][T18423] do_initcall_level+0x104/0x190 [ 503.365148][T18423] do_initcalls+0x59/0xa0 [ 503.369985][T18423] kernel_init_freeable+0x2a6/0x3e0 [ 503.375689][T18423] kernel_init+0x1d/0x1d0 [ 503.380526][T18423] ret_from_fork+0x514/0xb70 [ 503.385621][T18423] ret_from_fork_asm+0x1a/0x30 [ 503.390903][T18423] [ 503.390903][T18423] -> #10 (pmus_lock){+.+.}-{4:4}: [ 503.398130][T18423] __mutex_lock+0x1a3/0x1550 [ 503.403237][T18423] perf_event_init_cpu+0x1df/0x7c0 [ 503.408871][T18423] cpuhp_invoke_callback+0x445/0x860 [ 503.414686][T18423] cpuhp_thread_fun+0x36b/0x780 [ 503.420047][T18423] smpboot_thread_fn+0x541/0xa50 [ 503.425493][T18423] kthread+0x389/0x470 [ 503.430070][T18423] ret_from_fork+0x514/0xb70 [ 503.435171][T18423] ret_from_fork_asm+0x1a/0x30 [ 503.440534][T18423] [ 503.440534][T18423] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 503.448101][T18423] cpuhp_thread_fun+0x127/0x780 [ 503.453480][T18423] smpboot_thread_fn+0x541/0xa50 [ 503.458932][T18423] kthread+0x389/0x470 [ 503.463532][T18423] ret_from_fork+0x514/0xb70 [ 503.468676][T18423] ret_from_fork_asm+0x1a/0x30 [ 503.473948][T18423] [ 503.473948][T18423] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 503.481661][T18423] cpus_read_lock+0x42/0x160 [ 503.486755][T18423] static_key_disable+0x12/0x20 [ 503.492113][T18423] __inet_hash_connect+0x25bb/0x25c0 [ 503.497913][T18423] tcp_v4_connect+0xd5f/0x19b0 [ 503.503205][T18423] __inet_stream_connect+0x25a/0xdd0 [ 503.509022][T18423] inet_stream_connect+0x66/0xa0 [ 503.514478][T18423] __sys_connect+0x312/0x450 [ 503.519588][T18423] __x64_sys_connect+0x7a/0x90 [ 503.524874][T18423] do_syscall_64+0x15f/0xf80 [ 503.529973][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.536377][T18423] [ 503.536377][T18423] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 503.544009][T18423] lock_sock_nested+0x41/0x100 [ 503.549294][T18423] inet_shutdown+0x6a/0x390 [ 503.554304][T18423] nbd_mark_nsock_dead+0x2e9/0x560 [ 503.559930][T18423] recv_work+0x1c2e/0x1d40 [ 503.564871][T18423] process_scheduled_works+0xb5d/0x1860 [ 503.570926][T18423] worker_thread+0xa53/0xfc0 [ 503.576023][T18423] kthread+0x389/0x470 [ 503.580617][T18423] ret_from_fork+0x514/0xb70 [ 503.585707][T18423] ret_from_fork_asm+0x1a/0x30 [ 503.590977][T18423] [ 503.590977][T18423] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 503.598599][T18423] __mutex_lock+0x1a3/0x1550 [ 503.603702][T18423] nbd_queue_rq+0x37b/0x1100 [ 503.608843][T18423] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 503.614896][T18423] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 503.621732][T18423] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 503.628216][T18423] blk_mq_run_hw_queue+0x348/0x4f0 [ 503.633836][T18423] blk_mq_dispatch_list+0xd16/0xe10 [ 503.639545][T18423] blk_mq_flush_plug_list+0x48d/0x570 [ 503.645434][T18423] __blk_flush_plug+0x3ed/0x4d0 [ 503.650819][T18423] __submit_bio+0x28d/0x580 [ 503.655825][T18423] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 503.661964][T18423] block_read_full_folio+0x599/0x830 [ 503.667766][T18423] filemap_read_folio+0x137/0x3b0 [ 503.673316][T18423] do_read_cache_folio+0x358/0x590 [ 503.678952][T18423] read_part_sector+0xb6/0x2b0 [ 503.684224][T18423] adfspart_check_ICS+0xb1/0x960 [ 503.689679][T18423] bdev_disk_changed+0x817/0x1770 [ 503.695230][T18423] blkdev_get_whole+0x380/0x510 [ 503.700593][T18423] bdev_open+0x31e/0xd30 [ 503.705347][T18423] blkdev_open+0x470/0x610 [ 503.710269][T18423] do_dentry_open+0x785/0x14e0 [ 503.715537][T18423] vfs_open+0x3b/0x340 [ 503.720116][T18423] path_openat+0x2e08/0x3860 [ 503.725209][T18423] do_file_open+0x23e/0x4a0 [ 503.730245][T18423] do_sys_openat2+0x113/0x200 [ 503.735444][T18423] __x64_sys_openat+0x138/0x170 [ 503.740801][T18423] do_syscall_64+0x15f/0xf80 [ 503.745898][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.752296][T18423] [ 503.752296][T18423] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 503.759580][T18423] __mutex_lock+0x1a3/0x1550 [ 503.764680][T18423] nbd_queue_rq+0xc6/0x1100 [ 503.769693][T18423] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 503.775744][T18423] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 503.782582][T18423] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 503.789072][T18423] blk_mq_run_hw_queue+0x348/0x4f0 [ 503.794693][T18423] blk_mq_dispatch_list+0xd16/0xe10 [ 503.800414][T18423] blk_mq_flush_plug_list+0x48d/0x570 [ 503.806319][T18423] __blk_flush_plug+0x3ed/0x4d0 [ 503.811704][T18423] __submit_bio+0x28d/0x580 [ 503.816740][T18423] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 503.822906][T18423] block_read_full_folio+0x599/0x830 [ 503.828706][T18423] filemap_read_folio+0x137/0x3b0 [ 503.834261][T18423] do_read_cache_folio+0x358/0x590 [ 503.839897][T18423] read_part_sector+0xb6/0x2b0 [ 503.845176][T18423] adfspart_check_ICS+0xb1/0x960 [ 503.850619][T18423] bdev_disk_changed+0x817/0x1770 [ 503.856147][T18423] blkdev_get_whole+0x380/0x510 [ 503.861505][T18423] bdev_open+0x31e/0xd30 [ 503.866260][T18423] blkdev_open+0x470/0x610 [ 503.871204][T18423] do_dentry_open+0x785/0x14e0 [ 503.876478][T18423] vfs_open+0x3b/0x340 [ 503.881053][T18423] path_openat+0x2e08/0x3860 [ 503.886167][T18423] do_file_open+0x23e/0x4a0 [ 503.891225][T18423] do_sys_openat2+0x113/0x200 [ 503.896411][T18423] __x64_sys_openat+0x138/0x170 [ 503.901779][T18423] do_syscall_64+0x15f/0xf80 [ 503.906879][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.913273][T18423] [ 503.913273][T18423] -> #4 (set->srcu){.+.+}-{0:0}: [ 503.920374][T18423] __synchronize_srcu+0xca/0x300 [ 503.925817][T18423] elevator_switch+0x1e8/0x7a0 [ 503.931089][T18423] elevator_change+0x2cc/0x450 [ 503.936376][T18423] elevator_set_default+0x36c/0x430 [ 503.942081][T18423] blk_register_queue+0x3e9/0x4e0 [ 503.947610][T18423] __add_disk+0x677/0xd50 [ 503.952445][T18423] add_disk_fwnode+0xfb/0x480 [ 503.957680][T18423] nbd_dev_add+0x72c/0xb50 [ 503.962686][T18423] nbd_init+0x168/0x1f0 [ 503.967352][T18423] do_one_initcall+0x250/0x870 [ 503.972645][T18423] do_initcall_level+0x104/0x190 [ 503.978103][T18423] do_initcalls+0x59/0xa0 [ 503.982940][T18423] kernel_init_freeable+0x2a6/0x3e0 [ 503.988649][T18423] kernel_init+0x1d/0x1d0 [ 503.993533][T18423] ret_from_fork+0x514/0xb70 [ 503.998635][T18423] ret_from_fork_asm+0x1a/0x30 [ 504.003928][T18423] [ 504.003928][T18423] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 504.011726][T18423] __mutex_lock+0x1a3/0x1550 [ 504.016827][T18423] elevator_change+0x1b3/0x450 [ 504.022105][T18423] elevator_set_none+0xb5/0x140 [ 504.027504][T18423] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 504.033840][T18423] nbd_start_device+0x17f/0xb10 [ 504.039212][T18423] nbd_genl_connect+0x165b/0x1cf0 [ 504.044768][T18423] genl_family_rcv_msg_doit+0x22a/0x330 [ 504.050849][T18423] genl_rcv_msg+0x61c/0x7a0 [ 504.055883][T18423] netlink_rcv_skb+0x232/0x4b0 [ 504.061183][T18423] genl_rcv+0x28/0x40 [ 504.065683][T18423] netlink_unicast+0x75c/0x8e0 [ 504.070958][T18423] netlink_sendmsg+0x813/0xb40 [ 504.076230][T18423] ____sys_sendmsg+0x972/0x9f0 [ 504.081500][T18423] ___sys_sendmsg+0x2a5/0x360 [ 504.086683][T18423] __x64_sys_sendmsg+0x1bd/0x2a0 [ 504.092131][T18423] do_syscall_64+0x15f/0xf80 [ 504.097237][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.103634][T18423] [ 504.103634][T18423] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 504.112213][T18423] blk_alloc_queue+0x546/0x680 [ 504.117485][T18423] __blk_mq_alloc_disk+0x197/0x390 [ 504.123097][T18423] nbd_dev_add+0x499/0xb50 [ 504.128019][T18423] nbd_init+0x168/0x1f0 [ 504.132686][T18423] do_one_initcall+0x250/0x870 [ 504.137958][T18423] do_initcall_level+0x104/0x190 [ 504.143405][T18423] do_initcalls+0x59/0xa0 [ 504.148261][T18423] kernel_init_freeable+0x2a6/0x3e0 [ 504.153967][T18423] kernel_init+0x1d/0x1d0 [ 504.158803][T18423] ret_from_fork+0x514/0xb70 [ 504.163898][T18423] ret_from_fork_asm+0x1a/0x30 [ 504.169171][T18423] [ 504.169171][T18423] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 504.176358][T18423] fs_reclaim_acquire+0x71/0x100 [ 504.181802][T18423] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 504.188027][T18423] alloc_inode+0xb8/0x1b0 [ 504.192860][T18423] iget_locked+0x131/0x6a0 [ 504.197783][T18423] kernfs_get_inode+0x4f/0x780 [ 504.203049][T18423] kernfs_get_tree+0x5cd/0x980 [ 504.208315][T18423] sysfs_get_tree+0x46/0x110 [ 504.213407][T18423] vfs_get_tree+0x92/0x2a0 [ 504.218352][T18423] do_new_mount+0x341/0xd30 [ 504.223360][T18423] __se_sys_mount+0x31d/0x420 [ 504.228546][T18423] do_syscall_64+0x15f/0xf80 [ 504.233643][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.240126][T18423] [ 504.240126][T18423] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 504.248094][T18423] __lock_acquire+0x15a5/0x2cf0 [ 504.253455][T18423] lock_acquire+0x106/0x350 [ 504.258465][T18423] down_write+0x96/0x200 [ 504.263216][T18423] kernfs_remove+0x44/0x80 [ 504.268135][T18423] __kobject_del+0xe1/0x330 [ 504.273141][T18423] kobject_put+0x240/0x560 [ 504.278059][T18423] br_sysfs_delbr+0x44/0x70 [ 504.283064][T18423] br_dev_delete+0xe2/0x110 [ 504.288072][T18423] br_del_bridge+0xb6/0xf0 [ 504.292994][T18423] br_ioctl_stub+0x746/0xd60 [ 504.298090][T18423] sock_ioctl+0x523/0x7f0 [ 504.302922][T18423] __se_sys_ioctl+0xfc/0x170 [ 504.308021][T18423] do_syscall_64+0x15f/0xf80 [ 504.313116][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.319512][T18423] [ 504.319512][T18423] other info that might help us debug this: [ 504.319512][T18423] [ 504.329728][T18423] Chain exists of: [ 504.329728][T18423] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 504.329728][T18423] [ 504.343527][T18423] Possible unsafe locking scenario: [ 504.343527][T18423] [ 504.350963][T18423] CPU0 CPU1 [ 504.356664][T18423] ---- ---- [ 504.362013][T18423] rlock(&root->kernfs_supers_rwsem); [ 504.367455][T18423] lock(pmus_lock); [ 504.373850][T18423] lock(&root->kernfs_supers_rwsem); [ 504.381726][T18423] lock(&root->kernfs_rwsem); [ 504.386475][T18423] [ 504.386475][T18423] *** DEADLOCK *** [ 504.386475][T18423] [ 504.394600][T18423] 3 locks held by syz.3.3369/18423: [ 504.399790][T18423] #0: ffffffff8fdb0f00 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0 [ 504.409085][T18423] #1: ffffffff8fdd0240 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 504.418112][T18423] #2: ffff88801be8d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 504.428453][T18423] [ 504.428453][T18423] stack backtrace: [ 504.434331][T18423] CPU: 0 UID: 0 PID: 18423 Comm: syz.3.3369 Not tainted syzkaller #0 PREEMPT(full) [ 504.434345][T18423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 504.434351][T18423] Call Trace: [ 504.434357][T18423] [ 504.434363][T18423] dump_stack_lvl+0xe8/0x150 [ 504.434376][T18423] print_circular_bug+0x2e1/0x300 [ 504.434390][T18423] check_noncircular+0x12e/0x150 [ 504.434402][T18423] __lock_acquire+0x15a5/0x2cf0 [ 504.434413][T18423] ? lockdep_unlock+0x5d/0xd0 [ 504.434425][T18423] ? kernfs_remove+0x44/0x80 [ 504.434437][T18423] lock_acquire+0x106/0x350 [ 504.434445][T18423] ? kernfs_remove+0x44/0x80 [ 504.434459][T18423] down_write+0x96/0x200 [ 504.434468][T18423] ? kernfs_remove+0x44/0x80 [ 504.434479][T18423] ? __pfx_down_write+0x10/0x10 [ 504.434489][T18423] kernfs_remove+0x44/0x80 [ 504.434500][T18423] __kobject_del+0xe1/0x330 [ 504.434509][T18423] ? kobject_put+0x234/0x560 [ 504.434518][T18423] kobject_put+0x240/0x560 [ 504.434527][T18423] br_sysfs_delbr+0x44/0x70 [ 504.434537][T18423] br_dev_delete+0xe2/0x110 [ 504.434550][T18423] br_del_bridge+0xb6/0xf0 [ 504.434562][T18423] br_ioctl_stub+0x746/0xd60 [ 504.434571][T18423] ? do_vfs_ioctl+0x1166/0x1530 [ 504.434584][T18423] ? __pfx_br_ioctl_stub+0x10/0x10 [ 504.434592][T18423] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 504.434605][T18423] ? sock_ioctl+0x4fa/0x7f0 [ 504.434616][T18423] ? do_futex+0x395/0x420 [ 504.434638][T18423] ? __pfx_br_ioctl_stub+0x10/0x10 [ 504.434652][T18423] sock_ioctl+0x523/0x7f0 [ 504.434667][T18423] ? __pfx_sock_ioctl+0x10/0x10 [ 504.434681][T18423] ? __fget_files+0x2a/0x420 [ 504.434695][T18423] ? __fget_files+0x3a0/0x420 [ 504.434705][T18423] ? __fget_files+0x2a/0x420 [ 504.434715][T18423] ? bpf_lsm_file_ioctl+0x9/0x20 [ 504.434728][T18423] ? __pfx_sock_ioctl+0x10/0x10 [ 504.434736][T18423] __se_sys_ioctl+0xfc/0x170 [ 504.434748][T18423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.434757][T18423] do_syscall_64+0x15f/0xf80 [ 504.434770][T18423] ? trace_irq_disable+0x3b/0x140 [ 504.434783][T18423] ? clear_bhb_loop+0x40/0x90 [ 504.434793][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.434802][T18423] RIP: 0033:0x7f423df9ce59 [ 504.434812][T18423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.434827][T18423] RSP: 002b:00007f423ede8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.434837][T18423] RAX: ffffffffffffffda RBX: 00007f423e215fa0 RCX: 00007f423df9ce59 [ 504.434844][T18423] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 0000000000000006 [ 504.434850][T18423] RBP: 00007f423e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 504.434856][T18423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.434861][T18423] R13: 00007f423e216038 R14: 00007f423e215fa0 R15: 00007fff1386fba8 [ 504.434872][T18423] [ 504.775629][T18429] syzkaller1: entered promiscuous mode [ 504.781291][T18429] syzkaller1: entered allmulticast mode [ 504.813991][T17993] veth0_vlan: entered promiscuous mode [ 504.833311][T17993] veth1_vlan: entered promiscuous mode [ 504.899252][T17993] veth0_macvtap: entered promiscuous mode [ 504.912579][T17993] veth1_macvtap: entered promiscuous mode [ 504.933927][T17993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.949814][T17993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.960845][T16995] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.971026][T16995] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.980584][T16995] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.990103][T16995] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.011657][T17993] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 505.029893][T16996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.031285][T17993] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 505.051640][T16996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.068583][T16981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.076450][T16981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50