last executing test programs: 7.845827727s ago: executing program 2 (id=4441): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x204000) 7.097675401s ago: executing program 2 (id=4453): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0xfffffffc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private0, 0x5, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@loopback, 0x4e23, 0xf800, 0x4e22, 0xfff5, 0x2, 0xa0, 0x60, 0x3c, r4, r5}, {0x9, 0x7, 0x3a, 0x3, 0x92, 0x2, 0x4, 0x40}, {0xff, 0x100000001, 0x76, 0xe56}, 0x9, 0x6e6bb1, 0x1, 0x0, 0x3, 0x3}, {{@in=@broadcast, 0x4d4, 0x6c}, 0xa, @in6=@loopback, 0x3501, 0x2, 0x0, 0x6, 0x7, 0x55a5, 0x4}}, 0xe8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r7, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x10102, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) read(r3, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) close(r3) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 6.630720488s ago: executing program 2 (id=4459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'vcan0\x00'}}, 0x1e) (async) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'vcan0\x00'}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)=""/211, 0xd3}, {0x0}], 0x2}, 0x4}], 0x1, 0x62, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)=""/211, 0xd3}, {0x0}], 0x2}, 0x4}], 0x1, 0x62, 0x0) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0xc8, 0x2c, 0x109, 0x870bd22, 0x25dfdbfc, {0x2}, [@generic="36a6cfcbb37656478d8c1ca9543df50a0f3af69b5ec0f5d9ab4cc6c64aab0237809a0000f2d58b7355d58bebc9703d4cd938e81555325c28d4eb93f3f3130853380abe1b64020e637075f8b7e0c67a3691bf5f650300acc16cc84cd33f", @nested={0x44, 0x6c, 0x0, 0x1, [@nested={0x18, 0xc0, 0x0, 0x1, [@typed={0x14, 0x50, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x18, 0x17, 0x0, 0x1, [@typed={0x14, 0x101, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x43}}]}, @nested={0x8, 0x50, 0x0, 0x1, [@nested={0x4, 0x14d}]}, @typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @generic="de4039ea137120f4d8f2790c2e3ddbd61216"]}, 0xc8}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x416041, 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) 6.166858853s ago: executing program 2 (id=4463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173ba44718b0b7d3a69702c706f72"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028014000300ff0100000000000000000000000000010500090004"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x0, 0x3}, [@IFLA_MTU={0x8, 0x4, 0xfff1}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44844) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x24, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x14) 2.701775917s ago: executing program 3 (id=4500): socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000480)={@val, @void, @eth={@random="c98f0b33dc4c", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2c, 0x0, @gue={{0x1, 0x0, 0x2, 0x6, 0x8106, @void}, "134a3185f7b1806ddfe808783210947f8bd182344a7e976d7d870d0969cd71fb"}}}}}}}, 0x52) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}}, 0x0) close(r4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 2.232206248s ago: executing program 3 (id=4503): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x5, 0x0, 0x3}) socket(0x1, 0x803, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}]}, 0x48}}, 0x4000010) connect$inet(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x5, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010320000000000000000c0000000800040001"], 0x1c}}, 0x4000000) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2.067249836s ago: executing program 1 (id=4505): r0 = socket$isdn(0x22, 0x2, 0x22) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x25, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xcb, 0x5, 0x80f7}, {0x6, 0xfc, 0x4, 0x75}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x5, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socketpair(0x2e, 0x4, 0xd, &(0x7f00000001c0)) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) pipe(&(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x2d, 0x0, 0x3, 0xb}, {0x20}, {}, {0x0, 0x2}, {0x6}]}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 2.022730917s ago: executing program 3 (id=4506): r0 = socket$inet6(0xa, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x3, 0x2}}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000440)={0x12, {{0x29, 0x0, 0x3e000000, @empty, 0x40000005}}}, 0x88) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x240080, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x10]}, {0x3ee, 0x6, 0x3f3, 0xf}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x4}) sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x328}, 0x1, 0x0, 0x0, 0x24008081}, 0x10) 2.009401362s ago: executing program 2 (id=4507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x75}], 0x5}, 0x7}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmmsg$inet(r3, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="7fe1b33315b1fd8cd2523811f49a284c7da2c2dab8d7a3562386f41e36be53b97c6eb951e4cd864a0d49c5251ea819d1fb396061defd1768694a459ea9b8e4c53f8b742f21f50ec2a79795f2e2f94bf0da0d30ad6eac955cedbf65b0838294e2bcea1cbd94f308f0774bd9f4b60e9d6a1cf16cf7e6f45924e9d285da684857411a5b3d53f20d6832d37683ab1b1f2a8221086025", 0x94}, {&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d6188ce88368c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951ac76e2deb4f3e8cd737a4f232eb5554096503e38701", 0xfffffeee}, {&(0x7f0000000400)="03362a247861461b950daf81800a038f1ee4d89769187dcd3a5f3b23aaab61614df7ed7e9300c2cbd640ee12e7d98ef42c23e9f77543d8561a06ae5dca898dbcf6c4696e3a49a32599699c258a5766784886810a9a80505a31031800d541c3057f00f988f68cac40b9ff64906e2a4d611b85625dcc2e6ea9891e12b1a9fda5d3a53c6a5fffaddefda1e252bdfa858a25788978e89d8af722c2ee51b5beb204a6df21832f98d6774b8c876e8c42177e5f515e5b0852ed9ecbdcdb4f8b04991d3dc9afe709190f8b22dbd6af44730a68d599c3e3e2137bcc57e3044c962e27d0358fff26441cc47d00ac9734080efeea934d381735a24ddd5a1e88bd286012dc9d4288a26bc76b37073c7bb4e013d4ce3bf6f7d15370f50409f54ee552d7a490f7ae55a32b51e586361e1f2dc16eb8f426876ba006508e3a232cb43d057a5023d493d5dccebcb5cf4d863cfcbd20722023aed8bdb55f1456d3d3071532817816cb28cb0915ed566a6c17c5f621f04c8d9dfa360e96f3137e18389ff4bdb558fcd33c83cdb99fe789acfc7b2b7be37d74297fc05c94e220b63f2317b6137b110248923988a312ac165e66b636b933d2a4db91cf18522ddac19a142e3394c97a9f29639f1f743cf109839a2d35eadc2453ceb05f699bb8068085994c699ff9a49cfdbc70db70ca96e492b33d2da56faf310c6010f926cda4398ffd8ce8c550f589a40cd7a286bbb63220ba98f9110a7fb572a790416eac12d7789368b4668e8bbcc257b46e3c4c13db9a292f83f19de3b90f448742a719a517b0edfa39c3f14bc503b37aa69f70e5a901915aa08d4307285b788608c72411be35516ac3fd3922562359d9fc3616a52fece08389963c840735b00162722d6a23a5cc52e9a1cc52aeda95e7b4a297b5de545926b2db97434d29f7267b42fd773da4b3aad9f60471396aede82f96dd85464fa8bf3d406ae28a4acf14432224620647617eb70cfaf7d823dc8a580fdfda1b7a9a78bfa2be16dcbaaec5fdeba3ab9a92a2addedee882f7f80a1abf694997042267eb0a632584ca1587345879fac1b9a68005f3ec587455112ee44091fc45f0c5176b192adccf55db0267dff5745a810ffb0a23feaa27bc7e228f995b7e3735b24e43ad2771f66156853b9781b8196bbf9f75c6b2186d18490f6bcb5f6b96a5c348210347c1dbde123ccab049ed4e40c7894f83009f20a46ae31bf1cf325b18fab0064ad7d2085d4d1b2a2c6d2b1baf253ac6d5603acd7cb68b532cb458b4a042c4f9145759c178354535ee0530d2d80b09962c2c2bba18e0fed3f438f7ccc5c4e0b068f9682594e842aa9d8eab34581a57bef1bfb881adb216d82a30798fcf1e0d58a0a8588794d259eb214b225df2531a8e3675fabbe9183e7b7f9cd32d58960ecd29c25b5cab77b967afa18affd6273a1dff867527cc5d4e0fd86b25111f1f5db7be27befc50e7e146376d6cbde005f44affe2a57cf8b87b22dc1ce77dde1c3c30f40023fef56dde8b2a5262febdcefeb7e3a6cb0ef41dc661ac61189cac1ffdcd1a36614a7a795908919904a426a25030e7543d4b7febeadf516bff206efb5f83618d7f54934bfa25899ee109d4ac63646dd9628ecbb5028967788107b6d855beb77344f4dcc13dcdfa45596f658e3dfdbc05a31fc42cb0ebd55fead9d46a65a923703354169166069a1949b501162ea4ada11cbf49eec13fe0b434db20399de0542e43c0b75db3784b589b9c349b71f6fa6cfa07622aba0e8db90101b24c7acd6acdb947e4e03fbabe7d1410d10c41e7c32d3395c79860e9fd8d26d14f7fe7775e6968ff729c719231fdce2c58819d14c3b91e971f2c723955164788387a7eb4edbef98136a67e780e80c8810f80ca1b0fdd821af700879df573e9662124ba081b082a95237b521fdaa623d1432c24f0b972aab65ca85d999a8edff56a3d0e695ac42393268253cad4c5c58130690583820cb53cd2b5da938007d617bb22f0108cdecfc3e451f1990b1f92ecc7554d1c70d0e15d3dec2c092d66dcfe33adb040457ee1813201f66034c2ad2ba15dbae8a9c390d8bef9ac58d6cd7562b0b21d787b80aa790c6419edac0cd0e3005bff73418ffbc07642b0e02ca30c3bdff995854e532d733da75fa813be8bda0cbbe2a6f99688d128e3b434f2b549d9d4b2bca9e02c53c87d0943fe78a9c17feba73dd93617eb16b288749bc3aa8c9e4a66da3ebd1c41b3697917938478743adb5309b429e77ae39a7522fd14e1ad20181d4df3dd6b3a2e92b167373e7f73bf8e5b42ba8f9030f7f3718b2a8bffb842f0a0e4e317786ffa9d3eef9407064cbffa5f880e4c00401c4ba1a430e6bb42a39e6c9afa83a50baba9b14105e5e20693e5badad3b758ecc4e0abb29dfb23bc3f0cc4236852d11b5cd696f4bea2310b02a184dd979483ca606d1de047cc34e31c2600e11b7529172424b81f35f7b8d7490e14178a51de0e752f0fee80662e1486bb5619b7e78583d881b410ab26861372ca1df6528bf173f29fed933408fe985f44716406162dea9e628fea4f4d3b6b4bf003576a4bfceb9db63f4924b3ac84e1b8898792077ad8a3736601bff35e47c03abb5cd4aab723a3dd2387a44d8579268656207481e22e5ec4d92fe07b29f17f2d59051121110001c6f29b65c46551c23f76d3a123f790a2936404bd28592c11c48eb4a89d360f8e26107745ab4f8f843a781375cc468277c3ca1ab2b0af3d52236887a9d706c002ac314e3779cf4928b7a0c3f6dce2ee103f33ca8d441ef5ff6c31b4dddbfd88780534308e4d8226753fb0ee385bb816f0e3c0e7b50d91b613852b8464272b65ead9ff4c9f3dcdcf936cfe25a36821a2f3c720a8f9a0f91adbdb09728988c8e2c0c4aebd3d120284461f7a5d3cd06c73a5f4954ec8f7b62939bdfe590ec9a706a8980ee8c01cc29e1cfd0d7cd2eaf676f802d02cf5318390853db8fcc921023a4fe524462e63009a27bacf40ab28d82a604b3dcc9a62d85f85e269fc1a0a09b45742780e2296c403c632e903e53d75d97e0b09f0130f85e43c697c4f09b90f0d422b0800c768b4f776779ecc72c5deea79073ea4fcbd1f8a6ad8442d3d5c462a1cece5c82f935ecf5570715c6515113452b414688db7ec8fd883fa5a52870cd9e182cb5e558dfc61e59f5014cc554af826b6f4c93795994121d5c8be3a389cd4629287f0ce71503554802025080932d60e9b1b0432824460b54d47d2ddfb55e5839e79bda31d5c3827a0ff72c45ba424b956b86d606f1d0526cafd12f2bf9acce0c2d4dd1afddad2503a9f1acf37e1cb2b61b744df79f40bac311498ceb1f86ca607f050922445094cdb5670e34ea4dabc03f6d06db476726444b021cb9c9bcbca4edf71d599fa38a4f647701348f4a816e62dc85b5e0210f3c989534fe2291290bd542da4c093679dc5f10f568391b281a82cc8f426b0753231d4737729e982c89d8fe2f182364610c0f8b8ae208ba5eef61cc5435885ddfdaf75837d761612fb454f792cf208aece4e569c7e4a17ae6d45868886afb90d257454f9b10265d91e362e397486241d7c99e93d8b81ba13972cad3aa17daea259bd08c9fc0fca35823fea527d01cb6c1856113daebfe96525b6680701c2125ca45854dc4ec1e31c29ed8647bae2959345d6b8356eaad68bb0a1aa8aeaacb3ee587bbe0341fb9ccca52aad5682ac488778ab57b800ef53eb33c6b0eaf08b3e21e5564ee0f8ac31659e6bc034e26f39bd92dfa2edf2380f40bf609ca8688bc233f6a3505539bb4e9c4025ceede51efc1f0e01455c3e4559211460e94a5e275019a455c2ba3058bee098a6ef5b2bf4c0d72f01727f9b505449ce056a2a44cae2bc297abd13c2b8d4e2e867043e5c085b4c10e6b35bc0f250941e04366389b2d644184b9d60558e5859da75464ef03aa72f84c441c6be90ecdfe05dda2af794108ff6c0c6269ad2abd7ff7df5dcceff4d0413ca196ddf0e431de996a877096a91a4f012b063c4ba99cae7f014be94fe23f8fcf56c203298b909d31eb7bedc5324b6680d94f36d0a7f381e389178fb3ae1086e78a1c70d74d1ab68c02fe0d9c60cfdd5bf7d34b356d5d68aad8354084dc466c1e4c8133b9dd1eabb56d820a3ff755f888ff194ad8d05f003943db6a5435e136d95bd208d1b8679fdf76aad67d92aa8512299140d37b1ff2805b17c6ea4309cf5fbc6a609d5337be48e765c0fa167251ce0223e1b361b1e98ad773fc33f0387b270ead15bb660ebc91530609c5f184f169a3a023eea05e1527232da231d19740a095af4e4e740d902063d3a74a1b0d9615837b9f0a713b47c703fcbac2ddb2150ef78754726789ace1c43383554dd4ab4894d97e4f5213e623910d46911185ff247af2faddc6906106e799a6e4e0b496d50ee1e239772d83f01582c450171a050514b2075281d1765cb7232f5a9dd3ac577429ed6d7a954ea5213ade2a5332453e6fc2cf49dbbfa8cf3b485161aa968be16c016d51fb9fad8429e93033992ba3540c4603f8318b591ad1e28625831b68e2c99ff1b29e72ca4ab4eec5aaf60a254a8db9a036123e5c5d8f0a108adc616f243dbbe523a3ad1e6a4c259cc485ff904bfcd15762a77db7e3455dfcb8673f92a03c5248caa53a0119703157e987e26515cf67848970b19423cbd91017336bec9cdc38b4da3c8d980f261682e3479dfdad4d7d20a44f1e1bae69a84968fe9049c0e023b2d1b096002d35a9f4091a0ed3067e40e89358a3f43999c9a87405630aa90a705be0636437c57bc6ad5157d900daf17adaf107753351a2b4fc0569067611778e5f221ff1d945ba8413242aef004dee521ac1af493eb92c91d17734923370449c1e68d68a3eba0b149833912a55d2b37f2af8f288d198f017ae627f0fbc7ca34326abfbc37ed232519634460a02f2ff3a674edd44fecd48b27b366ad3561d1dd8ef0d837ad92492cf8efcc1388fabb57175c2325f628bfc5665941a8e788f6537ba27b1b7b6fbcebfb232999e08fe8245240132450987b456aeea841cf49ea7004affa97331ff3b82b3632102cba8f73cc60801eac67f74e710a955995bffd12f30925628a8f31265dc399169c7486df5ef18d07d2753233f7fe59e0b6876b6a23f88f16dcb27673bfb7a1b4613905848cedfedf384ab991300b85eedfe945680755c2c4f3c375e6d87d9c78e157d98cbf0c6abbce39d793de950f8c62795276c917ce5856cdfc67332f30d33b6ae734f79d50947812653a20978f8280f64c495a8a2267688e71bb477b58c8414c13eaa95b88d6220360561bc3417e261771cec97d1e42bfa200816ecde68b011b5efdd12bacd3c3a046cf43129935d19ebad22c36151efe39c652c99fecfcdd284c5693febb30ac288e", 0xeef}], 0x3}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229c58deb7f2d95c793aee3365bd04cc81c838294ad5237c74cd19b3ea8431a190ea1caf0524e623f56791d2d55bf1a24c7c7b42198afd133af01bbbd167d04159bceb80648e2e740f1d58b762d50ed842933815a8f167dc01363284d8f27e69a83509fd9f1dd0cdeca61ffdb9524f408d698154fbb2ff5381369933e1815ed1703e58405478629df4311893798ead4acd67bc6ab48", 0xc7}, {&(0x7f0000001540)="2aba9e4cc9b55274aa3a5dbd35f30d62249f7226e2ffa535df463037a323c732a94981bd91b9d134d79106da4929ddf57f26696b8911da0e8126ca4c7a6f10192c1ef6dc0191c8a10b6526df22206120b8767c1a1ec3be23fe90f3e3c0092aca4116e03096593f7964ac3c077036e624ff82f8348afba5254a1105", 0x7b}, {&(0x7f0000002a00)="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", 0x14f}, {&(0x7f0000002980)="c61fc952e32af9d06ed135ef945ba121afc7dcbb95e00a15a1aebe2c9d63854ab7d8f30b55ce072b49867372e0c57347c9f93f5d57bbf8ab12ae426441b805834fd2c17e1de7d5e36d8fc36254b673a7ca8be8800bfd25196e325a8beb921abd1654c40b52cd19a01844", 0x6a}, {&(0x7f0000001700)="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", 0xfe}], 0x5}}, {{&(0x7f0000001880)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000019c0)}}], 0x3, 0x40) close(r3) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) write(r4, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000015c0)={0x6, 'wg1\x00', {0x392}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001380)={'vlan0\x00', 0x0}) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c000000fedbdf25000074000000000000000000", @ANYRES32=r5, @ANYBLOB="089805000750050008001300", @ANYRES32=r6, @ANYBLOB="1400350076657468305f6d616376746170000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x4e}, 0x1, 0x0, 0x0, 0x4000004}, 0x40c4) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "09eef577cf8bf3c3", "3eaa363d71f8ed8769fde868e956aa0a5d0782e1b448ef2f4533a8eeff2c4466", "792a58eb", "07be79acb0cff47a"}, 0x38) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) 1.895250335s ago: executing program 3 (id=4509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x11}, 0x30044080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = getuid() sendmsg$nl_xfrm(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@delsa={0x164, 0x11, 0x8, 0x70bd2b, 0x25dfdbfe, {@in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4d4, 0x2, 0x32}, [@replay_esn_val={0x28, 0x17, {0x3, 0x70bd28, 0x70bd2a, 0x70bd26, 0x70bd26, 0x2, [0xd96, 0xc335, 0x4]}}, @lifetime_val={0x24, 0x9, {0x2, 0x3, 0x2, 0x2}}, @lastused={0xc}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd25}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @policy={0xac, 0x7, {{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e21, 0x6, 0x4e22, 0x1, 0x2, 0xa0, 0x0, 0x67, r4, r5}, {0x0, 0xff, 0x431c818a, 0x2, 0x8, 0xc83, 0x4, 0x2}, {0x2, 0x0, 0x2000000000, 0x5}, 0x7, 0x6e6bb7, 0x2, 0x1, 0x1}}, @coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x164}, 0x1, 0x0, 0x0, 0x240048b0}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x160, r6, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x66a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa46}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x51d2}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "d87340e583315724aeb6521851c5b423bac2273b0ce455a8a972b0d9"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8445}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8537}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f00000006c0)=0x4, 0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000700)={0x2000}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r1, 0x222, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff7}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xfffb}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x2}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x52}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0xfffffffffffffffc, 0x20008010) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000880), 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x8001, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10d, 0x10d, 0x8, [@const={0x4, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x1}}, @ptr={0x1, 0x0, 0x0, 0x2, 0x5}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x0, 0x3}, @datasec={0x5, 0x8, 0x0, 0xf, 0x1, [{0x2, 0x5777, 0x8}, {0x5, 0x3, 0x5}, {0x5, 0x7, 0x9}, {0x3, 0x10001, 0x7}, {0x3, 0x1ff, 0x7a}, {0x4, 0x4, 0x6}, {0x5, 0xd, 0x3}, {0x2, 0x8, 0xa00}], "c6"}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x45, 0x0, 0x73}, @enum={0x9, 0x7, 0x0, 0x6, 0x4, [{0xa, 0x4000}, {0x9, 0x11b}, {0x3, 0x400}, {0xd, 0x6}, {0x10, 0xa6}, {0x9, 0x2}, {0x10}]}, @const={0x10, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x1e, 0x30, 0x2e, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000c00)=""/82, 0x130, 0x52, 0x1, 0xc70, 0x10000}, 0x28) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x6, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xed, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x4, 0x8, 0x2, 0x2, 0xfffffffffffffffc}]}, &(0x7f0000000d80)='GPL\x00', 0x1, 0xb1, &(0x7f0000000dc0)=""/177, 0x41000, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000ec0)={0x2, 0x1, 0x30, 0x7ff}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000f00)=[{0x5, 0x4, 0x8}, {0x4, 0x4, 0xb, 0x3}, {0x2, 0x4000000, 0x10, 0x1}], 0x10, 0x6}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001080)={0xffffffffffffffff, 0x6b800000, 0x10}, 0xc) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x12, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='GPL\x00', 0x80, 0x45, &(0x7f0000000a40)=""/69, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1c, r10, 0x8, &(0x7f0000000cc0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0x10, 0x0, 0x101}, 0x10, 0xffffffffffffffff, r11, 0x3, &(0x7f00000010c0)=[r12, 0x1, 0x1, r13], &(0x7f0000001100)=[{0x0, 0x5, 0x9, 0x8}, {0x2, 0x4, 0xf, 0x9}, {0x2, 0x4, 0xc, 0x9}], 0x10, 0xbb}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000001380)={r14, &(0x7f0000001280)='\x00', 0x111300, &(0x7f00000012c0)={@_ha_fsid={[0x0, 0x4]}, {0x840, 0xe5, 0x667a, 0xc}}, 0x4, &(0x7f0000001300), &(0x7f0000001340)=0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@bloom_filter={0x1e, 0x2, 0x35b, 0x8, 0xc483fe7d607d790, 0x1, 0x7, '\x00', 0x0, r10, 0x1, 0x2, 0x2, 0xe, @value=r10, @void, @value=r15}, 0x50) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r0) sendmsg$ETHTOOL_MSG_WOL_GET(r15, &(0x7f0000001580)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001440)={0xe8, r16, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000029c0)={&(0x7f0000001600)={0x13bc, 0x17, 0x200, 0x70bd29, 0x25dfdbfd, {0x9}, [@typed={0x4, 0x159}, @nested={0x1109, 0x19, 0x0, 0x1, [@generic="5c83258eb049c714f7469a52c3382feaebcfe7938e256e0fc69042ca7e26b74dc76e149b2021fdc1c54de953f4e288b7d3f8779acb6e36c5b0f99afb859acf5426998cf535ef1bfb32e0d3f3f38d262acad1189af1df967142", @typed={0x14, 0x3d, 0x0, 0x0, @ipv6=@mcast2}, @generic="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", @generic="5cc7a84b0b604da95875b2f849fc6c0a32bbcc15aabff901ef085d3bbac009305fcdaea8b4c4ef5b5d7a7dba8c87ce1dd55ddbc62f832a29c4bbef3664f22bb9c769c9f481285927d5c9af40525ca1996295c5558c247c03b516eb39014ae80e5ebdac6bc929724cfd3c566eb8d88994466f0153f9def803eeb3d0a19c7249e6f72aceefaa13edbde12f9b7cfdb12e6f34d4405ee1eacd80"]}, @nested={0x24, 0x16, 0x0, 0x1, [@nested={0x4, 0xee}, @nested={0x4, 0x135}, @nested={0x4, 0x47}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x262, 0xd9, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0xeb}, @generic="ef1581ac8262d93d3d6904e1f91ad7e3ef0d5d98a83ebcbfb15b1d0e357b1c8f595269def0ca4b93b996b0add8062acfdee6f7a31dde712093a51ee105d896da6176d9a0222db077e8e0e49b7167ac8dd03b809fac775ed5288c7f10e19f41493b48d9526ff5b49f7ded7421c808cd172b0224b0c4e5f40593", @generic="e514ccc5cd6fe3538ddffc49b8d3bffd30be8db3f2b937f2faa2c38894a111c6bcd761a42ee6777207765658ea2f22057bb7e22a48ad656f33ae414c3366802657066ef916d820774e91e055ad12717613fb43af471ee5ac78aea3778d0c69b4fe486e01c4b24f4fd1fa0ff1150fc3afdd2e6c10c78715832434c22a3909d1b6fc769054855258d1caa81c86c9c85f5fc4e694f4d60966e80dcb67c1fcbd3521d1809e79b62ac51d707cacd77bf37a7c97b3f8a8b99d7fd35b2058334145fe54f600963372b867f9ecd1c97416aad613f3d44e7eb9b8b0b9778c902e0f45a88ce77cc8fa3629b13298f5", @generic="5a474c258c5e3a4b2a51368e2ab5becfdcba22ca7cccbd72887da26b506cc222686092b01498f7ee922ad289f1d228027f3d89f1b1e6e6dbc782e6324dfe6421f736d71b48fcdea7e3fc63ac08c03f6649eccf7144e0547645e9bbddec87cae17ad5827a50e566fd048bf119eb032a3ca53c3f65be0e306d284e8028755fd2e7c1e0a913e0333b82dc5d2652a81bf28763985a1f134ba2a51f26fd4ecdaac7179027085befaf3f1a28d549e16939ec90aa73fd2caa14b25f20d121d96173f21715c9934b1beba002b6dbd3ad45ce3e24d5bc8b8f5b965adc7eaa5d51ab1940", @nested={0x4, 0xd8}, @generic="3600996f8d9fe1787b4e3d93"]}, @typed={0x8, 0x142, 0x0, 0x0, @ipv4=@broadcast}]}, 0x13bc}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r17, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x44, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008040}, 0x4c040) 1.863737787s ago: executing program 4 (id=4510): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0xffff, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="ac141411e0000001000000002c000000000000000000000007"], 0x50}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f0000000140)={&(0x7f0000000100)=[{&(0x7f0000000080)="f982cd81cb791182bfeb2a1698d0aa197fc106cdf3d5fa339e0d6e8b5f209fb60ff95b0bf268056e8aeff43dd268470a05219125cc82789ec34907be6f00c73773600df87838fc2a60a53251314301c798cb1989235f4188789ce39d2190b80d80e9e47ec1956dbd32cafaa6c375beb0df758f90925cbd3a325ab7e19f", 0x7d}], 0x1, 0x7e, 0x0, 0x3, 0x9, 0xe, 0x6, 0x80}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.767626463s ago: executing program 0 (id=4511): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @private, @initdev}, &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x44005) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)="690c3593", 0x4}], 0x1}}], 0x2, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @rand_addr=0x64010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180), 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'tunl0\x00', 0x800}) 1.767144674s ago: executing program 1 (id=4512): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x10}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8fbffffb502020008000000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 1.766767332s ago: executing program 4 (id=4513): socket$igmp6(0xa, 0x3, 0x2) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0) (async) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000480)={0x1d, r5}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[], 0x148}}, 0x4050) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[], 0x148}}, 0x4050) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) (async) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4) (async) setsockopt$inet6_int(r9, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.740870486s ago: executing program 3 (id=4514): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) write$cgroup_int(r4, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendfile(r1, r3, 0x0, 0x9cba) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x679}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2}, 0x100) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) 1.617483964s ago: executing program 0 (id=4515): socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe, 0x4}, {0xc, 0xfff3}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) write$tun(r3, &(0x7f0000000000)={@val={0x70}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x6400, 0x6558, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "2915a94a11e4fb7e83969bcb5cdbf104b1e6f70749e196288c4e8cd4f9aafcaf", "d0e077bf945c40399aeb88c150a72ed1", {"3b6de13637349f05f524bbde1d772edc", "6e545f1b3d4836bdea89c2b3c01c59e4"}}}}}}}}, 0x8a) (async) write$tun(r3, &(0x7f0000000000)={@val={0x70}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x6400, 0x6558, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "2915a94a11e4fb7e83969bcb5cdbf104b1e6f70749e196288c4e8cd4f9aafcaf", "d0e077bf945c40399aeb88c150a72ed1", {"3b6de13637349f05f524bbde1d772edc", "6e545f1b3d4836bdea89c2b3c01c59e4"}}}}}}}}, 0x8a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c094}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a010400000000000000000200ffff600004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd20000180070001007274000014000280080002400000000408000140000000030900010073797a30000000000900020073797a3200000000140000001a0a03"], 0xc8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000002060101000060c7cfe900000a00000005000400020000000900020073797a32000000001400078008001340ffffffff084012400000e54a050005000200000005000100060000000c000300686173683a6970"], 0x58}}, 0x80) 1.608701248s ago: executing program 1 (id=4516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2e}, 0x94) r2 = socket(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000240)=@int=0x2, 0x4) write(r2, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x4, 0x1, 0xfe, 0xf9bf, 0x4c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x40, 0x7, 0x1ff, 0x10000}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000000c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xf, r5}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000840)={0x6, {{0x2, 0x4e22, @multicast1}}}, 0xfffffffffffffd4c) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x3e8, 0x800, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x3, 0x1ff, 0xfb9d, 0x5, {0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[], 0x21c}, 0x1, 0x0, 0x0, 0x20048010}, 0x400c804) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r8, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002001000000041020000000000000000bab5ff22cf91ab74989825b9de0f594716bb23943f148cc267a66ef86d19066110c0ae7bb9876207", @ANYRES32=0x0], 0x20}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) 1.535877059s ago: executing program 4 (id=4517): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newchain={0x60, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0xe, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_ife={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x60}}, 0x44004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="60010000210001000000000000000000fc02000000000001fe80000000000000000000000000012000000000000000000a0000a02e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.456292482s ago: executing program 4 (id=4518): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f00000000c0), 0x0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') unshare(0x22020600) (async) unshare(0x22020600) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) 1.426015756s ago: executing program 1 (id=4519): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x140, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@nested={0x12c, 0xc2, 0x0, 0x1, [@typed={0x5, 0x11d, 0x0, 0x0, @str='\x00'}, @generic="8769d77cfa72cd0fb8607abc4f804f88e7d4f42fc1eea865575f36cc1717fe3846d99a1ea9d171cf454dd0a00981aed08d458a5e51382391bee967f0afae1703bd3ad832b3c5cf1c4c3bb40e059adb9af2db186ffc00a079c8583cf60d94482bc308bdb433bc1f4740df6230442ab624df7c32445d", @generic="59072e7a97c953415aa5f5323c318dbe76fface98750980c7e0b13aebec7250ad5ebe7331efc3eddc83ecf11203bb8579017e63ffab8753076d3632d1aae5a9f82a2fe3c0605e64604d174d7bac415799b2ea40c605de631e511951164c4b434ce4ce1c3131fd972b903bfe08935a24d50c7336294fcea5fbc2395b85711dfa9936ec5506165898943051dd3a3239ce752063608af009075d3c05259f3433f8fe97e7e8ea42f4548a93274"]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x2, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e67, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0xfffffff8, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x9, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x9, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x4, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) 1.351913096s ago: executing program 0 (id=4520): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x100, 0x4, 0x24}, 0x50) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x81, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9}}, [0x7, 0x1, 0x9, 0x9, 0x72f, 0x7, 0x9, 0x401, 0xfffffffffffffffd, 0x1, 0x100000001, 0xd8, 0x8989, 0x62, 0x200]}, &(0x7f0000000380)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r1, 0x9, 0x4}, &(0x7f0000000400)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f00000007c0)=0x40000405, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30, 0x1}, 0x0) 1.348108939s ago: executing program 4 (id=4521): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) close(r2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c060000) unshare(0x2c020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(0x3) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(wp256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) sendfile(r3, r4, 0x0, 0xffffffff000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$inet_tcp(0x2, 0x1, 0x0) 1.280253241s ago: executing program 0 (id=4522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_proto_private(r0, 0x891d, &(0x7f0000000200)="943a") socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_proto_private(r0, 0x891d, &(0x7f0000000200)="943a") (async) 1.207881504s ago: executing program 1 (id=4523): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840) sendmsg$nl_route_sched(r0, 0x0, 0x24040084) 977.199408ms ago: executing program 2 (id=4524): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001009599000000005e630000850000002c00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bind$packet(r3, &(0x7f0000000040)={0x11, 0x8, 0x0, 0x1, 0x6, 0x6, @random="5272856cebe1"}, 0x14) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e73d684e235948f6db8e7c924d7c", 0x0, 0x1008, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8}, 0x50) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000380)=0xb, 0x4) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_getroute={0x30, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x25dfdbfb, {}, [@RTA_VIA={0x14, 0x12, {0x27, "c01d9cb53748f67be3167fd987a4"}}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="05cba73416136e257dd7a0f67ae1", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x5}, 0x50) 938.301869ms ago: executing program 0 (id=4525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x4000000) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0xffffffff) (async) r2 = socket$inet6(0xa, 0x2, 0x3a) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000001000)=0xe8) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@dellinkprop={0x38, 0x6d, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x20824, 0x8}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2fba3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r4, 0x1, 0x4a, &(0x7f0000000000)="11237c5c", 0x4) (async) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000440)=[@hoplimit_2292={{0x18, 0x29, 0x8, 0x4}}], 0x18}}], 0x1, 0x4c0c0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0xa, 0x1, 0x0, r5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7c, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 32) r6 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r7 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000006c0)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}]}}}}}, 0x0) socket(0x28, 0x5, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) (async) sendmsg$inet(r8, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r9, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r10}, 0x20) shutdown(r4, 0x0) 763.107193ms ago: executing program 3 (id=4526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) syz_init_net_socket$ax25(0x3, 0x3, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x80}}, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x57) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r5}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="d23a3fd98e851c7008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0xf3a, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x10001) write(r7, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000309d572d00964c97ad", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000000000008500000086000000d2310200fcffffff950000000000000085100000feffffff8520000003000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000a40)='GPL\x00', 0x3, 0xee, &(0x7f0000000a80)=""/238, 0x0, 0x14, '\x00', 0x0, 0x1c, r9, 0x8, &(0x7f0000000b80)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x7, 0x10, 0xfffffffb}, 0x10, 0x22a71, r10, 0x2, &(0x7f0000000dc0)=[r5, r5, r5, r10, 0xffffffffffffffff, r10, r10, 0xffffffffffffffff, r9, r5], &(0x7f0000000e00)=[{0x1, 0x2, 0x10, 0x6}, {0x5, 0x2, 0x4, 0x7}], 0x10, 0x2}, 0x94) 172.554003ms ago: executing program 1 (id=4527): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket(0xa, 0x5, 0x0) listen(r1, 0x100) listen(r1, 0x48c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4810) (async) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x939}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044010}, 0x80) (async) r4 = socket(0xa, 0x3, 0x3a) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="a400000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="0000000040000000740012800b000100697036746e6c00006400028005000400a000000006000f000100000014000200fe8800000000000000000000000000011400030003000000000000000000000000000000040013000800070009000000050004000200000004001300060010000300000008001400", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xa4}}, 0x400c044) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd0, 0x0, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67c59d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58d567754734be31d750351dc002eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a37cae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 70.545623ms ago: executing program 0 (id=4528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) (rerun: 32) 0s ago: executing program 4 (id=4529): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42814}, 0x40084) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e500020000000000e500fcff00000000850000000200000095000000000000005b5e2e900bdddabda4ea282a7fd8ef1515eccd8e7b28a7f068db7bb69a67826fa4641b74ca4cf93d8bc9d059dce77ebee4728b55aa275624a4234b4f63"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000000)="3b81", 0x2) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000001600)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) 0s ago: executing program 0 (id=4533): socket$kcm(0x11, 0x200000000000003, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800010000000000000000000a80000000030006000000001400070000000000000000000000000000000001047431683a7e77f8fea9e092fc09490ee4147b39ac8328f42104c0567a9c6ca56023ec9c7c6858196273b0f1289c0c8b6000e646aef97dccd5f205a4250ffc5f69d6fe67ad12ede62cc46c6563c5ea47e8efb14ca0ad8c64e06dee0b023dd5991501829cbbe4e0be7634301471baca"], 0x30}}, 0x20000000) close(0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x8000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x0, 0x4}, 0x80, &(0x7f00000000c0), 0x26, 0x0, 0x0, 0x900}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) kernel console output (not intermixed with test programs): an6: entered allmulticast mode [ 390.421452][T18183] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 390.465229][T17935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.512065][T18195] tipc: Started in network mode [ 390.522618][T18195] tipc: Node identity 366c4838c137, cluster identity 4711 [ 390.533480][T18195] tipc: Enabled bearer , priority 0 [ 390.546042][T17935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.556850][T18197] syzkaller0: entered promiscuous mode [ 390.562960][T18197] syzkaller0: entered allmulticast mode [ 390.606918][ T7921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.617177][ T7921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.640059][T18194] tipc: Resetting bearer [ 390.666833][T18194] tipc: Disabling bearer [ 390.678354][ T7921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.687784][ T7921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.063257][ T5844] Bluetooth: hci0: command tx timeout [ 391.070127][ T7918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.094838][ T7918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.197735][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3027'. [ 391.201225][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.241003][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.286050][T18212] 8021q: adding VLAN 0 to HW filter on device bond13 [ 391.320247][T18215] bond13: entered promiscuous mode [ 391.356146][T18215] bond13: entered allmulticast mode [ 391.404768][T18215] 8021q: adding VLAN 0 to HW filter on device bond13 [ 391.428127][T18215] team0: Port device bond13 added [ 391.501088][T18212] vxcan1: entered promiscuous mode [ 391.524308][T18212] bond13: (slave vxcan1): refused to change device type [ 391.551839][T18225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2958'. [ 391.579531][T18227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2958'. [ 391.709855][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3031'. [ 391.946955][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'. [ 391.988741][T18229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.035813][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3034'. [ 392.157765][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.172562][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.183730][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.192846][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.206026][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 392.309927][T18229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.415972][ T5843] syz_tun (unregistering): left allmulticast mode [ 392.457381][T18249] dummy0: mtu less than device minimum [ 392.501814][T18229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.566761][T18258] : entered promiscuous mode [ 392.655561][T18261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3041'. [ 392.665932][T18262] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 392.698632][T18229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.065856][T18290] netlink: 'syz.2.3045': attribute type 11 has an invalid length. [ 393.127995][ T7918] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.153450][ T5850] Bluetooth: hci0: command tx timeout [ 393.281805][ T7918] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.323229][T18297] block nbd2: Unsupported socket: should be TCP or UNIX. [ 393.389321][ T7918] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.428783][ T7918] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.546259][T18245] chnl_net:caif_netlink_parms(): no params data found [ 393.664215][T18305] syzkaller0: entered promiscuous mode [ 393.675106][T18305] syzkaller0: entered allmulticast mode [ 393.967818][T18245] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.994040][T18245] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.023841][T18245] bridge_slave_0: entered allmulticast mode [ 394.040124][T18245] bridge_slave_0: entered promiscuous mode [ 394.057754][T18245] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.073200][T18245] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.090707][T18245] bridge_slave_1: entered allmulticast mode [ 394.104503][T18245] bridge_slave_1: entered promiscuous mode [ 394.213764][T18245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.251700][T18245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.271271][ T5850] Bluetooth: hci4: command tx timeout [ 394.334820][T18245] team0: Port device team_slave_0 added [ 394.344388][T18245] team0: Port device team_slave_1 added [ 394.380463][T18245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.387543][T18245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.414596][T18245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.428188][T18245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.435583][T18245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.481523][T18245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.628000][T18245] hsr_slave_0: entered promiscuous mode [ 394.647285][T18245] hsr_slave_1: entered promiscuous mode [ 394.663970][T18245] debugfs: 'hsr0' already exists in 'hsr' [ 394.677589][T18245] Cannot create hsr debugfs directory [ 394.848493][T18329] __nla_validate_parse: 1 callbacks suppressed [ 394.848509][T18329] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3056'. [ 394.887169][T18329] netlink: 'syz.2.3056': attribute type 1 has an invalid length. [ 394.915700][T18329] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3056'. [ 396.166735][T18245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 396.208227][T18245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.232888][T18245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 396.302600][T18245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.334181][T18245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 396.343696][ T5850] Bluetooth: hci4: command tx timeout [ 396.376144][T18245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.391108][T18245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 396.425081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.443714][T18245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.615010][ T7918] bridge_slave_0: left allmulticast mode [ 396.628774][ T7918] bridge_slave_0: left promiscuous mode [ 396.637385][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.725720][T18415] netlink: 'syz.3.3071': attribute type 1 has an invalid length. [ 396.737058][T18415] netlink: 'syz.3.3071': attribute type 2 has an invalid length. [ 396.750949][T18415] netlink: 'syz.3.3071': attribute type 1 has an invalid length. [ 396.759935][T18415] netlink: 'syz.3.3071': attribute type 3 has an invalid length. [ 396.768667][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3071'. [ 397.143826][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.186857][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3073'. [ 397.198324][ T7918] vlan2: left promiscuous mode [ 397.220090][ T7918] team0: left promiscuous mode [ 397.226091][ T7918] team_slave_0: left promiscuous mode [ 397.231746][ T7918] team_slave_1: left promiscuous mode [ 397.241115][ T7918] bridge5: port 3(vlan2) entered disabled state [ 397.251378][ T7918] veth3: left allmulticast mode [ 397.256463][ T7918] veth3: left promiscuous mode [ 397.262214][ T7918] bridge5: port 1(veth3) entered disabled state [ 397.288617][ T7918] dvmrp6: left allmulticast mode [ 397.295290][ T7918] batman_adv: batadv0: Interface deactivated: gretap2 [ 397.391174][T18434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3073'. [ 397.403564][ T7918] bond9 (unregistering): (slave ip6gretap1): Releasing active interface [ 397.509701][ T7918] batman_adv: batadv0: Removing interface: gretap2 [ 398.007529][ T7918] bond9 (unregistering): (slave bridge9): Releasing active interface [ 398.023344][T12531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.068107][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.078894][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.089336][ T7918] bond0 (unregistering): Released all slaves [ 398.099698][ T7918] bond1 (unregistering): Released all slaves [ 398.120382][ T7918] bond2 (unregistering): Released all slaves [ 398.133911][ T7918] bond3 (unregistering): Released all slaves [ 398.147625][ T7918] bond4 (unregistering): Released all slaves [ 398.164154][ T7918] bond5 (unregistering): (slave veth9): Releasing backup interface [ 398.172164][ T7918] veth9: left promiscuous mode [ 398.179836][ T7918] bond5 (unregistering): Released all slaves [ 398.186471][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.199704][ T7918] bond6 (unregistering): Released all slaves [ 398.212777][ T7918] bond7 (unregistering): Released all slaves [ 398.232317][ T7918] bond8 (unregistering): Released all slaves [ 398.248187][ T7918] bond9 (unregistering): Released all slaves [ 398.271012][T18407] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 398.278901][T18407] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 398.306580][T18422] syzkaller1: entered promiscuous mode [ 398.312158][T18422] syzkaller1: entered allmulticast mode [ 398.428729][ T5850] Bluetooth: hci4: command tx timeout [ 398.620365][ T7918] tipc: Disabling bearer [ 398.634910][ T7918] tipc: Left network mode [ 398.986886][T18454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3079'. [ 399.003618][T18454] netlink: 'syz.2.3079': attribute type 7 has an invalid length. [ 399.011767][T18454] netlink: 'syz.2.3079': attribute type 8 has an invalid length. [ 399.024350][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3079'. [ 399.131693][T18245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.164833][T18245] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.182786][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.189999][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.231146][T18458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.243879][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.276781][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.283978][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.438801][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'. [ 399.710604][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.746689][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.786882][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.018199][ T7918] team_slave_1 (unregistering): left allmulticast mode [ 400.026702][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 400.050741][ T7918] team_slave_0 (unregistering): left allmulticast mode [ 400.068162][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 400.092750][T18500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3091'. [ 400.254414][T18500] bond18: option broadcast_neighbor: invalid value (30) [ 400.268003][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.280736][T18500] bond18 (unregistering): Released all slaves [ 400.392523][T18245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.504182][ T5850] Bluetooth: hci4: command tx timeout [ 400.558535][T18245] veth0_vlan: entered promiscuous mode [ 400.582503][T18511] x_tables: duplicate underflow at hook 2 [ 400.582669][T18245] veth1_vlan: entered promiscuous mode [ 400.611777][T18514] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 400.682346][T18245] veth0_macvtap: entered promiscuous mode [ 400.730650][T18245] veth1_macvtap: entered promiscuous mode [ 400.750720][T18511] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3093'. [ 400.796597][T18245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.877706][T18511] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3093'. [ 400.901768][T18245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.945695][ T7912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.967906][ T7912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.064209][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.315605][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.555463][ T7912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.574265][ T1043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.593651][T18546] dummy0: mtu less than device minimum [ 401.820917][T18558] dummy0: entered allmulticast mode [ 401.877160][T18558] netlink: 'syz.0.3103': attribute type 142 has an invalid length. [ 401.916375][T18565] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3105'. [ 401.942782][T18558] vxlan0: entered promiscuous mode [ 401.948451][T18558] vxlan0: entered allmulticast mode [ 401.969492][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.982098][ T7921] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.999982][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.011830][ T7921] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.022738][T18557] dummy0: left allmulticast mode [ 402.064890][ T7921] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.087367][ T7921] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.220738][T18576] ip6tnl1: entered promiscuous mode [ 402.310156][ T7918] IPVS: stop unused estimator thread 0... [ 402.332852][ T7906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.346343][T15411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.355201][ T7906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.409267][T18587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.418975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.476868][T18588] netlink: 'syz.0.3113': attribute type 9 has an invalid length. [ 402.515769][T18588] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.3113'. [ 402.646191][T18597] netlink: 396 bytes leftover after parsing attributes in process `syz.1.3033'. [ 402.826177][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.841084][T18604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3115'. [ 403.064356][T18618] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3119'. [ 403.413544][T15411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.433594][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 403.437855][T18639] x_tables: duplicate underflow at hook 4 [ 403.453683][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 403.468909][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.479474][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.489733][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 403.496760][T18644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3124'. [ 403.510553][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 403.518364][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 403.793573][T18656] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 403.920550][T18664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.123147][T18640] chnl_net:caif_netlink_parms(): no params data found [ 404.229030][T18640] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.237097][T18640] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.244809][T18640] bridge_slave_0: entered allmulticast mode [ 404.252730][T18640] bridge_slave_0: entered promiscuous mode [ 404.261507][T18640] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.268831][T18640] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.276366][T18640] bridge_slave_1: entered allmulticast mode [ 404.284200][T18640] bridge_slave_1: entered promiscuous mode [ 404.333665][T18640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.347764][T18640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.414384][T18695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3136'. [ 404.427961][T18640] team0: Port device team_slave_0 added [ 404.455078][T18640] team0: Port device team_slave_1 added [ 404.555374][T18640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.578193][T18640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.627836][T18640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.660139][T18640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.672345][T18640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.742388][T18640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.018441][T18640] hsr_slave_0: entered promiscuous mode [ 405.035837][T18640] hsr_slave_1: entered promiscuous mode [ 405.052428][T18640] debugfs: 'hsr0' already exists in 'hsr' [ 405.073904][T18640] Cannot create hsr debugfs directory [ 405.168828][T18732] netlink: 'syz.3.3147': attribute type 12 has an invalid length. [ 405.508409][T18756] netlink: 'syz.1.3150': attribute type 4 has an invalid length. [ 405.551684][T18640] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.624197][ T5844] Bluetooth: hci2: command tx timeout [ 405.634685][T18640] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.657075][T18759] bridge0: port 3(vlan2) entered blocking state [ 405.670507][T18759] bridge0: port 3(vlan2) entered disabled state [ 405.677625][T18759] vlan2: entered allmulticast mode [ 405.682903][T18759] geneve0: entered allmulticast mode [ 405.689804][T18759] vlan2: entered promiscuous mode [ 405.694913][T18759] geneve0: entered promiscuous mode [ 405.706536][T18640] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.780221][T18640] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.920165][T18640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.929532][T18640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.938069][T18640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 405.948656][T18640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.957692][T18640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 405.967250][T18640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.975561][T18640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 405.985375][T18640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.108557][T18640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.137350][T18640] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.150631][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.157896][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.201146][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.208331][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.324643][T18772] sctp: [Deprecated]: syz.4.3154 (pid 18772) Use of int in max_burst socket option. [ 406.324643][T18772] Use struct sctp_assoc_value instead [ 406.373889][T18772] __nla_validate_parse: 5 callbacks suppressed [ 406.374069][T18772] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3154'. [ 406.425595][T18772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3154'. [ 406.785984][T18640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.865205][T18640] veth0_vlan: entered promiscuous mode [ 406.896382][T18640] veth1_vlan: entered promiscuous mode [ 406.897934][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3163'. [ 406.960093][T18640] veth0_macvtap: entered promiscuous mode [ 406.972557][T18808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.979864][T18808] IPv6: NLM_F_CREATE should be set when creating new route [ 406.987198][T18808] IPv6: NLM_F_CREATE should be set when creating new route [ 407.000227][T18640] veth1_macvtap: entered promiscuous mode [ 407.034214][T18640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.055090][T18640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.075126][ T1043] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.091842][ T1043] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.134344][ T1105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.164822][ T1043] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.340237][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.369171][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.447108][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.475758][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.553501][ T5905] net_ratelimit: 14 callbacks suppressed [ 407.553515][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.675040][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3169'. [ 407.693508][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3169'. [ 407.703174][ T5844] Bluetooth: hci2: command tx timeout [ 407.852049][T18835] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.042278][T18835] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.100505][T18844] geneve2: entered allmulticast mode [ 408.231121][T18848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3172'. [ 408.275072][T18856] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3174'. [ 408.422281][T18858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3175'. [ 408.432007][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.464944][T18860] netlink: 'syz.3.3176': attribute type 4 has an invalid length. [ 408.500143][T18860] netlink: 'syz.3.3176': attribute type 4 has an invalid length. [ 408.564632][T18860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3176'. [ 408.574073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.591518][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.990661][T18835] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.083206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.206021][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.225439][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.237031][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.247431][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.260352][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.592865][T18835] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.610997][T18902] No such timeout policy "syz1" [ 409.623736][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.784884][ T5844] Bluetooth: hci2: command tx timeout [ 409.850195][T18916] netlink: 'syz.0.3187': attribute type 1 has an invalid length. [ 409.898124][T18916] netlink: 'syz.0.3187': attribute type 7 has an invalid length. [ 409.914258][T18916] netlink: 'syz.0.3187': attribute type 8 has an invalid length. [ 409.922632][T18916] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3187'. [ 409.932262][T18916] NCSI netlink: No device for ifindex 1073545264 [ 410.026488][ T7921] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.087492][ T7921] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.137883][ T7918] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.156232][T18933] batman_adv: batadv0: Adding interface: ipvlan2 [ 410.162618][T18933] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.190982][T18933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.194921][T18930] netlink: 'syz.1.3188': attribute type 13 has an invalid length. [ 410.206039][T18933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.219549][T18933] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 410.257866][ T7921] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.564699][T18884] chnl_net:caif_netlink_parms(): no params data found [ 410.663260][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.899951][T18884] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.908460][T18961] tipc: Failed to remove unknown binding: 66,0,0/0:692733333/692733335 [ 410.916072][T18884] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.917419][T18961] tipc: Failed to remove unknown binding: 66,0,0/0:692733333/692733334 [ 410.931700][T18884] bridge_slave_0: entered allmulticast mode [ 410.936070][T18961] tipc: Failed to remove unknown binding: 66,0,0/0:692733333/692733335 [ 410.947154][T18884] bridge_slave_0: entered promiscuous mode [ 410.948247][T18961] tipc: Failed to remove unknown binding: 66,0,0/0:692733333/692733334 [ 411.040664][T18884] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.049399][T18884] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.057210][T18884] bridge_slave_1: entered allmulticast mode [ 411.069842][T18884] bridge_slave_1: entered promiscuous mode [ 411.078074][T18964] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 411.094773][T18963] xfrm1: entered allmulticast mode [ 411.219400][T18884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.236699][T18884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.277074][T18884] team0: Port device team_slave_0 added [ 411.294980][T18884] team0: Port device team_slave_1 added [ 411.386013][ T5844] Bluetooth: hci1: command tx timeout [ 411.441193][T18884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.454938][T18884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.482558][T18884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.493627][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.504388][T18884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.516253][T18884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.569744][T18884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.704457][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.746393][T18884] hsr_slave_0: entered promiscuous mode [ 411.767144][T18884] hsr_slave_1: entered promiscuous mode [ 411.808919][T18884] debugfs: 'hsr0' already exists in 'hsr' [ 411.817422][T18884] Cannot create hsr debugfs directory [ 411.864624][ T5844] Bluetooth: hci2: command tx timeout [ 411.875279][T18998] sctp: [Deprecated]: syz.3.3207 (pid 18998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.875279][T18998] Use struct sctp_sack_info instead [ 412.110045][T19017] netlink: 'syz.1.3213': attribute type 1 has an invalid length. [ 412.130228][T19017] netlink: 'syz.1.3213': attribute type 3 has an invalid length. [ 412.137227][T19015] tun0: tun_chr_ioctl cmd 1074812118 [ 412.147149][T19019] __nla_validate_parse: 3 callbacks suppressed [ 412.147166][T19019] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3211'. [ 412.151997][T19017] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3213'. [ 412.176728][T19015] tun0: tun_chr_ioctl cmd 1074033169 [ 412.567873][T19028] erspan0: entered promiscuous mode [ 412.619378][T19032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.753892][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.071325][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.408160][T19057] netlink: 'syz.3.3222': attribute type 2 has an invalid length. [ 413.463182][ T5844] Bluetooth: hci1: command tx timeout [ 413.587050][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3223'. [ 413.784896][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.224801][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3228'. [ 414.438954][T18884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 414.460505][T18884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.511575][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.543418][T19094] pim6reg1: entered promiscuous mode [ 414.555089][T19094] pim6reg1: entered allmulticast mode [ 414.569925][T18884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 414.594173][T18884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.598196][T19108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.611305][T18884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 414.626600][T18884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.707188][T18884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 414.722452][T18884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.805504][T19119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3239'. [ 414.827745][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.921879][T19133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3239'. [ 414.958989][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3239'. [ 415.068954][T18884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.114986][T18884] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.147717][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.154941][ T7912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.209232][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.216438][ T7912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.543116][ T5844] Bluetooth: hci1: command tx timeout [ 415.839759][T18884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.864107][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.010577][T19169] ipt_rpfilter: unknown options [ 416.121630][T19175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3247'. [ 416.153761][T19175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.250776][T19175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.357198][T19193] netlink: 'syz.0.3249': attribute type 1 has an invalid length. [ 416.384716][T19175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.399953][T19193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.437814][T19175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.552160][T19183] geneve3: entered promiscuous mode [ 416.854066][T18884] veth0_vlan: entered promiscuous mode [ 416.906214][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.929931][T18884] veth1_vlan: entered promiscuous mode [ 416.988327][T19219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3253'. [ 417.022725][T18884] veth0_macvtap: entered promiscuous mode [ 417.051218][T18884] veth1_macvtap: entered promiscuous mode [ 417.098102][T18884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.145856][T18884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.190781][ T7924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.218235][ T7924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.229975][ T7924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.390589][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.624230][ T5844] Bluetooth: hci1: command tx timeout [ 417.727432][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.740285][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.787630][T19243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3259'. [ 417.868860][ T7918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.913112][ T7918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.187533][ T10] net_ratelimit: 1 callbacks suppressed [ 418.187550][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.456298][T19275] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 418.490501][T19275] bond1: (slave lo): Enslaving as an active interface with an up link [ 418.508295][T19275] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 418.596027][T19291] FAULT_INJECTION: forcing a failure. [ 418.596027][T19291] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 418.621137][T19291] CPU: 1 UID: 0 PID: 19291 Comm: syz.0.3269 Not tainted syzkaller #0 PREEMPT(full) [ 418.621184][T19291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.621217][T19291] Call Trace: [ 418.621225][T19291] [ 418.621232][T19291] dump_stack_lvl+0xe8/0x150 [ 418.621265][T19291] should_fail_ex+0x412/0x560 [ 418.621298][T19291] _copy_from_iter+0x1d3/0x1670 [ 418.621319][T19291] ? rcu_is_watching+0x15/0xb0 [ 418.621366][T19291] ? __pfx__copy_from_iter+0x10/0x10 [ 418.621392][T19291] ? netlink_sendmsg+0x650/0xb40 [ 418.621411][T19291] ? skb_put+0x11b/0x210 [ 418.621432][T19291] netlink_sendmsg+0x6c0/0xb40 [ 418.621460][T19291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.621482][T19291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 418.621502][T19291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.621527][T19291] ____sys_sendmsg+0x972/0x9f0 [ 418.621546][T19291] ? __might_fault+0xaf/0x130 [ 418.621572][T19291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.621600][T19291] ? import_iovec+0x73/0xa0 [ 418.621624][T19291] ___sys_sendmsg+0x2a5/0x360 [ 418.621642][T19291] ? __lock_acquire+0x6b5/0x2cf0 [ 418.621672][T19291] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.621726][T19291] ? __fget_files+0x2a/0x420 [ 418.621744][T19291] ? __fget_files+0x3a0/0x420 [ 418.621772][T19291] __x64_sys_sendmsg+0x1bd/0x2a0 [ 418.621795][T19291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.621829][T19291] ? __pfx_ksys_write+0x10/0x10 [ 418.621858][T19291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.621877][T19291] do_syscall_64+0x15f/0xf80 [ 418.621900][T19291] ? trace_irq_disable+0x3b/0x140 [ 418.621921][T19291] ? clear_bhb_loop+0x40/0x90 [ 418.621942][T19291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.621960][T19291] RIP: 0033:0x7f2bae59cdd9 [ 418.621977][T19291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.621993][T19291] RSP: 002b:00007f2baf371028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.622013][T19291] RAX: ffffffffffffffda RBX: 00007f2bae815fa0 RCX: 00007f2bae59cdd9 [ 418.622026][T19291] RDX: 0000000020008000 RSI: 0000200000000640 RDI: 0000000000000003 [ 418.622038][T19291] RBP: 00007f2baf371090 R08: 0000000000000000 R09: 0000000000000000 [ 418.622049][T19291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.622059][T19291] R13: 00007f2bae816038 R14: 00007f2bae815fa0 R15: 00007ffc98ee5088 [ 418.622089][T19291] [ 419.039589][T19301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3273'. [ 419.222830][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3274'. [ 419.417021][T19326] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 419.438390][T19330] openvswitch: netlink: Message has 8 unknown bytes. [ 419.445123][T19325] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 419.467559][T19335] FAULT_INJECTION: forcing a failure. [ 419.467559][T19335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.473447][T19329] bond1: entered promiscuous mode [ 419.486479][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.495950][T19329] bond1: entered allmulticast mode [ 419.505368][T19329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.513625][T19335] CPU: 1 UID: 0 PID: 19335 Comm: syz.4.3284 Not tainted syzkaller #0 PREEMPT(full) [ 419.513648][T19335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 419.513659][T19335] Call Trace: [ 419.513666][T19335] [ 419.513673][T19335] dump_stack_lvl+0xe8/0x150 [ 419.513705][T19335] should_fail_ex+0x412/0x560 [ 419.513737][T19335] _copy_from_iter+0x1d3/0x1670 [ 419.513768][T19335] ? rcu_is_watching+0x15/0xb0 [ 419.513793][T19335] ? __pfx__copy_from_iter+0x10/0x10 [ 419.513821][T19335] ? netlink_sendmsg+0x650/0xb40 [ 419.513839][T19335] ? skb_put+0x11b/0x210 [ 419.513860][T19335] netlink_sendmsg+0x6c0/0xb40 [ 419.513889][T19335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.513911][T19335] ? aa_sock_msg_perm+0xf1/0x1b0 [ 419.513932][T19335] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.513956][T19335] ____sys_sendmsg+0x972/0x9f0 [ 419.513976][T19335] ? __might_fault+0xaf/0x130 [ 419.514002][T19335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.514031][T19335] ? import_iovec+0x73/0xa0 [ 419.514055][T19335] ___sys_sendmsg+0x2a5/0x360 [ 419.514074][T19335] ? __lock_acquire+0x6b5/0x2cf0 [ 419.514104][T19335] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.514160][T19335] ? __fget_files+0x2a/0x420 [ 419.514178][T19335] ? __fget_files+0x3a0/0x420 [ 419.514207][T19335] __x64_sys_sendmsg+0x1bd/0x2a0 [ 419.514230][T19335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.514260][T19335] ? __pfx_ksys_write+0x10/0x10 [ 419.514291][T19335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.514311][T19335] do_syscall_64+0x15f/0xf80 [ 419.514334][T19335] ? trace_irq_disable+0x3b/0x140 [ 419.514358][T19335] ? clear_bhb_loop+0x40/0x90 [ 419.514380][T19335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.514398][T19335] RIP: 0033:0x7f6e3559cdd9 [ 419.514416][T19335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.514431][T19335] RSP: 002b:00007f6e36522028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.514450][T19335] RAX: ffffffffffffffda RBX: 00007f6e35815fa0 RCX: 00007f6e3559cdd9 [ 419.514463][T19335] RDX: 0000000020008000 RSI: 0000200000000640 RDI: 0000000000000003 [ 419.514475][T19335] RBP: 00007f6e36522090 R08: 0000000000000000 R09: 0000000000000000 [ 419.514486][T19335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.514497][T19335] R13: 00007f6e35816038 R14: 00007f6e35815fa0 R15: 00007ffc04d20af8 [ 419.514527][T19335] [ 419.517040][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'. [ 419.822868][T19343] bond2: entered allmulticast mode [ 419.840303][T19343] macvlan2: entered promiscuous mode [ 419.846586][T19343] macvlan2: entered allmulticast mode [ 419.853670][T19343] bond2: entered promiscuous mode [ 419.853821][T19352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3285'. [ 419.859514][T19343] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 419.882726][T19357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3285'. [ 419.909638][T19343] bond2: left promiscuous mode [ 420.314256][T19372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3290'. [ 420.362822][T19372] netlink: 'syz.0.3290': attribute type 3 has an invalid length. [ 420.382687][T19372] netlink: 'syz.0.3290': attribute type 3 has an invalid length. [ 420.438644][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3292'. [ 420.841789][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3300'. [ 420.990612][T19424] Cannot find set identified by id 0 to match [ 421.031097][T19424] xt_limit: Overflow, try lower: 268435456/134217728 [ 421.057999][T19430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.258141][T19434] bridge_slave_1: left allmulticast mode [ 421.266318][T19434] bridge_slave_1: left promiscuous mode [ 421.272506][T19434] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.287751][T19434] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 421.651327][T19408] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 421.678361][T19466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3316'. [ 421.742499][T19469] x_tables: unsorted underflow at hook 2 [ 421.851184][T19474] pimreg: entered allmulticast mode [ 422.041320][T19485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.051865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.068127][T19488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.076790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.905092][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 423.308724][ C1] net_ratelimit: 1 callbacks suppressed [ 423.308738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.631479][T19461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 424.853977][T19523] __nla_validate_parse: 4 callbacks suppressed [ 424.853995][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3333'. [ 424.899324][T19524] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3334'. [ 424.931212][T19532] netlink: 'syz.2.3336': attribute type 1 has an invalid length. [ 425.531969][T19565] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20002 [ 425.580259][T19566] netlink: 34 bytes leftover after parsing attributes in process `syz.1.3346'. [ 425.655832][T19573] netlink: 'syz.1.3346': attribute type 2 has an invalid length. [ 425.752820][T19577] netlink: 'syz.0.3350': attribute type 3 has an invalid length. [ 426.599341][ T29] audit: type=1107 audit(1777238480.511:9): pid=19606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 427.112075][T19631] gretap0: entered promiscuous mode [ 427.134315][T19631] vlan2: entered promiscuous mode [ 427.190525][T19637] xt_cgroup: invalid path, errno=-2 [ 427.286720][T19643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.312547][T19644] netlink: 'syz.0.3366': attribute type 21 has an invalid length. [ 427.346461][T19644] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3366'. [ 427.372754][T19648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3366'. [ 427.404156][T19648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3366'. [ 427.467781][T19644] netlink: 'syz.0.3366': attribute type 4 has an invalid length. [ 427.482896][T19644] netlink: 'syz.0.3366': attribute type 5 has an invalid length. [ 427.492191][T19644] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3366'. [ 427.505175][T19650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.560248][T19648] vlan2: entered promiscuous mode [ 427.573705][T19648] ip6gretap0: entered promiscuous mode [ 427.579638][T19648] vlan2: entered allmulticast mode [ 427.591328][T19648] ip6gretap0: entered allmulticast mode [ 427.728447][T19660] veth1_macvtap: left promiscuous mode [ 427.744088][T19660] macsec0: entered promiscuous mode [ 427.778797][T19662] macsec0: left promiscuous mode [ 427.870479][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3373'. [ 428.009271][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3374'. [ 428.057211][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3374'. [ 428.198099][T19682] nbd: socks must be embedded in a SOCK_ITEM attr [ 428.210324][T13760] block nbd64: NBD_DISCONNECT [ 428.221696][T19685] nbd: nbd64 already in use [ 428.551240][T13353] udevd[13353]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 428.774480][T12531] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 428.837498][T19709] syzkaller0: entered promiscuous mode [ 428.857702][T19709] syzkaller0: entered allmulticast mode [ 428.964003][T19706] fido_id[19706]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 429.149709][T19714] syzkaller0: entered promiscuous mode [ 429.164042][T19714] syzkaller0: entered allmulticast mode [ 431.831680][T19721] geneve2: entered promiscuous mode [ 431.837311][T19721] geneve2: entered allmulticast mode [ 432.054093][T19742] openvswitch: netlink: Message has 4 unknown bytes. [ 432.068484][T19742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.552938][T19773] xt_TPROXY: Can be used only with -p tcp or -p udp [ 432.664034][T19782] __nla_validate_parse: 2 callbacks suppressed [ 432.664055][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 432.764732][T19773] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.241985][T19774] syzkaller0: entered promiscuous mode [ 433.254361][T19774] syzkaller0: entered allmulticast mode [ 433.567484][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'. [ 433.595247][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'. [ 433.642370][T19822] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3414'. [ 433.862102][T19839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3418'. [ 434.781806][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3423'. [ 436.465309][T19841] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 436.622493][T19862] netlink: 'syz.1.3424': attribute type 1 has an invalid length. [ 436.741294][T19862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.084426][T19895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.111345][T19896] xt_hashlimit: size too large, truncated to 1048576 [ 437.171712][T19902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3436'. [ 437.365562][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'. [ 437.374858][T19908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.376914][T19908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.405270][T19908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.469638][T19902] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.508049][T19908] ip6gre0: entered promiscuous mode [ 437.532134][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3438'. [ 437.628675][T19902] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.805729][T19920] team0: Port device syz_tun added [ 437.860218][T19925] team0: Port device syz_tun removed [ 437.889170][T19925] bridge_slave_0: left allmulticast mode [ 437.895868][T19925] bridge_slave_0: left promiscuous mode [ 437.906590][T19925] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.908730][T19930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.927721][T19930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.947402][T19925] bridge_slave_1: left allmulticast mode [ 437.960515][T19925] bridge_slave_1: left promiscuous mode [ 437.975937][T19925] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.016498][T19925] bond0: (slave bond_slave_0): Releasing backup interface [ 438.065037][T19925] bond0: (slave bond_slave_1): Releasing backup interface [ 438.089454][T19925] team0: Port device team_slave_0 removed [ 438.107186][T19925] team0: Port device team_slave_1 removed [ 438.117234][T19925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.125935][T19925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.135825][T19925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.144181][T19925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.152798][T19925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 438.249106][T19902] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.281258][T19944] tipc: Enabling of bearer rejected, failed to enable media [ 438.448960][T19902] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.494845][T19944] syzkaller0: entered promiscuous mode [ 438.514847][T19944] syzkaller0: entered allmulticast mode [ 438.807600][T19967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.814925][T19967] IPv6: NLM_F_CREATE should be set when creating new route [ 438.822176][T19967] IPv6: NLM_F_CREATE should be set when creating new route [ 438.841299][ T7921] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.904954][ T7921] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.987744][ T1043] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.047458][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3453'. [ 439.079456][T19975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3453'. [ 439.101239][ T1043] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.352368][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3457'. [ 439.397694][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3457'. [ 439.486971][T19997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3459'. [ 439.676809][T20006] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3462'. [ 439.685064][T20004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3461'. [ 439.729845][T20007] netlink: 'syz.4.3460': attribute type 39 has an invalid length. [ 439.947354][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.194902][T20037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3471'. [ 440.330322][T20049] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3470'. [ 440.459453][T20056] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3475'. [ 440.484284][T20056] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.493908][T20056] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.621567][T20071] tipc: Started in network mode [ 440.627875][T20071] tipc: Node identity ac14140f, cluster identity 4711 [ 440.637014][T20071] tipc: Enabled bearer , priority 10 [ 440.840095][T20074] IPVS: Scheduler module ip_vs_ not found [ 440.949625][T20087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.997692][T20087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.025752][T20087] bond0 (unregistering): Released all slaves [ 441.167303][T20099] netlink: 'syz.0.3487': attribute type 1 has an invalid length. [ 441.208917][T20101] netlink: 'syz.0.3487': attribute type 1 has an invalid length. [ 441.612319][T20113] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 441.645633][T20113] syzkaller0: entered promiscuous mode [ 441.651403][T20113] syzkaller0: entered allmulticast mode [ 441.731598][T20122] netlink: 'syz.1.3489': attribute type 29 has an invalid length. [ 441.759244][T20127] netlink: 'syz.1.3489': attribute type 29 has an invalid length. [ 441.837833][ T5912] tipc: Node number set to 2886997007 [ 442.005332][T20140] ipvlan2: entered promiscuous mode [ 442.010805][T20140] ipvlan2: entered allmulticast mode [ 442.017000][T20140] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 442.044988][T20140] vlan2: entered promiscuous mode [ 442.050165][T20140] bridge0: entered promiscuous mode [ 442.161307][T20142] bond1: (slave lo): Releasing backup interface [ 442.186301][T20142] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 442.279011][T20142] bridge_slave_0: left allmulticast mode [ 442.295715][T20142] bridge_slave_0: left promiscuous mode [ 442.308615][T20142] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.372767][T20142] bridge_slave_1: left promiscuous mode [ 442.384879][T20142] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.441000][T20142] bond0: (slave bond_slave_0): Releasing backup interface [ 442.457688][T20167] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 442.495254][T20142] bond0: (slave bond_slave_1): Releasing backup interface [ 442.543811][T20142] team0: Port device team_slave_0 removed [ 442.560756][T20142] team0: Port device team_slave_1 removed [ 442.570469][T20142] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 442.651519][T20150] bond3: option primary_reselect: invalid value (133) [ 442.659465][T20172] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 442.670500][T20150] bond3 (unregistering): Released all slaves [ 443.054834][T20198] netlink: 'syz.3.3509': attribute type 1 has an invalid length. [ 443.304832][T20206] blkio.reset_stats is deprecated [ 443.398827][T20210] tipc: Started in network mode [ 443.407424][T20210] tipc: Node identity 8e8b56f10fd1, cluster identity 4711 [ 443.469068][T20210] tipc: Enabled bearer , priority 0 [ 443.559156][T20214] syzkaller0: entered promiscuous mode [ 443.568912][T20214] syzkaller0: entered allmulticast mode [ 443.575883][T20214] tipc: Resetting bearer [ 443.625627][T20209] tipc: Resetting bearer [ 446.092760][T20209] tipc: Disabling bearer [ 446.107790][T20226] __nla_validate_parse: 18 callbacks suppressed [ 446.107809][T20226] netlink: 726 bytes leftover after parsing attributes in process `syz.3.3514'. [ 446.124927][T20226] netlink: 'syz.3.3514': attribute type 1 has an invalid length. [ 446.158668][ T5912] tipc: Node number set to 2170181361 [ 446.232941][T20243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3518'. [ 446.382542][T20254] sctp: [Deprecated]: syz.0.3521 (pid 20254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.382542][T20254] Use struct sctp_sack_info instead [ 446.560781][T20263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.797609][T20277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.843741][T20283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3526'. [ 446.852886][T20278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.952537][T20288] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3529'. [ 447.030556][T20290] netlink: 'syz.0.3530': attribute type 1 has an invalid length. [ 447.052912][T20286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.101166][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3530'. [ 447.188661][T20290] bond2: entered promiscuous mode [ 447.211135][T20290] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.530478][T20308] syzkaller0: entered promiscuous mode [ 447.541411][T20308] syzkaller0: entered allmulticast mode [ 447.649672][T20317] nbd: must specify an index to disconnect [ 447.878200][T20330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3539'. [ 447.947326][T20330] macsec1: entered promiscuous mode [ 447.961751][T20330] team0: entered promiscuous mode [ 447.994833][T20330] team_slave_0: entered promiscuous mode [ 448.017833][T20330] team_slave_1: entered promiscuous mode [ 448.052671][T20330] macsec1: entered allmulticast mode [ 448.066144][T20330] team0: entered allmulticast mode [ 448.083180][T20330] team_slave_0: entered allmulticast mode [ 448.089567][T20343] sctp: [Deprecated]: syz.2.3540 (pid 20343) Use of int in maxseg socket option. [ 448.089567][T20343] Use struct sctp_assoc_value instead [ 448.100147][T20330] team_slave_1: entered allmulticast mode [ 448.111337][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3542'. [ 448.130256][T20330] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 448.144688][T20340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3540'. [ 448.159915][T20330] team0: Device macsec1 is already an upper device of the team interface [ 448.182941][T20347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3543'. [ 448.372190][T20330] team0: left allmulticast mode [ 448.386449][T20330] team_slave_0: left allmulticast mode [ 448.403586][T20330] team_slave_1: left allmulticast mode [ 448.417924][T20330] team0: left promiscuous mode [ 448.534721][T12531] team_slave_0: left promiscuous mode [ 448.541853][T12531] team_slave_1: left promiscuous mode [ 448.606297][T20347] ip6tnl0: entered promiscuous mode [ 448.679238][T20369] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3544'. [ 449.049404][T20393] netlink: 'syz.2.3549': attribute type 1 has an invalid length. [ 449.204249][T20406] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 449.230800][T20406] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 449.274392][T20406] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 449.302767][T20400] wg1 speed is unknown, defaulting to 1000 [ 449.318029][T20400] wg1 speed is unknown, defaulting to 1000 [ 449.330463][T20400] wg1 speed is unknown, defaulting to 1000 [ 449.361701][T20413] syzkaller1: entered allmulticast mode [ 449.842597][ T9125] wg1 speed is unknown, defaulting to 1000 [ 449.875680][T20400] infiniband syz0: set active [ 449.888445][T20400] infiniband syz0: added wg1 [ 449.963616][T20400] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 450.013964][T20400] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 450.046948][T20400] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 450.220042][T20400] RDS/IB: syz0: added [ 450.246568][T20400] smc: adding ib device syz0 with port count 1 [ 450.271905][T20400] smc: ib device syz0 port 1 has no pnetid [ 450.291701][ T9125] wg1 speed is unknown, defaulting to 1000 [ 450.345688][T20400] wg1 speed is unknown, defaulting to 1000 [ 450.400164][T20445] lo: entered allmulticast mode [ 450.555562][T20443] nbd: must specify an index to disconnect [ 450.797445][T20400] wg1 speed is unknown, defaulting to 1000 [ 451.158219][T20488] __nla_validate_parse: 7 callbacks suppressed [ 451.158239][T20488] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3578'. [ 451.204264][T20488] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3578'. [ 451.260305][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3578'. [ 451.279930][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3578'. [ 451.422631][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3578'. [ 451.432199][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3578'. [ 451.455368][T20490] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.463091][T20490] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.524731][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3578'. [ 451.537702][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3578'. [ 451.570759][T20490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.588093][T20490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.679888][T20400] wg1 speed is unknown, defaulting to 1000 [ 451.708470][ T35] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.719321][ T35] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.733251][ T35] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.757924][ T35] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.830844][T20514] xfrm1: left allmulticast mode [ 451.856184][T20514] Bluetooth: MGMT ver 1.23 [ 452.181315][T20400] wg1 speed is unknown, defaulting to 1000 [ 452.297894][T20533] netlink: 'syz.4.3589': attribute type 13 has an invalid length. [ 452.321005][ T7921] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.331454][T20533] netlink: 'syz.4.3589': attribute type 13 has an invalid length. [ 452.346588][ T7921] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.368642][ T7921] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.388562][ T7921] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.443621][T20400] wg1 speed is unknown, defaulting to 1000 [ 452.549010][T20538] netlink: 'syz.4.3590': attribute type 3 has an invalid length. [ 452.698822][T20400] wg1 speed is unknown, defaulting to 1000 [ 452.971045][T20549] netlink: 'syz.2.3592': attribute type 7 has an invalid length. [ 453.039050][T20553] netlink: 'syz.1.3594': attribute type 21 has an invalid length. [ 453.051360][T20553] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3594'. [ 453.061662][T20553] netlink: 'syz.1.3594': attribute type 4 has an invalid length. [ 453.086431][T20553] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3594'. [ 453.259665][T20544] wg1 speed is unknown, defaulting to 1000 [ 453.271592][T20557] syzkaller0: entered promiscuous mode [ 453.287663][T20557] syzkaller0: entered allmulticast mode [ 453.434775][T20570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.532487][T20575] netlink: 'syz.2.3600': attribute type 4 has an invalid length. [ 453.717059][T20400] wg1 speed is unknown, defaulting to 1000 [ 453.746629][T20580] tipc: Enabled bearer , priority 0 [ 453.809155][T20580] syzkaller0: entered promiscuous mode [ 453.815608][T20580] syzkaller0: entered allmulticast mode [ 453.822236][T20580] tipc: Resetting bearer [ 453.876291][T20579] tipc: Resetting bearer [ 456.311209][T20579] tipc: Disabling bearer [ 456.321336][T20400] wg1 speed is unknown, defaulting to 1000 [ 456.638740][T20612] macsec1: entered promiscuous mode [ 456.690033][T20614] __nla_validate_parse: 2 callbacks suppressed [ 456.690051][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'. [ 456.722095][T20400] wg1 speed is unknown, defaulting to 1000 [ 456.802624][T20617] netlink: 'syz.2.3612': attribute type 4 has an invalid length. [ 456.913882][T20617] block nbd2: server does not support multiple connections per device. [ 456.925711][T20617] block nbd2: shutting down sockets [ 457.111366][T20627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3616'. [ 457.129087][T20627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3616'. [ 457.502572][T20644] team0: entered promiscuous mode [ 457.525172][T20644] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 457.633690][T20648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'. [ 457.740975][T20661] FAULT_INJECTION: forcing a failure. [ 457.740975][T20661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.764497][T20661] CPU: 1 UID: 0 PID: 20661 Comm: syz.0.3626 Not tainted syzkaller #0 PREEMPT(full) [ 457.764523][T20661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 457.764535][T20661] Call Trace: [ 457.764542][T20661] [ 457.764549][T20661] dump_stack_lvl+0xe8/0x150 [ 457.764581][T20661] should_fail_ex+0x412/0x560 [ 457.764616][T20661] _copy_from_user+0x2d/0xb0 [ 457.764639][T20661] ___sys_sendmsg+0x1c6/0x360 [ 457.764660][T20661] ? __lock_acquire+0x6b5/0x2cf0 [ 457.764690][T20661] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.764744][T20661] ? __fget_files+0x2a/0x420 [ 457.764763][T20661] ? __fget_files+0x3a0/0x420 [ 457.764791][T20661] __x64_sys_sendmsg+0x1bd/0x2a0 [ 457.764813][T20661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.764842][T20661] ? __pfx_ksys_write+0x10/0x10 [ 457.764874][T20661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.764893][T20661] do_syscall_64+0x15f/0xf80 [ 457.764915][T20661] ? trace_irq_disable+0x3b/0x140 [ 457.764937][T20661] ? clear_bhb_loop+0x40/0x90 [ 457.764959][T20661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.764976][T20661] RIP: 0033:0x7f2bae59cdd9 [ 457.764993][T20661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.765007][T20661] RSP: 002b:00007f2baf371028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.765027][T20661] RAX: ffffffffffffffda RBX: 00007f2bae815fa0 RCX: 00007f2bae59cdd9 [ 457.765040][T20661] RDX: 0000000020008000 RSI: 0000200000000640 RDI: 0000000000000003 [ 457.765052][T20661] RBP: 00007f2baf371090 R08: 0000000000000000 R09: 0000000000000000 [ 457.765063][T20661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.765074][T20661] R13: 00007f2bae816038 R14: 00007f2bae815fa0 R15: 00007ffc98ee5088 [ 457.765104][T20661] [ 458.136405][T20672] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3629'. [ 458.381856][T20686] netlink: zone id is out of range [ 458.396815][T20686] netlink: zone id is out of range [ 458.464832][T20690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3636'. [ 458.466232][T20686] netlink: zone id is out of range [ 458.480215][T20686] netlink: zone id is out of range [ 458.496094][T20686] netlink: zone id is out of range [ 458.508557][T20686] netlink: zone id is out of range [ 458.526048][T20686] netlink: zone id is out of range [ 458.538366][T20686] netlink: zone id is out of range [ 458.551495][T20686] netlink: zone id is out of range [ 458.712189][T20708] syzkaller0: entered promiscuous mode [ 458.719242][T20708] syzkaller0: entered allmulticast mode [ 458.727962][T20712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3642'. [ 458.991154][T20700] IPv6: Can't replace route, no match found [ 459.056549][T20730] lo: left allmulticast mode [ 459.415954][T20743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3649'. [ 459.447876][T20743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3649'. [ 459.494760][T20733] syzkaller1: entered promiscuous mode [ 459.512630][T20733] syzkaller1: entered allmulticast mode [ 460.698198][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3659'. [ 460.804819][T20799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.846463][T20799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.872736][T20799] bond0 (unregistering): Released all slaves [ 461.634587][T20829] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 461.671528][T20829] bond0: (slave lo): Enslaving as an active interface with an up link [ 461.824282][T20849] __nla_validate_parse: 5 callbacks suppressed [ 461.824301][T20849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3669'. [ 461.861701][T20849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3669'. [ 461.876379][T20849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3669'. [ 461.879063][ T5850] Bluetooth: hci1: command 0x0405 tx timeout [ 461.895902][T20849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3669'. [ 462.193968][T20866] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3669'. [ 462.211239][T20854] wg1 speed is unknown, defaulting to 1000 [ 462.465466][T20885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3679'. [ 463.201782][T20920] wg1 speed is unknown, defaulting to 1000 [ 463.279594][T20929] xfrm0: entered allmulticast mode [ 463.655491][T20946] ip6gretap1: entered promiscuous mode [ 463.851141][T20958] netlink: 'syz.3.3693': attribute type 1 has an invalid length. [ 463.929424][T20962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3694'. [ 464.021023][T20958] bond3: entered promiscuous mode [ 464.048132][T20958] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.086096][T20970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3693'. [ 464.127299][T20966] syzkaller0: entered promiscuous mode [ 464.144517][T20966] syzkaller0: entered allmulticast mode [ 464.224456][T20967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.266590][T20967] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 464.287750][T20967] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 464.301528][T20967] bond3: (slave vti0): making interface the new active one [ 464.319140][T20967] vti0: entered promiscuous mode [ 464.327843][T20967] bond3: (slave vti0): Enslaving as an active interface with an up link [ 464.434159][T20975] netlink: 'syz.2.3696': attribute type 1 has an invalid length. [ 464.449504][T20972] erspan1: entered allmulticast mode [ 464.553330][T20979] netlink: 'syz.1.3698': attribute type 5 has an invalid length. [ 464.592351][T20978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3697'. [ 464.715113][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3697'. [ 465.243111][T21013] net_ratelimit: 355 callbacks suppressed [ 465.243130][T21013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.407886][T21013] syzkaller0: entered promiscuous mode [ 465.452250][T21013] syzkaller0: entered allmulticast mode [ 466.167704][T21064] netlink: 'syz.4.3720': attribute type 11 has an invalid length. [ 467.018032][T21073] netlink: 'syz.4.3721': attribute type 2 has an invalid length. [ 467.026092][T21073] netlink: 'syz.4.3721': attribute type 2 has an invalid length. [ 468.621499][T21037] wg1 speed is unknown, defaulting to 1000 [ 468.791263][T21077] syzkaller0: entered promiscuous mode [ 468.811983][T21077] syzkaller0: entered allmulticast mode [ 468.847111][T21077] tc action pedit offset 64 out of bounds [ 468.854859][T21077] tc action pedit offset 64 out of bounds [ 468.860638][T21077] tc action pedit offset 64 out of bounds [ 468.866442][T21077] tc action pedit offset 64 out of bounds [ 468.872203][T21077] tc action pedit offset 64 out of bounds [ 468.877967][T21077] tc action pedit offset 64 out of bounds [ 468.883721][T21077] tc action pedit offset 64 out of bounds [ 468.889441][T21077] tc action pedit offset 64 out of bounds [ 468.895206][T21077] tc action pedit offset 64 out of bounds [ 468.900958][T21077] tc action pedit offset 64 out of bounds [ 468.906742][T21077] 0: reclassify loop, rule prio 0, protocol 800 [ 469.010555][T21073] wg1 speed is unknown, defaulting to 1000 [ 469.186323][T21089] __nla_validate_parse: 7 callbacks suppressed [ 469.186341][T21089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3725'. [ 469.486333][T21079] wg1 speed is unknown, defaulting to 1000 [ 469.881644][T21092] wg1 speed is unknown, defaulting to 1000 [ 470.230804][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3726'. [ 471.924238][T21084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.504981][T21156] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 472.504981][T21156] Please contact the netfilter-devel mailing list or update your nftables rules. [ 472.701451][T21171] netlink: 632 bytes leftover after parsing attributes in process `syz.3.3739'. [ 473.068550][T21187] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:19241 [ 473.077999][T12531] IPVS: starting estimator thread 0... [ 473.193606][T21188] IPVS: using max 28 ests per chain, 67200 per kthread [ 473.246403][T21195] netlink: 'syz.4.3744': attribute type 3 has an invalid length. [ 473.273125][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3744'. [ 473.310105][T21195] netlink: 'syz.4.3744': attribute type 3 has an invalid length. [ 473.326052][T21200] 0: renamed from batadv_slave_1 (while UP) [ 473.349766][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3744'. [ 473.599178][T21214] netlink: 'syz.3.3749': attribute type 1 has an invalid length. [ 473.619586][T21214] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3749'. [ 473.662264][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3750'. [ 473.688386][T21225] netlink: 'syz.0.3750': attribute type 29 has an invalid length. [ 473.721026][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3750'. [ 474.118586][T21232] geneve2: entered promiscuous mode [ 474.440652][T21247] netlink: 'syz.2.3732': attribute type 4 has an invalid length. [ 474.501562][T21247] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3732'. [ 474.543084][T21257] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3756'. [ 474.576630][T21256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3758'. [ 474.717785][T21256] syzkaller0: entered promiscuous mode [ 474.761281][T21256] syzkaller0: entered allmulticast mode [ 474.866345][T21276] netlink: 'syz.3.3761': attribute type 1 has an invalid length. [ 474.926151][T21276] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3761'. [ 475.367790][T21291] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3763'. [ 476.988535][ T5850] Bluetooth: hci1: command 0x0405 tx timeout [ 477.551542][T21288] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 477.827908][T21313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3769'. [ 478.067011][T21326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3772'. [ 478.094891][T21331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'. [ 478.106249][T21326] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3772'. [ 478.130055][T21331] netlink: 'syz.2.3773': attribute type 25 has an invalid length. [ 478.173797][T21331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3773'. [ 478.217877][T21326] vlan2: entered promiscuous mode [ 478.225745][T21326] bridge0: entered promiscuous mode [ 478.231302][T21326] vlan2: entered allmulticast mode [ 478.238205][T21326] bridge0: entered allmulticast mode [ 478.615328][T21341] wg1 speed is unknown, defaulting to 1000 [ 479.362245][T21394] netlink: 'syz.3.3785': attribute type 10 has an invalid length. [ 479.427941][T21396] netlink: 'syz.3.3785': attribute type 10 has an invalid length. [ 479.438482][T21394] dummy0: entered promiscuous mode [ 479.447814][T21394] team0: Port device dummy0 added [ 479.484959][T21396] dummy0: left promiscuous mode [ 479.506049][T21396] team0: Port device dummy0 removed [ 479.539638][T21396] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 479.750287][T21414] __nla_validate_parse: 3 callbacks suppressed [ 479.750305][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'. [ 479.897467][T21423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3791'. [ 479.948287][T21423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3791'. [ 480.221681][T21439] netlink: 'syz.1.3795': attribute type 13 has an invalid length. [ 480.239179][T21439] netlink: 'syz.1.3795': attribute type 17 has an invalid length. [ 480.273673][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3795'. [ 480.409815][T21439] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.452123][T21439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 480.530798][T21449] tipc: Enabled bearer , priority 0 [ 480.616762][T21449] syzkaller0: entered promiscuous mode [ 480.625770][T21449] syzkaller0: entered allmulticast mode [ 480.696699][T21454] syzkaller1: entered promiscuous mode [ 480.703449][T21454] syzkaller1: entered allmulticast mode [ 480.737734][T21449] tipc: Resetting bearer [ 480.762557][T21447] tipc: Resetting bearer [ 480.834924][T21447] tipc: Disabling bearer [ 480.888197][T21464] syzkaller0: entered promiscuous mode [ 480.916573][T21464] syzkaller0: entered allmulticast mode [ 481.177022][T21487] netlink: 'syz.4.3807': attribute type 5 has an invalid length. [ 481.612701][T21503] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3810'. [ 481.637489][T21505] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 481.664573][T21507] netlink: 'syz.2.3812': attribute type 83 has an invalid length. [ 482.015384][T21523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.177488][T21537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3821'. [ 482.432860][T21552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3827'. [ 482.446373][T21547] tipc: Enabled bearer , priority 0 [ 482.459791][T21547] syzkaller0: entered promiscuous mode [ 482.466424][T21547] syzkaller0: entered allmulticast mode [ 482.482080][T21554] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 482.569275][T21557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3825'. [ 482.579261][T21557] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3825'. [ 482.610005][T21547] tipc: Resetting bearer [ 482.621922][T21546] tipc: Resetting bearer [ 482.701386][T21546] tipc: Disabling bearer [ 482.855002][T21571] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3831'. [ 483.364463][T21604] wg1 speed is unknown, defaulting to 1000 [ 483.720234][T21627] IPv6: Can't replace route, no match found [ 484.478966][T21610] wg1 speed is unknown, defaulting to 1000 [ 484.599073][T21671] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 484.839302][T21683] __nla_validate_parse: 3 callbacks suppressed [ 484.839319][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3857'. [ 485.221627][T21699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3863'. [ 485.486001][T21712] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3866'. [ 485.548777][T21710] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3866'. [ 485.630991][T21719] netlink: 'syz.4.3868': attribute type 3 has an invalid length. [ 485.857561][T21737] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3872'. [ 486.000197][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3873'. [ 486.080946][T21747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3875'. [ 486.198248][T21750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.216639][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'. [ 486.248994][T21754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3876'. [ 486.272685][T21754] netlink: 'syz.2.3876': attribute type 12 has an invalid length. [ 486.295426][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'. [ 486.417696][T21759] xt_hashlimit: size too large, truncated to 1048576 [ 486.944137][T21788] syzkaller0: entered promiscuous mode [ 486.959492][T21788] syzkaller0: entered allmulticast mode [ 487.140258][T21794] syzkaller1: entered promiscuous mode [ 487.153715][T21794] syzkaller1: entered allmulticast mode [ 487.736336][T21833] nbd: nbd1 already in use [ 487.822711][T21829] ipvlan2: left promiscuous mode [ 488.614096][T21882] syzkaller0: entered promiscuous mode [ 488.632105][T21882] syzkaller0: entered allmulticast mode [ 488.642279][ T10] IPVS: starting estimator thread 0... [ 488.658699][T21888] xt_limit: Overflow, try lower: 324382443/0 [ 488.673568][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.710686][T21885] ip6tnl0: left promiscuous mode [ 488.722238][T21885] ip6gre0: left promiscuous mode [ 488.736947][T21885] team0: left promiscuous mode [ 488.742769][T21885] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.750935][T21890] IPVS: using max 29 ests per chain, 69600 per kthread [ 488.767497][T21885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.831778][T21891] netlink: 'syz.2.3908': attribute type 1 has an invalid length. [ 489.041610][T21908] x_tables: duplicate underflow at hook 1 [ 489.146031][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.157318][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.169158][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.444162][T21923] netlink: 'syz.1.3917': attribute type 4 has an invalid length. [ 489.705323][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.804289][T21942] netlink: 'syz.1.3924': attribute type 1 has an invalid length. [ 489.866063][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.880836][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.891913][T21946] netlink: 'syz.2.3926': attribute type 10 has an invalid length. [ 489.892491][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.930112][T21946] __nla_validate_parse: 21 callbacks suppressed [ 489.930326][T21946] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3926'. [ 490.239763][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3929'. [ 490.326842][T21962] ip6gre2: entered promiscuous mode [ 490.370798][T21954] wg1 speed is unknown, defaulting to 1000 [ 490.497270][T21977] IPVS: Scheduler module ip_vs_ not found [ 490.520618][T21979] syzkaller1: entered promiscuous mode [ 490.534948][T21979] syzkaller1: entered allmulticast mode [ 490.554264][T21979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3931'. [ 490.596308][T21983] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 490.754554][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.909061][T21995] netlink: 'syz.3.3936': attribute type 13 has an invalid length. [ 490.938631][T21995] netlink: 'syz.3.3936': attribute type 1 has an invalid length. [ 490.965517][T21995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3936'. [ 490.983312][T21995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3936'. [ 491.097556][T22006] netlink: 'syz.3.3936': attribute type 13 has an invalid length. [ 491.786615][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.901839][T22047] tipc: Enabling of bearer rejected, failed to enable media [ 492.089931][T22060] netlink: 'syz.1.3947': attribute type 9 has an invalid length. [ 492.132706][T22060] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3947'. [ 492.168370][T22063] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3948'. [ 492.185137][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.207622][T22063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3948'. [ 492.222727][T22060] syzkaller0: entered promiscuous mode [ 492.231885][T22060] syzkaller0: entered allmulticast mode [ 492.477914][T22086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.495022][T22088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3954'. [ 492.754251][T22105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3956'. [ 492.823397][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.710185][T22145] siw: device registration error -23 [ 493.863769][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.419696][T22186] wg1 speed is unknown, defaulting to 1000 [ 494.467375][T22194] netlink: 'syz.1.3980': attribute type 10 has an invalid length. [ 494.491509][T22194] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 494.567595][T22200] sctp: [Deprecated]: syz.2.3982 (pid 22200) Use of int in max_burst socket option deprecated. [ 494.567595][T22200] Use struct sctp_assoc_value instead [ 494.726632][T22210] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.753229][T22210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.760548][T22210] IPv6: NLM_F_CREATE should be set when creating new route [ 494.767896][T22210] IPv6: NLM_F_CREATE should be set when creating new route [ 494.775164][T22210] IPv6: NLM_F_CREATE should be set when creating new route [ 494.857631][T22219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.152310][T22221] syzkaller0: entered promiscuous mode [ 495.158818][T22221] syzkaller0: entered allmulticast mode [ 498.137845][T22242] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 498.137845][T22242] 3UH5rBn [ 498.164249][T22252] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 498.353825][T22269] __nla_validate_parse: 8 callbacks suppressed [ 498.353843][T22269] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3997'. [ 498.447749][T22269] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 498.476312][T22269] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 498.514685][T22269] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 498.533647][ T29] audit: type=1800 audit(1777238552.441:10): pid=22275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3999" name="r" dev="tmpfs" ino=977 res=0 errno=0 [ 498.581720][T22269] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 498.760395][T22291] netlink: 'syz.2.4000': attribute type 2 has an invalid length. [ 498.799226][T22291] netlink: 'syz.2.4000': attribute type 2 has an invalid length. [ 498.881266][T22294] nbd: must specify an index to disconnect [ 498.969612][T22305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4005'. [ 498.997674][T22305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4005'. [ 499.040008][T22310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4008'. [ 499.084723][T22315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4009'. [ 499.116736][T22310] bond3: option lacp_active: invalid value (8) [ 499.127790][T22310] bond3 (unregistering): Released all slaves [ 499.170691][T22320] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4010'. [ 499.339012][T22331] net_ratelimit: 1 callbacks suppressed [ 499.339031][T22331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.475707][T22336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4014'. [ 499.496244][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4015'. [ 499.506198][T22336] bond0: Invalid ad_actor_system MAC address. [ 499.512337][T22336] bond0: option ad_actor_system: invalid value (7) [ 499.522543][T22336] bond0 (unregistering): Released all slaves [ 499.567795][T22341] xt_hashlimit: size too large, truncated to 1048576 [ 499.684452][T22345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4017'. [ 499.709401][T22345] erspan1: entered allmulticast mode [ 499.896051][T22351] netlink: ct family unspecified [ 499.920731][T22351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.398731][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.471301][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 504.351835][T22388] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4027'. [ 504.431887][T22398] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 504.576847][T22397] syzkaller1: entered promiscuous mode [ 504.582374][T22397] syzkaller1: entered allmulticast mode [ 504.732490][T22416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4032'. [ 504.761014][T22411] veth1: entered allmulticast mode [ 504.815220][T22420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4031'. [ 504.868561][T22420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4031'. [ 504.940375][T22420] hsr_slave_0: left promiscuous mode [ 504.965210][T22420] hsr_slave_1: left promiscuous mode [ 505.069969][T22437] netlink: 'syz.4.4037': attribute type 1 has an invalid length. [ 505.095139][T22424] IPv6: Can't replace route, no match found [ 505.118305][T22424] IPv6: Can't replace route, no match found [ 505.134828][T22440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4037'. [ 505.204837][T22433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4037'. [ 505.256805][T22443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4038'. [ 505.278367][T22437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.285843][T22443] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4038'. [ 505.312476][T22435] syzkaller0: entered promiscuous mode [ 505.326328][T22435] syzkaller0: entered allmulticast mode [ 505.400438][T22453] : entered promiscuous mode [ 505.433577][T22455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4042'. [ 505.466920][T22455] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4042'. [ 505.490453][T22455] tipc: Invalid UDP bearer configuration [ 505.490506][T22455] tipc: Enabling of bearer rejected, failed to enable media [ 505.621801][T22469] xt_hashlimit: size too large, truncated to 1048576 [ 505.686058][T22474] veth0: entered promiscuous mode [ 505.702219][T22474] veth0: entered allmulticast mode [ 505.739983][T22459] xt_hashlimit: size too large, truncated to 1048576 [ 505.759297][T22476] x_tables: duplicate underflow at hook 2 [ 506.160829][T22492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.498887][T22514] netlink: 'syz.3.4058': attribute type 1 has an invalid length. [ 506.590690][T22528] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 506.615815][T12531] hsr0: entered promiscuous mode [ 506.632235][T22529] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 506.844772][T22544] tipc: Started in network mode [ 506.859614][T22544] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 506.883824][T22544] tipc: Enabled bearer , priority 14 [ 506.967770][T22549] sctp: [Deprecated]: syz.4.4066 (pid 22549) Use of int in max_burst socket option deprecated. [ 506.967770][T22549] Use struct sctp_assoc_value instead [ 507.529569][T22579] netlink: 'syz.1.4073': attribute type 29 has an invalid length. [ 507.909764][ T9125] tipc: Node number set to 10463914 [ 508.254608][T22629] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 508.387597][T22636] netlink: 'syz.0.4086': attribute type 1 has an invalid length. [ 508.461019][T22645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.660567][T22658] x_tables: duplicate underflow at hook 2 [ 508.689640][T22657] x_tables: duplicate underflow at hook 2 [ 508.796510][T22657] bond4: entered promiscuous mode [ 508.847277][T22657] bond4: entered allmulticast mode [ 508.946778][T22665] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 509.045919][T22681] sctp: [Deprecated]: syz.2.4097 (pid 22681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.045919][T22681] Use struct sctp_sack_info instead [ 509.521096][T22715] __nla_validate_parse: 21 callbacks suppressed [ 509.521114][T22715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4103'. [ 509.740162][T22719] wg1 speed is unknown, defaulting to 1000 [ 509.920462][T22734] netlink: 'syz.2.4109': attribute type 16 has an invalid length. [ 509.946894][T22734] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.4109'. [ 510.169736][T22742] netlink: 'syz.2.4113': attribute type 7 has an invalid length. [ 510.281284][T22744] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.337292][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4113'. [ 510.414785][T22744] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.531132][T22744] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.608267][T22744] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.730961][ T1105] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.769082][T22755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4117'. [ 510.808345][ T1105] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.872266][T22755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4117'. [ 510.897839][ T1105] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.920872][ T1105] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.016268][T22761] No such timeout policy "syz1" [ 511.092353][T22766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4121'. [ 511.129352][T22766] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4121'. [ 511.147693][T22777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4122'. [ 511.167732][T22776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4122'. [ 511.287576][T22781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4124'. [ 511.474444][T22799] tipc: Enabled bearer , priority 0 [ 511.517557][T22800] syzkaller0: entered promiscuous mode [ 511.525127][T22800] syzkaller0: entered allmulticast mode [ 511.573494][T22800] tipc: Resetting bearer [ 511.675508][T22800] tipc: Disabling bearer [ 512.479880][T22843] pim6reg1: entered allmulticast mode [ 512.577624][T22845] syzkaller0: entered promiscuous mode [ 512.584153][T22845] syzkaller0: entered allmulticast mode [ 513.177915][T22879] openvswitch: netlink: Duplicate or invalid key (type 0). [ 513.203684][T22879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.659570][T22896] wg1 speed is unknown, defaulting to 1000 [ 513.707983][ T5850] Bluetooth: hci0: command 0x0401 tx timeout [ 514.035870][T22921] netlink: 'syz.1.4156': attribute type 1 has an invalid length. [ 514.542856][T22938] __nla_validate_parse: 14 callbacks suppressed [ 514.542874][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4162'. [ 514.595430][T22941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4162'. [ 514.735071][T22943] Unsupported ieee802154 address type: 0 [ 515.047880][T22954] pimreg9: entered allmulticast mode [ 515.142263][T22961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4167'. [ 515.159322][T22962] netlink: 'syz.4.4168': attribute type 1 has an invalid length. [ 515.186599][T22962] netlink: 'syz.4.4168': attribute type 2 has an invalid length. [ 515.280209][T22967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.641394][T22983] bond4: option tlb_dynamic_lb: invalid value (5) [ 515.664252][T22969] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 515.686262][T22983] bond4 (unregistering): Released all slaves [ 515.694399][T22969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4171'. [ 515.801464][T22989] netlink: 'syz.2.4175': attribute type 17 has an invalid length. [ 515.853613][T22990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4175'. [ 515.866187][T22991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4175'. [ 515.913958][T22989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.979858][T22985] wg1 speed is unknown, defaulting to 1000 [ 516.090142][T22993] syzkaller0: entered promiscuous mode [ 516.124614][T22993] syzkaller0: entered allmulticast mode [ 517.427506][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4180'. [ 519.411450][T23036] netlink: 'syz.4.4181': attribute type 5 has an invalid length. [ 519.535977][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4181'. [ 519.574838][ T7918] bond11 (unregistering): (slave geneve5): Releasing backup interface [ 519.750447][T23039] netlink: 'syz.4.4181': attribute type 29 has an invalid length. [ 519.768406][ T7918] bond6 (unregistering): (slave bridge3): Releasing active interface [ 519.847679][ T7918] bond12 (unregistering): (slave bridge5): Releasing backup interface [ 519.887283][ T7918] bond15 (unregistering): (slave bridge6): Releasing active interface [ 519.954311][ T7918] bond0 (unregistering): Released all slaves [ 519.965734][ T7918] team0: Port device bond1 removed [ 519.971694][ T7918] bond1 (unregistering): Released all slaves [ 519.986097][ T7918] bond2 (unregistering): Released all slaves [ 520.001931][ T7918] bond3 (unregistering): Released all slaves [ 520.018378][ T7918] bond4 (unregistering): Released all slaves [ 520.032481][ T7918] bond5 (unregistering): Released all slaves [ 520.049493][ T7918] bond6 (unregistering): Released all slaves [ 520.066571][ T7918] bond7 (unregistering): (slave veth3): Releasing active interface [ 520.079070][ T7918] bond7 (unregistering): (slave batadv2): Releasing active interface [ 520.088255][ T7918] bond7 (unregistering): Released all slaves [ 520.105637][ T7918] bond8 (unregistering): Released all slaves [ 520.120707][ T7918] bond9 (unregistering): Released all slaves [ 520.137902][ T7918] bond10 (unregistering): Released all slaves [ 520.151645][ T7918] bond11 (unregistering): Released all slaves [ 520.169661][ T7918] bond12 (unregistering): Released all slaves [ 520.187881][ T7918] bond13 (unregistering): (slave veth15): Releasing active interface [ 520.199812][ T7918] bond13 (unregistering): Released all slaves [ 520.217251][ T7918] bond14 (unregistering): Released all slaves [ 520.230728][ T7918] bond15 (unregistering): Released all slaves [ 520.248014][ T7918] bond16 (unregistering): (slave veth17): Releasing backup interface [ 520.258757][ T7918] veth17: left promiscuous mode [ 520.265947][ T7918] bond16 (unregistering): Released all slaves [ 520.285877][ T7918] bond17 (unregistering): Released all slaves [ 520.603457][ T7918] : left promiscuous mode [ 521.024854][ T7918] IPVS: stopping backup sync thread 8763 ... [ 521.350583][T23078] erspan0: entered promiscuous mode [ 521.486826][T23083] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4193'. [ 521.696214][T23088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4195'. [ 521.718920][T23088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4195'. [ 521.987939][T23100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.066332][T23103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4201'. [ 522.470863][T23127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4208'. [ 522.510874][T23127] openvswitch: netlink: Flow actions attr not present in new flow. [ 522.996853][T23134] syzkaller1: entered promiscuous mode [ 523.013419][T23134] syzkaller1: entered allmulticast mode [ 523.251730][T23153] ip6t_rpfilter: unknown options [ 523.397620][T23163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4215'. [ 523.589567][T23166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4217'. [ 523.771998][ T7918] hsr_slave_0: left promiscuous mode [ 523.802834][ T7918] hsr_slave_1: left promiscuous mode [ 523.954721][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 524.108299][T23171] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4218'. [ 524.199780][T23192] openvswitch: netlink: IPv6 tunnel dst address is zero [ 524.593047][T23181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 525.397004][ T7918] IPVS: stop unused estimator thread 0... [ 525.635882][T23252] xt_ecn: cannot match TCP bits for non-tcp packets [ 525.865568][T23266] xt_HMARK: proto mask must be zero with L3 mode [ 525.974510][T23276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4250'. [ 525.991288][T23276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4250'. [ 526.686412][T23279] __nla_validate_parse: 1 callbacks suppressed [ 526.686432][T23279] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4251'. [ 526.792831][T12531] IPVS: starting estimator thread 0... [ 526.913211][T23291] IPVS: using max 55 ests per chain, 132000 per kthread [ 526.938377][T23296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4254'. [ 526.998579][T23299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4256'. [ 527.218145][T23302] bridge3: entered promiscuous mode [ 527.243473][T23302] bridge3: entered allmulticast mode [ 527.579560][T23335] bridge0: port 1(vlan2) entered blocking state [ 527.587027][T23335] bridge0: port 1(vlan2) entered disabled state [ 527.594809][T23335] vlan2: entered allmulticast mode [ 527.600150][T23335] dummy0: entered allmulticast mode [ 527.613063][T23335] vlan2: entered promiscuous mode [ 527.618210][T23335] dummy0: entered promiscuous mode [ 527.719621][T23346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 527.731592][T23346] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4269'. [ 527.779605][T23343] wg1 speed is unknown, defaulting to 1000 [ 527.884058][T23355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4272'. [ 527.914277][T23355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4272'. [ 527.934215][T23355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4272'. [ 527.934626][T23358] xt_TCPMSS: Only works on TCP SYN packets [ 527.981202][T23358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4273'. [ 528.000943][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4274'. [ 528.040797][T23363] netlink: 'syz.0.4274': attribute type 2 has an invalid length. [ 528.167073][T23370] geneve4: entered promiscuous mode [ 528.630011][T23380] wg1 speed is unknown, defaulting to 1000 [ 529.064302][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 529.106693][T23409] netlink: 'syz.2.4288': attribute type 1 has an invalid length. [ 529.166722][T23413] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 529.171321][T23414] nbd: nbd1 already in use [ 529.484064][T23421] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 529.511504][T23425] Cannot find set identified by id 65534 to match [ 529.703160][T23427] wg1 speed is unknown, defaulting to 1000 [ 530.482159][T23440] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.057401][T23440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.111161][T23440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.458815][ T7918] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.468337][ T807] wg1 speed is unknown, defaulting to 1000 [ 531.475017][ T807] syz0: Port: 1 Link DOWN [ 531.479743][ T7918] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.492636][ T7918] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.504517][ T7918] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.531422][ T807] wg1 speed is unknown, defaulting to 1000 [ 531.531899][ T7918] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.550347][ T7918] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.561974][ T7918] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.570927][ T7918] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.621850][T23473] xt_policy: too many policy elements [ 532.280604][T23495] __nla_validate_parse: 15 callbacks suppressed [ 532.280622][T23495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4309'. [ 532.331061][T23500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4311'. [ 532.501098][T23494] wg1 speed is unknown, defaulting to 1000 [ 532.515290][T23511] nr0: tun_chr_ioctl cmd 1074025677 [ 532.533663][T23511] nr0: linktype set to 774 [ 532.798449][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4314'. [ 532.841819][T23526] netlink: 'syz.3.4316': attribute type 1 has an invalid length. [ 532.949630][T23526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 533.009675][ T5844] block nbd2: Receive control failed (result -32) [ 533.062324][T23530] bond4: (slave gretap2): making interface the new active one [ 533.084698][T23530] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 533.354008][T23547] netlink: 'syz.2.4323': attribute type 12 has an invalid length. [ 533.371593][T23550] netlink: 'syz.4.4324': attribute type 1 has an invalid length. [ 533.405398][T23547] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 533.434286][T23552] netlink: 'syz.0.4325': attribute type 4 has an invalid length. [ 533.457883][T23550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.473014][T23552] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4325'. [ 533.534867][T23557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.555346][T23561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4325'. [ 533.664403][ T29] audit: type=1800 audit(1777238587.581:11): pid=23564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4327" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1209 res=0 errno=0 [ 533.706913][ T29] audit: type=1800 audit(1777238587.611:12): pid=23567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4327" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1209 res=0 errno=0 [ 533.759904][T23554] bond1: (slave veth5): Enslaving as an active interface with a down link [ 533.842224][T23550] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 533.877532][T23550] bond1: (slave batadv1): making interface the new active one [ 533.894372][T23550] batadv1: entered promiscuous mode [ 533.900629][T23550] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 534.019224][T23570] bond1 (unregistering): (slave veth5): Releasing active interface [ 534.082223][T23570] bond1 (unregistering): (slave batadv1): Releasing active interface [ 534.120116][T23570] bond1 (unregistering): Released all slaves [ 534.682520][T23616] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4336'. [ 534.928649][T23627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4341'. [ 535.054833][T23638] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4342'. [ 535.113619][ T29] audit: type=1800 audit(1777238589.021:13): pid=23636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4344" name="memory.events" dev="tmpfs" ino=1231 res=0 errno=0 [ 535.151517][T23641] netlink: 'syz.4.4346': attribute type 4 has an invalid length. [ 535.421334][T23658] IPVS: stopping backup sync thread 21983 ... [ 535.450506][T23664] netlink: 'syz.4.4348': attribute type 2 has an invalid length. [ 535.471076][T23663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4351'. [ 535.552311][T23671] openvswitch: netlink: Actions may not be safe on all matching packets [ 535.655969][T23663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4351'. [ 535.667425][T23671] can: request_module (can-proto-0) failed. [ 536.007022][T23702] netlink: 'syz.3.4361': attribute type 1 has an invalid length. [ 536.096464][T23702] bond5: entered promiscuous mode [ 536.114603][T23702] bond5: entered allmulticast mode [ 536.124081][T23702] 8021q: adding VLAN 0 to HW filter on device bond5 [ 536.132116][T23709] syzkaller0: entered promiscuous mode [ 536.139475][T23709] syzkaller0: entered allmulticast mode [ 536.169751][T23711] macsec1: entered promiscuous mode [ 536.189753][T23711] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 536.227217][T23702] erspan1: entered allmulticast mode [ 536.238204][T23702] bond5: (slave erspan1): making interface the new active one [ 536.263580][T23702] erspan1: entered promiscuous mode [ 536.291990][T23702] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 536.659512][T23744] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 536.685667][T23744] bond2 (unregistering): Released all slaves [ 536.774969][T23740] wg1 speed is unknown, defaulting to 1000 [ 536.905970][T23752] tun0: tun_chr_ioctl cmd 2147767517 [ 536.921452][T23752] tun0: tun_chr_ioctl cmd 1074025672 [ 536.927896][T23752] tun0: ignored: set checksum disabled [ 537.298352][T23767] wg1 speed is unknown, defaulting to 1000 [ 537.559569][T23773] nbd3: detected capacity change from 0 to 63 [ 537.580407][ T5844] block nbd3: Receive control failed (result -32) [ 537.586949][T23079] block nbd3: Send control failed (result -32) [ 537.587438][T23079] block nbd3: Request send failed, requeueing [ 537.596948][ T5193] block nbd3: Dead connection, failed to find a fallback [ 537.616559][ T5193] block nbd3: shutting down sockets [ 537.626417][ T5193] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.644136][ T5193] Buffer I/O error on dev nbd3, logical block 0, async page read [ 537.655036][T23079] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.657795][T23781] __nla_validate_parse: 3 callbacks suppressed [ 537.657827][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4379'. [ 537.671648][T23079] Buffer I/O error on dev nbd3, logical block 1, async page read [ 537.691512][T23079] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.698722][T23782] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 537.701488][T23079] Buffer I/O error on dev nbd3, logical block 2, async page read [ 537.720071][T23079] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.730045][T23079] Buffer I/O error on dev nbd3, logical block 3, async page read [ 537.740782][T23079] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.750443][T23079] Buffer I/O error on dev nbd3, logical block 0, async page read [ 537.761359][T23079] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.769802][T23777] syzkaller0: entered promiscuous mode [ 537.771042][T23079] Buffer I/O error on dev nbd3, logical block 1, async page read [ 537.785276][T23079] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.795649][T23079] Buffer I/O error on dev nbd3, logical block 2, async page read [ 537.818000][T23777] syzkaller0: entered allmulticast mode [ 537.827101][T23079] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.846705][T23778] tc action pedit 'at' offset 134217728 out of bounds [ 537.855468][T23778] tc action pedit 'at' offset 134217728 out of bounds [ 537.862265][T23778] tc action pedit 'at' offset 134217728 out of bounds [ 537.869097][T23778] tc action pedit 'at' offset 134217728 out of bounds [ 537.875918][T23778] tc action pedit 'at' offset 134217728 out of bounds [ 537.882703][T23778] tc action pedit 'at' offset 134217728 out of bounds [ 537.889541][T23778] tc action pedit 'at' offset 134217728 out of bounds [ 537.896383][T23778] tc action pedit 'at' offset 134217728 out of bounds [ 537.903213][T23778] tc action pedit 'at' offset 134217728 out of bounds [ 537.909991][T23778] tc action pedit 'at' offset 134217728 out of bounds [ 537.916838][T23778] 0: reclassify loop, rule prio 0, protocol 800 [ 537.924368][T23079] Buffer I/O error on dev nbd3, logical block 3, async page read [ 537.936501][T23079] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.963550][T23079] Buffer I/O error on dev nbd3, logical block 0, async page read [ 537.996201][T23079] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 538.022455][T23079] Buffer I/O error on dev nbd3, logical block 1, async page read [ 538.070272][T23079] ldm_validate_partition_table(): Disk read failed. [ 538.123843][T23079] Dev nbd3: unable to read RDB block 0 [ 538.139781][T23079] nbd3: unable to read partition table [ 538.177339][T23079] ldm_validate_partition_table(): Disk read failed. [ 538.192296][T23079] Dev nbd3: unable to read RDB block 0 [ 538.201938][T23079] nbd3: unable to read partition table [ 538.265172][T23768] wg1 speed is unknown, defaulting to 1000 [ 538.399192][T23803] tipc: Enabling of bearer rejected, failed to enable media [ 538.798327][T23821] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 539.258952][T23832] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 539.333988][T23831] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 539.345309][T23831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4395'. [ 539.580618][T23848] x_tables: duplicate underflow at hook 3 [ 539.901668][T23873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4404'. [ 539.914146][T23864] xt_TPROXY: Can be used only with -p tcp or -p udp [ 539.929612][T23873] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4404'. [ 539.958293][T23873] bond0 (unregistering): Released all slaves [ 539.981393][T23874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4404'. [ 540.022568][T23876] tipc: Started in network mode [ 540.029386][T23876] tipc: Node identity 9a0546603599, cluster identity 4711 [ 540.037111][T23876] tipc: Enabled bearer , priority 0 [ 540.045704][T23876] syzkaller0: entered promiscuous mode [ 540.051234][T23876] syzkaller0: entered allmulticast mode [ 540.128550][T23876] tipc: Resetting bearer [ 540.160735][T23875] tipc: Resetting bearer [ 540.219381][T23875] tipc: Disabling bearer [ 540.251464][T23882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4407'. [ 540.701905][T23918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4417'. [ 541.099627][T23942] syzkaller0: entered promiscuous mode [ 541.113595][T23942] syzkaller0: entered allmulticast mode [ 541.184848][T23948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4426'. [ 541.337943][T23952] vlan2: entered promiscuous mode [ 541.356080][T23950] netlink: 'syz.0.4427': attribute type 2 has an invalid length. [ 541.379467][T23960] netlink: 'syz.1.4430': attribute type 1 has an invalid length. [ 541.481584][T23960] bond5: entered promiscuous mode [ 541.504313][T23960] 8021q: adding VLAN 0 to HW filter on device bond5 [ 541.650786][T23976] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.4433'. [ 541.699956][T23979] sch_tbf: peakrate 2 is lower than or equals to rate 8607250805684256844 ! [ 541.772657][T23987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4435'. [ 541.798376][T23987] netlink: 'syz.1.4435': attribute type 29 has an invalid length. [ 541.968211][T24000] netlink: 'syz.0.4440': attribute type 2 has an invalid length. [ 541.989192][T24000] netlink: 'syz.0.4440': attribute type 1 has an invalid length. [ 542.019871][T24000] netlink: 'syz.0.4440': attribute type 1 has an invalid length. [ 542.088281][T24006] 8021q: adding VLAN 0 to HW filter on device bond6 [ 542.169107][T24018] bond6: entered promiscuous mode [ 542.181384][T24018] bond6: entered allmulticast mode [ 542.196169][T24018] 8021q: adding VLAN 0 to HW filter on device bond6 [ 542.206178][T24018] team0: Port device bond6 added [ 542.251742][T24022] vxcan1: entered promiscuous mode [ 542.270652][T24022] bond6: (slave vxcan1): refused to change device type [ 542.304118][T24033] netlink: 'syz.1.4448': attribute type 5 has an invalid length. [ 542.318639][T24033] netlink: 'syz.1.4448': attribute type 6 has an invalid length. [ 542.519751][T24045] netlink: 'syz.3.4451': attribute type 83 has an invalid length. [ 542.752737][T24052] __nla_validate_parse: 191 callbacks suppressed [ 542.752758][T24052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4452'. [ 542.826851][T24049] wg1 speed is unknown, defaulting to 1000 [ 543.232849][T24075] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4459'. [ 543.256195][T24074] bond1: entered promiscuous mode [ 543.268852][T24074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.272405][T24084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.288521][T24084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.299887][T24084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.347711][T24083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.373206][T24083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.663986][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4463'. [ 543.664265][T24100] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.4464'. [ 543.775222][T24106] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4465'. [ 543.786918][T24106] openvswitch: netlink: Flow actions attr not present in new flow. [ 543.922642][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4466'. [ 543.954812][T24110] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4466'. [ 543.986018][T24110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4466'. [ 544.188737][T24119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.238376][T24119] netlink: 'syz.4.4470': attribute type 21 has an invalid length. [ 544.271727][T24119] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4470'. [ 544.341517][T24119] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4470'. [ 544.838981][T24149] xt_hashlimit: size too large, truncated to 1048576 [ 545.326479][T24166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.363507][T24166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.385000][T24166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.487380][T24172] wg1 speed is unknown, defaulting to 1000 [ 546.681114][T24227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.690096][T24227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.052461][T24227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.077024][T24227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.571286][T24244] rdma_rxe: rxe_newlink: failed to add gre0 [ 547.837783][T24250] delete_channel: no stack [ 548.215784][T24288] validate_nla: 2 callbacks suppressed [ 548.215802][T24288] netlink: 'syz.4.4517': attribute type 8 has an invalid length. [ 548.230541][T24288] netlink: 'syz.4.4517': attribute type 4 has an invalid length. [ 548.233311][T24285] __nla_validate_parse: 11 callbacks suppressed [ 548.233327][T24285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4515'. [ 548.351222][T24293] netlink: 'syz.4.4518': attribute type 3 has an invalid length. [ 548.377957][T24295] netlink: 'syz.1.4519': attribute type 194 has an invalid length. [ 549.039670][T24322] bond3: option arp_interval: invalid value (18446744073709551615) [ 549.083773][T24322] bond3: option arp_interval: allowed values 0 - 2147483647 [ 549.117715][T24322] bond3 (unregistering): Released all slaves [ 549.260382][T24331] veth0: left promiscuous mode [ 549.395012][T24331] netdevsim netdevsim3 : left promiscuous mode [ 549.422554][T24331] ip6tnl1: left promiscuous mode [ 549.457059][T24331] ip6gretap1: left promiscuous mode [ 549.484850][T24331] bond3: left promiscuous mode [ 549.491442][T24331] vti0: left promiscuous mode [ 549.516766][T24331] geneve2: left promiscuous mode [ 549.522434][T24331] ip6gre2: left promiscuous mode [ 549.566949][T24331] macsec1: left promiscuous mode [ 549.574668][T24331] bond5: left promiscuous mode [ 549.582630][T24331] bond6: left promiscuous mode [ 549.660248][T24339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4527'. [ 549.711803][T24341] netlink: 'syz.1.4527': attribute type 1 has an invalid length. [ 549.735251][T24341] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4527'. [ 549.935856][T24349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4530'. [ 550.186012][T24355] wg1 speed is unknown, defaulting to 1000 [ 550.608472][T24383] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 550.636754][T24360] [ 550.639122][T24360] ====================================================== [ 550.646121][T24360] WARNING: possible circular locking dependency detected [ 550.653129][T24360] syzkaller #0 Not tainted [ 550.657522][T24360] ------------------------------------------------------ [ 550.664517][T24360] syz.0.4533/24360 is trying to acquire lock: [ 550.670578][T24360] ffffffff8ea853e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 550.679693][T24360] [ 550.679693][T24360] but task is already holding lock: [ 550.687037][T24360] ffff88807c799bb8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 550.696503][T24360] [ 550.696503][T24360] which lock already depends on the new lock. [ 550.696503][T24360] [ 550.706950][T24360] [ 550.706950][T24360] the existing dependency chain (in reverse order) is: [ 550.715951][T24360] [ 550.715951][T24360] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 550.723513][T24360] __might_fault+0xcb/0x130 [ 550.728524][T24360] _copy_from_user+0x28/0xb0 [ 550.733625][T24360] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 550.740132][T24360] ip_generic_getfrag+0x149/0x2d0 [ 550.745667][T24360] __ip6_append_data+0x3902/0x3e90 [ 550.751292][T24360] ip6_append_data+0x10f/0x280 [ 550.756568][T24360] rawv6_sendmsg+0x12d3/0x18e0 [ 550.761838][T24360] ____sys_sendmsg+0x80a/0x9f0 [ 550.767116][T24360] ___sys_sendmsg+0x2a5/0x360 [ 550.772301][T24360] __x64_sys_sendmsg+0x1bd/0x2a0 [ 550.777748][T24360] do_syscall_64+0x15f/0xf80 [ 550.782853][T24360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.789252][T24360] [ 550.789252][T24360] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 550.796977][T24360] lock_sock_nested+0x41/0x100 [ 550.802260][T24360] inet_shutdown+0x6a/0x390 [ 550.807274][T24360] nbd_mark_nsock_dead+0x2e9/0x560 [ 550.812911][T24360] recv_work+0x1c2e/0x1d40 [ 550.817857][T24360] process_scheduled_works+0xb5d/0x1860 [ 550.823928][T24360] worker_thread+0xa53/0xfc0 [ 550.829042][T24360] kthread+0x388/0x470 [ 550.833625][T24360] ret_from_fork+0x514/0xb70 [ 550.838734][T24360] ret_from_fork_asm+0x1a/0x30 [ 550.844047][T24360] [ 550.844047][T24360] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 550.851692][T24360] __mutex_lock+0x1a3/0x1550 [ 550.856804][T24360] nbd_queue_rq+0x37b/0x1100 [ 550.861907][T24360] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 550.867961][T24360] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 550.874821][T24360] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 550.881315][T24360] blk_mq_run_hw_queue+0x348/0x4f0 [ 550.886937][T24360] blk_mq_dispatch_list+0xd16/0xe10 [ 550.892643][T24360] blk_mq_flush_plug_list+0x48d/0x570 [ 550.898523][T24360] __blk_flush_plug+0x3ed/0x4d0 [ 550.903903][T24360] __submit_bio+0x28d/0x580 [ 550.908943][T24360] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 550.915099][T24360] block_read_full_folio+0x599/0x830 [ 550.920910][T24360] filemap_read_folio+0x137/0x3b0 [ 550.926447][T24360] do_read_cache_folio+0x358/0x590 [ 550.932069][T24360] read_part_sector+0xb6/0x2b0 [ 550.937352][T24360] adfspart_check_ICS+0xb1/0x960 [ 550.942822][T24360] bdev_disk_changed+0x817/0x1770 [ 550.948377][T24360] blkdev_get_whole+0x380/0x510 [ 550.953752][T24360] bdev_open+0x31e/0xd30 [ 550.958505][T24360] blkdev_open+0x470/0x610 [ 550.963434][T24360] do_dentry_open+0x785/0x14e0 [ 550.968712][T24360] vfs_open+0x3b/0x340 [ 550.973289][T24360] path_openat+0x2e08/0x3860 [ 550.978387][T24360] do_file_open+0x23e/0x4a0 [ 550.983403][T24360] do_sys_openat2+0x113/0x200 [ 550.988585][T24360] __x64_sys_openat+0x138/0x170 [ 550.993944][T24360] do_syscall_64+0x15f/0xf80 [ 550.999049][T24360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.005457][T24360] [ 551.005457][T24360] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 551.012670][T24360] __mutex_lock+0x1a3/0x1550 [ 551.017786][T24360] nbd_queue_rq+0xc6/0x1100 [ 551.022808][T24360] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 551.028865][T24360] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 551.035704][T24360] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 551.042196][T24360] blk_mq_run_hw_queue+0x348/0x4f0 [ 551.047821][T24360] blk_mq_dispatch_list+0xd16/0xe10 [ 551.053537][T24360] blk_mq_flush_plug_list+0x48d/0x570 [ 551.059421][T24360] __blk_flush_plug+0x3ed/0x4d0 [ 551.064783][T24360] __submit_bio+0x28d/0x580 [ 551.069799][T24360] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 551.075940][T24360] block_read_full_folio+0x599/0x830 [ 551.081741][T24360] filemap_read_folio+0x137/0x3b0 [ 551.087273][T24360] do_read_cache_folio+0x358/0x590 [ 551.092899][T24360] read_part_sector+0xb6/0x2b0 [ 551.098182][T24360] adfspart_check_ICS+0xb1/0x960 [ 551.103634][T24360] bdev_disk_changed+0x817/0x1770 [ 551.109164][T24360] blkdev_get_whole+0x380/0x510 [ 551.114551][T24360] bdev_open+0x31e/0xd30 [ 551.119301][T24360] blkdev_open+0x470/0x610 [ 551.124226][T24360] do_dentry_open+0x785/0x14e0 [ 551.129503][T24360] vfs_open+0x3b/0x340 [ 551.134079][T24360] path_openat+0x2e08/0x3860 [ 551.139177][T24360] do_file_open+0x23e/0x4a0 [ 551.144191][T24360] do_sys_openat2+0x113/0x200 [ 551.149380][T24360] __x64_sys_openat+0x138/0x170 [ 551.154740][T24360] do_syscall_64+0x15f/0xf80 [ 551.159844][T24360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.166242][T24360] [ 551.166242][T24360] -> #3 (set->srcu){.+.+}-{0:0}: [ 551.173354][T24360] __synchronize_srcu+0xca/0x300 [ 551.178804][T24360] elevator_switch+0x1e8/0x7a0 [ 551.184080][T24360] elevator_change+0x2cc/0x450 [ 551.189348][T24360] elevator_set_default+0x36c/0x430 [ 551.195051][T24360] blk_register_queue+0x3e9/0x4e0 [ 551.200595][T24360] __add_disk+0x677/0xd50 [ 551.205433][T24360] add_disk_fwnode+0xfb/0x480 [ 551.210618][T24360] nbd_dev_add+0x72c/0xb50 [ 551.215546][T24360] nbd_init+0x168/0x1f0 [ 551.220217][T24360] do_one_initcall+0x250/0x870 [ 551.225490][T24360] do_initcall_level+0x104/0x190 [ 551.230938][T24360] do_initcalls+0x59/0xa0 [ 551.235777][T24360] kernel_init_freeable+0x2a6/0x3e0 [ 551.241485][T24360] kernel_init+0x1d/0x1d0 [ 551.246322][T24360] ret_from_fork+0x514/0xb70 [ 551.251430][T24360] ret_from_fork_asm+0x1a/0x30 [ 551.256703][T24360] [ 551.256703][T24360] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 551.264507][T24360] __mutex_lock+0x1a3/0x1550 [ 551.269611][T24360] elevator_change+0x1b3/0x450 [ 551.274881][T24360] elevator_set_none+0xb5/0x140 [ 551.280242][T24360] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 551.286557][T24360] nbd_start_device+0x17f/0xb10 [ 551.291918][T24360] nbd_genl_connect+0x165b/0x1cf0 [ 551.297456][T24360] genl_family_rcv_msg_doit+0x22a/0x330 [ 551.303512][T24360] genl_rcv_msg+0x61c/0x7a0 [ 551.308524][T24360] netlink_rcv_skb+0x232/0x4b0 [ 551.313794][T24360] genl_rcv+0x28/0x40 [ 551.318288][T24360] netlink_unicast+0x75c/0x8e0 [ 551.323563][T24360] netlink_sendmsg+0x813/0xb40 [ 551.328837][T24360] ____sys_sendmsg+0x972/0x9f0 [ 551.334111][T24360] ___sys_sendmsg+0x2a5/0x360 [ 551.339296][T24360] __x64_sys_sendmsg+0x1bd/0x2a0 [ 551.344739][T24360] do_syscall_64+0x15f/0xf80 [ 551.349844][T24360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.356242][T24360] [ 551.356242][T24360] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 551.364836][T24360] blk_alloc_queue+0x546/0x680 [ 551.370108][T24360] __blk_mq_alloc_disk+0x197/0x390 [ 551.375727][T24360] nbd_dev_add+0x499/0xb50 [ 551.380652][T24360] nbd_init+0x168/0x1f0 [ 551.385317][T24360] do_one_initcall+0x250/0x870 [ 551.390593][T24360] do_initcall_level+0x104/0x190 [ 551.396060][T24360] do_initcalls+0x59/0xa0 [ 551.400907][T24360] kernel_init_freeable+0x2a6/0x3e0 [ 551.406616][T24360] kernel_init+0x1d/0x1d0 [ 551.411459][T24360] ret_from_fork+0x514/0xb70 [ 551.416563][T24360] ret_from_fork_asm+0x1a/0x30 [ 551.421831][T24360] [ 551.421831][T24360] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 551.429027][T24360] __lock_acquire+0x15a5/0x2cf0 [ 551.434396][T24360] lock_acquire+0x106/0x350 [ 551.439430][T24360] fs_reclaim_acquire+0x71/0x100 [ 551.444910][T24360] prepare_alloc_pages+0x152/0x650 [ 551.450541][T24360] __alloc_frozen_pages_noprof+0x12f/0x380 [ 551.456860][T24360] alloc_pages_mpol+0x235/0x490 [ 551.462220][T24360] folio_alloc_mpol_noprof+0x39/0x160 [ 551.468103][T24360] shmem_alloc_and_add_folio+0x442/0xf80 [ 551.474243][T24360] shmem_get_folio_gfp+0x5a9/0x1670 [ 551.479957][T24360] shmem_fault+0x179/0x390 [ 551.484883][T24360] __do_fault+0x138/0x2a0 [ 551.489727][T24360] do_pte_missing+0x2093/0x33f0 [ 551.495088][T24360] handle_mm_fault+0x1bd7/0x3170 [ 551.500541][T24360] do_user_addr_fault+0x75b/0x1340 [ 551.506168][T24360] exc_page_fault+0x6a/0xc0 [ 551.511181][T24360] asm_exc_page_fault+0x26/0x30 [ 551.516545][T24360] rep_movs_alternative+0x4a/0x90 [ 551.522081][T24360] _copy_from_iter+0x408/0x1670 [ 551.527436][T24360] rxrpc_send_data+0x105d/0x2190 [ 551.532882][T24360] rxrpc_do_sendmsg+0x113e/0x12c0 [ 551.538423][T24360] ____sys_sendmsg+0x972/0x9f0 [ 551.543696][T24360] ___sys_sendmsg+0x2a5/0x360 [ 551.548884][T24360] __x64_sys_sendmsg+0x1bd/0x2a0 [ 551.554328][T24360] do_syscall_64+0x15f/0xf80 [ 551.559451][T24360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.565849][T24360] [ 551.565849][T24360] other info that might help us debug this: [ 551.565849][T24360] [ 551.576080][T24360] Chain exists of: [ 551.576080][T24360] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 551.576080][T24360] [ 551.588672][T24360] Possible unsafe locking scenario: [ 551.588672][T24360] [ 551.596105][T24360] CPU0 CPU1 [ 551.601452][T24360] ---- ---- [ 551.606905][T24360] rlock(&mm->mmap_lock); [ 551.611312][T24360] lock(sk_lock-AF_INET6); [ 551.618322][T24360] lock(&mm->mmap_lock); [ 551.625155][T24360] lock(fs_reclaim); [ 551.629122][T24360] [ 551.629122][T24360] *** DEADLOCK *** [ 551.629122][T24360] [ 551.637245][T24360] 2 locks held by syz.0.4533/24360: [ 551.642426][T24360] #0: ffff88807741cbb0 (&call->user_mutex){+.+.}-{4:4}, at: rxrpc_new_client_call+0x706/0x1500 [ 551.652877][T24360] #1: ffff88807c799bb8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 551.662805][T24360] [ 551.662805][T24360] stack backtrace: [ 551.669033][T24360] CPU: 1 UID: 0 PID: 24360 Comm: syz.0.4533 Not tainted syzkaller #0 PREEMPT(full) [ 551.669052][T24360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.669063][T24360] Call Trace: [ 551.669069][T24360] [ 551.669076][T24360] dump_stack_lvl+0xe8/0x150 [ 551.669104][T24360] print_circular_bug+0x2e1/0x300 [ 551.669124][T24360] check_noncircular+0x12e/0x150 [ 551.669145][T24360] __lock_acquire+0x15a5/0x2cf0 [ 551.669170][T24360] ? rcu_is_watching+0x15/0xb0 [ 551.669188][T24360] ? __lock_acquire+0x6b5/0x2cf0 [ 551.669213][T24360] ? __lock_acquire+0x6b5/0x2cf0 [ 551.669238][T24360] ? prepare_alloc_pages+0x152/0x650 [ 551.669257][T24360] lock_acquire+0x106/0x350 [ 551.669280][T24360] ? prepare_alloc_pages+0x152/0x650 [ 551.669306][T24360] fs_reclaim_acquire+0x71/0x100 [ 551.669325][T24360] ? prepare_alloc_pages+0x152/0x650 [ 551.669345][T24360] prepare_alloc_pages+0x152/0x650 [ 551.669368][T24360] __alloc_frozen_pages_noprof+0x12f/0x380 [ 551.669391][T24360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 551.669415][T24360] ? __pfx_policy_nodemask+0x10/0x10 [ 551.669440][T24360] alloc_pages_mpol+0x235/0x490 [ 551.669463][T24360] folio_alloc_mpol_noprof+0x39/0x160 [ 551.669486][T24360] shmem_alloc_and_add_folio+0x442/0xf80 [ 551.669504][T24360] ? filemap_get_entry+0xcd/0x3f0 [ 551.669525][T24360] ? __pfx_filemap_get_entry+0x10/0x10 [ 551.669542][T24360] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 551.669561][T24360] ? shmem_allowable_huge_orders+0x5ec/0x690 [ 551.669589][T24360] shmem_get_folio_gfp+0x5a9/0x1670 [ 551.669618][T24360] ? preempt_schedule_thunk+0x16/0x30 [ 551.669639][T24360] shmem_fault+0x179/0x390 [ 551.669660][T24360] __do_fault+0x138/0x2a0 [ 551.669679][T24360] ? do_pte_missing+0x125b/0x33f0 [ 551.669697][T24360] do_pte_missing+0x2093/0x33f0 [ 551.669721][T24360] ? handle_mm_fault+0xee/0x3170 [ 551.669739][T24360] handle_mm_fault+0x1bd7/0x3170 [ 551.669760][T24360] ? handle_mm_fault+0xee/0x3170 [ 551.669779][T24360] ? __pfx_handle_mm_fault+0x10/0x10 [ 551.669800][T24360] ? __lock_acquire+0x6b5/0x2cf0 [ 551.669825][T24360] ? lock_mm_and_find_vma+0xa7/0x340 [ 551.669844][T24360] do_user_addr_fault+0x75b/0x1340 [ 551.669875][T24360] exc_page_fault+0x6a/0xc0 [ 551.669897][T24360] asm_exc_page_fault+0x26/0x30 [ 551.669913][T24360] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 551.669931][T24360] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 551.669945][T24360] RSP: 0018:ffffc900043bf498 EFLAGS: 00050206 [ 551.669959][T24360] RAX: 00007ffffffff001 RBX: dffffc0000000000 RCX: 000000000000015c [ 551.669971][T24360] RDX: 0000000000000001 RSI: 0000200000003000 RDI: ffff88804e1826ac [ 551.669983][T24360] RBP: ffffc900043bf5f0 R08: ffff88804e182807 R09: 1ffff11009c30500 [ 551.669995][T24360] R10: dffffc0000000000 R11: ffffed1009c30501 R12: ffffc900043bfdf0 [ 551.670008][T24360] R13: 0000000000002118 R14: 0000000000000584 R15: 0000000000000584 [ 551.670030][T24360] _copy_from_iter+0x408/0x1670 [ 551.670051][T24360] ? __pfx__copy_from_iter+0x10/0x10 [ 551.670066][T24360] ? trace_rxrpc_txbuf+0x89/0x230 [ 551.670090][T24360] ? rxrpc_alloc_data_txbuf+0x3b5/0x5a0 [ 551.670115][T24360] rxrpc_send_data+0x105d/0x2190 [ 551.670135][T24360] ? wakeup_preempt_fair+0x7a2/0xb30 [ 551.670168][T24360] ? __pfx_rxrpc_send_data+0x10/0x10 [ 551.670188][T24360] ? __pfx_default_wake_function+0x10/0x10 [ 551.670215][T24360] ? trace_rxrpc_peer+0x82/0x200 [ 551.670233][T24360] rxrpc_do_sendmsg+0x113e/0x12c0 [ 551.670258][T24360] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 551.670283][T24360] ? rxrpc_sendmsg+0x4cc/0x710 [ 551.670307][T24360] ____sys_sendmsg+0x972/0x9f0 [ 551.670328][T24360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.670349][T24360] ? import_iovec+0x73/0xa0 [ 551.670367][T24360] ___sys_sendmsg+0x2a5/0x360 [ 551.670384][T24360] ? __lock_acquire+0x6b5/0x2cf0 [ 551.670408][T24360] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.670428][T24360] ? futex_wait+0x2a2/0x390 [ 551.670457][T24360] ? __fget_files+0x2a/0x420 [ 551.670473][T24360] ? __fget_files+0x3a0/0x420 [ 551.670495][T24360] __x64_sys_sendmsg+0x1bd/0x2a0 [ 551.670513][T24360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.670533][T24360] ? rcu_is_watching+0x15/0xb0 [ 551.670551][T24360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.670567][T24360] do_syscall_64+0x15f/0xf80 [ 551.670589][T24360] ? trace_irq_disable+0x3b/0x140 [ 551.670609][T24360] ? clear_bhb_loop+0x40/0x90 [ 551.670627][T24360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.670655][T24360] RIP: 0033:0x7f2bae59cdd9 [ 551.670670][T24360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.670683][T24360] RSP: 002b:00007f2bac7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.670699][T24360] RAX: ffffffffffffffda RBX: 00007f2bae816090 RCX: 00007f2bae59cdd9 [ 551.670711][T24360] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 551.670721][T24360] RBP: 00007f2bae632d69 R08: 0000000000000000 R09: 0000000000000000 [ 551.670731][T24360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.670740][T24360] R13: 00007f2bae816128 R14: 00007f2bae816090 R15: 00007ffc98ee5088 [ 551.670759][T24360] [ 551.670996][T24383] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 552.219231][T24383] veth1_virt_wifi: entered allmulticast mode [ 552.253721][T24383] veth1_virt_wifi: entered promiscuous mode [ 552.977376][ T7906] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.988070][ T7906] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.016905][ T7906] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.027531][ T7906] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.086799][ T7906] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.097153][ T7906] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.157222][ T7906] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.168089][ T7906] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.438497][ T7906] veth1_virt_wifi: left allmulticast mode [ 553.450186][ T7906] veth1_virt_wifi: left promiscuous mode [ 553.464495][ T7906] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 553.473302][ T7906] bridge_slave_1: left allmulticast mode [ 553.478994][ T7906] bridge_slave_1: left promiscuous mode [ 553.485404][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.494118][ T7906] bridge_slave_0: left allmulticast mode [ 553.499817][ T7906] bridge_slave_0: left promiscuous mode [ 553.506451][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.522483][ T7906] vlan2: left allmulticast mode [ 553.527597][ T7906] geneve0: left allmulticast mode [ 553.532662][ T7906] vlan2: left promiscuous mode [ 553.538694][ T7906] geneve0: left promiscuous mode [ 553.547358][ T7906] bridge0: port 3(vlan2) entered disabled state [ 553.555384][ T7906] bridge_slave_1: left allmulticast mode [ 553.561047][ T7906] bridge_slave_1: left promiscuous mode [ 553.566948][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.575841][ T7906] bridge_slave_0: left allmulticast mode [ 553.581480][ T7906] bridge_slave_0: left promiscuous mode [ 553.587637][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.016140][ T7906] bond0 (unregistering): Released all slaves [ 554.025736][ T7906] bond1 (unregistering): Released all slaves [ 554.365092][ T7906] bond1 (unregistering): Released all slaves [ 554.374181][ T7906] bond2 (unregistering): Released all slaves [ 554.383805][ T7906] bond0 (unregistering): (slave lo): Releasing backup interface [ 554.391825][ T7906] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 554.404494][ T7906] bond0 (unregistering): Released all slaves [ 554.413805][ T7906] bond3 (unregistering): Released all slaves [ 554.422595][ T7906] bond4 (unregistering): Released all slaves [ 554.432408][ T7906] bond5 (unregistering): Released all slaves [ 554.442753][ T7906] bond6 (unregistering): Released all slaves [ 554.456815][ T5507] 8021q: adding VLAN 0 to HW filter on device eth1 [ 554.582528][ T7906] : left promiscuous mode [ 554.620748][ T7906] tipc: Left network mode [ 554.640709][ T7906] tipc: Left network mode [ 554.746409][ T5507] 8021q: adding VLAN 0 to HW filter on device eth2 [ 555.017889][ T5507] 8021q: adding VLAN 0 to HW filter on device eth3 [ 555.329261][ T5507] 8021q: adding VLAN 0 to HW filter on device eth4 [ 555.352572][ T7906] hsr_slave_0: left promiscuous mode [ 555.360374][ T7906] hsr_slave_1: left promiscuous mode [ 555.369130][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.378543][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.408332][ T7906] batman_adv: batadv0: Removing interface: ipvlan2 [ 555.420591][ T7906] veth1_macvtap: left promiscuous mode [ 555.426289][ T7906] veth0_macvtap: left promiscuous mode [ 555.431855][ T7906] veth1_vlan: left promiscuous mode [ 555.437461][ T7906] veth0_vlan: left promiscuous mode [ 555.623936][ T7906] team0 (unregistering): Port device team_slave_1 removed [ 555.639085][ T7906] team0 (unregistering): Port device team_slave_0 removed [ 555.789625][ T7906] team0 (unregistering): Port device team_slave_1 removed [ 555.800153][ T7906] team0 (unregistering): Port device team_slave_0 removed [ 555.858562][ T5507] 8021q: adding VLAN 0 to HW filter on device eth5 [ 556.241505][ T5507] 8021q: adding VLAN 0 to HW filter on device eth6 [ 556.257427][ T7906] IPVS: stop unused estimator thread 0... [ 556.477494][ T5507] 8021q: adding VLAN 0 to HW filter on device eth7 [ 556.675317][ T5507] 8021q: adding VLAN 0 to HW filter on device eth8