last executing test programs: 29.255069738s ago: executing program 0 (id=5418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) (async) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 29.086076002s ago: executing program 0 (id=5423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000140)={{0x1, @rand_addr=0x64010100, 0x4e20, 0x2, 'lc\x00', 0x14, 0x0, 0x13}, {@private=0xa010102, 0x4e22, 0x3, 0x3, 0xd, 0x8}}, 0x44) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x5, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x3d) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) 28.767461224s ago: executing program 0 (id=5430): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)='%ps \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, r0, 0x0, '\x00', r1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) 28.689666531s ago: executing program 0 (id=5432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x8000000000000000, 0x18, [0x8000000000000000, 0x9, 0x6, 0x68], &(0x7f0000000040)=[0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = accept4(r1, &(0x7f0000000100)=@qipcrtr, &(0x7f00000001c0)=0x80, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x61f6, 0x56}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040002}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) 28.446864518s ago: executing program 0 (id=5436): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r2) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000004380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6, 0x0, 0x1, 0xa, 0x1, 0x7}, &(0x7f00000043c0)=0x20) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40d5, &(0x7f0000000b40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000b80), &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x800000be, &(0x7f0000000c00)=[{}, {}, {}], 0x18, 0x38, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000380)}}, 0x2) socketpair(0x29, 0x3, 0x2, &(0x7f00000001c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a0000027bffffffffffffff00f500"], 0x10}}, 0x0) close(r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r8, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe0}]}, 0x2c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x8, 0x0, 0x0}}, 0x10) socket(0x23, 0x4, 0x3) 28.114378114s ago: executing program 0 (id=5442): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f0000000180)=r5, 0x12) write$cgroup_int(r3, &(0x7f0000000040)=0x8, 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.174458185s ago: executing program 32 (id=5442): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f0000000180)=r5, 0x12) write$cgroup_int(r3, &(0x7f0000000040)=0x8, 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.092644985s ago: executing program 3 (id=5829): r0 = socket(0x0, 0x1, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000001780)={0x5, &(0x7f00000016c0)=[{0x3, 0x1000, &(0x7f0000000500)="b413b581c47829efb5e0e01328e0367149f53f5d24ad68ce70cf0165cac5aa70add0bc8c747829d975a76a322265d24bde3ee3b04c1f942d9224ab09c10f44840674aaa7ddcb072bcb0d7e4ea6efec6f813c032e4acd2437c7dbbc410263135abe8a4fd145cf77662a6fe7aef76e6356c676e1f952cc59f26fe15a481985fc9817d254ed8565cc508cc900d98419adb216aaf20d0522fb90295c0bda05018cf8f349b4db6492a8d9c4abd645d206f59cdaee9f18901d0ce1bc641c68624f1141bfb43bdfd1d0e2353263eef19cbc2c58378afae63849f32a8b0307759bd40e6f1a4452a306a6872bc1bcaa844b38aa6a6c33fc67d1dcb7b4bfd3beacc477f58247e285a60d25e81f3cd2244f0b9ec63db7d6dccb6e948facfd5222a066a2af1fe65bed8ebf00157eb30450c156bf6d7c62541ef1c04c23a6e86ca68b3daea834f274e79c2c66d110bb318a22cbdc6ed452ae814719fac2fe14a2bc5deb98c0bb9ac4e430b6d3e70bbe85747ef92f1770f7af1553daf24f8f6285ab1749a22bdc1ef63a1261896f67a422ce1633433c7ccbcacef46f2c94da5081d81f3187f97daf8385888c6fb10c3491f2291aebca2ec456bc3bb9fe800b52bb002f38f22a145bd0857c5dc8ccd55e38a9154894c8a74c52b35896107c1df8437818ccf1d675eda46da8eda96b2ef34de32985270d34643f3348a4242f1d6678adbe559a4ddbeb655f8610fd36eb01885d7e059f300c74452243a44f331b4a1578f1232a13bb0a5129fa736cd018701af845860e85e81c43db43908b443f0607572e198fa4f373e00e6d7d96d2c1db118e6cb6875b9cce42e56cf4c6216aefbe86d92120ee23e7083046bf43ea77dff5b5e43d210a0ab1d92209dd1ea157dac0ea3f43a49fc441b33c8acc03cbc437cdb7cd7c1bed091b02a78632f6b6018c4f2b8f2578c843f07671acbf775760e8cecf7f0f1df67bbab2b1cf55b1a778e8f0d3f58d2d4688b81327010b3164ab7a3969f89e9b49f18a3cc9d748b6ba3cb6b881c39b442ddf79a03f39be636008e6f81dfc3279a3ed20e0b173cae939958afe28e92a111f007e191b97da4cfef3c83dbd80c54a3628ca8b7ef0a31ddff34f1df1c0ce16e0efc1b024f3148684667e390615ae50834a460538624466975c1b778f9419947e9f2d6fe6e2ea17b705fcb18ca267c3fa11277048e04a354a92959abe53e3ab09a37e54e8f292dce55d3c140e9278e75ea5fac4d39eda4fefe8c901951c87ec41f1669e68e109f29d555c2a8241feb121021960a4fcd6f0a9b431dd59f57c254fe07e029fd4ed030771321672f76c944c1bf272bd8ba782756c02a42cba18d0d990409fe267a23dbc66fd5c6fcc24a49e3d37ce6701f45bc0c7302551b39ac97868e8c44f2b61b71e5f5e85ceb407d7c0f8aa4894af65523db089bf184f832bf75370a5683de37cf66e267d2842d4f540e4573a55d5955b5750afc96cf672f05e91f84f07dbb86ff23d2cf933395496bd2c427508ba0490a37caaf652d30685c571eeb3ae260caf948aaaffa115bb26c9e2df60b88b071a351e7daa70e13cb59fe67787f658dd80204b1bf218c3f214b87de8a1978c41c6f83073b50532bc8ba368f723be460bab675f02c2471c2a0cd55d3441e2f86d4d32a35db3589bd1a3a494e227cd2292a9b185c6c0490f7cd8c11e23636f939a0e6ef62fb9f093175ab7342322b87dce91fa5461b88969dc23da8b6a62a8c08644959626e89cb371c469e0f173583304bf20f794e8f3cece88d3946b904b812117b8abaf8914f42dd01ab16f1cf45426bdb3267f593e276c79a7b1062174beee8bf4de5ffa72b56f1b7ef9f77f3c6006fa06d28a19c20b92bce2e9cec227509273aba9f5adbdce7e827636cd82aec61d64988975c8f3844ca972e551a027780f45441f89d2e8cc27db2747fcfaf893d8050efe5b3b2a352c73dd6972f5779975bd7370690cb3e7d9d203792e0c94ab12c62c77697acab3823fd6e96e308603ada20883d7925660b1a9ab02cc1b24cd1025532f54e956bf5fcbb4cc042b081757dc3b461f84132dbb867b40720b5502707f6bab0b3d4b687b7500b2f9f7c093ccbd79c356f7d510561d14402ad244b2b3239af1c1a9299a6492c6824096702f23ae7452d4edde6ff31d6852970a6438852989ebc2218180887aeb0c232da79bd79c29b6caab1357f7460ae750e88917fcabf1f23bcec796590e59b5c85e8130bbc6c137f7dbcc5cd50a24cbae1ded8808b1d20a2ec462c5a63e7b217e623114195b1521498d1777b044fde28bbadd0af505b46b9cb115bdc168bf7f8251cf8eee3055bec7c8319d268a04d5b97ad0300968fa9f6a9d46087d97fe46ee36c7993cb643d76dbc4dd03847b0c59d1d5692b2422db28278a811877a8b8b6284a62be84543d1d9c5cb9375ffb22b53fb83e5987828573938480541730463e10a9897c869afdf61106f08f31edef8d5b73dcc3e341d7c859d13001d2b7b49820dcbb1ffe5c7f7a51a45fa3e0927a9aa0db802d9d5343a121efd5b47b53b8bb6069efe47f41fb9a5b2b598db3fae0e2fdbaa752dd1f18b6e5315f07ad2d1754af9a90f5c914218dbd782385ac2ee4a29219285f0dbbe5520eaaa9ae4a99f8f5bf99e0fa0c05d819443b88f95c1efea3d73b758d1cc81957a88b484f157f50304ff79cc95eae413650f6784d93f61b7febeb1d588f502dfd789d4c4590973d297e1ca63a3b512f04d286bc48af4ceccc89dfde5fdd440b89f61409a7aaa2d0265c49666d7f762b6856b44cfedafc287855a177f30f6439f0d04faf70652692420ca94f9a30ce89264ec1f22d745ec327076b6ab5ef4e019592cc4f148ca074d285bbaeb6e46b7f40fdcfec5a9c82e4764a6dadbd653141ce1fbdaa4c6f2d52cd4b2250fdf151b54bf254bb8e1c3f6ae970b080f7eb39f2af7f11a300edcf2a705ef6e7733a695478243646c0e8e12fc488eab5c33f68203c10472e6ca21452ee09951b634642d9343fe5a9eb84cfb369abf32243829ac1fa315c4400980ce1217e40f8ef4fb834c418edfaccafb3e46ec8d17757887dd1fe22da5c09332f52a157fef6d9c492df9bba4e6a9ce7ed421f0856ad21576bf41b4afed120305154c2ef9b1164013f68946b6d8f0de788db8bd43cf8b6c8c62fe689a290637ac2f44d955e806af86b40b683ea121820a27239ef1fb9e629eac532faaf49db9d68bdb68380ff261a1cb4ed5a6fcfd39f88fa56a7eed6d2e9cf93a6db7ee8640355490cb0bd2c2201a24eee1ac8e4fa4791e28275798be88076c548c072a8d2ce526d8b92fa3d1782e92003b67f90e4fedd4c75f43bbadab50231be59644819889d894091340ab41faed271d06ffb0f0f1caef3c999c2a8b699f40b1405aa254f4d8b13d39be791858e351d258aea080b88ffdeec1593c60e686f1a0567f597e9c718840959d7407ba9fb8f764650083817c1e4ba705df495b9f4de4653eca526e0e2f1b8f950a9372f754856d3e82d3f3ef52c0e55183e3c2a87111fa3ac947d47b91b8370f6575509fc80dcf1f024599632d038a2b71fbb1668c953c03fb2af6ddbf0469559e53758ef97b9b6e7e9187a35378651d0dc6a15a6baf164177a867fbf46900e5c56490527ea6b287db3602bdd9ebe38a02b963ba31f2dba494a10e9d3ff3bb513bcb7099d041ac2902d31918974e6fdb02c55948eb2cff5941d9563bfd231a2f2af4624532f7e35ced4ac6d03c3be3ee17fe5616cf23f7abc6a2c51d9ea162a97b3fa6bd5f65fdf93b654aa36fbd46483d2cb783da43ed88bd7c726094ed5d388de3f52d093504c28de89199b917ebf1d06a89bd61bd694b3021c9b05db89d5d3a4477eee34c3f04f7174da4a8ef4db3ce343f929a6949ad4703a2060636cf74467e660ee9fff0a705c5861b671ed0ad88ec527082f5b390b2353bc379adf3f8c7bb29ab21307be6d279fe18cd456e3b6b1413b643a868ad7283a6d4d14d2a7c5e21bc2aa02188061fef3520b837398c5151c78fba18cfb8be886547962fd4e939896d6e227093fd279fc9313b31ee5ab4d977c3c97a3549e3d95ef480cf5e613ca391a71e9229fd933a68fba67c11875dc6ed9db3e9e56a9c229e569c480da60e312244f77bb246503fc1ee45f639203183acfa4966908b26218b225c9f6117c16bbfb8be413cfbd8aa503abfd8a90ae4de061013a079865b16c025a2cd579633ca58b1db67bc193b22ebb8edf654c7e8a3e4b7a024a6e158ebf0ffe1e1aec6cb26179164f318e92eff929ff4c8900bd42c0558ae407e4a26a2370f5bfcbb44b4428c0b67e75bb31334b15a0f21b2d341225b7690876f463840882e335cda79cfdd0c673bb0e6ea816573f994b79fad6020c92e3c9b5c524ef36bc6d9f0479e01a2f1909d8a37d2fe58ec924b215a45e5ebeffa035f738f271d7c8935a5878dad2968713e64e9b3da6a7cb26de6ed6c28defefc5734d3a1a5fa365d65a661d7ecee196b436571c1a09fdf784280d2105f72eb5437d32047e85edc01e1014775eca11d7c3bf590925e3f392371cb7a63dd1ab3aae5be9b7ed52fe54e5eda07d3fe46233808f7fc67d121e7fd6086bb6f9489e027d5d21383bc013f89594f9fcf078f60431c9d1ee246a38f5fbc272aebf383a9f2d4517cd566a05f278d51011deec95a0f8eb3030c32b73bf02646ed8caf3effedc8d1328bd5dce40e12ac7fed17b9113ec3cf8c665d86e4311d800fa8ad0f6fa7d1855e2eed236b7a2f632be62cc62fb32d2c436117d40ed2e5a99dcf8b54127485501aea073a1c653f3e1921010e96112a7f45450926354acea4e0f2a2c0e0ab1aa7125c37813e4dff98634b8de5099e1edf3bf291da1bef949e33b229b37dd484131e2f4905e775a7176a0c99cde10ec4cbd047e6b18f1832d05bfc4e6465e6f7713f736bbc34baf3d02db7076fc2d23d0fbb2eb83d2a8cca6f62659aece3d722ee6198896f7884456e2ccaa1b7ced8a3871964c27eef857f9370d053b38aaaaaad284404d2c6ebff1d3feb56b23c6834114d547fb7db1fff365ce5fcf5da6daf08395e22f3dcddbd7edd215608f0da5585ea6eadc095d20466746790fc70b1626ab1e4524d85c612cb47dbcfc5a0d49be96f8c2e80c36043c06fff12311fddf4ac7769044fe46acea1ee5111175f7a5be0042e1eb9942b87f2115b445c85279999c57e85915468a7a91dafcfaf281c5c019293c1ab7ad3059f46c36c5713453a7a3289e6fca1f4dfdc3d34551b431a5ebce51d8735983296015c4ff889c7e56d385af864633bc5bdb95d0826b6d5a44be1251adee86fa2a1e03c5596056c190610b06129ef9a90322b474e53b357273d93af013869e8bb04187e8c3d8c0b06abc4ce01c29f7fd086c7085c717030c6a03b3f86833ef637b67a811c060a5d2127cf8f2283650539f9070a5a2c202de364ab6f0a800af03d6479ed71ab372fc5ad6908a76fed4aef21a4367cf7f1408d4e804df787e1ad42ed3db63a5f79b7752517bed52d8ea750b144de5ec96d41ad90f7b8a9203f400ab0bc2d9e8f1104284c8d6bda0b03c7a6d806df2915559a48f6250023046ac272e9b752cbbe3f56f9a2ba2f7fb72d25aa373085728a9b0b41727ddc495ef5ce869e7cabc889688fc96b78a6ed57a39bd870b0235e5d8f9bf264b37d631e9aae096a9eab00c90762ef4b5d3d5d9c1d356e3a042bc93ba0a48af94203423b44de2f2f65de7102d187dc3a5bc3f8071fde90d26e24185a1e9bd0d17c0bb5b352b8b1a1", 0x0, 0x1}, {0x0, 0xe9, &(0x7f0000001500)="08e432888bc8dc9a31e3fd4860aef1cfa95b6ca44710f750d1c644f87af88e35ac90448e297a0fd34dc7cdcb255e72ca8292748930819ceb3a77c551ca4ecdad602d290dec9be2eb87736b3e8c08ada6870e2ada53a4dbf0b5ca56db9cfd1dfe898dde83a680ec5aad37fc199ba0d5cc0d4d6e70258507fdb3a80a53718a30d53e309222905f13f1e311475e007b8d686ba73097a4aa79ffeeeae6e099435f9d278dcdbddfe9e3eaaa70a6c4a6ebcf22ca810c68bae3b6348b293103f5730355b3874e7baff224bff0ddf1fe0817f03b0d80c898214ee6de052bccea3edc39bd0b6c9a338c46ebe698"}, {0x8, 0x9, &(0x7f0000001600)="082c747019ee17766b", 0x1}, {0xffff, 0x24, &(0x7f0000001640)="fbf0aabf589e3734e480c77c6163b3934d2a1d811b3480bb971cc98f6aa42ff8918aefe6"}, {0x3ff, 0x18, &(0x7f0000001680)="49bd09bb1695efa39241a7ad916857fa8187409b24d4d6e6", 0x1}]}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@private0, 0x45, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01100000000000000000010000001c000180060001000200000008000300ac1421aa8800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x45}}, 0x3f}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) unshare(0x8040480) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x5760, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r2) getsockopt$inet6_int(r8, 0x29, 0x18, 0x0, &(0x7f0000000280)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000370b55468750845e7d922230f85a523187ad05e9168d2bde3a368983a3b0ca3899edeb569ca090858239454cb54fc8e8a521c915edd016820e9c41c0537acfe87412f74e61db6716e49380c0", @ANYRES16=r6, @ANYBLOB="010025bd700000000000070000000c0001800500020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000480)={@random="9f81a62f0d00", @multicast, @void, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x37, 0x1, 0x0, 0x0, "49956ce3ad0670213ac8c2e021108b3926f425eef6011d89963bb6f114d04f153181f82b89a82c59334dc98ac058dab917f2fe40bdfd420e332bd9a6ccd41f75"}}}}, &(0x7f00000003c0)={0x1, 0x4, [0xcfb, 0xd82, 0x142, 0xce4]}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000a0601017900000000000000060000000500010007000000"], 0x1c}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x5, r1, 0x1}, 0xc) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0) 2.164624752s ago: executing program 3 (id=5840): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf251900000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_MARK={0x10}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xfff2}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x44}}]}, 0x58}}, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r4], 0x7c}, 0x1, 0x0, 0x0, 0x24004050}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa2e}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r9, 0x89ec, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x28, 0x18, 0x800, 0x0, 0x1, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r13, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r14, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fa3f8613ec79a583a2ab0997c06f13fed5dcd6fe", @ANYRES16=r14, @ANYBLOB="00012bbd7000fddbdf254a0000000f00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a8007365636f6e646e616d6500000800030000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0xb8}}, 0x4000) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x20000000) 2.029818605s ago: executing program 3 (id=5841): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r4, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x9, 0x10}, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x101, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12], 0x90}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="60010000100013040000000000000000e0000001000000000000000000000000fc010000000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac1414bb000004d432000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000800000000020000000000000000000000000000000000000300000000000000cc000000000000000000000000000000f6000000000000000000000025bd7000000000000a000101000000000000000070001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001201000080"], 0x160}}, 0x0) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @ldst={0x2, 0x3, 0x6, 0x1, 0x5, 0x18, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x2, 0x5c, &(0x7f00000001c0)=""/92, 0x41000, 0x68, '\x00', 0x0, @fallback=0x2b, r2, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x2, &(0x7f0000000680)=[r5, r6, r7, 0xffffffffffffffff, r8, r9, r10, r14, r15, r17], &(0x7f00000006c0)=[{0x3, 0x5, 0xc, 0x7}, {0x4, 0x3, 0x10, 0x6}], 0x10, 0x5a}, 0x94) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.925075702s ago: executing program 2 (id=5843): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r3, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r4 = socket(0x2d, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200182, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000140)={'macvlan1\x00', @local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYBLOB="e9a41a91e49af0d84ecdde02fde46f62bb3f9132744a675afce72b3921", @ANYRES16=r7, @ANYRESHEX=r1], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x4000044) 1.896166989s ago: executing program 5 (id=5844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x27, r2, 0x0, 0x6, 0x3, 0x8, "96136a95db2eb27527bcfa5c076ec438ee05a5e12c3720b99a37b86d09e5ec5c3aecf848122f415f33165ec5aadfc08fe29a8844e1a2af030bef7f827f7b4c", 0xb}, 0x60, &(0x7f00000001c0)=[{&(0x7f0000000340)="38d73b1e4baa469c7a769cc338a4c95834fd273defc7cd10b9e88cb7b9224f02152da68cc08061b72bcb3cb11cb63b3c83d07686d559ef02397062e4197eedeef62be972ed3f29a2f97bccc68b5d1812984cd5401aaab89ab5b2bad55ed1dce25d30f989286039dce19e2d31ef3e2ea545ec30bf2e8f0ef9dc53fced08195144b027971eab0ae6b1ac18cc2c9c", 0x8d}, {&(0x7f0000000400)="3e20db08a3021309d1c610a1abfac45fe774901ee61bc6d2b51d6e969a147bff77726736aecf245e2ff9a37ce18d17ab17bddd0bda573db4aef53f14be4796cb6a41dbbb21a87b0c78ba7f2d9ddd753b370b7261724f1d94c9dddfe719733b951d7133d1e4b2c0e6571d5794d27c2f2fe70204e908bc8ef604caf8fedf325e20d4c4090f9d632e3c299670eeaa91aa51eb49b16e91c7de64340f69dc4c66d4c15d75cf141985f2de065f2abdb20ce8c62626525028a7f259807317ef02e8ba59069302c25f0a155465e168f8d2e5829304c87325f6b49a5cdefbe78fa239f90591e7a3d9cb9bfbdb22", 0xe9}], 0x2, 0x0, 0x0, 0x20000881}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380980003801400010076657468305f746f5f68737200000000080007400000ae"], 0xd8}, 0x1, 0x0, 0x0, 0x4c040}, 0x0) 1.642511686s ago: executing program 2 (id=5845): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x29, &(0x7f00000000c0)={@multicast, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@mpls_mc={0x8848, {[{0x401, 0x0, 0x1}, {0x4}, {0xa29, 0x0, 0x1}], @ipv4=@icmp={{0x0, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x2, 0x1, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x0, 0x0, [{0x0, 0x0, "98729ce0589c2ee0de04f8a27ca21b3b"}, {0x6, 0x0, "f675efb7e4da642be308b552af2f19c5"}, {0x2}, {0x6, 0x0, "75ec2a"}, {0x7, 0x0, "b5f31170afa0f21dd2acc1"}, {0x6, 0x0, "ff81ff86c24736e5f1bf6f3f7ea8"}, {0x0, 0x0, "10afb21bc187f19fb1bbb7f8c254935c"}, {0x6, 0x0, "ab0988d346"}]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x7f, 0x7f, 0x0, {0x0, 0x4, 0x0, 0x3d, 0x8, 0x65, 0x2, 0x2, 0x5e, 0x0, @remote, @loopback, {[@noop]}}, 'c'}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x29, &(0x7f00000000c0)={@multicast, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@mpls_mc={0x8848, {[{0x401, 0x0, 0x1}, {0x4}, {0xa29, 0x0, 0x1}], @ipv4=@icmp={{0x0, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x2, 0x1, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x0, 0x0, [{0x0, 0x0, "98729ce0589c2ee0de04f8a27ca21b3b"}, {0x6, 0x0, "f675efb7e4da642be308b552af2f19c5"}, {0x2}, {0x6, 0x0, "75ec2a"}, {0x7, 0x0, "b5f31170afa0f21dd2acc1"}, {0x6, 0x0, "ff81ff86c24736e5f1bf6f3f7ea8"}, {0x0, 0x0, "10afb21bc187f19fb1bbb7f8c254935c"}, {0x6, 0x0, "ab0988d346"}]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x7f, 0x7f, 0x0, {0x0, 0x4, 0x0, 0x3d, 0x8, 0x65, 0x2, 0x2, 0x5e, 0x0, @remote, @loopback, {[@noop]}}, 'c'}}}}}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 1.607545393s ago: executing program 5 (id=5846): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) sendfile(r1, r2, 0x0, 0x8) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2bfffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x8}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x0, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x20054004) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r8, &(0x7f00000000c0)=ANY=[], 0x138) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) socket(0x18, 0x814, 0x1) 1.518726897s ago: executing program 3 (id=5847): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000000c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x8, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) shutdown(r0, 0x0) 1.278088758s ago: executing program 4 (id=5849): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000071106100efffffff9400000000000000"], &(0x7f0000000400)='syzkaller\x00'}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070300443c00030a010102000100000000000000000000ac1414aa00000000ac1414bb000000000000000000200000ac1414bb00"/130], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x2000000, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000000206010400000000000f0000000000000d000300686173683a6d00000c00078008001200000000000900020073797a3200000000050001000700000005000400"/84], 0x54}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005880)=@newtaction={0x35c8, 0x30, 0x20, 0x70bd25, 0x25dfdbff, {}, [{0xd74, 0x1, [@m_police={0x944, 0x10, 0x0, 0x0, {{0xb}, {0x898, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1edf}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0x8, 0x81, 0x5, 0x8, 0x7, 0x0, 0xaeb1, 0xfa, 0xe, 0x531, 0x6, 0xdebe, 0x5, 0xb, 0x3ff, 0x3, 0x8b7, 0x10001, 0x81, 0x4, 0x3, 0x5fd, 0x5f, 0x8, 0x10001, 0x5, 0xb, 0xe, 0x0, 0xfffffffc, 0xb8f2, 0x9, 0x5, 0x4, 0x4, 0x2, 0x7, 0x81, 0x0, 0x7, 0x8, 0x9, 0xc, 0x3, 0x9, 0x9, 0x10000, 0x1, 0x2, 0x401, 0x1000, 0x7fff, 0xa, 0xb0, 0x2, 0x0, 0x100, 0x40, 0x6, 0x8001, 0xa, 0x401, 0xffbe, 0x80, 0x80, 0xfe7, 0x8000, 0xe, 0xed83, 0x7, 0xa, 0x2, 0x6, 0x9, 0x6, 0xf, 0x100, 0x1, 0x101, 0x3, 0xfffffffc, 0x0, 0x100, 0xfffffd8b, 0x6, 0x3, 0x4, 0x9, 0x9, 0x7fffffff, 0x3, 0x4, 0x400, 0x2, 0x0, 0x79, 0x1, 0x9ac6, 0x3, 0x6c, 0x8000, 0x4, 0x2, 0x5, 0x3, 0x1, 0x5, 0x3, 0x4, 0x2d, 0x1000, 0x3, 0x8, 0x9, 0xffffffff, 0x0, 0x3, 0x9, 0x9, 0x9, 0x3, 0xffffffaf, 0x10000, 0x9, 0x80000001, 0x2, 0x59b, 0x1ff, 0x1, 0x2, 0xfffffff7, 0x6, 0x7, 0xc, 0x6, 0x7, 0x7fff, 0x8, 0x8, 0x7, 0xc, 0xfffffffd, 0x8, 0x854, 0x9, 0x7, 0x8, 0x4, 0x3, 0x80000000, 0x74f87dc0, 0x5, 0x1ff, 0x2, 0x5, 0x1, 0x1, 0x3, 0x7, 0x3, 0x1, 0x7, 0x8, 0x800, 0x7, 0x3, 0x8, 0x0, 0x800, 0x9, 0x5, 0x0, 0x4, 0x3, 0x0, 0x3ff, 0xfffffffe, 0xfffffffd, 0x5, 0x1db, 0x401, 0xfffffffb, 0xff, 0xa, 0xb5, 0x7a01c3cf, 0xd, 0x36, 0x2, 0xfffffffb, 0x4, 0x8, 0xffffffc0, 0x1, 0xb49, 0xffffffff, 0xffffffff, 0x1ff, 0x1, 0x1000, 0x6, 0xfffffff2, 0x2, 0x2, 0x7, 0x7, 0x0, 0x8, 0x0, 0x2, 0x1, 0x6, 0x3, 0x8, 0x3, 0xffffffff, 0x7, 0x2, 0x9f, 0x3, 0x5944, 0x3, 0x0, 0x9, 0x3, 0x76, 0x68b, 0x8, 0x80000000, 0xfff, 0x8000, 0xe3f2, 0x4, 0xa0, 0x9, 0x7, 0xc, 0xa, 0x7f, 0x9, 0xfffffff7, 0x4, 0x1, 0x1, 0x200, 0x0, 0x8001, 0xdf, 0x9, 0x0, 0x0, 0x8, 0x1ff, 0x3]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3e6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x10000000, 0xe49e, 0xf31, 0x1, {0x5, 0x1, 0x2, 0x2, 0x0, 0x2}, {0xc4, 0x2, 0x8, 0xfffe, 0x1ff, 0x4}, 0x3, 0x1, 0x3}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xae, 0x10, 0x7fffffff, 0x2, 0x7, 0x6, 0x80, 0x800, 0x6e, 0xffffa866, 0x8c, 0xcec8, 0x8, 0x4, 0xf, 0xf, 0x7ff, 0x3, 0x7, 0x9, 0x7, 0xc8, 0x8, 0x1, 0x33, 0x4, 0xb, 0x4, 0x4f1, 0xf, 0x3, 0x5, 0x4, 0x4, 0x2, 0x101, 0xfffffffb, 0xe, 0xc8d5, 0x1e, 0x6b00, 0x8, 0xb, 0xde, 0x0, 0xc, 0x8001, 0x9, 0xb88, 0x9, 0x6, 0x8, 0x669c, 0x400, 0xc2, 0x0, 0xfffffff9, 0x8, 0x0, 0x71, 0x6, 0x80000000, 0xfffffff0, 0x9, 0x54, 0x69f, 0x7, 0x72, 0x9, 0x4, 0x100, 0x101, 0x1, 0x10001, 0x7, 0x100, 0x70c, 0x43, 0x7fff, 0x0, 0x9, 0x3, 0x6, 0x1, 0x400, 0x6, 0x9, 0x26, 0x2dd, 0xffc000, 0xffffff7f, 0x5, 0x3, 0x1, 0x0, 0x7, 0x401, 0xb0, 0x7, 0x6, 0x5, 0x4, 0x1, 0x2, 0x10, 0x3, 0xa, 0x8, 0x8f1, 0x10001, 0xfffffffc, 0x49, 0x81, 0x7ff, 0x100, 0x52, 0x0, 0xee480, 0x3, 0x7fff, 0x0, 0x2, 0x1, 0x8, 0x714e507, 0xfffffff7, 0x3, 0x4, 0x3, 0x8, 0x8, 0x9, 0xfff, 0x3, 0x3, 0x92, 0x2, 0x9, 0x4, 0x10001, 0x2, 0x4, 0x2, 0x8000, 0x7, 0x95, 0x3, 0x1, 0xb32d, 0x1, 0x80000001, 0x9, 0xffffffff, 0xb, 0x1, 0x40, 0x6, 0x8001, 0xfff, 0x2, 0x9, 0xffffc277, 0x0, 0x2, 0x81, 0xffff71cf, 0x80000000, 0x280000, 0x2, 0x9b, 0x3, 0x3, 0xfffffff8, 0xfffff659, 0x0, 0x1, 0x9, 0x65, 0x1, 0x3, 0x7, 0x0, 0x101, 0x8, 0x8, 0x6, 0x4, 0x599, 0x5, 0x0, 0x3, 0x59, 0x9, 0x1, 0x2, 0xa, 0x9, 0xfffffff2, 0x6, 0x401, 0x4, 0x8, 0x1, 0x8, 0x9, 0x1ff, 0x9, 0xd50b, 0x4, 0x3, 0xffffff09, 0x10, 0xffffffff, 0x7fffffff, 0xd, 0x6, 0x9b0, 0x5, 0x3, 0x91, 0x81, 0x7fffffff, 0x2, 0xf92, 0x1, 0x261, 0x73b, 0x8d68, 0x3, 0x8000, 0x42c9, 0x8, 0x7, 0xc00000, 0x5e, 0x7b8c, 0x3, 0xac0d, 0x7, 0xfffff001, 0x5, 0xfffffff7, 0x7, 0x7ff, 0x3, 0x1, 0xbb3, 0x5, 0x401, 0x80000000, 0x0, 0x0, 0x10000, 0x9, 0x101]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffff40}]]}, {0x83, 0x6, "a26a388a70c509febee1f439a1514da49e42113d275b4e1ae4914c4607e6aa320a76bdfff8d6f52663fd3293b8c24d8f2b9d5006106240dc8b591cb1148b17373d78e7544505b5c624f933a589f5f5da7aa7854f7ccd56ebd687a43b12c4e6815bd76f371a83d1203cacb05ddac7c0f9d397461316e0cdf88bff014df6f566"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xcc, 0x8, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff87f, 0x7, 0x0, 0x9, 0x7}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0x9, 0x4}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x7, 0x9, 0x5}, 0x36}}]}, {0x4b, 0x6, "0d91a08b6e6e5d660f5c5432faaa95356f4de386bcde2d65e00a1d8965a0415f985b36476573d4f3a65fdd2c4ee893ccb2ff8f997965441632f90b30531a89f0e790c77641caf7"}, {0xc}, {0xc}}}, @m_skbmod={0x12c, 0x9, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x3, 0x10000000, 0xa, 0x7fffffff}, 0x9}}]}, {0xc7, 0x6, "265b5c2dd89c97e770bad3198193205201808f8630c83239d1864b67421cb124a1b34cd4cc16ab6e4067da693dfe2d5389eb2ad73a7f2aae0c8eb21e41225229d0c015ca4ea6b99356444a3cce7e5c91a8f2b96b4804f5fd6970b6a0f695080ba432d3d9a8b67516d00086f1208c28b7fee9bd640b6b11095d38331d58fc4d696f80ef7e42edab4ca20e646c885e8cdcdc33fe6a02be1f9a7416ef234206d27e9132a2fad104d60a1f30b8ec248cbbdb3d8c2e0a877ef153ed2183979b3348d1d4d3c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x124, 0x8, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x87b5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0xfffffffe, 0x1, 0x7, 0x3}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xbe}]}, {0xbd, 0x6, "117e22b95c630c60a03daad54d0619312c0a661cd2071a5f3fe91c86cbbbde27d6a76e93c1c5089d47003b5d3fa34b4c3d309c8010fa6fd651dcf11970ecca6f089d7c6ff1eff2ba4187731516a96bb960e40f5c97fa3854f637cc2abb0f4883a0c38db776604aadde29365dd837985f5d6388b6c17084cf28f1ef1d3bd3d4c96cdd179d78e5e500af42547d413168b81fb8597e47bac7bffb976923b29505e2aee06763413362c5333aa6d6e74dc7b0df31610324c66e84f8"}, {0xc}, {0xc}}}, @m_mirred={0x110, 0xc, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x8, 0x8, 0x8, 0xff}, 0x6, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x400, 0x1, 0x7ff, 0x3}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x0, 0x10000000, 0x1, 0xac2d}, 0x5, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x2, 0x7, 0x2}, 0x4, r5}}]}, {0x64, 0x6, "ac7a8f9ad8380f379c6bf30669ce6004f1813f72e116ad4a692161ced7dc225ee9ddbacb59e2812c3307fad18db5b0b5c444e79f4f0e7c6e3abdd7a8da26fc55603dc3e7024a9d582c5b615c08df585e83f37cd069f058838e0520b866cafd59"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x283c, 0x1, [@m_nat={0x190, 0x0, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4be, 0x3, 0x6, 0x7, 0xc51f}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x797f, 0x3, 0x70, 0x10}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x40, 0x3, 0x513, 0x4}, @private=0xa010102, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x2, 0x0, 0x1ff, 0x5}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x4, 0x1, 0x5}, @private=0xa010101, @rand_addr=0x64010102, 0x0, 0x1}}]}, {0x9f, 0x6, "214d124491922b909db585f41b8830f85036e96ae4d44af0038e517d9134bd55fdf9f0a38ec5be61c4430cdf476a2827048b14f114c8a8bb1989e9698a59344ad6cc3622047c4f4c283170d3ece6f4dcd4b6a40202859126887f1f4beb53a7cae17c52e22b6367e6dec7844ae49b9f2c391cd66dfb982b2d0b74984909948c4a0577f0dff13dc62dc5e5e7884faff98d23716031e02a22c1706ca6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_nat={0x178, 0x1, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xa99, 0x8, 0x5, 0x7}, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1, 0x1, 0x0, 0x7ff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x6, 0x2, 0x6, 0x10}, @broadcast, @remote}}]}, {0xd8, 0x6, "f1e1032b4ab8ccf69a2bc89bbf862b29abbe7a06853752114e0af37625cd914ffa2244b6486a69db07204aecbbeb489098abb2b60384cbed3681ec661c837a2a69a103ee0b8acef1ad9608558bba1719531e5bc516e437ced38635d311b146e422da0e47c87f3205135a6eb6b1ea27b65c94cfa35c1db53eb2bd34f47edb6e283bfb81bfd72bdaeb2c8a42643bc5149e7f1991558b49353d3fd58f377b26140369b7e7461c81a51206737e96a8356288e98b5ad091c0156d27d4120e40f68280501a4895c90377cf3159ccc1d2d546348791044b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x108c, 0x13, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff8, 0x8, 0x0, 0x6, 0x9}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="d91ee58aee76"}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xfff6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xfffffffc, 0x0, 0x1, 0x4}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x204, 0x1c, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xf, 0x10000000, 0x0, 0x6}, @dev={0xac, 0x14, 0x14, 0x3e}, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x81, 0x1, 0x9, 0x9}, @local, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x4, 0xd972, 0x800}, @multicast2, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x9e, 0x2, 0x4, 0xf96}, @local, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x80, 0x10000000, 0x7, 0xf9}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x40, 0x8, 0x2, 0xc}, @remote, @loopback}}]}, {0xe9, 0x6, "efcf7333d449741efdedb6f0f68f7d80947244faab13a267b7598e6edaebfe446f5264091dd552a14c1126517a499f1d68bca9e22406340642a0287e3f216c0b5f0ddaa8da5b2342bf9ac525d5e2388abb68b9367d45b456da078f9aa2249be7851221969c04ebef733df73ee7c6b4517764d97cef55318391838e8bd5143db67f6b77cd9cb3fb5dd6d98168f40652bd0a2f30ea7c93fdbccd7860f1ce56b707729e1cffae0deff0eca5b9a2a21ec01d4bed926b802357810fdf2ab5311f4ad0e3eeef68a2ed80311045704bef4091135c6a2dfff8e94b92bfd1494408c9229dd784f57d1a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x10a0, 0x11, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "a68ebab12844c0179fac1a9e209323bc"}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "000d11a94c491f20dc178c5b847726d0"}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xc0, 0x6, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x4, 0x5, 0x2, 0x3}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x75d, 0xb, 0x20000001, 0x2, 0xfffffff0}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7e7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffffc}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9b6}]}, {0x49, 0x6, "10679aeb05441ad69be1bbe5b90aed68bbefa3fa5df916a50a3e76631db1e65e08ee881485d6b39fd796daf2e1ff4c5169b7e295870856599dfccf2cd61e0d61789c1586fc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x140, 0xe, 0x0, 0x0, {{0x8}, {0xdc, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xdf4b, 0x5, 0x200, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x200}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x800, 0x4, 0x100, 0x200}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="61f5c718d2f0"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8000, 0x2, 0x7, 0x101, 0x8c1}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x860, 0x3, 0x20000000, 0x5, 0xb05}}}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x3e, 0x6, "45d25276204b00a56af4737e4b430e3bd4c94bf5f148159aea6315970831e7f810323743a88565a3eef9fe5cf268bc2b8e03ed8d6ec61edb3559"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x4}]}, 0x35c8}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 1.275247553s ago: executing program 5 (id=5850): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x20000045) 1.186685333s ago: executing program 2 (id=5851): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180085ff00000010000000000100203d35aeba137361e692c8df04ad29ed4bafba2bf6d453f159f0960f0fd9d33417a3f5e28344740bedf4c6481df436da3f8383638b57957c93847dd7b6c20aa59e397448"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0x8, r0, 0xffff5b8b}, 0xc) 1.023314451s ago: executing program 5 (id=5852): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x800, 0x9, 0x3}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 985.93485ms ago: executing program 2 (id=5853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) 870.761652ms ago: executing program 1 (id=5854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close(0x3) (async) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1402, 0xb10, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 869.578309ms ago: executing program 4 (id=5855): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x35}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20014050}, 0x85) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="3000000000000000840000000100000059766fe282f0381b5cc7a195eb5ade0d64bc2d9ad30419f43a000004020000000000001ecaf2d4d2a743576e90cdc6a6c001001e5af6302fe486c75c327193e02b33263175"], 0x30}}], 0x2, 0x0) 755.777874ms ago: executing program 3 (id=5856): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0800080007030300020014"], 0xf86) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x1, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20004004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0800080007030300020014"], 0xf86) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x1, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20004004) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) (async) 746.610836ms ago: executing program 1 (id=5857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xe, &(0x7f00000005c0)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000640)='GPL\x00', 0x8, 0xcc, &(0x7f0000000680)=""/204, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x1, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000840)=[{0x4, 0x2, 0xb, 0x3}, {0x0, 0x3, 0x1, 0xb}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x55, 0xbd, &(0x7f0000000940)="87bc9a6e5d765989d1c07143a137e3d280c6e05fb2c53e16d342f92478d6ebd0ede7dd7b9e006fda294cb395e63be433738289b6ff51d85b538253f471725891e3a8cca1241219ea7046c119f724533a85b8dd5aed", &(0x7f0000000a00)=""/189, 0xd, 0x0, 0xbd, 0x3c, &(0x7f0000000ac0)="bf97e5d5c97f71991e37182205a9cb93b11dc35973ae64e9898c462663cac56185c67e400bb92566681f7abdc431bfbb11ddace9fe0801579516b4c2f96e7467a1f76c6980336129de349feb6c32dc0e4ae40aa1d840d3b1ae8f5ee68a7b1cae02af62d4e5db3248707442f4729b579d43fc251b3875c954a5487285aa254175a0d062ea720d8b6b7ef374bc2236f5c6fb05d7d94ca97822a5d33f150796cea7b080397adf3528bac9e6b0c215f3ab276fbd77a59ce2702597a3aa206d", &(0x7f0000000b80)="cf0f3412e3237dc4b831d9cfbf36e1ae04b1a6381fc92fbbe184e3e75cb0d7305cf70228bbb98310db3a4fba7d6cf959cfe72a7acf7f24749ad9c729", 0x4, 0x0, 0x1}, 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x38, 0x0, "56dbc1e8417fffc3afdcf40c8e13f3151851d4ac3870c5651ff29b7c46af34ae1f337223b9404b26f5de4e01d16c172a5291fff83e4d5a0f58905486fe5e3a89d3a901cddf60835a498bf31954b4f7e2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x9, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000400)=""/202, 0xca, 0x0, &(0x7f0000000500)=""/80, 0x50}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 703.289028ms ago: executing program 2 (id=5858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000005380), 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x208, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "cfeee22378ea02c9ad8430594c40af6242e9e9ffc341"}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "7968c6838437f9bebffc8db4bdf656ffb7919abaa9f2097c25fa"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x55}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf5f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20ac}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb2}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfcc0}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 685.640111ms ago: executing program 5 (id=5859): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r8, {0x1, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 666.51929ms ago: executing program 4 (id=5860): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) (async) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @broadcast, 'team_slave_0\x00'}}) (async) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @broadcast, 'team_slave_0\x00'}}) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0x9}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x64}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 496.020486ms ago: executing program 2 (id=5861): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @any, 0x0, 0x1}, 0xe) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000080)="32fb694742a3fe729bdca416d9d8b5e161e6ce840cdc6f0cbf9be4ea278be14c195b57dfed290c6bfff4aa5647fbdcb5e920f32edc99c3636c97d511b632cb4f48fead5de796df78b5b9bb1667638ea00ecafca7b33d5bc51fcd12b8505e752b6892acd70eaf534d3134fe6b8a763a164d02dc99dbde46a0c53b5d1e760755236c806853ee2fba3ed7a1544ccbd9519e4e0f14a63e250bc0c0e2a8a95ac590caba42bbf525b95013e9870803c466118076") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xff03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 483.274816ms ago: executing program 1 (id=5862): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r2, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x5}, 0x0) mmap(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1, 0x1010, r1, 0x117f000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048811}, 0xc800) 362.001965ms ago: executing program 1 (id=5863): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xfb\'%\xa0\x00\x00\x00,'}, 0x30) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) (async) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d4881, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x7, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"06d95d637865476892b5d842c6cb4c98", 0x0, 0x0, {0x0, 0x4}, {0x2, 0x1000}, 0x6, [0x597, 0x0, 0x7fffffff, 0x9, 0xd5, 0x4, 0x4, 0xa, 0x9, 0x0, 0xeac, 0x2, 0x6, 0x8, 0x8000, 0x81]}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f00000003c0)={0x7, 0x10, '\x00', 0x0, &(0x7f0000000380)=[0x0, 0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f00000003c0)={0x7, 0x10, '\x00', 0x0, &(0x7f0000000380)=[0x0, 0x0]}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000500)={{r1}, r4, 0x8, @inherit={0x58, &(0x7f0000000300)={0x0, 0x2, 0x7f, 0xde65, {0x2, 0x8, 0x8001, 0xb45, 0xffffffffffffd7fd}, [0xb8b, 0x3]}}, @name="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"}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0xfffffff9, @bearer=@l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004001) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}], 0x2c) 303.412973ms ago: executing program 4 (id=5864): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x0, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x7d, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x9, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 243.768552ms ago: executing program 3 (id=5865): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x54, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x54}}, 0x0) 178.533812ms ago: executing program 1 (id=5866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', r1, 0x40, 0x8041, 0xd89a, 0x80000001, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x65, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ssrr={0x89, 0xb, 0x40, [@broadcast, @remote]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', r1, 0x40, 0x8041, 0xd89a, 0x80000001, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x65, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ssrr={0x89, 0xb, 0x40, [@broadcast, @remote]}]}}}}}) (async) 113.633905ms ago: executing program 4 (id=5867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000001140)={0x6}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x7, 0xa, 0x4d, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x700, 0x20, 0x4, 0x9}}) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, r4}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x20000000) 105.510969ms ago: executing program 5 (id=5868): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) accept$netrom(r2, &(0x7f0000000140)={{0x3, @bcast}, [@remote, @rose, @null, @bcast, @netrom, @remote, @null, @bcast]}, &(0x7f00000001c0)=0x48) 10.257051ms ago: executing program 1 (id=5869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@private}}, 0xe8) getsockopt$inet6_tcp_int(r0, 0x6, 0x25, 0x0, &(0x7f0000000080)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x3) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x3) (async) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) listen(r4, 0x80) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0x3) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) accept$netrom(r4, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301410000000000950000004d000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0xff}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x1b, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x3}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) 0s ago: executing program 4 (id=5870): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000780)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x4, [@bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): ring): Released all slaves [ 412.701189][T18028] tipc: Started in network mode [ 412.719708][T18028] tipc: Node identity e2203f2e3c42, cluster identity 4711 [ 412.727968][ T5833] Bluetooth: hci2: command tx timeout [ 412.735230][T18028] tipc: Enabled bearer , priority 0 [ 412.747790][T17792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.755595][T17792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.816542][T17792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.862273][T18021] syzkaller0: entered promiscuous mode [ 412.878948][T18021] syzkaller0: entered allmulticast mode [ 412.910485][T18030] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 412.953235][T18028] tipc: Resetting bearer [ 412.982475][T18032] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 413.003870][T17792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.039580][T17792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.084277][T17792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.109974][T18018] tipc: Resetting bearer [ 413.131721][T18018] tipc: Disabling bearer [ 413.192711][T18038] tipc: Started in network mode [ 413.205442][T18038] tipc: Node identity bef4cb25b756, cluster identity 4711 [ 413.212938][T18038] tipc: Enabled bearer , priority 0 [ 413.336478][T18041] syzkaller0: entered promiscuous mode [ 413.342141][T18041] syzkaller0: entered allmulticast mode [ 413.398996][T18038] tipc: Resetting bearer [ 413.533149][T18056] openvswitch: netlink: IP tunnel dst address not specified [ 413.658739][T17792] hsr_slave_0: entered promiscuous mode [ 413.680005][T17792] hsr_slave_1: entered promiscuous mode [ 413.703719][T18037] tipc: Resetting bearer [ 413.752709][T18037] tipc: Disabling bearer [ 414.296226][ T24] IPVS: starting estimator thread 0... [ 414.424329][T18082] IPVS: using max 25 ests per chain, 60000 per kthread [ 414.642253][T18099] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3369'. [ 414.763369][T18097] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3369'. [ 414.778320][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3373'. [ 414.871446][ T37] IPVS: stop unused estimator thread 0... [ 414.933607][T18108] netlink: 'syz.4.3375': attribute type 1 has an invalid length. [ 414.980627][T18108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3375'. [ 415.050118][T18115] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.086359][T18118] netlink: 'syz.4.3375': attribute type 1 has an invalid length. [ 415.101359][T18118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3375'. [ 415.143392][T18123] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 415.309249][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3380'. [ 415.359471][T18134] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 415.769321][T17792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 415.791914][T17792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 415.835488][T17792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 415.862066][T17792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 415.972598][T18168] lo: Caught tx_queue_len zero misconfig [ 415.991209][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3391'. [ 416.003272][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3391'. [ 416.043825][T18169] netlink: 'syz.2.3391': attribute type 15 has an invalid length. [ 416.091858][T17792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.125135][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3391'. [ 416.138674][T15683] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 416.155349][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3391'. [ 416.175836][T18169] netlink: 'syz.2.3391': attribute type 15 has an invalid length. [ 416.184036][T15683] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 416.193349][T15683] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 416.216420][T15683] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 416.258621][T17792] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.297289][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.304542][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.360232][T18182] syz_tun: entered promiscuous mode [ 416.408811][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.416034][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.580976][T17792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.600213][T18195] netlink: 'syz.2.3400': attribute type 7 has an invalid length. [ 416.897988][T17792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.968889][T17792] veth0_vlan: entered promiscuous mode [ 416.987486][T18209] bridge0: port 3(syz_tun) entered blocking state [ 416.996534][T18209] bridge0: port 3(syz_tun) entered disabled state [ 417.003195][T18209] syz_tun: entered allmulticast mode [ 417.011174][T18209] syz_tun: entered promiscuous mode [ 417.017306][T18209] bridge0: port 3(syz_tun) entered blocking state [ 417.023851][T18209] bridge0: port 3(syz_tun) entered forwarding state [ 417.033560][T17792] veth1_vlan: entered promiscuous mode [ 417.042052][T18212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.107920][T17792] veth0_macvtap: entered promiscuous mode [ 417.132236][T17792] veth1_macvtap: entered promiscuous mode [ 417.162272][T17792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.194342][T17792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.217090][T11851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.226977][T11851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.237301][T11851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.252326][T11851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.426718][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.455928][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.558698][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.580762][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.603291][T18229] openvswitch: netlink: IP tunnel dst address not specified [ 417.625522][T18232] openvswitch: netlink: IP tunnel dst address not specified [ 418.094132][T18260] netlink: 'syz.1.3420': attribute type 11 has an invalid length. [ 418.252514][T18272] macvtap0: Device is already in use. [ 418.263899][T18272] macvtap0: Device is already in use. [ 418.316099][T18277] sctp: [Deprecated]: syz.1.3424 (pid 18277) Use of int in max_burst socket option. [ 418.316099][T18277] Use struct sctp_assoc_value instead [ 418.606350][T18293] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 418.655212][T18293] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 418.716556][ T6008] IPVS: starting estimator thread 0... [ 418.815107][T18307] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 418.824768][T18301] IPVS: using max 24 ests per chain, 57600 per kthread [ 418.848274][T18307] bond2: (slave vcan0): Error -95 calling set_mac_address [ 419.830654][T18360] __nla_validate_parse: 11 callbacks suppressed [ 419.830676][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3447'. [ 419.866232][T18361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.044678][T18371] netlink: 'syz.1.3450': attribute type 8 has an invalid length. [ 420.289437][T18371] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 420.318255][T18371] bridge1: entered allmulticast mode [ 420.522071][T18390] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3457'. [ 420.694095][T18401] geneve2: entered promiscuous mode [ 420.920683][T18424] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3464'. [ 420.931983][T18424] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3464'. [ 420.962116][T18424] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3464'. [ 421.199079][T18443] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3471'. [ 421.216480][T18433] veth3: entered allmulticast mode [ 421.306602][T18449] netlink: 'syz.3.3474': attribute type 1 has an invalid length. [ 421.429815][T18455] netlink: 'syz.4.3475': attribute type 24 has an invalid length. [ 421.744631][T18479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3480'. [ 421.960573][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 422.035724][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3480'. [ 422.050340][T18498] netlink: 'syz.4.3487': attribute type 6 has an invalid length. [ 422.154538][T18501] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3489'. [ 422.381527][T18504] macvtap1: entered promiscuous mode [ 422.388947][T18504] vlan0: entered promiscuous mode [ 422.405923][T18504] macvtap1: entered allmulticast mode [ 422.411378][T18504] vlan0: entered allmulticast mode [ 422.446112][T18504] veth0_vlan: entered allmulticast mode [ 422.473606][T18524] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 422.617472][T18534] unsupported nlmsg_type 40 [ 423.005223][T18557] syzkaller0: entered promiscuous mode [ 423.032008][T18557] syzkaller0: entered allmulticast mode [ 423.065687][T18560] netlink: 'syz.2.3504': attribute type 11 has an invalid length. [ 423.087757][T18560] netlink: 'syz.2.3504': attribute type 1 has an invalid length. [ 423.129392][T18563] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:21 [ 423.286498][T18571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.305128][T18571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.316946][T18571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.327888][T18571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.167335][T18630] sctp: [Deprecated]: syz.1.3522 (pid 18630) Use of int in max_burst socket option. [ 424.167335][T18630] Use struct sctp_assoc_value instead [ 424.200921][T18636] 8021q: VLANs not supported on ip6_vti0 [ 424.212402][T18636] netlink: 'syz.2.3524': attribute type 1 has an invalid length. [ 424.283505][T18636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.415325][T18643] bond1: (slave veth2): Enslaving as an active interface with a down link [ 424.439344][T18636] vlan3: entered allmulticast mode [ 424.444831][T18636] veth1: entered allmulticast mode [ 424.454208][T18636] veth1: entered promiscuous mode [ 424.460975][T18636] veth1: left promiscuous mode [ 424.472152][T18636] bond1: (slave vlan3): Enslaving as an active interface with a down link [ 424.578655][T18598] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 424.666004][T18661] openvswitch: netlink: Flow actions attr not present in new flow. [ 424.737510][T18661] team_slave_0: entered promiscuous mode [ 424.743603][T18661] team_slave_1: entered promiscuous mode [ 424.776138][T18661] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 424.783864][T18661] team0: Device macvtap1 is already an upper device of the team interface [ 424.868020][T18681] __nla_validate_parse: 13 callbacks suppressed [ 424.868043][T18681] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3535'. [ 424.888516][T18661] team_slave_0: left promiscuous mode [ 424.894281][T18661] team_slave_1: left promiscuous mode [ 424.905089][T18681] openvswitch: netlink: Missing key (keys=40, expected=100) [ 424.941451][T18681] delete_channel: no stack [ 425.258500][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'. [ 425.444066][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3544'. [ 425.554152][T18723] openvswitch: netlink: Message has 536 unknown bytes. [ 425.575863][T18723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.767812][ T5833] Bluetooth: hci0: command 0x080f tx timeout [ 426.048394][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3559'. [ 426.110609][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3559'. [ 426.331237][T18767] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 426.496320][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3568'. [ 426.596441][T18782] netlink: 'syz.4.3570': attribute type 21 has an invalid length. [ 426.625644][T18782] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3570'. [ 426.645186][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3569'. [ 426.703198][T18791] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3573'. [ 426.735109][T18793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3569'. [ 426.819697][T18798] netlink: 'syz.0.3571': attribute type 1 has an invalid length. [ 426.836983][T18798] netlink: 'syz.0.3571': attribute type 1 has an invalid length. [ 426.849165][T18798] netlink: 'syz.0.3571': attribute type 2 has an invalid length. [ 427.038459][T18807] syzkaller0: entered promiscuous mode [ 427.046340][T18807] syzkaller0: entered allmulticast mode [ 427.080206][T18810] netlink: 'syz.3.3579': attribute type 3 has an invalid length. [ 427.247326][T18812] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.262724][T18819] netlink: 'syz.4.3581': attribute type 1 has an invalid length. [ 427.352837][T18812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.368430][T18812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.457558][T18812] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 427.493767][T18812] vlan2: left allmulticast mode [ 427.502713][T18812] mac80211_hwsim hwsim42 wlan0: left allmulticast mode [ 427.521786][T18812] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode [ 427.538137][T18812] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode [ 427.548877][T18812] ip6gre1: left promiscuous mode [ 427.555127][T18812] ip6gre1: left allmulticast mode [ 427.571450][T18812] vlan3: left allmulticast mode [ 427.576975][T18812] veth1: left allmulticast mode [ 427.633898][ T37] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 427.644358][ T37] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.662463][ T37] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 427.687071][ T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.712715][ T37] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 427.747592][ T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.771084][ T37] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 427.790124][ T37] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.117216][T18892] bond0: Caught tx_queue_len zero misconfig [ 429.461588][T18906] tipc: Started in network mode [ 429.474342][T18906] tipc: Node identity 080211000001, cluster identity 4711 [ 429.492434][T18906] tipc: Enabled bearer , priority 0 [ 429.529325][T18906] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 429.540888][T18906] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 429.754703][T18922] netlink: 'syz.1.3607': attribute type 27 has an invalid length. [ 429.785514][T18922] netlink: 'syz.1.3607': attribute type 4 has an invalid length. [ 429.857723][T18925] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 430.033421][T18938] netlink: 'syz.0.3614': attribute type 4 has an invalid length. [ 430.292149][T18950] __nla_validate_parse: 11 callbacks suppressed [ 430.292169][T18950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3615'. [ 430.401584][T18958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3618'. [ 430.424001][T18958] openvswitch: netlink: Flow actions attr not present in new flow. [ 430.439351][ T24] IPVS: starting estimator thread 0... [ 430.534460][T18963] IPVS: using max 25 ests per chain, 60000 per kthread [ 430.608892][ T24] tipc: Node number set to 134418688 [ 430.609095][T18970] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3622'. [ 430.753257][T18977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3621'. [ 431.068221][T18993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3626'. [ 431.192294][T19004] xt_hashlimit: overflow, rate too high: 0 [ 431.337357][T19011] netlink: 'syz.2.3634': attribute type 1 has an invalid length. [ 431.370931][T19011] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3634'. [ 431.759336][T19043] netlink: 'syz.0.3639': attribute type 1 has an invalid length. [ 431.793388][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3639'. [ 431.847995][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3639'. [ 432.017912][T19053] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 432.048579][T19053] bond4 (unregistering): Released all slaves [ 432.195953][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3645'. [ 432.213758][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3645'. [ 432.236061][T19067] syzkaller1: entered promiscuous mode [ 432.241619][T19067] syzkaller1: entered allmulticast mode [ 432.746172][T19111] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 432.837610][T19115] netlink: 'syz.3.3659': attribute type 2 has an invalid length. [ 433.046336][T19126] netlink: 'syz.0.3664': attribute type 2 has an invalid length. [ 433.792149][T19165] netlink: 'syz.1.3678': attribute type 3 has an invalid length. [ 433.800603][T19165] netlink: 'syz.1.3678': attribute type 1 has an invalid length. [ 434.131802][T19187] xt_hashlimit: size too large, truncated to 1048576 [ 434.163833][T19185] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode [ 434.234957][T19185] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode [ 434.746007][T19212] bond_slave_1: entered promiscuous mode [ 434.761830][T19212] bond_slave_1: entered allmulticast mode [ 434.825756][T19216] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 434.913990][T19222] xt_TCPMSS: Only works on TCP SYN packets [ 435.324398][T19247] __nla_validate_parse: 14 callbacks suppressed [ 435.324420][T19247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3702'. [ 435.728437][T19272] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3707'. [ 435.898577][T19278] veth0: entered promiscuous mode [ 435.960598][T19280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3711'. [ 435.976495][T19281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.345367][T19286] team0 (unregistering): Port device team_slave_0 removed [ 436.358850][T19286] team0 (unregistering): Port device team_slave_1 removed [ 436.515301][T13340] IPVS: starting estimator thread 0... [ 436.544872][T19297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.614377][T19296] IPVS: using max 26 ests per chain, 62400 per kthread [ 436.734814][T19310] netlink: 'syz.3.3722': attribute type 10 has an invalid length. [ 436.742752][T19310] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3722'. [ 436.757601][T19301] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3719'. [ 436.777405][T19301] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3719'. [ 436.787568][T19301] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3719'. [ 436.797216][T19310] team0: entered promiscuous mode [ 436.811114][T19310] team_slave_0: entered promiscuous mode [ 436.820103][T19310] team_slave_1: entered promiscuous mode [ 436.835107][T19310] bridge0: port 3(team0) entered blocking state [ 436.854484][T19310] bridge0: port 3(team0) entered disabled state [ 436.868800][T19310] team0: entered allmulticast mode [ 436.874066][T19310] team_slave_0: entered allmulticast mode [ 436.883466][T19310] team_slave_1: entered allmulticast mode [ 436.894584][T19310] bridge0: port 3(team0) entered blocking state [ 436.901112][T19310] bridge0: port 3(team0) entered forwarding state [ 436.916710][T19313] pim6reg: entered allmulticast mode [ 437.633158][T19348] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 437.646709][T19345] netlink: 'syz.4.3732': attribute type 1 has an invalid length. [ 437.674927][T19348] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 437.727746][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3735'. [ 437.750158][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3732'. [ 437.784687][T19345] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3732'. [ 459.398504][T19385] __nla_validate_parse: 1 callbacks suppressed [ 459.398527][T19385] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3744'. [ 459.459836][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'. [ 459.618339][T19398] delete_channel: no stack [ 459.649150][T19397] ipt_REJECT: TCP_RESET invalid for non-tcp [ 459.666192][T19400] xt_policy: too many policy elements [ 459.753472][T19403] netlink: 'syz.4.3751': attribute type 1 has an invalid length. [ 460.124562][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 460.185658][T19425] syzkaller0: entered promiscuous mode [ 460.191205][T19425] syzkaller0: entered allmulticast mode [ 460.340702][T19432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3760'. [ 460.367667][T19432] openvswitch: netlink: Flow key attr not present in new flow. [ 460.914219][T19460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'. [ 462.013692][T19519] syzkaller0: entered promiscuous mode [ 462.030445][T19519] syzkaller0: entered allmulticast mode [ 462.321482][T19542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.855890][T19569] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3800'. [ 463.084472][T19583] netlink: 'syz.2.3805': attribute type 3 has an invalid length. [ 463.406770][T19609] netlink: 'syz.3.3812': attribute type 11 has an invalid length. [ 463.424601][T19609] netlink: 'syz.3.3812': attribute type 4 has an invalid length. [ 463.443288][T19609] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.3812'. [ 463.779976][T19636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3820'. [ 464.159683][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3826'. [ 464.256744][T19657] syzkaller1: entered promiscuous mode [ 464.273611][T19657] syzkaller1: entered allmulticast mode [ 464.291872][T19660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3828'. [ 464.532570][ T9587] IPVS: starting estimator thread 0... [ 464.573724][T19669] netlink: 'syz.3.3832': attribute type 1 has an invalid length. [ 464.583543][T19673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3833'. [ 464.599613][T19673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3833'. [ 464.599778][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.635067][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.639564][T19672] IPVS: using max 26 ests per chain, 62400 per kthread [ 464.651131][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.651177][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.796020][T19678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.804031][T19681] netlink: 'syz.0.3837': attribute type 1 has an invalid length. [ 464.961056][T19684] bond4: (slave ip6gretap1): making interface the new active one [ 464.970414][T19684] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 464.979231][T19684] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 464.987415][T19684] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 465.187495][T19701] gre0: entered promiscuous mode [ 465.192960][T19701] gre0: entered allmulticast mode [ 465.203045][T19697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3842'. [ 465.327454][T19713] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3844'. [ 465.337053][T19713] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3844'. [ 465.449668][T19721] nbd: nbd3 already in use [ 465.461915][T19721] block nbd3: NBD_DISCONNECT [ 465.468247][T19721] block nbd3: Send disconnect failed -32 [ 465.474386][T19721] block nbd3: shutting down sockets [ 465.511377][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3849'. [ 465.746072][T19740] netlink: 'syz.0.3854': attribute type 2 has an invalid length. [ 466.190528][T19760] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3859'. [ 466.541384][T19791] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.3865'. [ 466.720701][T19801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3869'. [ 466.743898][T19805] netlink: 'syz.3.3871': attribute type 1 has an invalid length. [ 466.758658][T19805] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3871'. [ 466.773034][T19803] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.793764][T19803] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.990621][T19827] xt_hashlimit: max too large, truncated to 1048576 [ 467.204496][T19837] netlink: 'syz.0.3879': attribute type 1 has an invalid length. [ 468.467767][T19912] x_tables: duplicate underflow at hook 1 [ 469.001599][T19935] x_tables: duplicate underflow at hook 1 [ 469.555880][T19965] team0: Caught tx_queue_len zero misconfig [ 469.619313][T19967] xt_hashlimit: size too large, truncated to 1048576 [ 470.510828][T20002] netlink: 'syz.2.3923': attribute type 4 has an invalid length. [ 470.642596][T20018] __nla_validate_parse: 7 callbacks suppressed [ 470.642611][T20018] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3927'. [ 470.741282][T20018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3927'. [ 471.198773][T20025] lo: entered promiscuous mode [ 471.211899][T20025] tunl0: entered promiscuous mode [ 471.238251][T20025] gre0: entered promiscuous mode [ 471.286070][T20025] gretap0: entered promiscuous mode [ 471.325037][T20025] erspan0: entered promiscuous mode [ 471.341732][T20025] ip_vti0: entered promiscuous mode [ 471.457480][T20038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'. [ 471.466918][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'. [ 471.476155][T20036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3932'. [ 471.486110][T20038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3932'. [ 471.561572][T20042] netlink: 'syz.1.3933': attribute type 1 has an invalid length. [ 471.724522][T20048] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3934'. [ 471.999753][T20044] ip6tnl0: Caught tx_queue_len zero misconfig [ 472.106932][T20062] syzkaller0: entered promiscuous mode [ 472.112792][T20062] syzkaller0: entered allmulticast mode [ 472.123750][T20059] netlink: 'syz.3.3937': attribute type 1 has an invalid length. [ 472.190396][T20059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.270220][T20072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3941'. [ 472.282428][T20061] bond1: (slave geneve2): making interface the new active one [ 472.291460][T20061] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 472.504873][T20077] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3943'. [ 472.521861][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3944'. [ 472.947575][T20103] openvswitch: netlink: IP tunnel dst address not specified [ 472.955643][T20099] openvswitch: netlink: IP tunnel dst address not specified [ 473.022242][T20102] team1: entered promiscuous mode [ 473.034576][T20102] team1: entered allmulticast mode [ 473.367848][T20125] netlink: 'syz.4.3957': attribute type 10 has an invalid length. [ 473.395937][T20125] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.408767][T20125] bridge_slave_1: left allmulticast mode [ 473.417364][T20125] bridge_slave_1: left promiscuous mode [ 473.423616][T20125] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.440652][T20125] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 473.492830][T20130] bond0: entered promiscuous mode [ 473.498353][T20130] bond_slave_0: entered promiscuous mode [ 473.508250][T20130] bond_slave_1: entered promiscuous mode [ 473.517171][T20130] batadv0: entered promiscuous mode [ 473.526574][T20130] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 473.754820][T20153] netlink: 'syz.1.3964': attribute type 64 has an invalid length. [ 473.769699][T20153] netlink: 'syz.1.3964': attribute type 64 has an invalid length. [ 474.111809][T20172] netlink: 'syz.0.3970': attribute type 2 has an invalid length. [ 474.500216][T20189] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 474.583069][T20189] bond5: (slave lo): Enslaving as a backup interface with an up link [ 474.641831][T20189] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 475.153070][T20211] xt_hashlimit: size too large, truncated to 1048576 [ 475.521210][T20226] bond6 (unregistering): Released all slaves [ 475.700196][T20245] netlink: 'syz.4.3986': attribute type 4 has an invalid length. [ 476.085982][T20259] ip6gre1: entered promiscuous mode [ 476.103582][T20259] ip6gre1: entered allmulticast mode [ 476.147317][ T30] audit: type=1804 audit(1767055627.776:10): pid=20259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3989" name="/newroot/166/cgroup.controllers" dev="tmpfs" ino=866 res=1 errno=0 [ 476.183928][T20272] veth1_macvtap: entered allmulticast mode [ 476.210127][ T30] audit: type=1800 audit(1767055627.776:11): pid=20259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3989" name="cgroup.controllers" dev="tmpfs" ino=866 res=0 errno=0 [ 476.913833][T20316] __nla_validate_parse: 19 callbacks suppressed [ 476.913854][T20316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4006'. [ 477.158236][T20322] wg1: entered promiscuous mode [ 477.165486][T20322] wg1: entered allmulticast mode [ 477.205408][T20322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4007'. [ 477.404505][T20331] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 477.460813][T20345] netlink: 'syz.4.4014': attribute type 21 has an invalid length. [ 477.727049][T20356] netlink: 'syz.0.4015': attribute type 1 has an invalid length. [ 477.746721][T20356] nbd: error processing sock list [ 477.765967][T20356] block nbd3: shutting down sockets [ 477.801945][T20359] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4017'. [ 477.943880][T20371] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4021'. [ 477.978862][T20371] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.4021'. [ 477.997423][T20371] netlink: Conntrack attr has 4 unknown bytes [ 478.021639][T20378] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4021'. [ 478.214851][T20386] xt_hashlimit: size too large, truncated to 1048576 [ 478.386592][T20395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4029'. [ 478.419493][T20390] netlink: 'syz.2.4028': attribute type 1 has an invalid length. [ 478.645481][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 478.667530][T20409] tipc: Can't bind to reserved service type 2 [ 478.698788][T20411] netlink: 'syz.2.4034': attribute type 1 has an invalid length. [ 478.748471][T20411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.768567][T20391] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 478.791807][T20411] bond2: (slave geneve2): making interface the new active one [ 478.802602][T20411] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 478.839407][ T340] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 478.908257][ T340] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 478.924409][ T340] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 478.980001][ T340] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 479.187762][T20438] macvlan0: entered promiscuous mode [ 479.198886][T20438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4041'. [ 479.878714][T20453] 8021q: VLANs not supported on ip6tnl0 [ 479.904477][T20453] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4045'. [ 479.947782][T20457] ip6gre1: entered allmulticast mode [ 480.111185][T20467] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 480.135732][ T5992] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 480.181530][T20474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4052'. [ 480.336043][ T5992] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 480.486527][ T5833] Bluetooth: hci0: command 0x080f tx timeout [ 480.527491][T20492] batadv_slave_1: entered promiscuous mode [ 480.582127][T20494] º: renamed from veth1_vlan (while UP) [ 480.601978][T20490] batadv_slave_1: left promiscuous mode [ 481.217766][T20536] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 481.442582][T20553] syzkaller0: entered promiscuous mode [ 481.462132][T20553] syzkaller0: entered allmulticast mode [ 481.465374][T20555] netlink: 'syz.3.4076': attribute type 1 has an invalid length. [ 481.488923][T20555] netlink: 'syz.3.4076': attribute type 1 has an invalid length. [ 481.567267][T20557] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 481.584653][T20557] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 481.616506][T20557] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 481.938319][T20573] IPv6: NLM_F_REPLACE set, but no existing node found! [ 482.170213][T20583] netlink: 'syz.1.4085': attribute type 3 has an invalid length. [ 482.179465][T20583] __nla_validate_parse: 3 callbacks suppressed [ 482.179484][T20583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4085'. [ 482.205600][T20585] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4086'. [ 482.264721][T20587] tipc: Enabling of bearer rejected, failed to enable media [ 482.422021][T20596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.431351][T20596] sctp: [Deprecated]: syz.0.4091 (pid 20596) Use of int in maxseg socket option. [ 482.431351][T20596] Use struct sctp_assoc_value instead [ 482.516482][T20598] 0: reclassify loop, rule prio 0, protocol 800 [ 482.779530][T20608] x_tables: duplicate underflow at hook 1 [ 482.849438][T20614] tipc: Enabling of bearer rejected, failed to enable media [ 483.033513][T20626] syzkaller0: entered promiscuous mode [ 483.041461][T20626] syzkaller0: entered allmulticast mode [ 483.286749][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 483.460654][T20650] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 483.703276][T20658] tipc: Enabling of bearer rejected, failed to enable media [ 483.849786][T20658] syzkaller0: entered promiscuous mode [ 483.865634][T20658] syzkaller0: entered allmulticast mode [ 483.925772][T20669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4114'. [ 485.925568][T20704] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 486.111678][T20713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4121'. [ 486.235714][T20713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4121'. [ 486.928531][T20757] ip6gre2: entered promiscuous mode [ 486.987161][T20760] sctp: [Deprecated]: syz.4.4139 (pid 20760) Use of int in max_burst socket option. [ 486.987161][T20760] Use struct sctp_assoc_value instead [ 487.298574][T20772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4144'. [ 487.336258][T20772] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 487.336599][T20775] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4144'. [ 487.397707][T20781] xt_limit: Overflow, try lower: 604147548/4200216962 [ 487.431067][T20780] veth0: entered promiscuous mode [ 487.568590][T20780] veth0: left promiscuous mode [ 487.832706][T20796] macvtap1: entered promiscuous mode [ 487.850213][T20796] macvtap1: entered allmulticast mode [ 487.868144][T20796] º: entered allmulticast mode [ 487.889920][T20797] lo: entered allmulticast mode [ 487.902301][T20797] netlink: 'syz.1.4154': attribute type 33 has an invalid length. [ 487.925661][T20797] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4154'. [ 487.935273][T20796] netlink: 'syz.0.4153': attribute type 8 has an invalid length. [ 487.944085][T20805] tipc: Started in network mode [ 487.949450][T20805] tipc: Node identity 925db7723f3, cluster identity 4711 [ 487.975925][T20805] tipc: Enabled bearer , priority 0 [ 487.984929][T20801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4154'. [ 487.998543][T20807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4157'. [ 488.072924][T20808] syzkaller0: entered promiscuous mode [ 488.080685][T20808] syzkaller0: entered allmulticast mode [ 488.093356][T20807] tipc: Enabled bearer , priority 10 [ 488.103850][T20805] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 488.122989][T20807] netlink: 'syz.4.4157': attribute type 12 has an invalid length. [ 488.131182][T20807] netlink: 'syz.4.4157': attribute type 29 has an invalid length. [ 488.153589][T20807] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4157'. [ 488.169495][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4156'. [ 488.204958][T20807] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4157'. [ 488.227424][T20805] tipc: Resetting bearer [ 488.268274][T20804] tipc: Resetting bearer [ 488.330334][T20821] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4161'. [ 488.340631][T20804] tipc: Disabling bearer [ 488.405949][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 488.639243][T20842] netlink: 'syz.0.4165': attribute type 1 has an invalid length. [ 488.659175][T20842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.671389][T20840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4164'. [ 488.924967][T20840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.204682][ T24] tipc: Node number set to 161663781 [ 489.387186][T20889] netlink: 'syz.1.4175': attribute type 1 has an invalid length. [ 489.607728][T20899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.634788][T19777] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 489.646319][T20898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.680685][T20909] netlink: 'syz.1.4180': attribute type 4 has an invalid length. [ 489.965635][T20936] openvswitch: netlink: IP tunnel dst address not specified [ 490.405506][T20963] openvswitch: netlink: nsh attr 12336 is out of range max 3 [ 490.459133][T20969] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 490.586935][T20976] C: renamed from lo (while UP) [ 490.635657][T20976] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 491.022124][T21016] netlink: 'syz.2.4212': attribute type 1 has an invalid length. [ 491.040314][T21015] netlink: 'syz.2.4212': attribute type 1 has an invalid length. [ 491.129211][T21016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.173661][T21019] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 491.189638][T21019] bond3: entered allmulticast mode [ 491.209008][T21022] netlink: 'syz.0.4214': attribute type 19 has an invalid length. [ 491.349220][T21036] syz_tun: left allmulticast mode [ 491.357284][T21036] syz_tun: left promiscuous mode [ 491.362636][T21036] bridge0: port 3(syz_tun) entered disabled state [ 491.378256][T21036] bridge_slave_1: left allmulticast mode [ 491.384760][T21036] bridge_slave_1: left promiscuous mode [ 491.390708][T21036] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.416320][T21036] bridge_slave_0: left allmulticast mode [ 491.422035][T21036] bridge_slave_0: left promiscuous mode [ 491.428300][T21036] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.157622][T21082] v: renamed from vlan0 (while UP) [ 492.466700][T21109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.580088][T21111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.703380][T21125] block nbd3: Unsupported socket: should be TCP or UNIX. [ 492.813853][T21131] __nla_validate_parse: 28 callbacks suppressed [ 492.813874][T21131] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4242'. [ 492.830930][T21131] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4242'. [ 492.848228][T21125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4240'. [ 493.047813][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4247'. [ 493.073945][T21150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4246'. [ 493.078354][T21146] vlan1: entered allmulticast mode [ 493.089426][T21146] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 493.429933][T21172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4254'. [ 493.439611][T21172] erspan0: left promiscuous mode [ 493.445272][T21172] erspan0: entered allmulticast mode [ 493.816561][T21197] validate_nla: 1 callbacks suppressed [ 493.816582][T21197] netlink: 'syz.1.4261': attribute type 2 has an invalid length. [ 493.907922][T21197] : entered promiscuous mode [ 493.924811][T21200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4262'. [ 493.993253][T21205] netlink: 'syz.2.4265': attribute type 3 has an invalid length. [ 494.021123][T21205] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4265'. [ 494.047017][T21205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.401441][T21225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4271'. [ 494.474030][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4272'. [ 494.808268][T21251] netem: change failed [ 494.968456][T21252] netlink: 'syz.4.4278': attribute type 12 has an invalid length. [ 494.988251][T21252] netlink: 'syz.4.4278': attribute type 29 has an invalid length. [ 495.199309][T21277] netlink: 'syz.3.4284': attribute type 10 has an invalid length. [ 495.250312][T21277] team0: Device veth1_macvtap failed to register rx_handler [ 495.682633][T21290] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 495.889209][T21318] veth1_to_bond: entered promiscuous mode [ 495.901146][T21318] veth1_to_bond: entered allmulticast mode [ 496.448087][T21364] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 496.477722][T21363] ipt_REJECT: TCP_RESET invalid for non-tcp [ 496.534957][T21363] pimreg: entered allmulticast mode [ 496.541529][T21371] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 496.872319][T21391] netlink: 'syz.0.4314': attribute type 1 has an invalid length. [ 497.052214][T21404] netlink: 'syz.2.4317': attribute type 18 has an invalid length. [ 497.157941][T19775] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.181015][T19775] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.231484][T19775] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.280933][T19775] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.485929][T21433] xt_TPROXY: Can be used only with -p tcp or -p udp [ 497.497573][T21429] netlink: 'syz.3.4326': attribute type 1 has an invalid length. [ 497.559758][T21435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.569977][T21435] x_tables: unsorted underflow at hook 1 [ 497.908285][T21461] __nla_validate_parse: 20 callbacks suppressed [ 497.908305][T21461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4336'. [ 497.941264][T21461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4336'. [ 497.987211][T21462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4337'. [ 498.001043][T21462] netlink: 'syz.1.4337': attribute type 1 has an invalid length. [ 498.163830][T21468] bond4: (slave geneve2): making interface the new active one [ 498.175576][T21468] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 498.184859][T19771] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 498.193726][T19771] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 498.225153][T19771] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 498.234732][T19771] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 498.277521][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4341'. [ 498.288790][T21482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4341'. [ 498.460640][T21498] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4346'. [ 498.500683][T21500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4343'. [ 498.536966][T21492] bond5 (unregistering): Released all slaves [ 498.649282][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 498.660334][T21503] ip6tnl1: entered promiscuous mode [ 498.667109][T21519] IPVS: set_ctl: invalid protocol: 16448 64.0.187.187:48059 [ 498.695091][T21503] ip6tnl1: entered allmulticast mode [ 498.785134][T21513] syzkaller0: entered promiscuous mode [ 498.790722][T21513] syzkaller0: entered allmulticast mode [ 498.839148][T21515] syzkaller0: tun_net_xmit 14 [ 499.025278][T21539] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 499.253258][T21550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4358'. [ 499.298864][T21550] nbd: couldn't find device at index 2 [ 499.510046][T21562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.565530][T21562] bond0: (slave rose0): Enslaving as an active interface with an up link [ 499.851649][T21590] sctp: [Deprecated]: syz.3.4368 (pid 21590) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.851649][T21590] Use struct sctp_sack_info instead [ 499.900809][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4370'. [ 500.020221][T21599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4373'. [ 500.745127][T21624] openvswitch: netlink: Actions may not be safe on all matching packets [ 501.459422][ T30] audit: type=1800 audit(1767055653.086:12): pid=21655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4388" name="memory.events" dev="tmpfs" ino=1717 res=0 errno=0 [ 501.788078][T21670] nbd: couldn't find a device at index 0 [ 503.562978][T21774] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 503.593815][T21774] bond5 (unregistering): Released all slaves [ 503.753164][T21785] netlink: 'syz.1.4424': attribute type 12 has an invalid length. [ 503.862398][T21789] netlink: 'syz.1.4424': attribute type 12 has an invalid length. [ 503.980576][T21794] __nla_validate_parse: 17 callbacks suppressed [ 503.980597][T21794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4425'. [ 504.147881][T21800] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4427'. [ 504.185001][T21800] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 504.212534][T21800] openvswitch: netlink: IP tunnel dst address not specified [ 504.818985][T21845] syzkaller1: entered promiscuous mode [ 504.837396][T21845] syzkaller1: entered allmulticast mode [ 505.251254][T21874] openvswitch: netlink: IP tunnel dst address not specified [ 505.508131][T21889] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4450'. [ 505.621144][T21896] netlink: 'syz.4.4453': attribute type 29 has an invalid length. [ 505.637810][T21896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 505.684500][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4452'. [ 505.694417][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4452'. [ 505.949196][T21921] syzkaller0: entered promiscuous mode [ 505.956257][T21921] syzkaller0: entered allmulticast mode [ 505.964503][T21920] tipc: Enabled bearer , priority 0 [ 506.027056][T21921] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 506.054004][T21922] tipc: Resetting bearer [ 506.072465][T21922] tipc: Disabling bearer [ 506.174894][T21927] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20004 [ 506.259363][T21929] netlink: 'syz.3.4464': attribute type 8 has an invalid length. [ 506.267700][T21931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.268265][T21931] xt_l2tp: v2 doesn't support IP mode [ 506.328494][T21931] bond5 (unregistering): Released all slaves [ 506.359263][T21929] pimreg3: entered allmulticast mode [ 506.597250][T21947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4469'. [ 506.627434][T21948] netlink: 'syz.3.4470': attribute type 12 has an invalid length. [ 506.632872][T21947] openvswitch: netlink: Flow actions attr not present in new flow. [ 506.655832][T21948] netlink: 'syz.3.4470': attribute type 29 has an invalid length. [ 506.674988][T21948] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4470'. [ 506.712354][T21948] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4470'. [ 506.795247][T21948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4470'. [ 506.824914][T21951] x_tables: duplicate underflow at hook 1 [ 506.831457][T21951] x_tables: duplicate underflow at hook 1 [ 506.907138][T21961] IPVS: sh: FWM 3 0x00000003 - no destination available [ 506.914809][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 507.041827][T21967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.250387][T21982] netlink: 'syz.1.4479': attribute type 1 has an invalid length. [ 507.329042][T21982] bond5 (unregistering): Released all slaves [ 507.546163][T21995] bridge3: port 1(veth11) entered blocking state [ 507.565241][T21995] bridge3: port 1(veth11) entered disabled state [ 507.571901][T21995] veth11: entered allmulticast mode [ 507.589699][T21995] veth11: entered promiscuous mode [ 507.656855][T22002] bridge3: port 2(veth0_to_bond) entered blocking state [ 507.663993][T22002] bridge3: port 2(veth0_to_bond) entered disabled state [ 507.707864][T22002] veth0_to_bond: entered allmulticast mode [ 507.717528][T22002] veth0_to_bond: entered promiscuous mode [ 507.986346][T22025] macvlan0: entered promiscuous mode [ 508.094242][T22031] sit0: entered promiscuous mode [ 508.129352][T22031] netlink: 'syz.1.4496': attribute type 1 has an invalid length. [ 508.317760][T22049] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 508.349941][T22050] veth0_to_team: entered promiscuous mode [ 508.508191][T22061] netlink: 'syz.3.4508': attribute type 39 has an invalid length. [ 508.894272][ T5848] Bluetooth: hci0: command 0x080f tx timeout [ 509.265585][T22094] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 509.352363][T22101] sctp: [Deprecated]: syz.4.4522 (pid 22101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.352363][T22101] Use struct sctp_sack_info instead [ 509.375667][T22100] sctp: [Deprecated]: syz.4.4522 (pid 22100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.375667][T22100] Use struct sctp_sack_info instead [ 509.424615][T22100] __nla_validate_parse: 6 callbacks suppressed [ 509.424634][T22100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4522'. [ 509.717242][T22114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4526'. [ 509.788716][T22116] syzkaller0: entered promiscuous mode [ 509.811792][T22116] syzkaller0: entered allmulticast mode [ 510.248680][T22143] nbd: must specify a size in bytes for the device [ 510.277346][T22149] netlink: 'syz.1.4536': attribute type 1 has an invalid length. [ 510.306671][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4536'. [ 510.324607][T22144] netlink: 'syz.0.4535': attribute type 13 has an invalid length. [ 510.335857][T22143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4534'. [ 510.393867][T22144] gre0: left promiscuous mode [ 510.431879][T22144] gre0: left allmulticast mode [ 510.551182][T22162] xt_hashlimit: size too large, truncated to 1048576 [ 510.685969][T22144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.852243][T22175] syzkaller0: entered promiscuous mode [ 510.858268][T22175] syzkaller0: entered allmulticast mode [ 511.004997][T22177] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.017146][T22177] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.150110][T22179] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 511.217343][T22177] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.231928][T22177] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.299732][T22179] tipc: Resetting bearer [ 511.349085][T22177] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.359850][T22177] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.387218][T22179] tipc: Enabling of bearer rejected, already enabled [ 511.458668][T22177] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.477447][T22177] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.546685][T22210] openvswitch: netlink: Flow key attribute not present in set flow. [ 511.623072][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4552'. [ 511.682478][ T3540] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.691697][ T3540] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.716427][ T3540] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.726014][ T3540] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.758936][T22215] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4554'. [ 511.784342][ T3540] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.793759][ T3540] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.824507][ T3540] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.844676][ T3540] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.924840][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 512.158203][T19776] batadv1: left allmulticast mode [ 512.163403][T19776] batadv1: left promiscuous mode [ 512.172176][T19776] bridge0: port 1(batadv1) entered disabled state [ 512.198149][T22237] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4561'. [ 512.627143][T19776] bond5 (unregistering): (slave gretap1): Releasing active interface [ 512.749287][T19776] bond3 (unregistering): (slave geneve3): Releasing active interface [ 512.810133][T19776] bond2 (unregistering): (slave geneve2): Releasing active interface [ 513.386171][T19776] bond7 (unregistering): (slave bridge10): Releasing active interface [ 513.429448][T19776] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 513.438804][T19776] bond0 (unregistering): Released all slaves [ 513.455789][T19776] bond1 (unregistering): Released all slaves [ 513.565644][T19776] bond2 (unregistering): Released all slaves [ 513.670502][T19776] bond3 (unregistering): Released all slaves [ 513.777946][T19776] bond4 (unregistering): Released all slaves [ 513.882044][T19776] bond5 (unregistering): Released all slaves [ 513.896622][T19776] bond6 (unregistering): Released all slaves [ 513.910915][T19776] bond7 (unregistering): Released all slaves [ 514.019693][T19776] bond8 (unregistering): Released all slaves [ 514.034350][T19776] bond9 (unregistering): Released all slaves [ 514.191085][T19776] : left promiscuous mode [ 514.282126][T22272] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4570'. [ 514.293661][T22272] openvswitch: netlink: Flow key attr not present in new flow. [ 514.454514][T19776] tipc: Disabling bearer [ 514.524816][T19776] tipc: Disabling bearer [ 514.656319][T22297] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4579'. [ 514.677836][T19776] tipc: Left network mode [ 514.699313][T22295] syzkaller0: entered promiscuous mode [ 514.725121][T22295] syzkaller0: entered allmulticast mode [ 514.877230][T22308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.899050][T22308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.919311][T22308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.944424][T22308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.046242][T22316] tipc: Enabled bearer , priority 0 [ 515.250837][T22322] syzkaller0: entered promiscuous mode [ 515.257425][T22322] syzkaller0: entered allmulticast mode [ 515.264825][T22322] tipc: Resetting bearer [ 515.282928][T22305] tipc: Resetting bearer [ 516.729200][T22305] tipc: Disabling bearer [ 516.738487][T22330] tipc: Enabling of bearer rejected, already enabled [ 516.791889][ T9587] tipc: Node number set to 3730980654 [ 516.997439][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4594'. [ 517.006622][T22362] netlink: 'syz.3.4594': attribute type 5 has an invalid length. [ 517.034317][T22362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4594'. [ 517.192534][T22364] vlan1: entered promiscuous mode [ 517.208709][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4594'. [ 517.227583][T22364] vlan1: entered allmulticast mode [ 517.238142][T22364] hsr_slave_1: entered allmulticast mode [ 517.254606][T22362] geneve3: entered promiscuous mode [ 517.260338][T22362] geneve3: entered allmulticast mode [ 517.297712][T22360] bond5: Unable to set down delay as MII monitoring is disabled [ 517.311577][T22360] bond5 (unregistering): Released all slaves [ 517.386661][T22354] : entered promiscuous mode [ 517.468298][T13022] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 517.482232][T13022] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 517.573642][T22387] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4601'. [ 517.663750][T22393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4602'. [ 517.722931][T13022] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 517.776003][T13022] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 517.793953][T22402] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4604'. [ 517.834732][T22402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4604'. [ 518.003120][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4607'. [ 518.044096][T22412] bridge_slave_0: entered promiscuous mode [ 518.060544][T22410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4607'. [ 518.523381][T22440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.552137][T22442] IPVS: length: 130 != 8 [ 518.563182][T22443] IPVS: length: 130 != 8 [ 518.614665][T19776] pim6reg (unregistering): left allmulticast mode [ 518.672422][T22445] xt_TCPMSS: Only works on TCP SYN packets [ 519.140746][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 519.336983][T22420] syzkaller0: entered promiscuous mode [ 519.342530][T22420] syzkaller0: entered allmulticast mode [ 519.351561][T22436] batadv_slave_0: Caught tx_queue_len zero misconfig [ 521.181814][T22451] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 521.671501][T19776] IPVS: stop unused estimator thread 0... [ 521.836854][T22515] __nla_validate_parse: 3 callbacks suppressed [ 521.836875][T22515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4634'. [ 521.894849][T22517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.907887][T22517] syzkaller0: entered promiscuous mode [ 521.916070][T22517] syzkaller0: entered allmulticast mode [ 521.969539][T22522] 8021q: adding VLAN 0 to HW filter on device bond6 [ 521.982066][T22526] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.4637'. [ 522.191709][T22534] netlink: 'syz.4.4640': attribute type 3 has an invalid length. [ 522.207957][T22534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4640'. [ 522.706045][T22551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4644'. [ 522.760027][T22553] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 522.941949][T22559] 8021q: VLANs not supported on xfrm0 [ 523.012793][T22557] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4645'. [ 523.121709][T22569] syz.4.4650: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 523.161062][T22569] CPU: 0 UID: 0 PID: 22569 Comm: syz.4.4650 Not tainted syzkaller #0 PREEMPT(full) [ 523.161095][T22569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 523.161117][T22569] Call Trace: [ 523.161140][T22569] [ 523.161151][T22569] dump_stack_lvl+0x189/0x250 [ 523.161190][T22569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.161217][T22569] ? __pfx__printk+0x10/0x10 [ 523.161250][T22569] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 523.161273][T22569] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 523.161300][T22569] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 523.161327][T22569] warn_alloc+0x214/0x310 [ 523.161351][T22569] ? stack_trace_save+0x9c/0xe0 [ 523.161387][T22569] ? __pfx_warn_alloc+0x10/0x10 [ 523.161417][T22569] ? kasan_save_track+0x4f/0x80 [ 523.161437][T22569] ? kasan_save_track+0x3e/0x80 [ 523.161456][T22569] ? __kasan_kmalloc+0x93/0xb0 [ 523.161476][T22569] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 523.161495][T22569] ? xskq_create+0x56/0x170 [ 523.161527][T22569] ? xsk_setsockopt+0x4dc/0x8d0 [ 523.161554][T22569] ? do_sock_setsockopt+0x17c/0x1b0 [ 523.161576][T22569] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 523.161598][T22569] ? do_syscall_64+0xfa/0xf80 [ 523.161625][T22569] __vmalloc_node_range_noprof+0x134/0x16a0 [ 523.161683][T22569] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 523.161712][T22569] ? __kasan_kmalloc+0x93/0xb0 [ 523.161742][T22569] vmalloc_user_noprof+0xad/0xf0 [ 523.161764][T22569] ? xskq_create+0xbf/0x170 [ 523.161797][T22569] xskq_create+0xbf/0x170 [ 523.161833][T22569] xsk_init_queue+0xb0/0x110 [ 523.161867][T22569] xsk_setsockopt+0x4dc/0x8d0 [ 523.161900][T22569] ? __pfx_xsk_setsockopt+0x10/0x10 [ 523.161933][T22569] ? __pfx_aa_sk_perm+0x10/0x10 [ 523.161967][T22569] ? aa_sock_opt_perm+0xff/0x1a0 [ 523.161999][T22569] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 523.162018][T22569] ? __pfx_xsk_setsockopt+0x10/0x10 [ 523.162050][T22569] do_sock_setsockopt+0x17c/0x1b0 [ 523.162080][T22569] __x64_sys_setsockopt+0x13f/0x1b0 [ 523.162110][T22569] do_syscall_64+0xfa/0xf80 [ 523.162141][T22569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.162163][T22569] ? clear_bhb_loop+0x60/0xb0 [ 523.162189][T22569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.162215][T22569] RIP: 0033:0x7f212cb8f749 [ 523.162239][T22569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.162257][T22569] RSP: 002b:00007f212daf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 523.162281][T22569] RAX: ffffffffffffffda RBX: 00007f212cde5fa0 RCX: 00007f212cb8f749 [ 523.162296][T22569] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 523.162308][T22569] RBP: 00007f212cc13f91 R08: 0000000000000004 R09: 0000000000000000 [ 523.162321][T22569] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.162334][T22569] R13: 00007f212cde6038 R14: 00007f212cde5fa0 R15: 00007ffd3b9f02d8 [ 523.162369][T22569] [ 523.162384][T22569] Mem-Info: [ 523.339491][T22573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4651'. [ 523.369705][T22569] active_anon:3894 inactive_anon:0 isolated_anon:0 [ 523.369705][T22569] active_file:2767 inactive_file:40240 isolated_file:0 [ 523.369705][T22569] unevictable:768 dirty:116 writeback:0 [ 523.369705][T22569] slab_reclaimable:12663 slab_unreclaimable:124958 [ 523.369705][T22569] mapped:28962 shmem:1362 pagetables:1010 [ 523.369705][T22569] sec_pagetables:0 bounce:0 [ 523.369705][T22569] kernel_misc_reclaimable:0 [ 523.369705][T22569] free:1297940 free_pcp:13691 free_cma:0 [ 523.560267][T22579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4652'. [ 523.570747][T22579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4652'. [ 523.595693][T22569] Node 0 active_anon:15576kB inactive_anon:0kB active_file:11068kB inactive_file:160756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115848kB dirty:464kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13288kB pagetables:3796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 523.644016][T22583] netlink: 'syz.3.4653': attribute type 2 has an invalid length. [ 523.703323][T22569] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 523.802159][T22569] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 523.851807][T22569] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 523.859417][T22569] Node 0 DMA32 free:1279956kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15476kB inactive_anon:0kB active_file:11068kB inactive_file:160756kB unevictable:1536kB writepending:464kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:41316kB local_pcp:21108kB free_cma:0kB [ 523.893769][T22569] lowmem_reserve[]: 0 0 1 1 1 [ 523.898689][T22569] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 523.993896][T22569] lowmem_reserve[]: 0 0 0 0 0 [ 523.999728][T22569] Node 1 Normal free:3896700kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13440kB local_pcp:12512kB free_cma:0kB [ 524.104570][T22569] lowmem_reserve[]: 0 0 0 0 0 [ 524.117294][T22569] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 524.148633][T22569] Node 0 DMA32: 7798*4kB (UME) 5398*8kB (UM) 2900*16kB (UME) 534*32kB (UME) 152*64kB (UME) 437*128kB (UME) 454*256kB (UME) 312*512kB (UM) 202*1024kB (UME) 100*2048kB (UME) 95*4096kB (UM) = 1280264kB [ 524.195142][T22569] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 524.214440][T22569] Node 1 Normal: 195*4kB (UME) 54*8kB (UME) 46*16kB (UME) 197*32kB (UME) 57*64kB (UME) 14*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3896700kB [ 524.253786][T22569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 524.293410][T22569] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 524.330685][T22569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 524.364004][T22569] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 524.394594][T22569] 44366 total pagecache pages [ 524.399419][T22569] 0 pages in swap cache [ 524.403610][T22569] Free swap = 124996kB [ 524.440137][T22569] Total swap = 124996kB [ 524.449747][T22569] 2097051 pages RAM [ 524.465128][T22607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4660'. [ 524.486904][T22569] 0 pages HighMem/MovableOnly [ 524.491655][T22569] 425122 pages reserved [ 524.500629][T22569] 0 pages cma reserved [ 524.882994][T22631] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 525.000009][T22647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4670'. [ 526.068331][ T30] audit: type=1107 audit(1767055677.696:13): pid=22659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='œ [ 526.068331][ T30] ½óÛ3ãÁŠJ5XŠËñÎB ¾ÎVŽL<·$ûà' [ 526.523862][T22691] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 526.790453][T22711] netlink: 'syz.3.4688': attribute type 3 has an invalid length. [ 526.850432][T22715] __nla_validate_parse: 5 callbacks suppressed [ 526.850454][T22715] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4686'. [ 526.961853][T22722] tipc: Enabling of bearer rejected, failed to enable media [ 527.027994][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4690'. [ 527.156985][T22733] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4691'. [ 527.308347][T22739] netlink: 'syz.0.4694': attribute type 33 has an invalid length. [ 527.344034][T22739] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4694'. [ 527.370386][T22746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4694'. [ 527.389486][T22747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4697'. [ 527.410284][T22747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4697'. [ 527.425043][T22747] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4697'. [ 527.471691][T22746] team0: Port device dummy0 removed [ 527.521445][T22752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4694'. [ 527.531143][T22754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4699'. [ 527.562736][T22754] gre0: entered promiscuous mode [ 527.571294][T22754] gre0: entered allmulticast mode [ 527.741836][T22760] syzkaller0: entered promiscuous mode [ 527.763107][T22760] syzkaller0: entered allmulticast mode [ 528.807286][T22840] bond6: Unable to set up delay as MII monitoring is disabled [ 528.824725][T22841] atomic_op ffff888055a82198 conn xmit_atomic 0000000000000000 [ 528.842599][T22840] bond6 (unregistering): Released all slaves [ 529.072795][T22863] syzkaller0: entered promiscuous mode [ 529.078759][T22863] syzkaller0: entered allmulticast mode [ 530.072658][T22923] netlink: 'syz.2.4754': attribute type 2 has an invalid length. [ 530.204971][T22936] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 530.314342][T22950] netlink: 'syz.2.4759': attribute type 1 has an invalid length. [ 530.562145][T22965] netlink: 'syz.0.4763': attribute type 24 has an invalid length. [ 530.687382][T22965] : entered promiscuous mode [ 530.922296][T22993] netlink: 'syz.1.4771': attribute type 33 has an invalid length. [ 531.959571][T23039] __nla_validate_parse: 23 callbacks suppressed [ 531.959592][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4780'. [ 532.036466][T23039] macvlan0: left promiscuous mode [ 532.065319][T23039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4780'. [ 532.279213][T23049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.318715][T23054] x_tables: duplicate underflow at hook 1 [ 532.318714][T23049] x_tables: duplicate underflow at hook 1 [ 532.331137][T23056] netlink: 'syz.3.4786': attribute type 1 has an invalid length. [ 532.356301][T23052] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4783'. [ 533.107355][T23101] netlink: 'syz.0.4796': attribute type 13 has an invalid length. [ 533.416916][T23107] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4801'. [ 533.482306][T23113] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4802'. [ 533.589517][T23120] netlink: 'syz.3.4804': attribute type 12 has an invalid length. [ 533.636017][T23120] bond3: option primary_reselect: invalid value (255) [ 533.654008][T23120] bond3 (unregistering): Released all slaves [ 533.750337][T23127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4806'. [ 533.873432][T23136] delete_channel: no stack [ 533.897830][T23136] netlink: 'syz.3.4808': attribute type 1 has an invalid length. [ 533.914909][T23136] netlink: 'syz.3.4808': attribute type 1 has an invalid length. [ 533.931097][T23136] netlink: 'syz.3.4808': attribute type 1 has an invalid length. [ 533.951215][T23136] netlink: 'syz.3.4808': attribute type 2 has an invalid length. [ 533.961014][T23136] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4808'. [ 534.078516][T23142] !€ÿ: renamed from bond_slave_0 (while UP) [ 534.098814][T23142] bridge0: port 2(batadv0) entered blocking state [ 534.106103][T23142] bridge0: port 2(batadv0) entered disabled state [ 534.112739][T23142] batadv0: entered allmulticast mode [ 534.123924][T23142] batadv0: entered promiscuous mode [ 534.292711][T23166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4816'. [ 534.342413][T23167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4817'. [ 534.515746][T23177] syzkaller0: entered promiscuous mode [ 534.521522][T23177] syzkaller0: entered allmulticast mode [ 534.535585][T23177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4821'. [ 534.598229][ T3540] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 534.608290][ T3540] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 534.618206][T23179] netlink: 'syz.4.4821': attribute type 1 has an invalid length. [ 535.240727][T23215] bridge: RTM_NEWNEIGH with invalid ether address [ 535.586547][T23238] syzkaller1: entered promiscuous mode [ 535.598392][T23238] syzkaller1: entered allmulticast mode [ 535.632166][T23238] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 536.400066][T23290] syzkaller0: entered promiscuous mode [ 536.406212][T23290] syzkaller0: entered allmulticast mode [ 536.419612][T23250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.431283][T23260] netlink: 'syz.4.4842': attribute type 11 has an invalid length. [ 536.440724][T23260] netlink: 'syz.4.4842': attribute type 11 has an invalid length. [ 536.934014][T23314] netlink: 'syz.4.4858': attribute type 4 has an invalid length. [ 536.970489][T23314] `: renamed from bond0 (while UP) [ 537.174583][T23327] __nla_validate_parse: 11 callbacks suppressed [ 537.174604][T23327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4863'. [ 537.196198][T23330] nbd: must specify a size in bytes for the device [ 537.457615][T23343] netlink: 'syz.2.4868': attribute type 1 has an invalid length. [ 537.487411][T23347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4868'. [ 537.535180][T23343] bond5: entered promiscuous mode [ 537.565586][T23343] 8021q: adding VLAN 0 to HW filter on device bond5 [ 537.575767][T23347] bond5: entered allmulticast mode [ 537.638951][T23355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4871'. [ 537.935851][T23375] netlink: 'syz.0.4876': attribute type 1 has an invalid length. [ 537.969204][T23378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4874'. [ 537.995987][T23378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4874'. [ 538.008893][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4876'. [ 538.039870][T23382] atomic_op ffff88803c975198 conn xmit_atomic 0000000000000000 [ 538.171623][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4879'. [ 538.295765][T23394] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4883'. [ 538.375079][T23398] netlink: 'syz.2.4885': attribute type 26 has an invalid length. [ 538.393508][T23398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4885'. [ 538.403834][T23398] netlink: 'syz.2.4885': attribute type 26 has an invalid length. [ 538.416060][T23398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4885'. [ 539.230328][T23444] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode [ 539.237977][T23444] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode [ 539.692004][T23471] netlink: 'syz.2.4908': attribute type 1 has an invalid length. [ 539.838613][T23480] : entered promiscuous mode [ 539.959802][T23491] syzkaller1: entered promiscuous mode [ 539.977007][T23491] syzkaller1: entered allmulticast mode [ 540.079474][T23501] tipc: Started in network mode [ 540.086502][T23501] tipc: Node identity ac14140f, cluster identity 4711 [ 540.094617][T23501] tipc: New replicast peer: 255.255.255.255 [ 540.115192][T23501] tipc: Enabled bearer , priority 10 [ 540.287273][T23509] --map-set only usable from mangle table [ 540.496712][T23521] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 540.881726][T23556] netlink: 'syz.4.4932': attribute type 58 has an invalid length. [ 541.146735][T23574] netlink: 'syz.1.4937': attribute type 22 has an invalid length. [ 541.171418][T23574] netlink: 'syz.1.4937': attribute type 22 has an invalid length. [ 541.196614][T15683] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.208876][T15683] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.223532][T15683] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.246327][T15683] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.273207][ T5844] tipc: Node number set to 2886997007 [ 541.406555][T23590] netlink: 'syz.0.4943': attribute type 11 has an invalid length. [ 541.416701][T23590] netlink: 'syz.0.4943': attribute type 11 has an invalid length. [ 541.417515][T23589] syzkaller0: entered promiscuous mode [ 541.434318][T23589] syzkaller0: entered allmulticast mode [ 541.464860][T23589] tipc: Enabled bearer , priority 0 [ 541.479530][T23586] tipc: Resetting bearer [ 541.516863][T23586] tipc: Disabling bearer [ 541.568059][ T24] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 541.597887][T23597] v: renamed from dummy0 (while UP) [ 541.605463][T23590] nbd0: detected capacity change from 0 to 63 [ 541.618013][ T5848] block nbd0: Receive control failed (result -32) [ 542.053427][T23623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 542.359857][T23641] __nla_validate_parse: 27 callbacks suppressed [ 542.359882][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4959'. [ 542.487033][ T24] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 542.553955][T23645] netlink: 'syz.3.4961': attribute type 7 has an invalid length. [ 542.574547][T23646] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 542.588833][T23646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4960'. [ 542.645994][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 542.725520][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4962'. [ 542.758657][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4962'. [ 542.785835][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4962'. [ 542.808026][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4962'. [ 542.833886][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4962'. [ 542.876367][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4962'. [ 542.899676][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4962'. [ 542.910526][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4962'. [ 543.011577][T23666] netlink: 'syz.3.4966': attribute type 13 has an invalid length. [ 543.022089][T23665] netlink: 'syz.1.4965': attribute type 1 has an invalid length. [ 543.039214][T23666] veth0_macvtap: left promiscuous mode [ 543.065265][T23666] macvtap0: entered allmulticast mode [ 543.078239][T23666] macvtap0: refused to change device tx_queue_len [ 543.373780][T23685] wireguard0: entered promiscuous mode [ 543.380757][T23685] wireguard0: entered allmulticast mode [ 543.397663][T23685] team0: Device wireguard0 is of different type [ 543.469287][T23695] openvswitch: netlink: IP tunnel dst address not specified [ 543.893189][T23702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.075940][T23726] sctp: [Deprecated]: syz.0.4982 (pid 23726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.075940][T23726] Use struct sctp_sack_info instead [ 544.411144][T23754] netlink: 'syz.3.4991': attribute type 3 has an invalid length. [ 544.440686][T23754] netlink: 'syz.3.4991': attribute type 1 has an invalid length. [ 544.527336][T23756] hsr_slave_0 (unregistering): left promiscuous mode [ 544.994807][T23787] pim6reg1: entered promiscuous mode [ 545.000449][T23787] pim6reg1: entered allmulticast mode [ 545.131416][T23798] tipc: Enabling of bearer rejected, already enabled [ 545.161640][T23798] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 545.181076][T23798] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 545.583790][T23826] x_tables: duplicate underflow at hook 3 [ 545.874926][T23842] netlink: 'syz.4.5024': attribute type 21 has an invalid length. [ 545.966327][T23843] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.980550][T23849] netlink: 'syz.4.5024': attribute type 21 has an invalid length. [ 545.992912][T23843] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 546.019789][T23798] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 546.026688][T23845] netlink: 'syz.0.5025': attribute type 4 has an invalid length. [ 546.050121][T23854] Unknown status report in ack skb [ 546.068622][T23856] team0: Device ipvlan4 failed to register rx_handler [ 546.177503][T23843] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.190390][T23843] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 546.329438][T23843] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.341033][T23843] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 546.414749][T23875] netlink: 'syz.1.5033': attribute type 10 has an invalid length. [ 546.507558][T23843] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.540814][T23843] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 546.783651][T23898] netlink: 'syz.1.5042': attribute type 23 has an invalid length. [ 546.827573][T13022] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 546.847156][T13022] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 546.897498][T19774] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 546.907345][T19774] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 547.008193][T19774] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 547.024273][T19774] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 547.032574][T19774] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 547.052139][T19774] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 547.139403][T23917] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 547.189878][T23917] bond7 (unregistering): Released all slaves [ 547.322740][T23925] tun0: tun_chr_ioctl cmd 1074025675 [ 547.332002][T23925] tun0: persist disabled [ 547.512132][T23939] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 547.543370][T23939] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 547.973043][T23969] validate_nla: 1 callbacks suppressed [ 547.973060][T23969] netlink: 'syz.2.5060': attribute type 1 has an invalid length. [ 547.988018][T23969] netlink: 'syz.2.5060': attribute type 4 has an invalid length. [ 547.996169][T23969] __nla_validate_parse: 75 callbacks suppressed [ 547.996184][T23969] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5060'. [ 548.023038][T23963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 548.092153][T23973] netlink: 'syz.2.5061': attribute type 1 has an invalid length. [ 548.171112][T23973] 8021q: adding VLAN 0 to HW filter on device bond6 [ 548.293457][T23987] syzkaller1: entered promiscuous mode [ 548.306215][T23987] syzkaller1: entered allmulticast mode [ 548.421044][T23994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 548.430548][T23994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5066'. [ 548.447426][T23994] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 548.457260][T23994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5066'. [ 548.512265][T23992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.593826][T23997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5067'. [ 548.658550][T23998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.761723][T24005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5069'. [ 548.917021][T24009] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5071'. [ 549.028569][T24014] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5073'. [ 549.298390][T24032] C: Caught tx_queue_len zero misconfig [ 549.595280][T24048] netlink: 'syz.4.5085': attribute type 33 has an invalid length. [ 549.823449][T24056] netlink: 'syz.1.5088': attribute type 1 has an invalid length. [ 549.870837][T24059] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 549.884415][T24050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5086'. [ 550.355002][T24087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5099'. [ 550.387298][T24090] tipc: New replicast peer: 255.255.255.255 [ 550.397830][T24090] tipc: Enabled bearer , priority 10 [ 550.950308][T24129] netlink: 'syz.0.5112': attribute type 9 has an invalid length. [ 551.000954][T24131] openvswitch: netlink: EtherType 50a is less than min 600 [ 551.248281][T24140] netlink: 'syz.1.5120': attribute type 1 has an invalid length. [ 551.256524][T24140] netlink: 'syz.1.5120': attribute type 1 has an invalid length. [ 551.774615][ T5848] Bluetooth: hci2: command 0x0405 tx timeout [ 551.782005][T24169] netlink: 'syz.2.5131': attribute type 2 has an invalid length. [ 552.236316][T24195] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 552.498110][T24219] netlink: 'syz.2.5144': attribute type 21 has an invalid length. [ 552.865485][T24241] nbd: error processing sock list [ 552.872377][T24241] block nbd3: shutting down sockets [ 553.187380][T24258] vlan2: entered promiscuous mode [ 553.192687][T24258] bridge0: entered promiscuous mode [ 553.324627][T24261] __nla_validate_parse: 10 callbacks suppressed [ 553.324647][T24261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5155'. [ 553.663456][T24261] validate_nla: 1 callbacks suppressed [ 553.663476][T24261] netlink: 'syz.4.5155': attribute type 3 has an invalid length. [ 553.803582][T24266] syzkaller0: entered promiscuous mode [ 553.824492][T24266] syzkaller0: entered allmulticast mode [ 554.142654][T24286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5163'. [ 554.187621][T24286] hsr_slave_0: left promiscuous mode [ 554.246166][T24288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5166'. [ 554.396690][T24301] netem: change failed [ 554.398413][T24297] IPVS: length: 239 != 24 [ 554.487808][T24297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5169'. [ 554.537780][T24297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5169'. [ 554.781280][T24330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5180'. [ 555.012695][T24347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5185'. [ 555.493165][T24372] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5190'. [ 555.534683][T24372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5190'. [ 555.620480][T24379] tipc: Enabling of bearer rejected, failed to enable media [ 555.750742][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5195'. [ 555.765329][T24391] mac80211_hwsim hwsim51 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 613.515298][T24413] netlink: 'syz.0.5199': attribute type 10 has an invalid length. [ 613.531000][T24417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5203'. [ 613.553246][T24413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5199'. [ 613.666068][T24413] team0: Port device geneve0 added [ 613.690206][T24418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5202'. [ 613.816119][T24436] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5205'. [ 613.989416][T24447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5210'. [ 614.428132][T24475] netlink: 4812 bytes leftover after parsing attributes in process `syz.3.5217'. [ 614.785805][T24496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5222'. [ 615.044521][T24517] xt_limit: Overflow, try lower: 604147548/4200216962 [ 615.143674][T24523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5230'. [ 615.198736][T24528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5232'. [ 615.209289][T24528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5232'. [ 615.669649][T24556] syzkaller0: entered promiscuous mode [ 615.681487][T24556] syzkaller0: entered allmulticast mode [ 615.881650][T24568] ip6tnl0: Caught tx_queue_len zero misconfig [ 616.249870][T24596] netlink: 'syz.4.5250': attribute type 83 has an invalid length. [ 616.799011][T24620] macvtap2: entered promiscuous mode [ 616.817224][T24620] vlan0: entered promiscuous mode [ 616.827797][T24620] macvtap2: entered allmulticast mode [ 616.845037][T24620] vlan0: entered allmulticast mode [ 616.850404][T24620] veth0_vlan: entered allmulticast mode [ 617.114461][T24646] geneve3: entered promiscuous mode [ 617.327263][T24663] netlink: 'syz.1.5271': attribute type 6 has an invalid length. [ 617.353529][T24663] team_slave_0: entered promiscuous mode [ 617.359356][T24663] team_slave_1: entered promiscuous mode [ 617.376277][T24663] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 618.018591][T24680] netlink: 'syz.4.5275': attribute type 1 has an invalid length. [ 618.044246][T24680] NCSI netlink: No device for ifindex 0 [ 618.248769][T24688] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode [ 618.274754][T24688] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode [ 618.540434][T24709] tipc: Enabled bearer , priority 2 [ 618.625563][T24717] __nla_validate_parse: 10 callbacks suppressed [ 618.625585][T24717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5290'. [ 618.809058][T24736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5293'. [ 618.916561][T24742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5295'. [ 618.942480][T24742] netlink: 'syz.2.5295': attribute type 1 has an invalid length. [ 618.964738][T24742] netlink: 'syz.2.5295': attribute type 1 has an invalid length. [ 618.972544][T24742] netlink: 'syz.2.5295': attribute type 2 has an invalid length. [ 618.985935][T24745] netlink: 'syz.4.5296': attribute type 10 has an invalid length. [ 619.018928][T24742] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5295'. [ 619.125042][T24742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5295'. [ 619.166679][T24751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5297'. [ 619.180771][T24751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5297'. [ 619.399998][T24765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5303'. [ 619.654960][T24787] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5307'. [ 619.768325][T24798] netlink: 'syz.4.5314': attribute type 1 has an invalid length. [ 619.890686][T24798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5314'. [ 619.961320][T24804] 8021q: adding VLAN 0 to HW filter on device bond3 [ 619.970948][T24804] bond0: (slave bond3): making interface the new active one [ 619.980444][T24804] bond0: (slave bond3): Enslaving as an active interface with an up link [ 620.031490][T24798] bond0: (slave gretap2): Enslaving as a backup interface with an up link [ 620.069855][T24808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.348797][T24832] bridge3: entered promiscuous mode [ 620.369496][T24832] bridge3: entered allmulticast mode [ 621.103427][T24876] netlink: 'syz.1.5334': attribute type 15 has an invalid length. [ 621.108872][T24855] bond4: option xmit_hash_policy: invalid value (64) [ 621.125114][T24855] bond4 (unregistering): Released all slaves [ 621.188851][T24876] netlink: 'syz.1.5334': attribute type 15 has an invalid length. [ 621.276377][ T1106] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 621.287779][ T1106] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 621.314031][ T1106] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 621.358930][ T1106] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 621.675914][T24901] netlink: 'syz.3.5342': attribute type 4 has an invalid length. [ 622.072569][T24930] bridge0: port 3(team0) entered disabled state [ 622.357884][T24930] team0 (unregistering): left allmulticast mode [ 622.364970][T24930] team_slave_0: left allmulticast mode [ 622.370690][T24930] team_slave_1: left allmulticast mode [ 622.376591][T24930] bridge0: port 3(team0) entered disabled state [ 622.389224][T24930] team_slave_0: left promiscuous mode [ 622.400221][T24930] team0 (unregistering): Port device team_slave_0 removed [ 622.408702][T24930] team_slave_1: left promiscuous mode [ 622.437333][T24930] team0 (unregistering): Port device team_slave_1 removed [ 622.518189][T24955] smc: net device gre0 applied user defined pnetid SYZ1 [ 622.542024][T24958] smc: net device gre0 erased user defined pnetid SYZ1 [ 622.903868][T24984] netlink: 'syz.3.5364': attribute type 1 has an invalid length. [ 622.980347][T24984] 8021q: adding VLAN 0 to HW filter on device bond4 [ 623.170246][T25001] bridge5: entered promiscuous mode [ 623.186898][T25001] bridge5: entered allmulticast mode [ 623.208913][T24999] bridge6: entered promiscuous mode [ 623.219506][T24999] bridge6: entered allmulticast mode [ 623.619525][T25036] netlink: 'syz.1.5377': attribute type 11 has an invalid length. [ 623.739505][T25028] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 623.950500][T25055] netlink: 'syz.1.5382': attribute type 1 has an invalid length. [ 624.005690][T25055] __nla_validate_parse: 24 callbacks suppressed [ 624.005712][T25055] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5382'. [ 624.069844][T25060] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 624.141324][T25066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5385'. [ 624.154600][T25065] netlink: 'syz.0.5384': attribute type 1 has an invalid length. [ 624.221668][T25075] xt_CT: You must specify a L4 protocol and not use inversions on it [ 624.273075][T13021] nci: nci_ntf_packet: unsupported ntf opcode 0xf03 [ 624.375934][T25065] gretap2: entered promiscuous mode [ 624.387863][T25065] bond7: (slave gretap2): making interface the new active one [ 624.414343][T25065] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 624.438763][T25077] macvlan2: entered promiscuous mode [ 624.445269][T25077] macvlan2: entered allmulticast mode [ 624.451785][T25077] bond7: entered promiscuous mode [ 624.458718][T25077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 624.467659][T25077] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 624.488080][T25088] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5389'. [ 624.500880][T25077] bond7: left promiscuous mode [ 624.982590][T25098] netlink: 'syz.0.5393': attribute type 1 has an invalid length. [ 625.016658][T25098] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5393'. [ 625.040987][T25098] netlink: 658 bytes leftover after parsing attributes in process `syz.0.5393'. [ 625.080510][T25098] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5393'. [ 625.165755][T25104] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5394'. [ 625.182919][T25105] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 625.357544][T25116] netlink: 'syz.3.5400': attribute type 33 has an invalid length. [ 625.389873][T25118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5400'. [ 625.420494][T25116] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5400'. [ 625.673398][T25140] netlink: 'syz.0.5407': attribute type 1 has an invalid length. [ 625.683034][T25143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5406'. [ 625.708486][T25140] netlink: 'syz.0.5407': attribute type 2 has an invalid length. [ 626.462641][T25189] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20000 [ 626.504935][T25189] xt_TCPMSS: Only works on TCP SYN packets [ 626.882523][T25217] IPVS: length: 8 != 1152 [ 627.323227][T25256] macsec1: entered promiscuous mode [ 627.356138][T25256] bridge0: entered promiscuous mode [ 627.361611][T25256] macsec1: entered allmulticast mode [ 627.389200][T25256] bridge0: entered allmulticast mode [ 627.404185][T25256] bridge0: port 1(macsec1) entered blocking state [ 627.411434][T25256] bridge0: port 1(macsec1) entered disabled state [ 627.427456][T25256] bridge0: left allmulticast mode [ 627.432674][T25256] bridge0: left promiscuous mode [ 627.475939][T25262] wg0: entered promiscuous mode [ 627.480863][T25262] wg0: entered allmulticast mode [ 627.607803][T25266] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 628.079696][T25294] netlink: 'syz.2.5454': attribute type 7 has an invalid length. [ 628.096166][T25294] netlink: 'syz.2.5454': attribute type 8 has an invalid length. [ 628.120631][T25294] gretap0: entered promiscuous mode [ 628.128304][T25294] batadv_slave_1: entered promiscuous mode [ 628.134876][T25294] batadv_slave_1: left promiscuous mode [ 628.141424][T25294] gretap0: left promiscuous mode [ 628.376905][T25313] netlink: 'syz.1.5460': attribute type 3 has an invalid length. [ 628.406396][T25313] netlink: 'syz.1.5460': attribute type 3 has an invalid length. [ 628.922281][T25342] 8021q: VLANs not supported on ipvlan1 [ 629.280380][T25359] IPVS: Unknown mcast interface: vcan0 [ 629.307702][T25361] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 629.371003][T25362] wg1 speed is unknown, defaulting to 1000 [ 629.399769][T25362] wg1 speed is unknown, defaulting to 1000 [ 629.480130][T25362] wg1 speed is unknown, defaulting to 1000 [ 629.523654][T25362] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 629.559973][T25369] __nla_validate_parse: 20 callbacks suppressed [ 629.559993][T25369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5476'. [ 629.678405][T25362] wg1 speed is unknown, defaulting to 1000 [ 629.740122][T25362] wg1 speed is unknown, defaulting to 1000 [ 629.834616][T25362] wg1 speed is unknown, defaulting to 1000 [ 629.866515][T25362] wg1 speed is unknown, defaulting to 1000 [ 629.874989][T25362] wg1 speed is unknown, defaulting to 1000 [ 629.883324][T25362] wg1 speed is unknown, defaulting to 1000 [ 629.923125][T25381] netlink: 91 bytes leftover after parsing attributes in process `syz.2.5480'. [ 630.616908][T25429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5492'. [ 630.773090][T25442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5496'. [ 630.945734][T25449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5497'. [ 631.167453][T25457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5502'. [ 631.231490][T25459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'. [ 631.244994][T25459] openvswitch: netlink: Flow actions attr not present in new flow. [ 631.338086][T25457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'. [ 631.353919][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5502'. [ 631.364049][T25457] validate_nla: 31 callbacks suppressed [ 631.403774][T25457] netlink: 'syz.2.5502': attribute type 14 has an invalid length. [ 631.423996][T25457] netlink: 'syz.2.5502': attribute type 13 has an invalid length. [ 631.517490][T25477] sctp: [Deprecated]: syz.4.5507 (pid 25477) Use of int in maxseg socket option. [ 631.517490][T25477] Use struct sctp_assoc_value instead [ 631.683081][T25488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5510'. [ 631.783236][T25492] : renamed from hsr0 (while UP) [ 632.351645][T25503] netlink: 'syz.4.5516': attribute type 2 has an invalid length. [ 632.381369][T25504] netlink: 'syz.4.5516': attribute type 2 has an invalid length. [ 632.487956][T25509] ipt_REJECT: TCP_RESET invalid for non-tcp [ 632.807438][T25516] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 632.818032][T25516] sctp: [Deprecated]: syz.3.5521 (pid 25516) Use of int in max_burst socket option. [ 632.818032][T25516] Use struct sctp_assoc_value instead [ 632.837182][ T30] audit: type=1800 audit(1767055784.466:14): pid=25518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5520" name="memory.events" dev="tmpfs" ino=2503 res=0 errno=0 [ 632.929873][T25526] openvswitch: netlink: Invalid VLAN frame [ 633.077642][T25526] dvmrp0: entered allmulticast mode [ 633.163745][T25543] sit0: Caught tx_queue_len zero misconfig [ 633.360258][T25554] netlink: 'syz.4.5531': attribute type 2 has an invalid length. [ 633.715932][T25585] syzkaller0: entered promiscuous mode [ 633.721712][T25585] syzkaller0: entered allmulticast mode [ 633.875290][T25594] sctp: [Deprecated]: syz.1.5542 (pid 25594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.875290][T25594] Use struct sctp_sack_info instead [ 633.948050][T25595] x_tables: duplicate underflow at hook 1 [ 633.964398][T25595] x_tables: duplicate underflow at hook 1 [ 633.981690][T25595] x_tables: duplicate underflow at hook 1 [ 633.996062][T25595] x_tables: duplicate underflow at hook 1 [ 634.501090][T25630] sctp: [Deprecated]: syz.2.5553 (pid 25630) Use of int in maxseg socket option. [ 634.501090][T25630] Use struct sctp_assoc_value instead [ 634.673212][T25641] __nla_validate_parse: 11 callbacks suppressed [ 634.673232][T25641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5556'. [ 634.752603][T25645] syzkaller0: entered promiscuous mode [ 634.774008][T25645] syzkaller0: entered allmulticast mode [ 634.819623][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 634.833891][T25652] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 634.855383][T25653] netlink: 'syz.2.5559': attribute type 1 has an invalid length. [ 634.934179][T25655] netlink: 'syz.3.5560': attribute type 12 has an invalid length. [ 634.956330][T25659] netlink: 'syz.3.5560': attribute type 12 has an invalid length. [ 635.078043][T25667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5564'. [ 635.088180][T25668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5564'. [ 635.119575][T25672] Cannot find set identified by id 65534 to match [ 635.464890][T25682] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 635.482721][T25682] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 635.550915][T25688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5571'. [ 635.574331][T25688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5571'. [ 635.657738][T25696] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5573'. [ 635.667089][T25696] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5573'. [ 635.810542][T25701] ip6erspan0: entered promiscuous mode [ 635.837440][T25708] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.5575'. [ 635.885998][T25701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.060568][T25724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5580'. [ 636.276816][T25740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5584'. [ 636.311302][T25740] netlink: 'syz.4.5584': attribute type 29 has an invalid length. [ 636.530448][T25757] IPVS: Unknown mcast interface: vcan0 [ 636.853399][T25777] tc_dump_action: action bad kind [ 636.920531][T25777] can: request_module (can-proto-0) failed. [ 636.957876][T25787] vlan0: entered promiscuous mode [ 636.963309][T25787] vlan0: entered allmulticast mode [ 636.968795][T25787] veth0_vlan: entered allmulticast mode [ 637.143468][T25801] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 637.351509][T25815] tipc: Enabled bearer , priority 0 [ 637.671975][T25834] syzkaller1: entered promiscuous mode [ 637.688158][T25834] syzkaller1: entered allmulticast mode [ 637.753164][T25822] wg1 speed is unknown, defaulting to 1000 [ 637.877168][T25844] netlink: 'syz.2.5617': attribute type 8 has an invalid length. [ 638.244489][T25821] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 638.309557][T25865] openvswitch: netlink: Flow key attr not present in new flow. [ 638.344247][ T10] tipc: Node number set to 2909648754 [ 638.427464][ T5848] block nbd3: Receive control failed (result -32) [ 638.636942][T25882] netlink: 'syz.3.5627': attribute type 9 has an invalid length. [ 638.762268][T25889] netlink: 'syz.1.5631': attribute type 15 has an invalid length. [ 638.917193][T25898] netlink: 'syz.2.5635': attribute type 3 has an invalid length. [ 639.116348][T25913] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 639.197686][T25917] syz_tun: entered allmulticast mode [ 639.316863][T25919] tipc: Enabling of bearer rejected, already enabled [ 639.951041][T25939] wg1 speed is unknown, defaulting to 1000 [ 640.060368][T25957] __nla_validate_parse: 19 callbacks suppressed [ 640.060389][T25957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5656'. [ 640.087373][T25959] sctp: [Deprecated]: syz.4.5655 (pid 25959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.087373][T25959] Use struct sctp_sack_info instead [ 640.130613][T25959] sctp: [Deprecated]: syz.4.5655 (pid 25959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.130613][T25959] Use struct sctp_sack_info instead [ 640.232736][T25967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5659'. [ 640.248496][T25968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5659'. [ 640.266966][T25957] tipc: Enabling of bearer rejected, already enabled [ 640.304732][T25967] atomic_op ffff88801f305998 conn xmit_atomic 0000000000000000 [ 640.638887][T25983] xt_l2tp: wrong L2TP version: 0 [ 640.717565][T25988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5665'. [ 640.912103][T25997] sctp: [Deprecated]: syz.1.5668 (pid 25997) Use of int in max_burst socket option. [ 640.912103][T25997] Use struct sctp_assoc_value instead [ 641.169213][T26013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5674'. [ 641.299573][T26021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5676'. [ 641.477214][T26035] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5679'. [ 641.497219][T26035] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 641.503450][T26035] syzkaller1: Refused to change device type [ 641.663181][T26021] infiniband syz1: set down [ 641.668047][T26021] infiniband syz1: added ipvlan0 [ 641.689781][T26038] netlink: 25 bytes leftover after parsing attributes in process `syz.1.5680'. [ 641.729318][T26042] ip6t_srh: unknown srh match flags 4000 [ 641.736791][T26021] RDS/IB: syz1: added [ 641.741001][T26021] smc: adding ib device syz1 with port count 1 [ 641.741518][T26042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5681'. [ 641.757923][T26021] smc: ib device syz1 port 1 has no pnetid [ 641.781783][T26042] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 641.803974][T26042] netlink: 'syz.3.5681': attribute type 1 has an invalid length. [ 641.811955][T26042] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5681'. [ 641.918567][T26049] netlink: 'syz.1.5682': attribute type 1 has an invalid length. [ 642.550316][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 642.559376][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 642.574949][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 642.583089][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 642.592588][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 643.071730][T26096] netlink: 'syz.3.5698': attribute type 7 has an invalid length. [ 643.265109][T26078] wg1 speed is unknown, defaulting to 1000 [ 643.306277][T26105] netlink: 'syz.1.5702': attribute type 1 has an invalid length. [ 643.400169][T26114] netlink: 'syz.3.5704': attribute type 3 has an invalid length. [ 643.448888][T26110] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 643.460691][T26110] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 643.496316][T26105] gretap3: entered promiscuous mode [ 643.868765][T26134] netlink: 'syz.1.5709': attribute type 3 has an invalid length. [ 644.373684][T26078] chnl_net:caif_netlink_parms(): no params data found [ 644.476876][T26144] netlink: 'syz.4.5712': attribute type 4 has an invalid length. [ 644.644307][ T5833] Bluetooth: hci1: command tx timeout [ 644.756640][T26078] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.763921][T26078] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.784880][T26078] bridge_slave_0: entered allmulticast mode [ 644.801231][T26078] bridge_slave_0: entered promiscuous mode [ 644.831477][T26078] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.844388][T26078] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.851727][T26078] bridge_slave_1: entered allmulticast mode [ 644.861587][T26078] bridge_slave_1: entered promiscuous mode [ 644.911724][T26169] bridge: RTM_NEWNEIGH with invalid ether address [ 644.972310][T26078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.008154][T26078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.101102][T26174] __nla_validate_parse: 12 callbacks suppressed [ 645.101121][T26174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5718'. [ 645.199706][T26078] team0: Port device team_slave_0 added [ 645.225107][T26078] team0: Port device team_slave_1 added [ 645.322859][T26185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5724'. [ 645.337129][T26187] Cannot find del_set index 4 as target [ 645.358684][T26078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.375326][T26078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.478614][T26078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.497532][T26078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.519832][T26078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.547351][T26078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.559525][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5726'. [ 645.569399][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5726'. [ 645.712447][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5726'. [ 645.732564][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5726'. [ 645.774857][T26078] hsr_slave_0: entered promiscuous mode [ 645.789812][T26078] hsr_slave_1: entered promiscuous mode [ 645.823153][T26078] debugfs: 'hsr0' already exists in 'hsr' [ 645.839844][T26078] Cannot create hsr debugfs directory [ 646.000674][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5726'. [ 646.021628][T26207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 646.030495][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5726'. [ 646.242716][T26214] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5733'. [ 646.339190][T26078] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 646.362811][T26078] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 646.389269][T26078] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 646.419736][T26078] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 646.690454][T26078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.724209][ T5833] Bluetooth: hci1: command tx timeout [ 646.764236][T26078] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.820891][T19773] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.828164][T19773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.892347][T19773] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.899613][T19773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.271106][T26078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.537689][T26260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5745'. [ 647.560824][T26262] bridge9: entered promiscuous mode [ 647.593163][T26262] bridge9: entered allmulticast mode [ 647.975978][T26078] veth0_vlan: entered promiscuous mode [ 648.045869][T26078] veth1_vlan: entered promiscuous mode [ 648.136857][T26078] veth0_macvtap: entered promiscuous mode [ 648.167184][T26078] veth1_macvtap: entered promiscuous mode [ 648.291224][T26293] netlink: 'syz.2.5754': attribute type 2 has an invalid length. [ 648.370824][T26078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.449516][T26078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.490503][T19776] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.505784][T19776] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.527190][T26302] sctp: [Deprecated]: syz.2.5758 (pid 26302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 648.527190][T26302] Use struct sctp_sack_info instead [ 648.557303][T26277] IPVS: Unknown mcast interface: geneve1 [ 648.563205][T19776] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.577097][T26302] IPVS: set_ctl: invalid protocol: 80 100.1.1.1:20004 [ 648.591955][T19776] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.798314][T19773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.817441][ T5833] Bluetooth: hci1: command tx timeout [ 648.823087][T19773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.927162][T19773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.958578][T19773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.366463][T26336] netlink: 'syz.5.5766': attribute type 2 has an invalid length. [ 649.417218][T26336] netlink: 'syz.5.5766': attribute type 2 has an invalid length. [ 649.450937][T26336] netlink: 'syz.5.5766': attribute type 2 has an invalid length. [ 649.464403][T26336] netlink: 'syz.5.5766': attribute type 2 has an invalid length. [ 649.484546][T26336] netlink: 'syz.5.5766': attribute type 2 has an invalid length. [ 649.506580][T26336] netlink: 'syz.5.5766': attribute type 2 has an invalid length. [ 649.525571][T26336] netlink: 'syz.5.5766': attribute type 2 has an invalid length. [ 649.550694][T26336] netlink: 'syz.5.5766': attribute type 2 has an invalid length. [ 649.570016][T26336] netlink: 'syz.5.5766': attribute type 2 has an invalid length. [ 650.021204][T26381] sctp: [Deprecated]: syz.2.5783 (pid 26381) Use of int in maxseg socket option. [ 650.021204][T26381] Use struct sctp_assoc_value instead [ 650.178122][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 650.204866][T26388] openvswitch: netlink: Message has 8 unknown bytes. [ 650.346443][T26394] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 650.356074][T26394] syzkaller0: entered promiscuous mode [ 650.361726][T26394] syzkaller0: entered allmulticast mode [ 650.371499][T26396] C: renamed from lo (while UP) [ 650.380963][T26396] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 650.428859][T26402] __nla_validate_parse: 8 callbacks suppressed [ 650.428880][T26402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5789'. [ 650.448410][T26386] tipc: Started in network mode [ 650.449064][T26402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.453337][T26386] tipc: Node identity a24e9d5496bd, cluster identity 4711 [ 650.465710][T26386] tipc: Enabled bearer , priority 0 [ 650.476660][T26402] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5789'. [ 650.491370][T26386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5785'. [ 650.521299][T26385] tipc: Resetting bearer [ 650.543439][T26385] tipc: Disabling bearer [ 650.885688][ T5833] Bluetooth: hci1: command tx timeout [ 650.951330][T26430] x_tables: duplicate underflow at hook 2 [ 650.957856][T26430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.046625][T26433] x_tables: duplicate underflow at hook 2 [ 651.080966][T26439] 8021q: VLANs not supported on wg2 [ 651.167555][T26441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5802'. [ 651.238872][T26443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5803'. [ 651.280179][T26447] bridge0: entered allmulticast mode [ 651.431185][T26459] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5807'. [ 651.440950][T26459] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 651.453845][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5808'. [ 651.463187][T26461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.474935][T26461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.493821][T26461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.523943][T26461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.921122][T26486] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5819'. [ 652.052528][T26488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5820'. [ 652.063504][T26488] IPv6: NLM_F_CREATE should be specified when creating new route [ 652.072401][T26488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 652.079705][T26488] IPv6: NLM_F_CREATE should be set when creating new route [ 652.087071][T26488] IPv6: NLM_F_CREATE should be set when creating new route [ 652.094376][T26488] IPv6: NLM_F_CREATE should be set when creating new route [ 652.157267][T26488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5820'. [ 652.370430][T26515] tap0: tun_chr_ioctl cmd 1074025672 [ 652.379044][T26515] tap0: ignored: set checksum disabled [ 652.459432][T26521] : renamed from hsr0 (while UP) [ 652.505408][T26521] syzkaller0: entered promiscuous mode [ 652.521257][T26521] syzkaller0: entered allmulticast mode [ 652.548892][T26521] tipc: Enabled bearer , priority 0 [ 652.819168][T26532] xt_hashlimit: size too large, truncated to 1048576 [ 652.965732][T26536] bond8: entered promiscuous mode [ 652.980368][T26536] bond8: entered allmulticast mode [ 653.002191][T26536] 8021q: adding VLAN 0 to HW filter on device bond8 [ 653.223610][T26516] tipc: Resetting bearer [ 653.310054][T26516] tipc: Disabling bearer [ 653.544937][T26558] validate_nla: 29 callbacks suppressed [ 653.544958][T26558] netlink: 'syz.3.5841': attribute type 7 has an invalid length. [ 653.580065][T26558] netlink: 'syz.3.5841': attribute type 8 has an invalid length. [ 654.807866][T26609] syzkaller1: entered promiscuous mode [ 654.813408][T26609] syzkaller1: entered allmulticast mode [ 655.031231][T26626] tipc: Enabled bearer , priority 10 [ 655.046947][T26620] veth0_macvtap: Caught tx_queue_len zero misconfig [ 655.185313][T26634] xt_cgroup: path and classid specified [ 655.383090][T26647] netlink: 'syz.5.5868': attribute type 8 has an invalid length. [ 655.477799][T26637] [ 655.480203][T26637] ====================================================== [ 655.487250][T26637] WARNING: possible circular locking dependency detected [ 655.494351][T26637] syzkaller #0 Not tainted [ 655.498808][T26637] ------------------------------------------------------ [ 655.505847][T26637] syz.3.5865/26637 is trying to acquire lock: [ 655.511945][T26637] ffff8880258085a0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b4/0x450 [ 655.521493][T26637] [ 655.521493][T26637] but task is already holding lock: [ 655.528885][T26637] ffff888025808060 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x199/0x450 [ 655.539133][T26637] [ 655.539133][T26637] which lock already depends on the new lock. [ 655.539133][T26637] [ 655.549600][T26637] [ 655.549600][T26637] the existing dependency chain (in reverse order) is: [ 655.558649][T26637] [ 655.558649][T26637] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 655.567303][T26637] blk_alloc_queue+0x52f/0x610 [ 655.572641][T26637] __blk_mq_alloc_disk+0x15c/0x340 [ 655.578320][T26637] nbd_dev_add+0x46c/0xae0 [ 655.583299][T26637] nbd_init+0x168/0x1f0 [ 655.588017][T26637] do_one_initcall+0x1fb/0x820 [ 655.593343][T26637] do_initcall_level+0x104/0x190 [ 655.598835][T26637] do_initcalls+0x59/0xa0 [ 655.603713][T26637] kernel_init_freeable+0x334/0x4b0 [ 655.609467][T26637] kernel_init+0x1d/0x1d0 [ 655.614367][T26637] ret_from_fork+0x599/0xb30 [ 655.619508][T26637] ret_from_fork_asm+0x1a/0x30 [ 655.624836][T26637] [ 655.624836][T26637] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 655.632090][T26637] fs_reclaim_acquire+0x72/0x100 [ 655.637599][T26637] kmem_cache_alloc_node_noprof+0x48/0x720 [ 655.643972][T26637] __alloc_skb+0x255/0x430 [ 655.648946][T26637] tcp_stream_alloc_skb+0x3d/0x350 [ 655.654622][T26637] tcp_sendmsg_locked+0x1ab8/0x5520 [ 655.660386][T26637] tcp_sendmsg+0x2f/0x50 [ 655.665189][T26637] __sock_sendmsg+0x19c/0x270 [ 655.670431][T26637] sock_write_iter+0x279/0x360 [ 655.675765][T26637] vfs_write+0x5c9/0xb30 [ 655.680559][T26637] ksys_write+0x145/0x250 [ 655.685438][T26637] do_syscall_64+0xfa/0xf80 [ 655.690480][T26637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.696906][T26637] [ 655.696906][T26637] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 655.704588][T26637] lock_sock_nested+0x48/0x100 [ 655.709905][T26637] inet_shutdown+0x6a/0x390 [ 655.714951][T26637] nbd_mark_nsock_dead+0x2e9/0x560 [ 655.720623][T26637] recv_work+0x1b38/0x1c50 [ 655.725585][T26637] process_scheduled_works+0xad1/0x1770 [ 655.731666][T26637] worker_thread+0x8a0/0xda0 [ 655.736790][T26637] kthread+0x711/0x8a0 [ 655.741404][T26637] ret_from_fork+0x599/0xb30 [ 655.746700][T26637] ret_from_fork_asm+0x1a/0x30 [ 655.752006][T26637] [ 655.752006][T26637] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 655.759679][T26637] __mutex_lock+0x187/0x1350 [ 655.764992][T26637] nbd_queue_rq+0x257/0xf10 [ 655.770045][T26637] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 655.776138][T26637] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 655.783013][T26637] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 655.789537][T26637] blk_mq_run_hw_queue+0x348/0x4f0 [ 655.795203][T26637] blk_mq_dispatch_list+0xd0b/0xe00 [ 655.800959][T26637] blk_mq_flush_plug_list+0x469/0x550 [ 655.806910][T26637] __blk_flush_plug+0x3d3/0x4b0 [ 655.812314][T26637] __submit_bio+0x2d0/0x5a0 [ 655.817359][T26637] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 655.823535][T26637] block_read_full_folio+0x599/0x830 [ 655.829543][T26637] filemap_read_folio+0x117/0x380 [ 655.835119][T26637] do_read_cache_folio+0x358/0x590 [ 655.840798][T26637] read_part_sector+0xb6/0x2b0 [ 655.846101][T26637] adfspart_check_ICS+0xa4/0xa50 [ 655.851585][T26637] bdev_disk_changed+0x75f/0x14b0 [ 655.857159][T26637] blkdev_get_whole+0x380/0x510 [ 655.862560][T26637] bdev_open+0x31e/0xd30 [ 655.867342][T26637] blkdev_open+0x457/0x600 [ 655.872301][T26637] do_dentry_open+0x7ce/0x1420 [ 655.877609][T26637] vfs_open+0x3b/0x340 [ 655.882220][T26637] path_openat+0x340e/0x3dd0 [ 655.887348][T26637] do_filp_open+0x1fa/0x410 [ 655.892390][T26637] do_sys_openat2+0x121/0x200 [ 655.897611][T26637] __x64_sys_openat+0x138/0x170 [ 655.903000][T26637] do_syscall_64+0xfa/0xf80 [ 655.908051][T26637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.914486][T26637] [ 655.914486][T26637] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 655.921730][T26637] __mutex_lock+0x187/0x1350 [ 655.926871][T26637] nbd_queue_rq+0xc8/0xf10 [ 655.931945][T26637] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 655.938139][T26637] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 655.945027][T26637] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 655.951560][T26637] blk_mq_run_hw_queue+0x348/0x4f0 [ 655.957226][T26637] blk_mq_dispatch_list+0xd0b/0xe00 [ 655.962986][T26637] blk_mq_flush_plug_list+0x469/0x550 [ 655.968906][T26637] __blk_flush_plug+0x3d3/0x4b0 [ 655.974304][T26637] __submit_bio+0x2d0/0x5a0 [ 655.979353][T26637] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 655.985618][T26637] block_read_full_folio+0x599/0x830 [ 655.991438][T26637] filemap_read_folio+0x117/0x380 [ 655.997005][T26637] do_read_cache_folio+0x358/0x590 [ 656.002656][T26637] read_part_sector+0xb6/0x2b0 [ 656.007963][T26637] adfspart_check_ICS+0xa4/0xa50 [ 656.013446][T26637] bdev_disk_changed+0x75f/0x14b0 [ 656.019048][T26637] blkdev_get_whole+0x380/0x510 [ 656.024461][T26637] bdev_open+0x31e/0xd30 [ 656.029340][T26637] blkdev_open+0x457/0x600 [ 656.034384][T26637] do_dentry_open+0x7ce/0x1420 [ 656.039707][T26637] vfs_open+0x3b/0x340 [ 656.044320][T26637] path_openat+0x340e/0x3dd0 [ 656.049446][T26637] do_filp_open+0x1fa/0x410 [ 656.054492][T26637] do_sys_openat2+0x121/0x200 [ 656.059715][T26637] __x64_sys_openat+0x138/0x170 [ 656.065107][T26637] do_syscall_64+0xfa/0xf80 [ 656.070149][T26637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.076582][T26637] [ 656.076582][T26637] -> #1 (set->srcu){.+.+}-{0:0}: [ 656.083731][T26637] __synchronize_srcu+0x96/0x390 [ 656.089209][T26637] elevator_switch+0x12b/0x5f0 [ 656.094520][T26637] elevator_change+0x2cd/0x450 [ 656.099829][T26637] elevator_set_default+0x1af/0x2b0 [ 656.105587][T26637] blk_register_queue+0x34e/0x3f0 [ 656.111157][T26637] __add_disk+0x677/0xd50 [ 656.116029][T26637] add_disk_fwnode+0xfc/0x480 [ 656.121298][T26637] nbd_dev_add+0x717/0xae0 [ 656.126279][T26637] nbd_init+0x168/0x1f0 [ 656.130986][T26637] do_one_initcall+0x1fb/0x820 [ 656.136298][T26637] do_initcall_level+0x104/0x190 [ 656.141775][T26637] do_initcalls+0x59/0xa0 [ 656.146648][T26637] kernel_init_freeable+0x334/0x4b0 [ 656.152385][T26637] kernel_init+0x1d/0x1d0 [ 656.157261][T26637] ret_from_fork+0x599/0xb30 [ 656.162387][T26637] ret_from_fork_asm+0x1a/0x30 [ 656.167699][T26637] [ 656.167699][T26637] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 656.175542][T26637] __lock_acquire+0x15a6/0x2cf0 [ 656.180938][T26637] lock_acquire+0x117/0x340 [ 656.185980][T26637] __mutex_lock+0x187/0x1350 [ 656.191108][T26637] elevator_change+0x1b4/0x450 [ 656.196850][T26637] elevator_set_none+0x98/0x110 [ 656.202290][T26637] blk_mq_update_nr_hw_queues+0x5b4/0x1a80 [ 656.208651][T26637] nbd_start_device+0x17f/0xb10 [ 656.214050][T26637] nbd_genl_connect+0x1353/0x1900 [ 656.219627][T26637] genl_family_rcv_msg_doit+0x215/0x300 [ 656.225798][T26637] genl_rcv_msg+0x60e/0x790 [ 656.230843][T26637] netlink_rcv_skb+0x208/0x470 [ 656.236146][T26637] genl_rcv+0x28/0x40 [ 656.240662][T26637] netlink_unicast+0x82f/0x9e0 [ 656.245963][T26637] netlink_sendmsg+0x805/0xb30 [ 656.251300][T26637] __sock_sendmsg+0x21c/0x270 [ 656.256606][T26637] ____sys_sendmsg+0x505/0x820 [ 656.261907][T26637] ___sys_sendmsg+0x21f/0x2a0 [ 656.267124][T26637] __x64_sys_sendmsg+0x19b/0x260 [ 656.272607][T26637] do_syscall_64+0xfa/0xf80 [ 656.277657][T26637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.284094][T26637] [ 656.284094][T26637] other info that might help us debug this: [ 656.284094][T26637] [ 656.294336][T26637] Chain exists of: [ 656.294336][T26637] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 656.294336][T26637] [ 656.308102][T26637] Possible unsafe locking scenario: [ 656.308102][T26637] [ 656.315573][T26637] CPU0 CPU1 [ 656.320950][T26637] ---- ---- [ 656.326325][T26637] lock(&q->q_usage_counter(io)#54); [ 656.331729][T26637] lock(fs_reclaim); [ 656.338250][T26637] lock(&q->q_usage_counter(io)#54); [ 656.346170][T26637] lock(&q->elevator_lock); [ 656.350777][T26637] [ 656.350777][T26637] *** DEADLOCK *** [ 656.350777][T26637] [ 656.358935][T26637] 6 locks held by syz.3.5865/26637: [ 656.364145][T26637] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 656.372366][T26637] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 656.381382][T26637] #2: ffff8880256a61d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa6/0x1a80 [ 656.392825][T26637] #3: ffff8880256a60d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb9/0x1a80 [ 656.403818][T26637] #4: ffff888025808060 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x199/0x450 [ 656.414557][T26637] #5: ffff888025808098 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x199/0x450 [ 656.425467][T26637] [ 656.425467][T26637] stack backtrace: [ 656.431377][T26637] CPU: 1 UID: 0 PID: 26637 Comm: syz.3.5865 Not tainted syzkaller #0 PREEMPT(full) [ 656.431399][T26637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.431410][T26637] Call Trace: [ 656.431418][T26637] [ 656.431425][T26637] dump_stack_lvl+0x189/0x250 [ 656.431450][T26637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.431470][T26637] ? __pfx__printk+0x10/0x10 [ 656.431496][T26637] ? print_lock_name+0xde/0x100 [ 656.431522][T26637] print_circular_bug+0x2e2/0x300 [ 656.431551][T26637] check_noncircular+0x12e/0x150 [ 656.431575][T26637] __lock_acquire+0x15a6/0x2cf0 [ 656.431603][T26637] ? elevator_change+0x1b4/0x450 [ 656.431623][T26637] lock_acquire+0x117/0x340 [ 656.431639][T26637] ? elevator_change+0x1b4/0x450 [ 656.431661][T26637] ? work_grab_pending+0x44f/0x990 [ 656.431685][T26637] __mutex_lock+0x187/0x1350 [ 656.431703][T26637] ? elevator_change+0x1b4/0x450 [ 656.431726][T26637] ? enable_work+0x1b9/0x2b0 [ 656.431748][T26637] ? elevator_change+0x1b4/0x450 [ 656.431767][T26637] ? enable_work+0x21a/0x2b0 [ 656.431787][T26637] ? queue_hctx+0x1e/0x240 [ 656.431804][T26637] ? __pfx___mutex_lock+0x10/0x10 [ 656.431826][T26637] ? __cancel_work_sync+0xf7/0x110 [ 656.431847][T26637] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 656.431872][T26637] elevator_change+0x1b4/0x450 [ 656.431896][T26637] elevator_set_none+0x98/0x110 [ 656.431918][T26637] ? __pfx_elevator_set_none+0x10/0x10 [ 656.431942][T26637] ? xa_load+0x1ea/0x210 [ 656.431963][T26637] blk_mq_update_nr_hw_queues+0x5b4/0x1a80 [ 656.431995][T26637] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 656.432015][T26637] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 656.432045][T26637] ? sysfs_add_file_mode_ns+0x259/0x300 [ 656.432075][T26637] nbd_start_device+0x17f/0xb10 [ 656.432103][T26637] ? device_create_file+0xf4/0x1b0 [ 656.432131][T26637] nbd_genl_connect+0x1353/0x1900 [ 656.432159][T26637] ? __pfx_nbd_genl_connect+0x10/0x10 [ 656.432186][T26637] ? rcu_is_watching+0x15/0xb0 [ 656.432208][T26637] ? __nla_parse+0x40/0x60 [ 656.432228][T26637] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 656.432250][T26637] genl_family_rcv_msg_doit+0x215/0x300 [ 656.432269][T26637] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 656.432292][T26637] ? __lock_acquire+0x6b6/0x2cf0 [ 656.432312][T26637] genl_rcv_msg+0x60e/0x790 [ 656.432330][T26637] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.432344][T26637] ? __pfx_nbd_genl_connect+0x10/0x10 [ 656.432374][T26637] netlink_rcv_skb+0x208/0x470 [ 656.432396][T26637] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.432412][T26637] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.432440][T26637] ? down_read+0x274/0x2e0 [ 656.432458][T26637] ? genl_rcv+0xd/0x40 [ 656.432472][T26637] genl_rcv+0x28/0x40 [ 656.432485][T26637] netlink_unicast+0x82f/0x9e0 [ 656.432508][T26637] ? __pfx_netlink_unicast+0x10/0x10 [ 656.432526][T26637] ? netlink_sendmsg+0x642/0xb30 [ 656.432553][T26637] ? skb_put+0x11b/0x210 [ 656.432573][T26637] netlink_sendmsg+0x805/0xb30 [ 656.432599][T26637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.432622][T26637] ? aa_sock_msg_perm+0xf1/0x1b0 [ 656.432645][T26637] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.432660][T26637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.432682][T26637] __sock_sendmsg+0x21c/0x270 [ 656.432708][T26637] ____sys_sendmsg+0x505/0x820 [ 656.432731][T26637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.432754][T26637] ? import_iovec+0x74/0xa0 [ 656.432775][T26637] ___sys_sendmsg+0x21f/0x2a0 [ 656.432796][T26637] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.432819][T26637] ? futex_wait+0x285/0x360 [ 656.432852][T26637] ? __fget_files+0x2a/0x420 [ 656.432873][T26637] ? __fget_files+0x3a0/0x420 [ 656.432898][T26637] __x64_sys_sendmsg+0x19b/0x260 [ 656.432919][T26637] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.432946][T26637] ? do_syscall_64+0xbe/0xf80 [ 656.432966][T26637] do_syscall_64+0xfa/0xf80 [ 656.432983][T26637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.433000][T26637] ? clear_bhb_loop+0x60/0xb0 [ 656.433019][T26637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.433035][T26637] RIP: 0033:0x7f12c6f8f749 [ 656.433051][T26637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.433065][T26637] RSP: 002b:00007f12c7f11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.433083][T26637] RAX: ffffffffffffffda RBX: 00007f12c71e5fa0 RCX: 00007f12c6f8f749 [ 656.433096][T26637] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 656.433106][T26637] RBP: 00007f12c7013f91 R08: 0000000000000000 R09: 0000000000000000 [ 656.433117][T26637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.433127][T26637] R13: 00007f12c71e6038 R14: 00007f12c71e5fa0 R15: 00007ffe202116a8 [ 656.433147][T26637] [ 657.119555][ T5848] block nbd5: Receive control failed (result -32) [ 657.126265][ T5840] block nbd5: Receive control failed (result -32) [ 657.133054][ T5833] block nbd5: Receive control failed (result -32) [ 657.164337][T26637] nbd5: detected capacity change from 0 to 127