last executing test programs: 2.697523781s ago: executing program 0 (id=5252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000200), &(0x7f0000000280)=0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) 2.619814426s ago: executing program 4 (id=5253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) 2.613038622s ago: executing program 2 (id=5254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000041c0)=@newtaction={0x3ca4, 0x30, 0x53b, 0x4, 0x0, {0x9}, [{0x1754, 0x1, [@m_nat={0x104, 0xb, 0x0, 0x0, {{0x8}, {0x4}, {0xdb, 0x6, "aae4652e6f96e1237b7c61c1888655007a11b00f3943c5ca74afd522c23dea84d508f755c9903cdcbe5a3da28cb1fd75009b1c51815a7e334eb88b729747a7e3157ddb314c98b7e48fcdbe87b2094c6b1ff52c9e6df5bfd3833f0cf105164bce8776da35567f4f80510d19175fa206b735cea1a5193eaaf73853c6115f1a885a08db19f4dd7db3720690a8ba27446b436c45005cf8038050cca2e106cb3b181fe75d7a6c05474ea0a9af40766dc6a727f290b7fce964ba07b43075210c8573d5ed2fc572c1ccb344544abeaccb07d3af3ceeb4ebeeddb0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x11c, 0x4, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x2, 0x8, 0x1}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x3, 0x3, 0x81, 0x9}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff17, 0x3, 0x10000000, 0x2, 0x1}, 0x43}}]}, {0x9a, 0x6, "4cc61187194d2b5c30e5670162227e2accaed359245e3732733140eb5a5c40a35c9b6c3667a2780eb6caa4d22801e62a51b0e31f7beb9db48495e849841ea963facba68848a9cf4d5685f69b48d920bd15eba9acbd904f63f015410a299b734e642d8bbd4f04da41694e1de2884c30367ddc11f849a4bf2791b80eab11ec7bc5afbc2c53ca568425804df0fcc78c6cc16d183d846b75"}, {0xc, 0x7, {0xa59f6c46fc1678b9, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x1530, 0xd, 0x0, 0x0, {{0xb}, {0x14c4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x55692762, 0x2, 0x3, 0x9, 0x9, {0x0, 0x1, 0xf, 0x2, 0x92, 0x7}, {0x7, 0x1, 0x7, 0x7fff, 0x1000, 0xb5}, 0x32a6b487, 0x200, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0x7e83daff, 0x6, 0x2, 0x5, 0xe334, 0x4, 0x7b6, 0xecb5, 0x8, 0x80000001, 0x7, 0x9, 0x100, 0x80000000, 0x7, 0xfff, 0x3, 0x3, 0x7, 0x485, 0x1, 0x4, 0x6, 0xff, 0x3, 0x10001, 0x4, 0x3, 0x8, 0x6, 0x6, 0x1e1, 0x4, 0x2, 0xe8a, 0x10000, 0x2, 0x4, 0x2, 0xd1cd, 0x5, 0x6, 0x9, 0x6, 0x0, 0x8ee7, 0xea4b, 0x1, 0x9, 0x2, 0xfffffff8, 0x41, 0x40f1, 0x9, 0x6, 0x6, 0x48, 0x4, 0x2, 0x1, 0x10, 0xfff, 0x31, 0x2, 0x7, 0x6, 0x0, 0x80, 0xdc, 0x5, 0x2124, 0x7, 0xff, 0x4, 0x0, 0x10001, 0x9, 0x1, 0x1000, 0x6, 0x7, 0x9, 0x7, 0x2, 0xff, 0x2c38, 0xd623, 0x7, 0x80000001, 0x80000001, 0x2, 0x94, 0x7, 0x9, 0x9, 0x3a04, 0x4, 0xe8, 0x5, 0x0, 0x5, 0x5, 0x1, 0x3, 0x5, 0x3, 0x2b, 0xa78b, 0x4, 0xa, 0x1, 0xffff0000, 0x941, 0x2, 0x5, 0x10000, 0xe, 0xab, 0xffff2198, 0x5, 0x0, 0x401, 0xfffffffd, 0x2, 0x3, 0x3, 0x101, 0x101, 0x7f, 0x8000000, 0x4, 0x8001, 0x9, 0x8, 0x29, 0x5, 0xc, 0x80000000, 0x3, 0xf001, 0x6, 0x5, 0x3ff, 0x5, 0x7ff, 0x401, 0x5, 0x3, 0x328f, 0x10001, 0x6, 0x7, 0x998, 0x3, 0x100, 0x9, 0x9, 0x0, 0x9, 0x40, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x8, 0x7eeb, 0xf2c7, 0x9, 0x100, 0x3, 0x4, 0x9, 0x5, 0x9, 0x4, 0x8001, 0x2, 0x5, 0xfffffffe, 0xbf2, 0x8e48, 0x10, 0x9, 0x7, 0x3, 0xd, 0x1, 0x1, 0x80000001, 0xff, 0x9, 0x6, 0x7, 0x0, 0x2, 0x3, 0xe0, 0x2, 0x8, 0xd, 0xa3f, 0x7, 0x8, 0x1e, 0x7, 0x6, 0x0, 0x1, 0x82e, 0x2, 0x0, 0x8, 0x200, 0x34, 0x9, 0x7, 0xa0, 0x2, 0xf163, 0x71, 0x10001, 0x6, 0xfff, 0x5, 0x1ff, 0x1, 0x7, 0x19cbce71, 0x2, 0xb0, 0x1, 0x7, 0x3, 0x8, 0x0, 0x1, 0x2, 0x6, 0x8, 0x2, 0x8, 0x3, 0x0, 0x8, 0x7, 0x7, 0x1, 0x2, 0x2, 0x200, 0xb61, 0x4, 0xa18]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x2, 0x8001, 0x2, 0x1, 0xfffffffe, 0x6, 0x40, 0x1, 0x2, 0x9, 0xffffff15, 0x2a, 0x94, 0x9, 0x9, 0xfffffffa, 0x4, 0x7, 0xffffffff, 0x4, 0x400, 0x0, 0x7fffffff, 0x401, 0xd10, 0x72, 0x9, 0x39e, 0x3, 0x101, 0xe, 0xf52, 0xcbc, 0x3, 0x5, 0x5, 0x400000, 0xea1, 0xf761, 0xd, 0x7, 0x6, 0x2, 0x7, 0x2, 0xffff0000, 0x7ff, 0x7f14, 0xc9c3, 0x30000000, 0x80000000, 0x8, 0x6, 0xda5e, 0x4, 0xfff, 0x5, 0x8f7c, 0x7, 0x7, 0x9fd, 0x5, 0x0, 0x2, 0x5, 0x1, 0x3, 0x6, 0xa, 0x3, 0x5, 0x5, 0x6, 0x1, 0x9, 0x643, 0xb2a, 0x9c, 0xae2a, 0x200, 0x6, 0x7ff, 0x3, 0xffff, 0x1ff, 0x2, 0x3, 0x5, 0x1ff, 0x7, 0x75d4, 0x7a6, 0xec, 0x8, 0xc0, 0x9, 0x6, 0x9, 0x2, 0x37b8, 0x0, 0x7, 0xfffffff6, 0x4, 0x8000, 0x4, 0x3ff, 0x0, 0x7, 0xb4c, 0x2400000, 0x3, 0x8, 0x8001, 0xe04a, 0x100, 0x9, 0x7, 0x3, 0x49, 0x0, 0x0, 0x7fff, 0x0, 0x6, 0xfffffff7, 0xffffffff, 0x0, 0x2, 0x7, 0xf, 0x9, 0x9, 0x2, 0xff, 0x1ff, 0x5, 0x10, 0x9, 0x1, 0x8, 0x4, 0x57, 0x0, 0x1108, 0xf, 0x5, 0xc5, 0x7, 0xfffff663, 0x0, 0x1, 0x9, 0x3, 0x8, 0x7, 0x9, 0x6, 0xffffffff, 0x0, 0x7, 0xe, 0x4, 0x2, 0x9, 0x4, 0x3261ec5f, 0x2, 0xc, 0x1, 0x59c, 0x2ae, 0x3, 0x6, 0x6, 0x0, 0x1, 0x2aa9, 0x9, 0x3, 0x6, 0xc, 0x7ea, 0x7, 0x9, 0x8, 0x2c22, 0x3, 0x5, 0x0, 0x8, 0x5ff, 0x9, 0x200, 0x2f73, 0x650, 0x6, 0x3, 0x5, 0xb, 0x6, 0x6, 0xa642, 0x6, 0xfffffe01, 0x3, 0x8, 0x77, 0x3, 0x4, 0x72599a37, 0x0, 0x0, 0x10001, 0x2, 0x1, 0x1, 0x0, 0x6, 0x9, 0x0, 0x9, 0x1, 0x10, 0x286, 0x3ff, 0x0, 0xfff, 0x207c2188, 0x2, 0xeaf, 0x2b5, 0x8, 0x5, 0x1, 0x7fe, 0x100, 0xa26, 0x1, 0xfffffffc, 0x649, 0x5, 0x800, 0x9, 0x81, 0x4, 0x5, 0x1e, 0x4, 0xb, 0x9, 0x200, 0x6, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x6, 0x0, 0x9, 0x9, 0x9, 0x4, 0x536, 0xd16, 0x2, 0xbd7, 0x6, 0xa75, 0xcffe, 0x6, 0x2, 0x9, 0x3, 0x9, 0x4, 0x2, 0x2, 0x1, 0xff, 0x462, 0x7fff, 0x5, 0x2, 0x1, 0x0, 0x9, 0x200, 0x4, 0xb1, 0xe, 0x1, 0x6, 0xf6, 0x7, 0x7, 0x4, 0x0, 0x2, 0x4, 0x3, 0x6, 0x87, 0x101, 0x1, 0xc, 0x0, 0x379, 0x3, 0x1ff, 0x5, 0x401, 0x6, 0x9, 0x6, 0x100, 0x8, 0x5, 0xa, 0x10, 0x81, 0x3, 0x1, 0x5, 0x7f, 0xbf, 0x5, 0x3, 0x8, 0x8, 0x1, 0x7cd, 0x0, 0x1, 0x3, 0x8, 0x7, 0x8, 0x1, 0x2, 0x2, 0x0, 0xc, 0x6, 0xfffffff8, 0x10001, 0x5, 0x101, 0x2, 0x0, 0x164b, 0xa6, 0x2, 0x6, 0x3, 0x6, 0x6, 0x2, 0x10001, 0x8, 0xe0000000, 0x101, 0xffff196f, 0xd, 0x75f3, 0x2, 0x5, 0x7, 0x0, 0x0, 0x6, 0x2e, 0x1, 0x7, 0x400, 0x4, 0x5, 0x50000000, 0x8, 0x40, 0x3ff, 0x5, 0xcf9, 0x7, 0x5, 0x10, 0x1, 0x6, 0x0, 0x2345, 0x9, 0x4, 0x800, 0xd, 0xa7, 0xfffffc00, 0x2, 0x7, 0xf2, 0x1, 0x0, 0xff, 0x2, 0x80, 0x4, 0x7, 0x5, 0xfffff000, 0x9, 0x5, 0xc78, 0xfffffeb0, 0x7fffffff, 0xcdc8, 0x4, 0x7, 0x0, 0x9, 0x2, 0xfffffffa, 0x6, 0x1, 0x4, 0x1, 0xfa, 0x9f2, 0x8, 0xff, 0x0, 0xa, 0x5, 0x0, 0x10, 0x2, 0xb, 0x9, 0xffffffff, 0x3, 0x2d57, 0x700000, 0x2b, 0x5, 0x7, 0xfffffffd, 0x685, 0xffff7fff, 0xaf8a, 0x4, 0x5, 0x9, 0x80, 0x7, 0xd, 0x3, 0x3, 0x1ff, 0x1, 0x7ff, 0x0, 0x9, 0x0, 0x3, 0x3, 0x4, 0x7fff, 0x1, 0x8, 0x5, 0x1, 0xd01, 0x200, 0x6, 0x9, 0x2e7, 0x80000000, 0x2, 0x5, 0x9, 0x0, 0x4, 0xadef, 0x8, 0x7, 0x2, 0x2d4, 0x2, 0xfff, 0x7, 0xfffffff0, 0x5, 0x7fffffff, 0x2, 0x81, 0x81, 0x6, 0x5, 0x9f37, 0x7, 0x7, 0x0, 0x8, 0x6, 0x620b674e, 0x1, 0x3, 0x6, 0x4, 0x10, 0x7, 0x1, 0x7b3c, 0xc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5b5}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xedd, 0xe3c4, 0x1, 0x1, 0x96a, 0xff, 0x0, 0x1ff, 0x24000000, 0x3, 0x8, 0x2, 0x3, 0x80, 0x7, 0x2, 0x7def, 0x9, 0x354, 0x1, 0x2b0, 0x5, 0x5, 0xffffffff, 0x261, 0xfffffffd, 0x8, 0x2, 0x6, 0x3, 0x75a668b8, 0x7, 0x4, 0x8, 0x43e, 0x8, 0x9, 0x4, 0x5, 0xfffffff5, 0xffff, 0x3, 0x6, 0x5, 0x0, 0x6, 0x21140bd1, 0x1, 0x2, 0x3, 0x4, 0x6, 0x2c2, 0x9f0b, 0x4, 0xd1dc, 0x2, 0x3, 0x2, 0xfda, 0x2, 0x9, 0x3, 0x3ff, 0x5, 0xe, 0x5, 0x6, 0x9, 0x4, 0x8, 0xfffffffd, 0x400, 0x0, 0x4, 0x10000, 0x6, 0x7, 0x8001, 0x8, 0xffffff69, 0x8, 0x2, 0x7, 0x3, 0x7, 0x2, 0x7f, 0x200, 0xd77, 0x4, 0x4, 0x9, 0xae, 0x10, 0x80000001, 0x43, 0x1, 0x80000000, 0x80000001, 0xfe, 0x959, 0x7, 0xc0, 0x1, 0x3, 0xd, 0xc4, 0xf5f, 0x10000, 0x800, 0xfffffbff, 0x51, 0x400, 0xfffeffff, 0x401, 0x9, 0x23, 0x8000, 0x8, 0x0, 0x8, 0x8, 0x1, 0x7, 0x40, 0x50bde391, 0x0, 0x1ff, 0x200, 0x7, 0x5, 0x2, 0x1, 0x5, 0x8c, 0x1, 0x5faa3d31, 0xd0, 0x4, 0x2, 0x4, 0x8afe, 0x3, 0x83, 0x80000001, 0xfffffc01, 0x3, 0x4, 0x10, 0xf, 0x8, 0xa, 0x1ff, 0xe14, 0x0, 0x6, 0x6, 0x401, 0xdf8a, 0x9, 0x6, 0x6, 0xe, 0x9de, 0xa49, 0x81, 0x1, 0x4, 0x2, 0x80000001, 0x7fff, 0x722b1990, 0x8, 0x6, 0x0, 0x7, 0x10000, 0xfffffbff, 0x7, 0x1, 0xfff, 0x7, 0x9, 0xf4c, 0x2, 0x7, 0xfffffff7, 0x1, 0x7, 0x1, 0x8, 0x10000, 0x8000, 0x4, 0x6d, 0x401, 0xffff0000, 0x0, 0x5, 0x9, 0xffffffff, 0xed7, 0x0, 0xfffffff7, 0x5, 0xc, 0x23d, 0x7, 0x7, 0x10001, 0x0, 0x2, 0x5, 0x66, 0x2, 0x1, 0x0, 0x3, 0x401, 0x8, 0x10000, 0x4, 0x3, 0x5, 0xfffffffc, 0x9ab, 0x0, 0x557, 0xa, 0x2, 0x0, 0xfffffff7, 0x10001, 0x8, 0x0, 0x0, 0x9, 0x4, 0x1000, 0x7, 0xae, 0x7, 0x1, 0x1, 0x5, 0xffffff76, 0xfffffffa, 0x1, 0x8, 0x80, 0x80000000, 0x2c12, 0xfffffffb]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x204, 0x1, 0x9, 0x8000, 0x1, 0x9, 0x7, 0xfffffff9, 0xffffff90, 0x7, 0x9, 0x10, 0xdc, 0x1ff, 0xd, 0x1, 0x9, 0x9, 0x2a, 0x8, 0x3, 0x434, 0x3, 0xfff, 0x1, 0x1ff, 0xfffffffe, 0x3, 0x4152, 0x0, 0x6, 0xd303, 0x3, 0x42c6, 0x5, 0x5, 0x8, 0x8, 0x7, 0x80, 0x2, 0x8, 0x3ff, 0x5, 0x6, 0xffffffff, 0xdc0, 0xfffffffd, 0x1, 0x4, 0x2, 0xe, 0x8, 0xfffffffc, 0x7, 0x3, 0x10000, 0x6, 0x3a7, 0x9, 0x9, 0x7, 0xd3, 0x4, 0x6, 0x0, 0x9, 0x81, 0x9, 0x6, 0x6, 0x0, 0xf, 0x800, 0xe3, 0xee02, 0xffffffd3, 0xfffffffe, 0x2, 0x7, 0x9, 0x96fe, 0xa2c3, 0x2, 0x7, 0x8, 0x781, 0x8, 0x10000, 0x5d486cdf, 0x2, 0x7, 0x8, 0x4, 0xf5, 0x1, 0x5, 0x0, 0x7, 0x5, 0x3, 0xd, 0x62a7, 0xc705, 0x8, 0xd, 0xfffffff7, 0x4, 0x100, 0x2, 0x8, 0x5, 0x6f5, 0x7, 0xffffffff, 0x5, 0x7ff, 0x100, 0x10000, 0x5, 0xffff, 0x7ff, 0x9, 0x2, 0x4, 0x6, 0x1cb, 0x9, 0x80d1, 0x8, 0x80000001, 0x9, 0x4, 0x9, 0xfff, 0x8, 0x4, 0x0, 0xe, 0x3, 0xd, 0x3, 0x81, 0x1, 0x6, 0x7, 0x6, 0x3, 0x7, 0x7f, 0x7fff, 0xff, 0x4, 0x5, 0xffff, 0xff, 0x9, 0xfffffc01, 0x1, 0x1, 0x5, 0xbfc, 0x5, 0x78238f44, 0xf6c, 0x8000, 0x2f, 0x82, 0x8, 0x2, 0x0, 0x80000001, 0x3, 0xffff, 0x7ff, 0x4, 0xe, 0x2, 0x8, 0x6, 0x0, 0x5, 0xa, 0x80000001, 0x3, 0x0, 0x1ff, 0x40, 0x7, 0x5, 0xc0, 0x8, 0x23b346d4, 0x101, 0xb5, 0x9, 0x5, 0x30, 0x29, 0xfffffe01, 0xe, 0x80000001, 0x7, 0x3, 0xd0e, 0x80000001, 0x0, 0x602b6f66, 0x8, 0xd59, 0x6, 0x80000001, 0x2, 0x62, 0x4, 0x3, 0x9, 0xffffffff, 0x31d9, 0x3, 0xfff, 0x5, 0x4, 0x5, 0xff, 0x6, 0xe09, 0x9, 0x2, 0x0, 0xa67, 0x7f, 0x80, 0x2, 0x5, 0x6, 0x4, 0x9, 0x9, 0x5, 0x724, 0x333, 0x3ff, 0x4, 0x1, 0x2, 0x7f, 0x0, 0x6, 0x6, 0x80, 0x1, 0x10001, 0x6, 0x2, 0x765f]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4, 0x100, 0x6, 0xa, {0x9, 0x1, 0xfeb, 0x5, 0x5, 0x100}, {0x0, 0x0, 0x100, 0x2, 0x401, 0x7}, 0x8, 0x8, 0x101}}]]}, {0x41, 0x6, "bf3a5827994c9486d3f9eb14240f48872ccee4aece7c018f1319e87ba23ee956e9eabceb768b589757c0b2c89772881532a1b950dd8d3e5add947a4d23"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x1240, 0x1, [@m_tunnel_key={0xa8, 0x1a, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xf8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x33}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0xb, 0x6, "091118695456a2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x1058, 0x14, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @random="3ee85efafeae"}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x5c, 0x2, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @random="ad3f1200"}, @TCA_IFE_TYPE={0x6, 0x5, 0xa}]}, {0x11, 0x6, "f2feaaa90564897be2679ba848"}, {0xc, 0x7, {0x0, 0x843c2bfff187238c}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0xe0, 0x20, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3ff, 0x6, 0x2, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xe8ed, 0x5, 0x3, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x22d28ec6, 0x8, 0x6, 0x2589}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x6, 0x20000000, 0x1, 0x8}, 0x3}}]}, {0x32, 0x6, "88f1c9cc939eda98ff20419d5256ac818ff5582b6386273373402d0636ae09e6f56aaae32ac035018194145143fe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x12fc, 0x1, [@m_simple={0x138, 0x12, 0x0, 0x0, {{0xb}, {0xd4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3638, 0x1, 0x10000000, 0x5, 0xd2f6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x18, 0x89, 0x7, 0x4196, 0x1000}}, @TCA_DEF_DATA={0xf, 0x3, '.%{$$\',\\!T\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'gretap0\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'tunl0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x1687, 0x6, 0xffff, 0xad}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x80000001, 0xfffffffe}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x3e2, 0x4, 0x1, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x0, 0x3, 0xdd}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff8, 0x3, 0x0, 0x7, 0x2}}]}, {0x39, 0x6, "33e18ee726ff63c7189c2bd0cfce41a39c53f93b2bae1e54e9619d81ee7af455da9f0cf94fb25cc1d410adf512ed07c6897731f41f"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x1088, 0x12, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0xcd6, 0x6, 0x100, 0x8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x96, 0xef3, 0x0, 0x1, 0x9}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81c, 0xffc, 0x0, 0x5, 0xda}, 0x8361}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x138, 0x1e, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xff, 0x5, 0xd4d, 0x4}}]}, {0xe9, 0x6, "b283c57861d827a1cc107a3d0a8c576aca4b41f7c994422e1043c936f083e66a45c7e620788063d8945ad6b70918bd9c3b8391acb33dabe26bd2b52b30ec5227bbe4aeab22ce2efda1bd5ef8ab58519272bcf46438f036e178af52b8010876cb8f36b7255d25a91601b38be58f0f027cac3a104f6367f6e803d7d2e3a6e7619d48b095e579f7258606bfc7ab4ca5fd440992950b3b03882f5cce3c6b7bf3758303a806dfa7c36c3d5b92beb8a5bb7e50fbb9028b7d3b5ca2388d3f68373ce8147c542e15854e86ff4ea87b6cf9ca7ab055466dd1416e034f511714232f39c614b7a2689b77"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x3ca4}}, 0x80) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x8f) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000047c0000040042800c0001"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 2.526330164s ago: executing program 0 (id=5257): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@empty, 0x0, 0x0, 0x50, 0x0, [{}, {@remote}, {@multicast1}, {@remote}, {@loopback}]}}) bind$bt_hci(r0, &(0x7f0000001ac0), 0x6) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000280)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x9}, 0xd3}, 0x1c) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 2.513174992s ago: executing program 4 (id=5258): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f00000000c0)={0x0, 0x6, 0x8001}) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000b00009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f00000004c0)={0x0, 0x3e, &(0x7f00000002c0)=[{&(0x7f0000000880)={0x34, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x14, 0x37, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}]}, 0x34}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc080) 2.373360057s ago: executing program 3 (id=5259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r5 = socket(0x1, 0x803, 0x0) sendto$unix(r5, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) write$tun(r0, &(0x7f0000000240)={@val={0x70, 0xf7}, @void, @eth={@remote, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x12, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}, "443fb0a855ea"}}}}}}}, 0x38) r6 = socket$phonet(0x23, 0x2, 0x1) close(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newtclass={0x2c, 0x28, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xc, 0x3}, {0x1, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004009}, 0x240400f1) 2.353044748s ago: executing program 0 (id=5261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c00058018000400aaaaaaaaaabb000002000400d8928a2ced1fe60008000300030000000a000400aa"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4000000, 0x5, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x20048000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_PID={0x8}]}, 0x38}}, 0x4800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000300000008000400ac14140008000200"], 0x2c}}, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x28000890}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.184947933s ago: executing program 4 (id=5262): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a000000000000000800060001"], 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa99879e18f3ff8906434b5682f8682ed45b171376ad6a4e38b7aea7854bdfacfe6a8f98cecd730000000000000000"], 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=@newtaction={0x48, 0x5a, 0x1, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_pedit={0x30, 0x800, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000000)="402e8b103698be90af9be143ccfa54eae6a7eb2cc413ea6d08da1cc3981a5700565b7ec4f011425330e2c2d2f0a961075e40f956ccb9901a43876f0051900f4c74a671466ce8d9d79f8559bd9186fe2f77", 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1bc, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x14}, 0x4004040) sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000480)=""/190, 0xbe}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x3, 0x4}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x440c0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000011100)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25df9bfd, {0x0, 0x0, 0x0, r11, {0x9, 0xfff1}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b2b, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.979991825s ago: executing program 3 (id=5264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) shutdown(0xffffffffffffffff, 0x1) openat$cgroup_type(0xffffffffffffffff, 0xfffffffffffffffc, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000380)="9206b6b51ff8251e30a10b576a2a4976", 0x10) listen(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r4, &(0x7f00000098c0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) shutdown(r1, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000100050000000400000000600000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r5, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="620a2ae74c70c4ff000000007110170000000000950000000000000007c126913007c28a8a7586a2ae27b6"], &(0x7f0000000480)='GPL\x00'}, 0x90) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@empty, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x48, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[@dstopts={0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}]}], @time_exceed={0x4, 0x0, 0x0, 0x9, '\x00', {0x0, 0x6, '\x00', 0x800, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, [], "1b8d2069162baf34"}}}}}}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xa9, 0x4004084, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) 1.85634133s ago: executing program 0 (id=5265): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x105000, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r4, 0x11, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x44}}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 1.630548517s ago: executing program 2 (id=5266): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, 0x0) mmap$xdp(&(0x7f00004c8000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x180000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x541b, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) (async) socket$phonet(0x23, 0x2, 0x1) (async) ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, 0x0) (async) mmap$xdp(&(0x7f00004c8000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x180000000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$FS_IOC_GETFSLABEL(r2, 0x541b, &(0x7f0000000100)) (async) 1.490802745s ago: executing program 2 (id=5267): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x28, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x400, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}]}, 0x24}}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xc8, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfffffff7}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x0, 0x3, 0x0, {0xd158, 0x7, 0x0, 0x5, 0x0, 0x1}, 0x6, 0x8e, 0x2}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x8}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x101}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xffffffff}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x6}]}, @NL80211_ATTR_IE={0x39, 0x2a, [@random_vendor={0xdd, 0x33, "05b8d615915cb01bfc7b52d0fff1b961e4dde51f42329c514b9a3e82221fc4b8ea9ff08422043b05fdfca8cd23c2e9b48e4432"}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x84}, 0x40002) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r8], 0x1c}}, 0x8004) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r12], 0x4) 1.364372232s ago: executing program 3 (id=5268): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xe4bd6a1de0769c90, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async) close(r5) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x16ec7077c8c871d9}, 0x38) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32=r3, @ANYBLOB="140002"], 0x34}}, 0x80d0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x4040800) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) 1.226802367s ago: executing program 1 (id=5270): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r1 = socket(0x2b, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) (async) r2 = accept(r0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000490000000e0001006e657464658573696d0000000f0002006e657464657673696d3000000800030001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x200, r8, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xf427}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x101}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0xfff7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x607}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x4}}]}, 0x200}}, 0x2004c000) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd29, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x4041080) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xffffba19, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', r12}, 0x94) 1.179357703s ago: executing program 3 (id=5271): syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) r0 = socket(0x1e, 0x805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000010000104000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000006000128008000100677470005400028008000700e000000208000100", @ANYRES32=r0, @ANYBLOB="080003000200000014000800fe80e300000000000000000000080000000000000000000000000037ffffffffffffff0000d14f1dbceb13b03dfc9b75e2acaafc353ebc133d3d6ad4e1b9080000000000000077b8958832b7ef6f6991096343c64b1571685669a4e7e727bd2cc08870a98443955fb1ef73f201cc985bf5cde53dc2a85f0ddbd911fd7a8ff2449744cc6b", @ANYRES32=r0, @ANYBLOB], 0x80}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205e8056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf230800000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x2b8, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4930e5aec8cc0c6ada0a1f7d440627fe1af02f6975e76e96c7a8ce08ab645b56"}]}, @NL802154_ATTR_SEC_KEY={0x134, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e9aa41579dec54679308bcfe52ec3105523233602838ba8bb97688aa780858e6"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3dc373c5a5bea51b5201e21389e80e2bf278a00b3da49067ec93ee240c571f4c"}, @NL802154_KEY_ATTR_ID={0xb0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c33cc91c17e4866fb4b222361953c4969934cd75ebd88e8c440f5245b1832ba9"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x91}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0xe4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "aea1bf3e83fa7f935a5e42a4fbc2d23f3f38d559920a6c4454d613477ca6a19c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9eeb8bfcfbe47fa536776646f6e6278375538ab548160f473da29e77bd4b4197"}, @NL802154_KEY_ATTR_ID={0x90, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x41}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4048001}, 0x800) 1.105078449s ago: executing program 0 (id=5272): socketpair(0x18, 0x5, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) (async) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="100086dd", 0x4, 0x4, &(0x7f0000000200)={0x11, 0x8100, r8, 0x1, 0x1, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@RTM_NEWMDB={0x98, 0x54, 0x200, 0x70bd29, 0x25dfdbfd, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x3, {@ip4=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x4, {@ip4=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x4, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r11, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004841}, 0x24004091) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) write$tun(r9, &(0x7f0000000880)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0xffdf, 0xc4, 0x10}, @mpls={[], @ipv6=@dccp_packet={0x0, 0x6, "a057a2", 0xb0, 0x21, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e21, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x9, 0x0, "99e0a2", 0x6, "62aa26"}, "a2c19499501ce6ec38ffc380b39e7ec54e2de359b35febd551123ddf4aaf823259d065564684b1431e4d9745323b06ddc496405007bb0d00043ae2e832815bec7e2a25981882e27fc4a957b405c23c8292f23f2db0b77edd6dd1720a1b60408c8c909c55f74279472bd512ad730eeb8ac8e008f73e32c4bbf970702bf500545592a8cfff8d00caa0b29ec85f1f14ffa41357df006206cfd9fd8ca9ad47691a11"}}}}}, 0xe6) 1.031020543s ago: executing program 2 (id=5273): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x49, &(0x7f0000000040)=r3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r5, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x2, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e1e, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xb, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b105a456f064be0300ffe61e"}, @window={0x3, 0x3, 0x6}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea"}}}}, 0xfce) r8 = openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x3}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x78, &(0x7f0000000000)={@multicast, @dev, @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x3a, 0x3a, 0x0, @dev, @mcast2, {[@fragment={0x29, 0x0, 0x1, 0x1, 0x0, 0x0, 0x66}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x7, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2"}}}}}}}, 0x0) 965.010575ms ago: executing program 1 (id=5274): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x401, 0x906, {{0x7, 0x4, 0x3, 0x7, 0x1c, 0x67, 0x0, 0x81, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r3, 0x4) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x1f, 0x2, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x7, '\x00', r0, @fallback=0xf, r1, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x7, 0x1}, 0x10, r3, r4, 0x6, &(0x7f00000016c0)=[0x1, r5], &(0x7f0000001700)=[{0x3, 0x2, 0x5, 0x1}, {0x4, 0x2, 0x4, 0x6}, {0x4, 0x4, 0xa, 0x3}, {0x1, 0x5, 0x8, 0xa}, {0x5, 0x6, 0x5, 0x87ed7bcb01adc14c}, {0x4, 0x5, 0x0, 0xc}], 0x10, 0x6}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd8f2c39189b08b1c, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x31af89dd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r9) sendmsg$NLBL_CIPSOV4_C_LIST(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB], 0x14}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2c}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) 872.010652ms ago: executing program 4 (id=5275): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0x8, 0xb}, {0xa, 0x8}]}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0xa6}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x2b, 'cpu'}, {0x2d, 'cpuset'}, {0x2b, 'net_cls'}]}, 0x16) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0908060000002dbd7000050000000400030080000000f5000000000000000800000000000000bb6e000000000000"], 0x30}}, 0x4040800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) (rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a00a6", 0x0, 0x2f, 0x0, @private0, @mcast1}}}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000007f0000000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0xfffffffd}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80) (async, rerun: 64) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f00000022c0)={0x8, 0x10000, 0x3, 0x8, 0x0, [0x2, 0x4, 0x6939, 0x1ff]}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), 0xffffffffffffffff) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000002500)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004010}, 0xc000) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r6, 0xca1ba6dd85ac517a, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040805}, 0x18) 514.652979ms ago: executing program 1 (id=5276): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8c04}, 0x20000000) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="6f0883", 0xfe92}], 0x1}}], 0x1, 0x2400c040) 462.794432ms ago: executing program 1 (id=5277): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="b896a15f48052eec7bc7fe285f228824877bd9d7deef9ae32aa7eaa025f93fb406", 0x21}], 0x1}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x1411, 0x223, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r3, 0x0, 0x1, 0x0, &(0x7f00000010c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r6, 0x99, 0x6}, &(0x7f0000000340)=0x8) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000040)={r7, 0x100}, 0x8) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 452.497378ms ago: executing program 0 (id=5278): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8947, &(0x7f00000000c0)={'bond0\x00', 0x10001}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000140)="ee4f4039311ee3cf877eeebbc43e9183a8d80e275bbc91a960c485ec5776060de98bd8797613f33849fb423601232ff4ebf095f1a4835819af7edadb08310455f3fcaabcaaab3147ede3bb98bcfb2da3845a2bc382dbd2a8e19427fad223b30882e13fd27d9a9318c363048b5524d3836a14b473947cb5116f1cdbfff7f709830d36df5bab1af3595966be41ce0f9686ab6a95528e2d7d44e0cc23b2ec9ac1", 0x9f}, {&(0x7f0000000200)="41deaea1761fd2e53c89ac9274be8ec53f4b3236a474d719006419226f4f4698f12f1b0793df466b4d10498666eab6ded1d60d64cfa5265e1be74ca0e756ceeb5e7e6a", 0x43}, {&(0x7f00000000c0)="051968198b9c14c7ca33583c7ebcd2d2462fc2a4e7c9c0dea015c10e66a9c19db49c8e6e71a0f85df93826da41", 0x2d}, {&(0x7f0000000280)="53daba0b07c4450c5a5425e79e270f26e099fd34b6b5870f842971bc7052a28db00ea5027432", 0x26}, {&(0x7f0000000400)="04e0e741f1f2a4933c9224815f6b2ab72b7e9e8baca7198c4cf9d386687721662d85f53875f786c659cb9902452bec12b36d33ca70c35546c3635481fe0859021ef1ed711ffee139c7c3a0c450bbad0aef787405bc3b50c60d91", 0x5a}, {&(0x7f0000000480)="b206828c24862fe7ca7dc8f40fbf3a1c140689c76185c66eec22b1f04a2c0502cd2e843a828664ad3b9ce0d6408354bc7ce2518cf146143bb4eddfb79a64d28ff2da826151307a6cde0dfa692d4734b6be03934f5be6c12829049c3964f9596184062a7a60ae9f497e0bb33ce7d75fb64d0d9d6b7bb2ee4a8be225f4b19d42bf", 0x80}, {&(0x7f0000000500)="2adf1409aa4445d39a223fabf3f9e1b9a254291681c299621b0c8cf4481f401b1f7db932129d796fe147cbeaddbef5a4b74e3d0346327f39906729a285fe5a7af764b0bc6f7c2e987b07be1117ec20f97454e0b1ca1e574a4b45221008531578ea2de347bda90c5089f96478b1f3f34a97109571ca38ae5f14a3cbd1c8a6afa9b5ab23203604283382a64dbd35243760ad50a762028fac11efefe2e3ee2497e8c899", 0xa2}, {&(0x7f00000005c0)="86af85b57b9f50d986384239ad17021abfaab8bcd5387b5e3f891931e79c6007950e549ef8687468159e4417b4df5df7b1beda1d1c1ae1f67a7746d42e09883748fbead8c3118bcd2013cb6ac692e444be5525b3a100f9ce06", 0x59}, {&(0x7f0000000640)="9b96ba812ad14e7205fb23a9a92dac7400ed78d94f6ba4ef826ee0934ac8cd1720bee179afc7b2cb349729080fe973745cfc7604e4e3a932862e94aabb5e0b65c5b4e7c5e4e61bc8fed9c99ae3f892a0d2a6a59f95cf0852870e82562447741f5bf308c0f0fff1477ffcd89718d73eeaa79d36ea4b5a1bf68b6e96ffb34df82a7e5186636eccebf138242a3df35dda", 0x8f}], 0x9) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="5d4524bd70a0fedbdf25010000000c0002000100000000000000580007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0010000000000000", @ANYRES32=r5, @ANYBLOB="0c0005004601000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) ioctl$sock_netdev_private(r2, 0x89fb, &(0x7f0000000940)="982a699de3c7287479b3eadd5736f6fd043ea859f478745af9eb3404c81359fca44d4ef02b3f20e19e2b6537f5bd75b1572097d5afd26e6f0988e8d7d78a16832c8ffea47b5a56e74ad5d136b7249e97dd1728fee1e70b7e4b0117c48ef9ad0f3a64d423fb46f410981f9009e5e5e2") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000034000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61141800000000001d430000000000007a0a00fe00581c1f6114750000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x9a600, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r8, &(0x7f0000000280)=ANY=[], 0xc2) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x4) r13 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r13, 0x89e3, 0x0) 451.453846ms ago: executing program 3 (id=5279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x7f, {0x5d3b80df13d0c5e1, 0x0, 0x0, 0x9, 0x9}}) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x7f, {0x5d3b80df13d0c5e1, 0x0, 0x0, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x4, 0xfffffffe, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x10, 0x40, 0x37e, 0x7181f32f}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x8) (async) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f00000025c0)) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket(0x15, 0x5, 0x0) (async) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000014c0)={'erspan0\x00', &(0x7f0000001480)={'ip_vti0\x00', 0x0, 0x20, 0x1, 0x20000000, 0x9, {{0x7, 0x4, 0x1, 0x1f, 0x1c, 0x66, 0x0, 0x18, 0x2f, 0x0, @local, @remote, {[@generic={0x94, 0x7, "2eb32263fd"}, @end]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c40)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000001c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c40)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001ec0)={'gre0\x00', &(0x7f0000001e80)={'tunl0\x00', 0x0, 0x708, 0x80, 0xfffffff7, 0x7, {{0x8, 0x4, 0x0, 0x1, 0x20, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @loopback, {[@end, @ssrr={0x89, 0xb, 0x4f, [@multicast2, @private=0xa010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001f00)={'wg0\x00', 0x0}) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f0000000300)={@mcast1, 0x4, r16}) sendmmsg$inet(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="45e00a8f22f752dd293a1177c4485dfac65ad22b279e417124c638ec313d7475613ab424980b9d8c705a59895a9900f3e0ce87fe6fe3e9e7e176b78c2650da4029e662cff22f4ae6bc60666c65fc99abb50ba5ad95c2a4856daacacac10bcc68d6259f82d3", 0x65}, {&(0x7f00000002c0)="e9a1f889c7167f7e82cd75f38d50ff4dee2f1e5c3d3cb1c3502b3b3f679ac35faecad3ccea347dc605b753f15ddd79793bd48d412b4a363548f9ce6323692c5e42ecae347f3c5a47cdb323e6a12668d5f05ba0dbdbc3ecda0a05070674814c03a629770bec7d19f1165087779093c5a84a237b2458a0e9736d4287949d9647f593f363dd37bb22c06fe2a3eed5185598ea486993f77d7dba6befbdbf17524f896b12e62c6a50523599675d9be3a23a65b269e303de876bc03222bc011221af", 0xbf}], 0x2, &(0x7f0000000180)}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000380)="431bc3218fa986a41fd274d3081b35bbebb9c108b0c76aff0f95c5815697e3e074a5df4e5fda7c4504854a7644a3e12855250971f79e65212f2c67f7fa38fc7922ea1e440d603c95e39e689c654f7bc9a739a60d73287d154c2b49ebb2eb874500c9fa205f844d3f783de70ccc5dad9e80479c37f45f2432a8b9d8250ac1b2fd0b5cb6a642b7960013511c34541c65e6741519b719fb7c4242b11f5cf4e29cd8c012743114", 0xa5}], 0x1, &(0x7f0000000640)=[@ip_retopts={{0x110, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xfe, 0x0, 0x0, [0x1ede, 0x6]}, @timestamp_addr={0x44, 0x2c, 0xce, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x5}, {@empty, 0x2}]}, @generic={0x94, 0x4, "0351"}, @timestamp_prespec={0x44, 0x1c, 0x4d, 0x3, 0x2, [{@remote, 0x7}, {@local, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}]}, @ssrr={0x89, 0x2b, 0x19, [@loopback, @multicast2, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010100, @local, @rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp_prespec={0x44, 0x2c, 0xb, 0x3, 0x9, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x37}, {@private=0xa010101, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xe3, 0x3, 0x9, [{@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xa3}, {@loopback}, {@rand_addr=0x64010102, 0xffff}, {@private=0xa010100, 0x2}, {@broadcast, 0x9}, {@remote, 0x6}, {@empty, 0x4}, {@remote, 0x2}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa71}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @rand_addr=0x64010102}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@end, @rr={0x7, 0x7, 0x7, [@private=0xa010101]}]}}}], 0x1c8}}, {{&(0x7f0000000500)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000840)="fabde8d522c8f5ad1f9948eec248bda488cd484b30e7d0f5b42e4fb36cc773ddde558ab21e8e1f7bf83541d66c4211d3ed8156d15f652f1d7dd53be5e23960e88acb653ad8334d79fc990e8f6b848c121d96fd14f55817fedadc2bae63606954931d122bb34caada4cc0dc4966fd013c34fded04bb94ae8f948cde0c06f52b87d5dc5e428ff8ac826cc99462d093a3cad9f4925c26995668602986819ce443f2b27419ce8ef682b4b2c418bb7b7c5ae20b7eba4430f02d2b5100c21f30fdaba7fa81cdfd4ba397c9c09cc16dad998c77e300f19aa4e020327c2721f769983772021ac34f6fc525eebb2cafc14d303063c1486b0e62", 0xf5}], 0x1, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}], 0x50}}, {{&(0x7f00000009c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000a00)="25f34377fc046d10b4f3c495564ad0f6b84cb68f3020051c4546a0264418fc7919b2b67e34724fec2e89e06f94052ce356ec81996b8d09fddd990e9de09aa44e04afa3b4270f4fe4d7bc2919392b8d3bcb29a5282d412508eb93c0bf2e4a82827ad80d61f1458274e4d7cc53b8cef28e69e96a7e95a8fa32097a71597e889b0cc0e41cbeebbcaa48ab3b4b06737fbe8bf9a22acc0bf52669f9e306ee6a41b2bb7e71292cb661924c8cf53f9e26c740301ab3a4ddbbdacb799495e84c0d706774ba1cddb2c3858cea43464818dfafb1e8796fa83aa02e8b0e0113bcf6e2b61c7a4fe0", 0xe2}, {&(0x7f0000000b00)="83b3c6fe234b0f73ef8a1fbcdcc42cc825a3df149cb17cdba7536381f1b579eb982c8e8d5d7bc79c236b0f50ab89e88f7d9cce6a1c9e21d35db5cd03ac0aa04ff614fd9cb92a6cbc43e74062c7ec5649dae9954576ec78cd7893cb7f4be63e8241afd1f38bb9a8e5ce5dec0ba93871fc733f37b5cc715769ed9855aea808fab3e060b327668cf50104b6c5934dc58fb8c3a5e7a40254a1", 0x97}, {&(0x7f0000000bc0)="2bef527435e3cf802e7f82770a680df41f98d201b3bcffb1025fa916273222e31ff54e3547de37a87214d330c7cab4a7afbcbaa5261aba1d26fb1c8acb7d33ce365ca189803cfe69c3261702b2e17040fb1885f5d14420ac2640aba7719e614c962c6c211d536ebd8291b6c6800f9d3198d431eb9b35dbb3a4f42a754cd2932088ca64d645f9c6704677de5d4e3d4854ecf0f9d4b66a853c0caebfd9a3e8938d0346c2ada4abdfec61f359d8cad094aa", 0xb0}, {&(0x7f0000000c80)="6d530b5d5818d4006c68cb25b00271fcdbec8ae095f1ce8bcc4e9cbe9627e3858334640be1575d9db5dd0e14b083df4f2034766983f42b7962c7a139e350a26438391bb8fca6fac88cd00efe7dd07849cbf90207afd4718571e9a7ba81071870ebe0c3eccd5e", 0x66}, {&(0x7f0000000d00)="57a50c5cf9cf3c8629c30be489bf88c24f53c05daf499a76628903409305d4", 0x1f}, {&(0x7f0000000d40)="4d362288ca1c976c9c2f01fdc76f429a70c1", 0x12}, {&(0x7f0000000d80)="1f1e293730723d9771803b7c7c01df3544e18eee6857628cb21af15dec453856382d1279d8b66598a531c2c158af0afd5ea2fcc728409933c99c1312c43a3b6f419220c44005dc602a6abea5bd0f09cdab983cf76f7f53f7d8b9539a7b0772effd4ed337edee75b04fba80ed0ef9c51be104d6bf24573c2010e05756446dde3628a4112ebfa98d7f07a7f6ef22171899fe6ecc91996fb4d86551017a23012e6937afb11237ed11c99b35245607e7fdac05872f30b6985f24354914f53ee097649f14d4eb9cf54b", 0xc7}], 0x7, &(0x7f0000000f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x50, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x9, [@empty, @private=0xa010101, @remote, @rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @remote]}, @noop, @cipso={0x86, 0x1d, 0x3, [{0x6, 0x5, "eea965"}, {0x0, 0x12, "9c15d3e1e901e140f1c80078b3e43dd4"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x98}}, {{&(0x7f0000000fc0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001000)="cfe14821dbc4ef7e908a88661cde120cdaffa1d595ff9ff0b8e81db02afb68771a9f30a773940c50bd90b97fa53b315e57b186e22bb1b616e089631982b16ce27377de0fd1b57c", 0x47}, {&(0x7f0000001080)="753787eace45ef4bdc1310ed4f68f4099e482f8e7c4de48e7e6ac4dc0ee28f9d732b46e9936cc9cf3c054d6bff10e588498b99cb8d006fc5f7afdc73512af569dc6b8017ac99fef8616a86d633137903ca1b5e9f604519d686d8b7c23c23ec1ff66e13b8f88165213cb870908bb0e23f90b2308762d893e1998a133b475bdb0ae7f5", 0x82}, {&(0x7f0000001140)="10b86152b4217574c0efbc082e3e150c47e5ea296b515a0bac0dc5c9b150c2c807a49a83c77c0bd1271ba54ef1c01ef471bd1d8bf9df864791148c1b", 0x3c}, {&(0x7f0000001180)="659ab7911968e8fbe319b5c1fdc5fd8d5f4e885700800ad9e02ddf213f7f3cdc165ad407e568fdabc21eca95471f174a6df320b06190e08953b3dd08c9fc4d4b4d7ff538b11a7e13489ce7ab875197b2558deaac5be6e1bc868b5f6488f23f0748d0e76095f159c12ae1197c8ce9db96a3135ad7c802212e6fd5d00adf85aca9ace456b333d6e605176258b5136aea88bfa38920107a03844500a412727ff3c3f061bf3dd7b442ee72ed36230d0737aeee1dd86d083a647517bae199d8efd765d177cdd1c131efb3501c4678", 0xcc}, {&(0x7f0000001280)="57b69d4a3f62a5b4d0e49533ad7cf2b0751b324ade52cb73ffdda7ae505f20e130ee05f3baa6db1911351411d30d48838bb3573acfe7fb47385ba1a499611f3e54ca46e55342a3fde5fdd2c31b72f27ba067ed", 0x53}, {&(0x7f0000001300)="d462f3dbc16dd0e93ff8f0c0532e52e97ad79bc327d9b681d1b576ba535c91c5cc400501b0ccca2b26204d931d613e598ddf6e91d9266f12a430aabe308c8b82f0e580ac3f747d14b3eda87f626f180809856612e872d3fb31250cf5fac4e0baf3b3d744505f33236137188c", 0x6c}, {&(0x7f0000001380)="c2058b622883e5cdec9b55b9cdaeee6534216852ed3a09425ba10e7011d5f03da79b9150d1018baa4f53f0ca1bb8ec147355a56486", 0x35}, {&(0x7f00000013c0)="2572bb6466403cc5819da440de458523e3804900f0b496aca9e87ce8e45d98fdc8db9110ba3408d1b709", 0x2a}], 0x8, &(0x7f0000001500)=[@ip_retopts={{0x118, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x1f, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x401}]}, @rr={0x7, 0x1b, 0x2f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, @local, @remote, @empty]}, @rr={0x7, 0xf, 0x28, [@loopback, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0x4c, 0xf0, 0x3, 0xb, [{@loopback, 0xb}, {@private=0xa010101, 0x5}, {@empty, 0x2}, {@remote, 0x7}, {@loopback, 0x6cd}, {@multicast2, 0x6}, {@local, 0x9}, {@private=0xa010100, 0x5acf02b3}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x101}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x23, 0x0, [{0x2, 0xf, "15ddefde4d9e92349ba95640f9"}, {0x1, 0xa, "eb7e17932aea94dd"}, {0x5, 0x2}, {0x6, 0x2}]}, @timestamp={0x44, 0x14, 0x86, 0x0, 0x0, [0x80, 0x8f, 0x400, 0xffffffff]}, @rr={0x7, 0x27, 0xf6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast2, @rand_addr=0x64010101, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2]}, @rr={0x7, 0x17, 0x1f, [@local, @multicast2, @rand_addr=0x64010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x521}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010101, @rand_addr=0x64010100}}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@cipso={0x86, 0x52, 0x0, [{0x0, 0x8, "2d08f4f4b115"}, {0x7, 0x9, "264156fc33fd22"}, {0x2, 0xc, "dc7dd8c0e5a8c1999617"}, {0x1, 0xf, "d7f9e3fb4c7b822652d507c580"}, {0x3, 0x9, "c439517d662b4e"}, {0x6, 0xa, "c8d5298ba1c8e2dd"}, {0x6, 0xd, "a3df99f1d2bff6102282d3"}]}, @ssrr={0x89, 0x1b, 0x40, [@remote, @empty, @local, @local, @multicast1, @local]}, @timestamp={0x44, 0x10, 0x9d, 0x0, 0x8, [0xe, 0x0, 0xfffffff7]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0xca, 0x1, 0xc, [{@loopback, 0x40}, {@local, 0xa7}, {@local, 0x4}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0xe580}, {@multicast1, 0x1}, {@remote, 0x1}, {@private=0xa010102, 0x2}]}, @ssrr={0x89, 0x13, 0x2a, [@private=0xa010102, @remote, @multicast1, @multicast1]}]}}}], 0x2a0}}, {{&(0x7f00000017c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001800)="7b83939c1c90b2fce366054ca8a881f1072a19a8429155b8c96ae11f523b1417c1e5069d3c91ecfb1ba61c7a163ed6b04d67d0d8228ca5a09f90d1ad7b428e842aeeaf88e1b38ed27a28e192cb31d69dae702b062dc14ca540cd58da81d2e3a18127e521c70a89b0407890362d76a8f7b057fd2e7d874b64bbb74555d8a09552760ef5c34f87e0576b8eccf49332ba152cec8de8b16c4830916d20e95f96457739ad24c08b2ec84460c37a9ada917e09ead869ac3698fade9825bd31d488d40b84ebe687e1282931280f4f21", 0xcc}, {&(0x7f0000001900)="eb8a9b0465aad2fbcc1e33e833edf1df01d06a5024561a285316b86d9caefb3c73a48bea52711bb79eb88e6463e28f6286ba2e7874c9e0a4130a6fdd012812d78d2f82784503498e2413c3f6435ad75ca35404f41c9a2c44433431be9e0ffefe8c42599cc52508f6776efbd34090353761a14f981e062a809a51b5cf13ad63fd8eb95130068415b1b03285544b860bc7b21b863110afee5be3bce5721682c3dd27", 0xa1}, {&(0x7f00000019c0)="e16e428db003168056b7", 0xa}, {&(0x7f0000001a00)="7ce535096a471e61d24053be159ddae6d0dd394379d4e86c40f80d94cabcbe5cdd0fc995cd6dda06e2871100825168056e4ad0a79477828a0a68a708bf2ef34957b5704537a8a0dfa06f78463a9150227019c6b15085df22dedca8ce5cd8a49786511aac2aa7768d6e7255093a0932a51e0967c7427eb4fbdc15c4ea4919670f0213733fe1d6fd389798cc09562e52a8652dc66e3aed59f9", 0x98}, {&(0x7f0000001ac0)="704c85995b279e558f37004763787663a20935e52a1feb58285f7b492951c45206b4beba389870640fd6fda37a75fccf1501c8c5c614d8ec8cbb48b34de514a51b11463078124ced4d963711941738d2fcf407fdcedd342f73a104a7244d9d04c45296da9f0d7f1947725a3ea9561f9097948defba004cbd579510e7bdf1a4edcf00a32105d57f651bf707a76395218b", 0x90}], 0x5, &(0x7f0000001c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x62}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast2, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x68}}, {{&(0x7f0000001d00)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001d40)="66dc163831dc4ab1aad13c0117edd183143acc1872d807fa8f5bb5a080806c5242caf3f60bc215be56b09f7cc72252e7", 0x30}, {&(0x7f0000001d80)="d8dcb4965d55c9a0922a3ad6934cb5a897641f810828320e0bee7124f72c03006132cd659661a95193e937b695700fae4287ce5fe1be600102f0315fc382c3d62b8e9c5c08da5fb1a4644e80f58d4db66c5f5bbdbdc315ce2de8d35ffa8a92f196255b25580d7c2dd450ab52d3d150c9a0e648dc560b3c14c350231df9aa443f4f68d2aca4296020cccbee9009986bc38216aa3972c1b89b32fe32db560686e930a9b7dae8e96d11e58d", 0xaa}], 0x2, &(0x7f0000001f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x18, 0x0, 0x7, {[@end, @end, @generic={0x94, 0x3, "a6"}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0xf, 0xb0, [@multicast1, @remote, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0xa, [{@broadcast, 0x6}]}, @timestamp={0x44, 0xc, 0x68, 0x0, 0x3, [0x101, 0xe7]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@generic={0x83, 0x3, '?'}, @ssrr={0x89, 0x23, 0xbf, [@remote, @loopback, @multicast1, @broadcast, @broadcast, @multicast2, @loopback, @local]}, @cipso={0x86, 0x26, 0x0, [{0x5, 0x2}, {0x0, 0x4, "30aa"}, {0x2, 0x9, "6c050aa47b304f"}, {0x6, 0x9, "e9244a691a84e4"}, {0x5, 0x8, "5e1da9d6838a"}]}, @timestamp={0x44, 0x10, 0x9e, 0x0, 0x9, [0xd, 0x6, 0x10000]}, @timestamp_prespec={0x44, 0x1c, 0xb5, 0x3, 0xb, [{@rand_addr=0x64010101, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xfffffc00}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xc5, [@loopback, @multicast1, @rand_addr=0x64010100, @private=0xa010100, @remote, @broadcast]}, @rr={0x7, 0x1f, 0x12, [@broadcast, @loopback, @private=0xa010102, @multicast2, @loopback, @remote, @local]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x22, 0xffffffffffffffff, [{0x2, 0x10, "71103b4cd93c371349f15900aa14"}, {0x0, 0x4, "e5a8"}, {0x1, 0x8, "c638128790b6"}]}, @end, @timestamp={0x44, 0x18, 0x7, 0x0, 0x2, [0xffff7fff, 0xf5, 0xfffffffe, 0x8, 0x1]}, @rr={0x7, 0xb, 0x56, [@loopback, @loopback]}, @noop]}}}], 0x200}}, {{&(0x7f0000002140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000002280)=[{&(0x7f0000002180)="b54b156d6c1cace07d928ec9203eebbd29b2201b109247d7f411d06559e877fd94db4abc151d58734fc9d7969e882f3a7c6b5d3e713ddea6144489c94fe8bc225c57d52704f7e7cae5b91a9f6156b6b817e41a3a6fc65b11a913e9c9e80480e85aa6f3bb8ba86195139583b6c340512934143db7c5f825c2a7582dc5bdfbff69920974c1a611559143efd5bd614d0030f754bbfc1c0da0286709feee300d739e0534babebf9702abc47de0384f8300f5e10f6f0e44c105be05dad3ecc0438d3f5058de9ec36f87c53ad1f5b1c0c1e98527c8cc5103518c154b752e8e7259faaa30fbafad09d66899ed4a7e5adca6fe4afbc1f2", 0xf3}], 0x1, &(0x7f00000022c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @dev={0xac, 0x14, 0x14, 0x36}, @local}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x81, 0x1, 0x6, [{@loopback, 0x401}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x7}]}, @noop]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x36, [@loopback, @local, @multicast1, @empty, @empty, @multicast2, @rand_addr=0x64010101]}, @noop, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0xd0}}], 0x8, 0x0) 292.272577ms ago: executing program 4 (id=5280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x42) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001c3"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x178, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_NAT_DST={0xbc, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2d}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x2]}, @CTA_TUPLE_REPLY={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000000010104000000000000000002000000240001801400018008000100e000000108010200e00000010c0002800500010000000000080003400000300c"], 0x40}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$cgroup_procs(r6, &(0x7f0000001800)='cgroup.threads\x00', 0x2, 0x0) sendmsg$netlink(r8, &(0x7f0000001880)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="8c0100001efe2df5e5c900000427bd70002c000f00000014003400fc0100000000000000000000000000000800f900", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}], 0x1, &(0x7f0000001840)=[@cred={{0x1c}}], 0x20, 0x80}, 0xd1) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000280), &(0x7f0000000380)=0x8) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write(r4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r12 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r12, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) 284.100251ms ago: executing program 2 (id=5281): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 183.576699ms ago: executing program 1 (id=5282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0xc, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000844}, 0x800) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10000844}, 0xc00) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18, 0x810}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) 4.476925ms ago: executing program 1 (id=5283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ea3c17b3a7d8693e0a10b158be2d064a3050865aba4b77045e3014f20635a8e105041c9313cbefc73d7b349caa0ae14f6441beadd7027970859e33eba6d67c4d18a586b1ef43e7b875a76599464607e3355eefed5c5ef82138a73ee1162a092abfca66000000", @ANYRES16=r3, @ANYBLOB="070029bd7000fcdbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100000600be003e2700000500190002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x40800) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$sock(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="2dd955bfa21cab6ad68c025fb1b587bb638500fb3fab61b3fcb7d6889880a78ad7dcc6f026c1db2254fbd62e16549f8de06f29f5df058e8fb158003a2ed79301ba6447926b206ba8858477ad6c543dffd7058e1b4869c4c3223cf912d2f59e03bf811dc8f19c1370993da6a5988b09c94e272cac412780aff6454ad2925980ff9ba94e1344bc9c990b4ea52d71dc79038427de2a030b6f077825adbe9e152749aff86fecdf40f358083d9825fdfb7a73bb109e0be5205e9f8b04b959f35f71d72fe6ca6aa10171e42cd651daa6c490fe7326f6016b88", 0xd6}, {&(0x7f0000000100)="3c71910fa3e2b489e873112875c05fead660f71310da1189b91c475ef7cf9819aea27c7edcb5efb5057e484f2f31c8a6e1", 0x31}, {&(0x7f0000000580)="406c1c64cccdd1a102787dc92270bdb42b40f28e1f3bab5ad3f295f4ed139383257be57edb26ccc028d85a18a79ea3c1ee0038b75460ffcaf7a4f1e76382c84ada2b2d0186f78986a60011baffe4de1d06a5904caa6f96e7efc83165b4b06b8149c42186de6961603b5781cc561d7e07caa3485578ab09e6cbf4dd80392f7910b477d25e7198046846513dd57d7bf0bdf5289990d5b28f11333a62c2c065edd35a6c86b73837c115f3c90ddd34ab055fcdc5d541a35b5b8f8c0a9bb63eab91c2316a818987a4f871eb31c1c632da6d6eba", 0xd1}], 0x3}, 0x4000001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x16) (async, rerun: 64) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) getsockopt$bt_hci(r5, 0x11a, 0x2, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x40) 2.285759ms ago: executing program 3 (id=5284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x8, 0x6, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x20}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "7fe59ce22cbe5943"}}}}}, 0x36) 695.045µs ago: executing program 2 (id=5285): syz_emit_ethernet(0x3f, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x5, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102}, "bc"}}}}}, 0x0) 0s ago: executing program 4 (id=5286): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800028004000180080004"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006c0001"], 0x18}}, 0x0) kernel console output (not intermixed with test programs): :50:50:50 [ 310.667259][T17292] syzkaller1: entered promiscuous mode [ 310.680373][T17292] syzkaller1: entered allmulticast mode [ 311.001267][T17304] netlink: 'syz.0.3107': attribute type 27 has an invalid length. [ 311.029319][T17304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3107'. [ 311.199317][T17305] vlan2: entered promiscuous mode [ 311.221221][T17305] bond0: entered promiscuous mode [ 311.241656][T17305] bond_slave_0: entered promiscuous mode [ 311.256367][T17305] bond_slave_1: entered promiscuous mode [ 311.355980][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.372711][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.399667][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.412889][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.422828][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.489972][T17318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3111'. [ 311.525101][T17313] lo speed is unknown, defaulting to 1000 [ 311.759162][T17329] netlink: 'syz.1.3115': attribute type 1 has an invalid length. [ 311.770631][T17329] nbd: error processing sock list [ 311.777172][T17329] block nbd2: shutting down sockets [ 311.984626][T17313] chnl_net:caif_netlink_parms(): no params data found [ 312.315301][T17313] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.328016][T17313] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.337155][T17313] bridge_slave_0: entered allmulticast mode [ 312.368087][T17313] bridge_slave_0: entered promiscuous mode [ 312.380138][T17362] syzkaller0: entered promiscuous mode [ 312.385651][T17362] syzkaller0: entered allmulticast mode [ 312.396143][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'. [ 312.399236][T17313] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.432224][T17313] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.452246][T17313] bridge_slave_1: entered allmulticast mode [ 312.472502][T17313] bridge_slave_1: entered promiscuous mode [ 312.481646][T17362] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 312.522092][T17362] team1: entered promiscuous mode [ 312.527318][T17362] team1: entered allmulticast mode [ 312.691304][T17313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.714328][T17313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.838831][T17313] team0: Port device team_slave_0 added [ 312.854543][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3132'. [ 312.878183][T17313] team0: Port device team_slave_1 added [ 313.029492][T17313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.036559][T17313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.073505][T17313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.103207][T17412] syzkaller0: entered promiscuous mode [ 313.109225][T17412] syzkaller0: entered allmulticast mode [ 313.122224][T17313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.130995][T17313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.158964][T17313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.226988][T17408] tipc: Enabled bearer , priority 0 [ 313.316633][T17425] __nla_validate_parse: 6 callbacks suppressed [ 313.316652][T17425] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3140'. [ 313.382255][T17313] hsr_slave_0: entered promiscuous mode [ 313.390095][T17313] hsr_slave_1: entered promiscuous mode [ 313.396738][T17313] debugfs: 'hsr0' already exists in 'hsr' [ 313.406958][T17313] Cannot create hsr debugfs directory [ 313.465752][ T5831] Bluetooth: hci2: command tx timeout [ 313.692533][T17453] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3146'. [ 313.693154][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3145'. [ 313.723464][T17313] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 313.748459][T17313] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.775658][T17401] tipc: Resetting bearer [ 313.810338][T17401] tipc: Disabling bearer [ 313.828927][T17313] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 313.840469][T17313] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.853712][T17461] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3148'. [ 313.912566][T17313] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 313.928318][T17313] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.954636][T17466] netlink: 'syz.1.3150': attribute type 9 has an invalid length. [ 313.963914][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'. [ 313.977031][T17469] netlink: 'syz.1.3150': attribute type 9 has an invalid length. [ 313.985331][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'. [ 314.004177][T17313] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 314.015307][T17313] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 314.276634][T17482] delete_channel: no stack [ 314.287093][T17313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.312195][T17313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.333745][T17313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.356407][T17313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.403371][T17485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3156'. [ 314.419099][T17495] batadv_slave_0: entered promiscuous mode [ 314.521370][T17495] batadv_slave_0: left promiscuous mode [ 314.563861][T17501] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3159'. [ 314.573944][T17313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.625185][T17313] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.632762][T17505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3161'. [ 314.741470][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.748701][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.749678][T17513] netlink: 'syz.1.3163': attribute type 1 has an invalid length. [ 314.771346][T17513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.782464][ T9997] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.789664][ T9997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.027463][T17528] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 315.114625][T17532] netlink: 'syz.2.3168': attribute type 83 has an invalid length. [ 315.173275][T17535] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3169'. [ 315.316166][T17541] bond1: Unable to set up delay as MII monitoring is disabled [ 315.334452][T17541] bond1 (unregistering): Released all slaves [ 315.540858][ T5831] Bluetooth: hci2: command tx timeout [ 315.549273][T17313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.682148][T17313] veth0_vlan: entered promiscuous mode [ 315.710326][T17313] veth1_vlan: entered promiscuous mode [ 315.808019][T17313] veth0_macvtap: entered promiscuous mode [ 315.840332][T17313] veth1_macvtap: entered promiscuous mode [ 315.926612][T17579] vlan3: entered allmulticast mode [ 315.945058][T17313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.966677][T17313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.989987][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.010856][T17589] netlink: 'syz.4.3182': attribute type 15 has an invalid length. [ 316.012827][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.083958][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.113622][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.229348][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.229841][T17593] netlink: 'syz.2.3184': attribute type 10 has an invalid length. [ 316.264570][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.352068][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.375639][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.557368][T17611] xt_policy: neither incoming nor outgoing policy selected [ 316.694570][T17618] netlink: 'syz.0.3192': attribute type 1 has an invalid length. [ 317.146619][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.243763][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.254020][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.263395][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.281217][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.294641][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.371839][T17636] lo speed is unknown, defaulting to 1000 [ 317.618210][ T5831] Bluetooth: hci2: command tx timeout [ 317.652532][T17650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.754764][T17636] chnl_net:caif_netlink_parms(): no params data found [ 318.085964][T17636] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.105345][T17636] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.123909][T17636] bridge_slave_0: entered allmulticast mode [ 318.132387][T17636] bridge_slave_0: entered promiscuous mode [ 318.152279][T17686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.180158][T17636] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.199181][T17636] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.217791][T17636] bridge_slave_1: entered allmulticast mode [ 318.230212][T17636] bridge_slave_1: entered promiscuous mode [ 318.240584][T17692] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 318.349122][T17702] netlink: 'syz.1.3215': attribute type 1 has an invalid length. [ 318.367372][T17636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.388560][T17636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.400285][ T1314] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.404385][T17705] __nla_validate_parse: 13 callbacks suppressed [ 318.404402][T17705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3215'. [ 318.433857][T17702] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.463788][T17704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3216'. [ 318.496606][ T1314] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.507340][ T1314] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.534403][T17636] team0: Port device team_slave_0 added [ 318.564040][T17636] team0: Port device team_slave_1 added [ 318.588041][ T1314] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.641163][T17719] netlink: 'syz.1.3219': attribute type 33 has an invalid length. [ 318.650317][T17719] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3219'. [ 318.670029][T17717] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.752443][T17636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.769861][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.803444][T17636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.847152][T17717] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.873714][T17636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.881322][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.908477][T17636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.919903][T17733] tipc: Enabling of bearer rejected, failed to enable media [ 318.965702][T17717] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.045794][T17737] bond4: option all_slaves_active: invalid value (222) [ 319.054497][T17737] bond4 (unregistering): Released all slaves [ 319.090767][T17717] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.134626][T17636] hsr_slave_0: entered promiscuous mode [ 319.142947][T17636] hsr_slave_1: entered promiscuous mode [ 319.150044][T17636] debugfs: 'hsr0' already exists in 'hsr' [ 319.155935][T17636] Cannot create hsr debugfs directory [ 319.164483][T17741] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 319.190297][T17741] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 319.306094][ T4420] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.343520][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.372485][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'. [ 319.388970][ T5831] Bluetooth: hci1: command tx timeout [ 319.401752][ T1314] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.456059][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.525031][T17636] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 319.541598][T17636] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.642876][T17636] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 319.654815][T17636] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.699951][ T5831] Bluetooth: hci2: command tx timeout [ 319.711044][T17763] team_slave_1: Caught tx_queue_len zero misconfig [ 319.747311][T17767] IPv6: NLM_F_REPLACE set, but no existing node found! [ 319.763099][T17636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 319.776189][T17636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.859730][T17636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 319.892954][T17636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.962468][T17777] ip6gre0: Master is either lo or non-ether device [ 320.138762][T17786] netlink: 396 bytes leftover after parsing attributes in process `syz.4.3238'. [ 320.146167][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3239'. [ 320.183393][T17636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 320.205612][T17636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 320.225738][T17636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 320.244158][T17636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 320.286139][T17797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3241'. [ 320.456807][T17636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.515336][T17636] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.542574][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.549826][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.580041][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3245'. [ 320.610633][T17819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3245'. [ 320.625870][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.633096][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.766731][T17828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3247'. [ 321.470663][ T5831] Bluetooth: hci1: command tx timeout [ 321.474970][T17853] ip6t_srh: unknown srh invflags 4000 [ 321.538137][T17855] netlink: 'syz.0.3254': attribute type 1 has an invalid length. [ 322.680524][T17855] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 322.731210][T17636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.869062][T17636] veth0_vlan: entered promiscuous mode [ 322.930156][T17636] veth1_vlan: entered promiscuous mode [ 323.033885][T17636] veth0_macvtap: entered promiscuous mode [ 323.056937][T17636] veth1_macvtap: entered promiscuous mode [ 323.116668][T17636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.140116][T17636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.156335][T17877] xt_hashlimit: size too large, truncated to 1048576 [ 323.172941][T13108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.213034][T13108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.315147][T13108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.343469][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.536931][T13108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.553982][ T5831] Bluetooth: hci1: command tx timeout [ 323.582886][T13108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.634343][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.647404][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.854783][T17904] netlink: 'syz.0.3266': attribute type 21 has an invalid length. [ 323.921902][T17906] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 324.186241][T17920] __nla_validate_parse: 3 callbacks suppressed [ 324.186258][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3270'. [ 324.223451][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3270'. [ 324.383252][T17932] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3273'. [ 324.474659][T17936] delete_channel: no stack [ 324.480843][T17939] netlink: 'syz.2.3277': attribute type 1 has an invalid length. [ 324.529603][T17940] tipc: Started in network mode [ 324.535823][T17940] tipc: Node identity eaa1b8e4d85b, cluster identity 4711 [ 324.569943][T17940] tipc: Enabled bearer , priority 0 [ 324.594653][T17947] syzkaller0: entered promiscuous mode [ 324.601639][T17947] syzkaller0: entered allmulticast mode [ 324.615190][T17940] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 324.640136][T17941] tipc: Enabling of bearer rejected, already enabled [ 324.669689][T17947] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 324.737070][T17940] tipc: Resetting bearer [ 324.761293][T17938] tipc: Resetting bearer [ 324.792570][T17938] tipc: Disabling bearer [ 324.919162][T17952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3280'. [ 324.959863][T17965] tipc: Started in network mode [ 324.968111][T17965] tipc: Node identity f6f308878152, cluster identity 4711 [ 324.990562][T17965] tipc: Enabled bearer , priority 0 [ 325.109693][T17964] tipc: Enabling of bearer rejected, already enabled [ 325.173222][T17974] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3287'. [ 325.226847][T17964] tipc: Disabling bearer [ 325.280407][T17978] xt_hashlimit: overflow, try lower: 3/0 [ 325.310731][T17975] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 325.335558][T17979] : renamed from hsr0 (while UP) [ 325.446073][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.463299][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.474115][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.498693][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.510573][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.534408][T17989] veth1_macvtap: left promiscuous mode [ 325.559136][T17989] macsec0: entered promiscuous mode [ 325.570939][T17989] macsec0: entered allmulticast mode [ 325.611603][T17990] veth1_macvtap: entered promiscuous mode [ 325.617367][T17990] veth1_macvtap: entered allmulticast mode [ 325.625091][ T5831] Bluetooth: hci1: command tx timeout [ 325.649216][T17990] macsec0: left promiscuous mode [ 325.659097][T17990] macsec0: left allmulticast mode [ 325.668996][T17990] veth1_macvtap: left allmulticast mode [ 325.748823][T17986] lo speed is unknown, defaulting to 1000 [ 325.843563][T18009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3298'. [ 325.904564][T18014] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3299'. [ 325.930218][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3299'. [ 325.981876][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3301'. [ 326.000031][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3302'. [ 326.211892][T18034] syzkaller0: entered promiscuous mode [ 326.217397][T18034] syzkaller0: entered allmulticast mode [ 326.272742][T18031] netlink: 'syz.4.3304': attribute type 33 has an invalid length. [ 326.319944][T18031] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 326.342029][T18031] bond2 (unregistering): Released all slaves [ 326.392143][T17986] chnl_net:caif_netlink_parms(): no params data found [ 326.501380][T18045] syz.0.3309 uses old SIOCAX25GETINFO [ 326.541939][T18045] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 326.742086][T17986] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.751664][T17986] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.760481][T17986] bridge_slave_0: entered allmulticast mode [ 326.769553][T17986] bridge_slave_0: entered promiscuous mode [ 326.780506][T17986] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.788395][T17986] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.798825][T17986] bridge_slave_1: entered allmulticast mode [ 326.821691][T17986] bridge_slave_1: entered promiscuous mode [ 326.937447][T17986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.953829][T17986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.991520][T17986] team0: Port device team_slave_0 added [ 327.000935][T17986] team0: Port device team_slave_1 added [ 327.027084][T17986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.034638][T17986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.062458][T17986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.075082][T17986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.082827][T17986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.109443][T17986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.161586][T17986] hsr_slave_0: entered promiscuous mode [ 327.169097][T17986] hsr_slave_1: entered promiscuous mode [ 327.175296][T17986] debugfs: 'hsr0' already exists in 'hsr' [ 327.181583][T17986] Cannot create hsr debugfs directory [ 327.537732][ T5831] Bluetooth: hci5: command tx timeout [ 327.885416][T17986] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 327.943788][T18098] netlink: 'syz.3.3323': attribute type 1 has an invalid length. [ 327.953774][T17986] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 327.970847][T17986] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 327.982634][T17986] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.235490][T17986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.336734][T17986] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.352846][T13108] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.360091][T13108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.401846][T13108] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.409073][T13108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.618824][T18127] netlink: 'syz.2.3331': attribute type 32 has an invalid length. [ 328.683802][T18141] sctp: [Deprecated]: syz.0.3334 (pid 18141) Use of int in max_burst socket option. [ 328.683802][T18141] Use struct sctp_assoc_value instead [ 328.722457][T18127] bond2: option coupled_control: invalid value (116) [ 328.764015][T18127] bond2 (unregistering): Released all slaves [ 329.044836][T18160] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 329.105776][T17986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.622272][ T5831] Bluetooth: hci5: command tx timeout [ 330.027108][T18169] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 330.049759][T18169] bond3 (unregistering): Released all slaves [ 330.126463][T18173] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 330.156208][T18173] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 330.272893][T17986] veth0_vlan: entered promiscuous mode [ 330.341126][T17986] veth1_vlan: entered promiscuous mode [ 330.401563][T18191] __nla_validate_parse: 13 callbacks suppressed [ 330.401580][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3347'. [ 330.458345][T17986] veth0_macvtap: entered promiscuous mode [ 330.489272][T17986] veth1_macvtap: entered promiscuous mode [ 330.562246][T17986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.604164][T17986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.610693][T18195] netlink: 'syz.3.3348': attribute type 30 has an invalid length. [ 330.626522][T18197] netlink: 'syz.4.3349': attribute type 6 has an invalid length. [ 330.641266][ T9997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.653087][ T9997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.664183][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.675342][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.688301][ T5941] IPVS: starting estimator thread 0... [ 330.697039][T18204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3348'. [ 330.749632][T18195] netlink: 'syz.3.3348': attribute type 1 has an invalid length. [ 330.809144][T18202] IPVS: using max 32 ests per chain, 76800 per kthread [ 330.882386][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.903698][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.916824][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3352'. [ 330.946347][ T9997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.957264][ T9997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.106690][T18223] ksmbd: Unknown IPC event: 3, ignore. [ 331.276373][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3359'. [ 331.371389][T18243] netlink: 'syz.4.3361': attribute type 12 has an invalid length. [ 331.486748][T18246] xt_CT: No such helper "snmp_trap" [ 331.698162][ T5831] Bluetooth: hci5: command tx timeout [ 332.241773][T18280] netlink: 'syz.1.3372': attribute type 2 has an invalid length. [ 332.259494][T18276] netlink: 'syz.2.3370': attribute type 4 has an invalid length. [ 332.264008][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'. [ 332.274528][T18276] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3370'. [ 332.288195][T18276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3370'. [ 332.300711][T18282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3373'. [ 332.309287][T18286] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3374'. [ 332.349186][T18282] bond1: option miimon: invalid value (18446744073709551585) [ 332.356840][T18282] bond1: option miimon: allowed values 0 - 2147483647 [ 332.381043][T18282] bond1 (unregistering): Released all slaves [ 332.649641][T18304] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20001 [ 332.795583][T18314] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3381'. [ 332.860473][T18314] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 332.921235][T18314] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 332.934793][T18314] gretap1: entered promiscuous mode [ 332.940806][T18314] gretap1: entered allmulticast mode [ 333.192191][T18336] vlan2: entered promiscuous mode [ 333.198487][T18336] bridge0: entered promiscuous mode [ 333.464005][T18355] netlink: 'syz.2.3393': attribute type 12 has an invalid length. [ 333.600345][T18361] tipc: Enabling of bearer rejected, media not registered [ 333.782023][ T5831] Bluetooth: hci5: command tx timeout [ 334.250973][T18409] pimreg: entered allmulticast mode [ 334.504054][T18423] team0: No ports can be present during mode change [ 334.689321][T18439] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20003 [ 335.127466][T17893] udevd[17893]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 335.152645][T17893] udevd[17893]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 335.412116][T18483] __nla_validate_parse: 13 callbacks suppressed [ 335.412134][T18483] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3435'. [ 335.428845][T18483] nbd: socks must be embedded in a SOCK_ITEM attr [ 335.494393][T18488] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 335.723372][T18511] netlink: 'syz.2.3445': attribute type 8 has an invalid length. [ 335.739327][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 335.791304][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3445'. [ 335.823782][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3446'. [ 335.825940][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3445'. [ 336.122949][T18535] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3452'. [ 336.133734][T18537] netlink: 'syz.3.3451': attribute type 15 has an invalid length. [ 336.168275][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3452'. [ 336.224081][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3453'. [ 336.365566][T18549] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3455'. [ 336.374741][T18552] netlink: 'syz.2.3455': attribute type 21 has an invalid length. [ 336.442097][T18555] ip6gretap1: entered allmulticast mode [ 336.645333][T18560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3459'. [ 337.120898][T18607] Bluetooth: MGMT ver 1.23 [ 337.186743][T18612] IPVS: ip_vs_add_dest(): server weight less than zero [ 337.201946][ T5895] IPVS: starting estimator thread 0... [ 337.234789][T18609] bond2: Unable to set down delay as MII monitoring is disabled [ 337.272273][T18609] bond2 (unregistering): Released all slaves [ 337.288301][T18613] IPVS: using max 25 ests per chain, 60000 per kthread [ 337.608396][T18638] x_tables: unsorted underflow at hook 2 [ 337.811935][T18648] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 337.843209][T18648] Cannot find set identified by id 0 to match [ 337.896482][T18654] netlink: 'syz.0.3485': attribute type 1 has an invalid length. [ 338.041958][T18663] ip6gre1: entered promiscuous mode [ 338.061786][T18654] bond1: (slave ip6gretap1): making interface the new active one [ 338.074715][T18654] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 338.125501][T18654] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 338.137214][T18654] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 338.362072][T18683] syzkaller1: entered promiscuous mode [ 338.381830][T18683] syzkaller1: entered allmulticast mode [ 338.510779][T18691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.640538][T18699] netlink: 'syz.1.3497': attribute type 3 has an invalid length. [ 338.648046][T18698] dvmrp0: entered allmulticast mode [ 338.654589][T18699] netlink: 'syz.1.3497': attribute type 19 has an invalid length. [ 338.675453][ T4420] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.685067][T18699] netlink: 'syz.1.3497': attribute type 19 has an invalid length. [ 338.694227][ T4420] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.704576][ T4420] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.715344][ T4420] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.866831][T18712] Cannot find set identified by id 65534 to match [ 339.103862][T18727] sctp: [Deprecated]: syz.3.3505 (pid 18727) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.103862][T18727] Use struct sctp_sack_info instead [ 339.126174][T18726] sctp: [Deprecated]: syz.3.3505 (pid 18726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.126174][T18726] Use struct sctp_sack_info instead [ 339.158821][T18726] sctp: [Deprecated]: syz.3.3505 (pid 18726) Use of int in max_burst socket option deprecated. [ 339.158821][T18726] Use struct sctp_assoc_value instead [ 339.362028][T18747] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 339.373751][T18747] netlink: 'syz.4.3510': attribute type 2 has an invalid length. [ 339.383266][T18747] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 339.551829][T18756] netlink: 'syz.4.3514': attribute type 13 has an invalid length. [ 339.631878][T18759] openvswitch: netlink: Missing key (keys=40, expected=80) [ 339.708673][T18762] ipt_rpfilter: unknown options [ 340.230158][T18802] bridge: RTM_NEWNEIGH with invalid ether address [ 340.284120][T18805] : entered promiscuous mode [ 340.495149][T18820] __nla_validate_parse: 18 callbacks suppressed [ 340.495168][T18820] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3533'. [ 340.512338][T18820] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3533'. [ 340.521621][T18820] netlink: 'syz.2.3533': attribute type 5 has an invalid length. [ 340.530975][T18820] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3533'. [ 340.701250][T18832] netlink: 'syz.1.3536': attribute type 1 has an invalid length. [ 340.739728][T18832] bond2: (slave gretap1): making interface the new active one [ 340.748694][T18832] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 340.766628][T18832] syzkaller1: entered promiscuous mode [ 340.772659][T18832] syzkaller1: entered allmulticast mode [ 340.822930][T18835] netlink: 'syz.3.3537': attribute type 1 has an invalid length. [ 340.975004][T18841] xt_l2tp: missing protocol rule (udp|l2tpip) [ 341.101081][T18854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3542'. [ 341.106081][T18856] syzkaller1: entered promiscuous mode [ 341.116545][T18856] syzkaller1: entered allmulticast mode [ 341.294625][T18861] lo speed is unknown, defaulting to 1000 [ 341.392883][T18877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3549'. [ 341.922506][T18904] xt_TCPMSS: Only works on TCP SYN packets [ 341.933610][T18906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3556'. [ 341.954820][T18907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3555'. [ 342.009753][T18913] xt_TPROXY: Can be used only with -p tcp or -p udp [ 342.081913][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3555'. [ 342.126444][T18907] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.390819][T18934] x_tables: duplicate underflow at hook 2 [ 342.544752][T18954] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3566'. [ 342.572909][T18954] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3566'. [ 343.143632][T18981] syzkaller0: entered promiscuous mode [ 343.149881][T18981] syzkaller0: entered allmulticast mode [ 343.353157][T18994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.868930][T19035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.903699][T19037] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 343.924865][T19037] bond2 (unregistering): Released all slaves [ 343.953561][T19043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 344.516078][T19052] bond2 (unregistering): Released all slaves [ 344.834437][T19079] validate_nla: 4 callbacks suppressed [ 344.834456][T19079] netlink: 'syz.0.3603': attribute type 1 has an invalid length. [ 345.282157][T19109] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 345.432458][T19121] netlink: 'syz.0.3613': attribute type 2 has an invalid length. [ 345.738987][T19140] __nla_validate_parse: 13 callbacks suppressed [ 345.739007][T19140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3619'. [ 345.762418][T19140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3619'. [ 345.998351][T19152] syzkaller0: entered promiscuous mode [ 346.012287][T19152] syzkaller0: entered allmulticast mode [ 346.108588][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3626'. [ 346.762232][T19199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3634'. [ 346.930090][T19211] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3638'. [ 346.958563][T19211] nbd: illegal input index -8454144 [ 347.818959][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3653'. [ 348.389214][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'. [ 348.412116][T19298] xt_hashlimit: size too large, truncated to 1048576 [ 349.092033][T19332] netlink: 'syz.0.3674': attribute type 13 has an invalid length. [ 349.466891][T19356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3679'. [ 349.654460][T19375] netlink: 'syz.0.3685': attribute type 1 has an invalid length. [ 349.725750][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3686'. [ 349.744399][T19386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3686'. [ 349.754595][T19367] pim6reg1: entered promiscuous mode [ 349.763358][T19367] pim6reg1: entered allmulticast mode [ 349.806712][T19381] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 349.835499][T19381] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 349.845975][T19381] bond2: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 349.972888][T19383] hsr_slave_0 (unregistering): left promiscuous mode [ 350.009700][T19394] openvswitch: netlink: Tunnel attr 148 out of range max 16 [ 350.151441][T19350] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 350.201256][T19404] bond3: Removing last ns target with arp_interval on [ 350.313380][T19409] netlink: 'syz.1.3695': attribute type 1 has an invalid length. [ 350.394990][T19413] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 350.444888][T19420] netlink: 'syz.2.3696': attribute type 12 has an invalid length. [ 350.795258][T19444] x_tables: duplicate underflow at hook 1 [ 350.827713][T19443] x_tables: duplicate underflow at hook 1 [ 350.901369][T19448] netlink: 'syz.4.3708': attribute type 1 has an invalid length. [ 350.965856][T19448] bond4: entered promiscuous mode [ 350.974408][T19448] 8021q: adding VLAN 0 to HW filter on device bond4 [ 351.024371][T19457] bond4: (slave bridge3): making interface the new active one [ 351.044877][T19457] bridge3: entered promiscuous mode [ 351.053453][T19457] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 351.093591][T19463] netlink: 'syz.1.3711': attribute type 12 has an invalid length. [ 351.106874][T19459] syzkaller1: entered promiscuous mode [ 351.115888][T19459] syzkaller1: entered allmulticast mode [ 351.344909][T19471] netlink: 'syz.0.3714': attribute type 29 has an invalid length. [ 351.367320][T19471] netlink: 'syz.0.3714': attribute type 29 has an invalid length. [ 351.382223][ T5831] Bluetooth: hci1: command 0x0401 tx timeout [ 351.398005][T19476] __nla_validate_parse: 6 callbacks suppressed [ 351.398024][T19476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3716'. [ 351.426628][T19477] netlink: 268 bytes leftover after parsing attributes in process `syz.0.3714'. [ 351.651818][T19498] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3723'. [ 351.975710][T19523] syzkaller0: entered promiscuous mode [ 351.988756][T19523] syzkaller0: entered allmulticast mode [ 352.121694][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3735'. [ 352.165305][T19540] netlink: 'syz.4.3736': attribute type 1 has an invalid length. [ 352.229608][T19540] bond5: (slave ip6gretap1): making interface the new active one [ 352.240145][T19540] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 352.330182][T19549] xt_hashlimit: size too large, truncated to 1048576 [ 352.355449][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3739'. [ 352.594093][T19563] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3742'. [ 353.025878][T19593] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 353.351738][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3759'. [ 353.496038][T19625] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3764'. [ 353.506605][T19626] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3764'. [ 353.550596][T19627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3762'. [ 353.588575][T19629] openvswitch: netlink: Key type 31 is not supported [ 354.038851][T19660] netlink: 'syz.0.3776': attribute type 21 has an invalid length. [ 354.046871][T19660] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 354.059484][T19660] netlink: 'syz.0.3776': attribute type 11 has an invalid length. [ 354.070012][T19660] netlink: 'syz.0.3776': attribute type 21 has an invalid length. [ 354.380371][T19675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.409982][T19678] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 354.464444][T19680] bond4: entered allmulticast mode [ 354.470460][T19680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.478255][T19680] bridge0: port 3(bond4) entered blocking state [ 354.484707][T19680] bridge0: port 3(bond4) entered disabled state [ 354.495509][T19680] bond4: entered promiscuous mode [ 354.502890][T19680] bridge0: port 3(bond4) entered blocking state [ 354.509270][T19680] bridge0: port 3(bond4) entered forwarding state [ 355.037363][T19703] bond2: option miimon: invalid value (18446744073709551585) [ 355.046061][T19703] bond2: option miimon: allowed values 0 - 2147483647 [ 355.060923][T19703] bond2 (unregistering): Released all slaves [ 355.178819][T13611] bridge0: port 3(bond4) entered disabled state [ 355.680385][T19757] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 355.683067][T19756] xt_recent: Unsupported userspace flags (000000b1) [ 355.736089][T19757] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 355.779106][T19766] tipc: Started in network mode [ 355.787106][T19766] tipc: Node identity 4a2070693d73, cluster identity 4711 [ 355.802911][T19766] tipc: Enabled bearer , priority 0 [ 355.850853][T19773] validate_nla: 2 callbacks suppressed [ 355.850873][T19773] netlink: 'syz.0.3806': attribute type 4 has an invalid length. [ 355.906312][T19773] netlink: 'syz.0.3806': attribute type 4 has an invalid length. [ 355.942508][T19776] netlink: 'syz.3.3807': attribute type 21 has an invalid length. [ 355.967756][T19776] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.005992][T19778] netlink: 'syz.2.3808': attribute type 1 has an invalid length. [ 356.019900][T19776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.027144][T19776] IPv6: NLM_F_CREATE should be set when creating new route [ 356.034462][T19776] IPv6: NLM_F_CREATE should be set when creating new route [ 356.041733][T19776] IPv6: NLM_F_CREATE should be set when creating new route [ 356.209422][T19773] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.216873][T19773] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.496944][T19773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.524830][T19773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.871999][T19755] tipc: Disabling bearer [ 356.940143][T13611] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.965691][T13611] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.024953][T13611] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.056583][T13611] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.370645][T19821] __nla_validate_parse: 14 callbacks suppressed [ 357.370665][T19821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3818'. [ 357.390061][T19819] netlink: 'syz.4.3817': attribute type 1 has an invalid length. [ 357.398140][T19819] netlink: 'syz.4.3817': attribute type 3 has an invalid length. [ 357.418260][T19819] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3817'. [ 357.437801][T19819] NCSI netlink: No device for ifindex 813332851 [ 357.819535][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3822'. [ 357.843374][T19836] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3820'. [ 357.932872][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3822'. [ 357.949980][T19850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3821'. [ 357.976651][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3822'. [ 359.200741][T19829] pimreg: entered allmulticast mode [ 359.340236][T19855] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 359.553903][T19870] xt_l2tp: missing protocol rule (udp|l2tpip) [ 360.084263][T19907] netlink: 'syz.2.3837': attribute type 4 has an invalid length. [ 360.093465][T19907] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3837'. [ 360.283297][T19913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3839'. [ 360.601129][T19921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3841'. [ 362.994848][T19924] netlink: 'syz.2.3842': attribute type 4 has an invalid length. [ 363.106322][T19926] bond6: option min_links: invalid value (18446744073709551614) [ 363.114466][T19926] bond6: option min_links: allowed values 0 - 2147483647 [ 363.146100][T19926] bond6 (unregistering): Released all slaves [ 363.205975][T19932] netlink: 'syz.0.3847': attribute type 1 has an invalid length. [ 363.264979][T19941] tipc: Enabled bearer , priority 0 [ 363.294612][T19941] syzkaller0: entered promiscuous mode [ 363.316588][T19941] syzkaller0: entered allmulticast mode [ 363.356223][T19941] xt_TCPMSS: Only works on TCP SYN packets [ 363.365618][T19941] tipc: Resetting bearer [ 363.382055][T19933] tipc: Resetting bearer [ 363.397338][ T5911] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 363.435159][ T5911] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 363.465826][T19954] Bluetooth: MGMT ver 1.23 [ 363.469474][ T5911] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 363.500091][ T5911] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 363.514675][ T5911] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 363.525695][ T5911] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 363.535748][T19933] tipc: Disabling bearer [ 363.559036][ T5911] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 363.590153][T19964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.621223][T19966] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 363.647643][T19966] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 363.679460][T19968] netlink: 'syz.2.3854': attribute type 21 has an invalid length. [ 363.697350][T19968] __nla_validate_parse: 1 callbacks suppressed [ 363.697369][T19968] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3854'. [ 363.734056][T19968] netlink: 'syz.2.3854': attribute type 5 has an invalid length. [ 363.771818][T19968] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3854'. [ 363.781905][T19976] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3854'. [ 363.793609][T19976] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.801340][T19976] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.065309][T19997] syzkaller0: entered promiscuous mode [ 364.084067][T19997] syzkaller0: entered allmulticast mode [ 364.296009][T20003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3865'. [ 364.423501][T20016] netlink: 'syz.1.3868': attribute type 1 has an invalid length. [ 364.640804][T20016] 8021q: adding VLAN 0 to HW filter on device bond5 [ 364.779653][T20041] xt_hashlimit: size too large, truncated to 1048576 [ 364.839159][T20049] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3875'. [ 365.226737][T20074] netlink: 'syz.1.3880': attribute type 1 has an invalid length. [ 365.385216][T20083] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 365.468490][T20082] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 365.641193][T20101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3886'. [ 365.660140][T20099] netlink: 'syz.0.3885': attribute type 16 has an invalid length. [ 365.668586][T20098] netlink: 'syz.0.3885': attribute type 16 has an invalid length. [ 365.680483][T20098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3885'. [ 365.725971][T20099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3885'. [ 366.457148][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'. [ 366.694051][T20160] can: request_module (can-proto-0) failed. [ 366.703823][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3900'. [ 366.869885][T20175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.905145][T20177] batman_adv: batadv0: Adding interface: dummy0 [ 366.914019][T20177] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.940286][T20177] batman_adv: batadv0: Interface activated: dummy0 [ 366.986639][T20180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.029127][T20180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.052911][T20180] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 367.099737][T20180] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 367.300763][T20189] syzkaller0: entered promiscuous mode [ 367.306280][T20189] syzkaller0: entered allmulticast mode [ 367.431969][T20196] tipc: Enabled bearer , priority 0 [ 367.444199][T20196] syzkaller0: entered promiscuous mode [ 367.450748][T20196] syzkaller0: entered allmulticast mode [ 367.467169][T20195] tipc: Resetting bearer [ 367.518520][T20195] tipc: Disabling bearer [ 367.565200][T20203] netlink: 'syz.0.3916': attribute type 1 has an invalid length. [ 368.400155][ T5831] block nbd2: Receive control failed (result -32) [ 368.561994][T20244] netlink: 'syz.0.3925': attribute type 11 has an invalid length. [ 368.591054][T20252] netlink: 'syz.0.3925': attribute type 11 has an invalid length. [ 368.593357][T20246] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.704488][T13608] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.707216][T20258] __nla_validate_parse: 5 callbacks suppressed [ 368.707234][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3928'. [ 368.716238][T13608] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.765891][T20246] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.837874][T13608] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.846627][T13608] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.866534][T20263] openvswitch: netlink: Message has 592 unknown bytes. [ 368.874321][T20263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.896034][T20246] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.962133][T20270] netlink: 'syz.0.3932': attribute type 1 has an invalid length. [ 369.001087][T20273] netlink: 'syz.2.3933': attribute type 1 has an invalid length. [ 369.024120][T20275] 8021q: VLANs not supported on wg0 [ 369.041849][T20280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3932'. [ 369.058819][T20281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3933'. [ 369.092273][T20273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 369.094755][T20270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3932'. [ 369.116785][T20246] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.166152][T20273] veth3: entered promiscuous mode [ 369.174059][T20281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3933'. [ 369.180202][T20273] bond3: (slave veth3): Enslaving as an active interface with a down link [ 369.347138][T13108] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.380757][T13108] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.400550][T13108] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.448689][ T9997] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.491766][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3942'. [ 369.534472][T20307] netlink: 'syz.2.3941': attribute type 4 has an invalid length. [ 369.664884][T20322] IPv4: Oversized IP packet from 127.202.26.0 [ 369.972555][T20333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3946'. [ 370.209351][T20346] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3951'. [ 370.346831][T20362] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3957'. [ 370.395274][T20365] netem: unknown loss type 0 [ 370.442433][T20365] netem: change failed [ 370.534089][T20379] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 370.584817][T20379] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 370.626838][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3966'. [ 370.885364][T20404] netlink: 'syz.2.3970': attribute type 10 has an invalid length. [ 371.020778][T20404] team0: Port device geneve0 added [ 371.378092][T20441] lo: Caught tx_queue_len zero misconfig [ 371.767090][T20474] dvmrp6: entered allmulticast mode [ 372.165985][T20495] lo speed is unknown, defaulting to 1000 [ 372.298569][T20503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.582562][T20505] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.589901][T20505] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 372.603154][T20505] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 372.841025][T20518] syzkaller1: entered promiscuous mode [ 372.848437][T20518] syzkaller1: entered allmulticast mode [ 372.979917][T20536] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 372.989603][T20536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.005579][ T30] audit: type=1800 audit(1764523362.589:3): pid=20536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4007" name="memory.events" dev="tmpfs" ino=1293 res=0 errno=0 [ 373.031632][ T30] audit: type=1804 audit(1764523362.609:4): pid=20536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4007" name="/newroot/251/memory.events" dev="tmpfs" ino=1293 res=1 errno=0 [ 373.127401][T20536] ip6tnl0: Caught tx_queue_len zero misconfig [ 373.224204][T20543] sctp: [Deprecated]: syz.4.4009 (pid 20543) Use of int in maxseg socket option. [ 373.224204][T20543] Use struct sctp_assoc_value instead [ 373.859235][T20559] SET target dimension over the limit! [ 373.948579][T20573] __nla_validate_parse: 10 callbacks suppressed [ 373.948600][T20573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4015'. [ 374.110233][T20580] sctp: [Deprecated]: syz.3.4018 (pid 20580) Use of int in max_burst socket option. [ 374.110233][T20580] Use struct sctp_assoc_value instead [ 374.129159][T20577] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 374.148663][T20577] bond4: (slave lo): Enslaving as a backup interface with an up link [ 374.157345][T20577] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 374.260993][T20588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4022'. [ 374.369027][T20598] netlink: 'syz.3.4023': attribute type 10 has an invalid length. [ 374.376998][T20598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4023'. [ 374.425453][T20577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4017'. [ 374.436923][T20577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4017'. [ 374.447031][T20577] netlink: 'syz.0.4017': attribute type 3 has an invalid length. [ 374.535293][T20606] --map-set only usable from mangle table [ 374.586442][T20609] xt_hashlimit: size too large, truncated to 1048576 [ 374.620040][T20598] team0: Port device geneve0 added [ 374.916992][T20624] lo: Caught tx_queue_len zero misconfig [ 375.020505][T20627] bond5: option all_slaves_active: invalid value (222) [ 375.035095][T20627] bond5 (unregistering): Released all slaves [ 375.176211][T20638] bond5: option all_slaves_active: invalid value (222) [ 375.223683][T20638] bond5 (unregistering): Released all slaves [ 375.298743][T20633] netlink: 'syz.0.4035': attribute type 9 has an invalid length. [ 375.407274][T20662] syzkaller1: entered promiscuous mode [ 375.413803][T20662] syzkaller1: entered allmulticast mode [ 375.576209][T20676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4040'. [ 375.594753][T20676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4040'. [ 375.614059][T20676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4040'. [ 375.695423][T20684] netlink: 'syz.0.4043': attribute type 12 has an invalid length. [ 375.792591][T20690] netlink: 'syz.1.4047': attribute type 1 has an invalid length. [ 375.844530][T20690] netlink: 'syz.1.4047': attribute type 1 has an invalid length. [ 375.866986][T20684] bond5: option primary_reselect: invalid value (255) [ 375.883150][T20684] bond5 (unregistering): Released all slaves [ 375.936525][T20692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4047'. [ 375.964064][T20692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4047'. [ 376.578678][T20737] nftables ruleset with unbound chain [ 376.846198][T20751] netlink: 'syz.2.4064': attribute type 21 has an invalid length. [ 377.277274][T20781] tipc: Cannot configure node identity twice [ 377.317046][ T24] IPVS: starting estimator thread 0... [ 377.418674][T20785] IPVS: using max 30 ests per chain, 72000 per kthread [ 377.463554][T20792] netlink: 'syz.4.4082': attribute type 83 has an invalid length. [ 377.480922][T20792] netlink: 'syz.4.4082': attribute type 9 has an invalid length. [ 377.781313][T20815] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 377.795838][T20815] bond5 (unregistering): Released all slaves [ 378.496446][T20864] netlink: 'syz.0.4103': attribute type 3 has an invalid length. [ 378.593460][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.625766][T20868] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 378.640163][T20868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.969596][T20889] __nla_validate_parse: 71 callbacks suppressed [ 378.969615][T20889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4115'. [ 379.194837][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4118'. [ 379.224096][T20910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4119'. [ 379.270594][T20913] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4121'. [ 379.308410][T20913] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 379.319885][T20910] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4119'. [ 379.323282][T20917] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4121'. [ 379.357742][T20917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4121'. [ 379.371160][T20913] 0ªî{X¹¦: entered allmulticast mode [ 379.379983][T20913] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 379.471784][T20927] validate_nla: 2 callbacks suppressed [ 379.471803][T20927] netlink: 'syz.3.4124': attribute type 16 has an invalid length. [ 379.501466][T20927] netlink: 'syz.3.4124': attribute type 17 has an invalid length. [ 379.595444][T20927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.653370][T20932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4125'. [ 379.735756][T20948] netlink: 'syz.1.4127': attribute type 12 has an invalid length. [ 380.005200][T20968] netlink: 'syz.0.4134': attribute type 4 has an invalid length. [ 380.048542][T20968] netlink: 'syz.0.4134': attribute type 4 has an invalid length. [ 380.051702][T20974] tipc: Enabling of bearer rejected, failed to enable media [ 380.203772][T20978] syzkaller1: entered promiscuous mode [ 380.230925][T20978] syzkaller1: entered allmulticast mode [ 380.265039][T20984] netlink: 'syz.3.4138': attribute type 1 has an invalid length. [ 380.309245][T20984] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 380.343284][T20987] gtp0: entered promiscuous mode [ 380.354510][T20987] gtp0: entered allmulticast mode [ 380.377044][T20987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4140'. [ 380.624193][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'. [ 380.644988][T21007] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 382.911425][T21068] sctp: [Deprecated]: syz.0.4161 (pid 21068) Use of int in maxseg socket option. [ 382.911425][T21068] Use struct sctp_assoc_value instead [ 383.019264][T21070] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 383.219518][T21088] IPv6: addrconf: prefix option has invalid lifetime [ 383.406526][T21100] team0: Caught tx_queue_len zero misconfig [ 383.483494][T21108] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 383.755403][T21134] netlink: 'syz.1.4182': attribute type 1 has an invalid length. [ 384.203153][T21155] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 384.227914][T21155] syzkaller1: linktype set to 822 [ 384.358299][T21162] __nla_validate_parse: 8 callbacks suppressed [ 384.358321][T21162] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4189'. [ 384.426003][T21167] openvswitch: netlink: Message has 4 unknown bytes. [ 384.675556][T21181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4198'. [ 384.721492][T21187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4195'. [ 384.738786][T21188] xt_CONNSECMARK: invalid mode: 0 [ 384.875014][T21197] ip6gre2: entered allmulticast mode [ 384.889218][T21200] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 385.145823][T21200] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.153555][T21200] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.158536][T21217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4210'. [ 385.173155][T21221] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4209'. [ 385.230336][T21200] bridge_slave_0: left allmulticast mode [ 385.236081][T21200] bridge_slave_0: left promiscuous mode [ 385.245298][T21200] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.265650][T21227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4208'. [ 385.267018][T21200] bridge_slave_1: left allmulticast mode [ 385.281894][T21200] bridge_slave_1: left promiscuous mode [ 385.287843][T21200] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.306745][T21200] bond0: (slave bond_slave_0): Releasing backup interface [ 385.325188][T21200] bond0: (slave bond_slave_1): Releasing backup interface [ 385.349801][T21200] team0: Port device team_slave_0 removed [ 385.363110][T21200] team0: Port device team_slave_1 removed [ 385.373760][T21200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.387092][T21200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.403903][T21200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.418968][T21200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.434695][T21200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 385.665148][T21239] netlink: 'syz.4.4215': attribute type 1 has an invalid length. [ 385.702721][T21240] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4214'. [ 385.714803][T21239] bond6: entered promiscuous mode [ 385.729389][T21239] 8021q: adding VLAN 0 to HW filter on device bond6 [ 385.758562][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4216'. [ 385.761047][T21252] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.807136][T13611] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 385.819767][T21239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4215'. [ 385.840343][T21239] bond6: entered allmulticast mode [ 385.849847][T21250] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 385.871314][T21239] bond6: (slave bridge5): making interface the new active one [ 385.879626][T21239] bridge5: entered promiscuous mode [ 385.884954][T21239] bridge5: entered allmulticast mode [ 385.892381][T21239] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 385.904325][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4216'. [ 386.006306][T21258] sctp: [Deprecated]: syz.3.4220 (pid 21258) Use of int in maxseg socket option. [ 386.006306][T21258] Use struct sctp_assoc_value instead [ 386.166195][T21264] lo speed is unknown, defaulting to 1000 [ 386.467170][T21287] syzkaller1: entered promiscuous mode [ 386.480796][T21287] syzkaller1: entered allmulticast mode [ 386.701390][T21302] netlink: 'syz.1.4232': attribute type 1 has an invalid length. [ 387.013509][T21314] bond6 (unregistering): Released all slaves [ 387.283372][T21332] tipc: Started in network mode [ 387.299928][T21332] tipc: Node identity ae361a82ea29, cluster identity 4711 [ 387.333436][T21332] tipc: Enabled bearer , priority 0 [ 387.376820][T21331] syzkaller0: MTU too low for tipc bearer [ 387.411007][T21331] tipc: Disabling bearer [ 387.736139][T21365] netlink: 'syz.0.4251': attribute type 1 has an invalid length. [ 387.796110][T21364] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 387.852645][T21365] bond5: entered promiscuous mode [ 387.907478][T21365] 8021q: adding VLAN 0 to HW filter on device bond5 [ 387.932790][T21380] Bluetooth: MGMT ver 1.23 [ 388.129875][T21394] pim6reg1: entered promiscuous mode [ 388.135203][T21394] pim6reg1: entered allmulticast mode [ 388.143511][T21394] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 389.180039][T21437] xt_addrtype: ipv6 does not support BROADCAST matching [ 389.262866][T21442] nbd: socks must be embedded in a SOCK_ITEM attr [ 389.313137][T21445] netlink: 'syz.2.4275': attribute type 1 has an invalid length. [ 389.334859][T21447] netlink: 'syz.3.4274': attribute type 62 has an invalid length. [ 389.475428][T21447] netlink: 'syz.3.4274': attribute type 32 has an invalid length. [ 389.484952][T21447] __nla_validate_parse: 13 callbacks suppressed [ 389.484969][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4274'. [ 389.524787][T21444] 8021q: adding VLAN 0 to HW filter on device bond5 [ 389.543397][T21444] bond4: (slave bond5): making interface the new active one [ 389.552008][T21444] bond4: (slave bond5): Enslaving as an active interface with an up link [ 389.580418][T21460] bond4: (slave gretap0): Enslaving as a backup interface with an up link [ 389.623424][T21447] bond6: option coupled_control: invalid value (52) [ 389.634952][T21447] bond6 (unregistering): Released all slaves [ 389.676634][T21474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4281'. [ 389.717332][T21473] bridge3: entered promiscuous mode [ 389.758538][T21473] bridge3: entered allmulticast mode [ 390.130576][T21506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4292'. [ 390.285873][T21514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4292'. [ 390.288730][T21513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4295'. [ 390.330637][T21513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4295'. [ 390.925187][T21545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4302'. [ 390.960771][T21552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4304'. [ 391.330761][T21574] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4310'. [ 391.382272][T21574] bond8: (slave gre0): Device is not bonding slave [ 391.389177][T21574] bond8: option active_slave: invalid value (gre0) [ 391.412522][T21574] bond8 (unregistering): Released all slaves [ 391.692384][T21599] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4315'. [ 391.722011][T21607] sit0: entered promiscuous mode [ 391.727312][T21607] netlink: 'syz.0.4318': attribute type 1 has an invalid length. [ 391.947838][T21608] "syz.1.4317" (21608) uses obsolete ecb(arc4) skcipher [ 392.045566][T21632] netlink: 'syz.4.4324': attribute type 1 has an invalid length. [ 392.095808][T21632] 8021q: adding VLAN 0 to HW filter on device bond7 [ 392.129354][T21632] bond7: (slave veth13): Enslaving as an active interface with a down link [ 392.183073][T21632] vlan2: entered allmulticast mode [ 392.203266][T21632] veth1: entered allmulticast mode [ 392.214172][T21632] veth1: entered promiscuous mode [ 392.233776][T21632] veth1: left promiscuous mode [ 392.249919][T21632] bond7: (slave vlan2): making interface the new active one [ 392.268385][T21632] veth1: entered promiscuous mode [ 392.293039][T21632] vlan2: entered promiscuous mode [ 392.310287][T21632] bond7: (slave vlan2): Enslaving as an active interface with an up link [ 392.490342][T21662] netlink: 'syz.3.4330': attribute type 15 has an invalid length. [ 392.535158][T21666] netlink: 'syz.4.4331': attribute type 12 has an invalid length. [ 392.636639][T21665] can: request_module (can-proto-0) failed. [ 392.885104][T21688] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.269961][T21709] netlink: 'syz.4.4345': attribute type 1 has an invalid length. [ 393.361330][T21715] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 393.393353][T21716] vlan3: entered promiscuous mode [ 393.399973][T21716] vlan3: entered allmulticast mode [ 393.405129][T21716] hsr_slave_1: entered allmulticast mode [ 393.566013][T21724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.149701][T21768] netlink: 'syz.4.4363': attribute type 10 has an invalid length. [ 394.316117][T21776] netlink: 'syz.1.4365': attribute type 10 has an invalid length. [ 394.327448][T21777] netlink: 'syz.1.4365': attribute type 10 has an invalid length. [ 394.391506][T21781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.860755][T21803] __nla_validate_parse: 13 callbacks suppressed [ 394.860773][T21803] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4372'. [ 394.863679][T21804] IPVS: length: 201 != 24 [ 394.890942][T21799] netlink: 'syz.0.4371': attribute type 27 has an invalid length. [ 394.899668][T21799] netlink: 'syz.0.4371': attribute type 4 has an invalid length. [ 394.918265][T21799] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4371'. [ 395.537365][T21854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4389'. [ 396.013853][T21883] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4397'. [ 396.050569][T21888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4398'. [ 396.071401][T21883] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4397'. [ 396.071836][T21888] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 396.212967][T21902] bond6 (unregistering): Released all slaves [ 396.401893][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4403'. [ 396.425525][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4403'. [ 396.562538][T21919] netlink: 212176 bytes leftover after parsing attributes in process `syz.0.4406'. [ 396.680444][T21924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4410'. [ 396.751351][T21929] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 396.949060][T21953] ip6tnl0: Caught tx_queue_len zero misconfig [ 396.986993][T21954] validate_nla: 1 callbacks suppressed [ 396.987010][T21954] netlink: 'syz.0.4420': attribute type 2 has an invalid length. [ 397.035591][T21953] netlink: 'syz.0.4420': attribute type 1 has an invalid length. [ 397.044385][T21953] NCSI netlink: No device for ifindex 0 [ 397.096446][T21954] : entered promiscuous mode [ 397.223734][T21976] netlink: 'syz.4.4425': attribute type 2 has an invalid length. [ 397.577276][T22002] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 397.613587][T22002] bond6 (unregistering): Released all slaves [ 397.672898][T22005] netlink: 'syz.3.4436': attribute type 4 has an invalid length. [ 397.806760][T22016] dvmrp0: entered allmulticast mode [ 397.826382][T22016] dvmrp0: left allmulticast mode [ 398.042271][T22033] veth1_to_bridge: entered allmulticast mode [ 398.091725][T22033] xt_l2tp: unknown flags: 10 [ 398.136093][T22040] netlink: 'syz.1.4449': attribute type 1 has an invalid length. [ 398.278442][T22047] bond8: (slave geneve2): making interface the new active one [ 398.286778][T22047] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 398.324625][ T9997] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 398.338662][T13108] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 398.348669][T13108] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 398.394355][T13108] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 398.457337][T22058] netlink: 'syz.3.4454': attribute type 4 has an invalid length. [ 398.459419][T22059] netlink: 'syz.1.4452': attribute type 29 has an invalid length. [ 398.486820][T22058] `: renamed from bond0 [ 398.544527][T22059] netlink: 'syz.1.4452': attribute type 29 has an invalid length. [ 398.850376][T22089] 8021q: VLANs not supported on ip_vti0 [ 399.062703][T22107] netlink: 'syz.4.4469': attribute type 10 has an invalid length. [ 399.074927][T22106] netlink: 'syz.1.4465': attribute type 1 has an invalid length. [ 399.086038][T22107] team0: Port device 0! removed [ 399.112443][T22107] bond0: (slave 0!): Enslaving as an active interface with an up link [ 399.261475][T22125] pim6reg527: entered allmulticast mode [ 399.720568][T22157] tipc: Enabled bearer , priority 0 [ 399.728671][T22157] syzkaller0: entered promiscuous mode [ 399.734328][T22157] syzkaller0: entered allmulticast mode [ 399.756226][T22157] tipc: Resetting bearer [ 399.780893][T22152] tipc: Resetting bearer [ 399.851196][T22152] tipc: Disabling bearer [ 399.881600][T22158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.906834][T22165] vlan2: entered promiscuous mode [ 399.912898][T22165] bridge0: entered promiscuous mode [ 400.083115][T22176] x_tables: duplicate underflow at hook 1 [ 400.423330][T22198] __nla_validate_parse: 17 callbacks suppressed [ 400.423349][T22198] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4494'. [ 400.574128][T22208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4497'. [ 400.764223][T22229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4503'. [ 400.911279][T22234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4504'. [ 400.923563][T22234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4504'. [ 401.131345][T22247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4508'. [ 401.190539][T22242] bond0: entered promiscuous mode [ 401.196181][T22242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.246374][T22254] bond0: (slave bridge6): making interface the new active one [ 401.254622][T22254] bridge6: entered promiscuous mode [ 401.261743][T22254] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 401.294257][T22247] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 401.340042][T22247] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4508'. [ 401.363591][T22263] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 401.428421][T22262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4510'. [ 401.551228][T22270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4513'. [ 401.672963][T22274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4515'. [ 401.692559][T22274] erspan0: entered promiscuous mode [ 401.703642][T22274] batadv_slave_1: entered promiscuous mode [ 401.710876][T22274] batadv_slave_1: left promiscuous mode [ 401.717373][T22274] erspan0: left promiscuous mode [ 402.081048][T22308] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 402.220574][T22325] validate_nla: 4 callbacks suppressed [ 402.220593][T22325] netlink: 'syz.1.4529': attribute type 1 has an invalid length. [ 402.299392][T22325] 8021q: adding VLAN 0 to HW filter on device bond10 [ 402.312504][T22325] bond9: (slave bond10): making interface the new active one [ 402.321739][T22325] bond9: (slave bond10): Enslaving as an active interface with an up link [ 402.341658][T22333] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 402.355494][T22333] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 402.505644][T22341] netlink: 'syz.1.4531': attribute type 1 has an invalid length. [ 403.213457][T22367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.249403][T22371] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 403.339979][ T44] vlan2: left promiscuous mode [ 403.479407][T22393] syz.3.4545: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 403.541482][T22393] CPU: 0 UID: 0 PID: 22393 Comm: syz.3.4545 Not tainted syzkaller #0 PREEMPT(full) [ 403.541510][T22393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.541527][T22393] Call Trace: [ 403.541535][T22393] [ 403.541543][T22393] dump_stack_lvl+0x189/0x250 [ 403.541575][T22393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.541598][T22393] ? __pfx__printk+0x10/0x10 [ 403.541615][T22393] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 403.541638][T22393] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 403.541662][T22393] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 403.541688][T22393] warn_alloc+0x214/0x310 [ 403.541712][T22393] ? stack_depot_save_flags+0x40/0x860 [ 403.541740][T22393] ? __pfx_warn_alloc+0x10/0x10 [ 403.541766][T22393] ? kasan_save_track+0x3e/0x80 [ 403.541787][T22393] ? __kasan_kmalloc+0x93/0xb0 [ 403.541810][T22393] ? xsk_setsockopt+0x4dc/0x8d0 [ 403.541829][T22393] ? do_sock_setsockopt+0x17c/0x1b0 [ 403.541846][T22393] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 403.541862][T22393] ? do_syscall_64+0xfa/0xfa0 [ 403.541883][T22393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.541911][T22393] __vmalloc_node_range_noprof+0x125/0x12d0 [ 403.541966][T22393] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 403.542000][T22393] ? __kasan_kmalloc+0x93/0xb0 [ 403.542029][T22393] vmalloc_user_noprof+0xad/0xf0 [ 403.542053][T22393] ? xskq_create+0xbf/0x170 [ 403.542076][T22393] xskq_create+0xbf/0x170 [ 403.542100][T22393] xsk_init_queue+0xb0/0x110 [ 403.542125][T22393] xsk_setsockopt+0x4dc/0x8d0 [ 403.542149][T22393] ? __pfx_xsk_setsockopt+0x10/0x10 [ 403.542174][T22393] ? __pfx_aa_sk_perm+0x10/0x10 [ 403.542199][T22393] ? aa_sock_opt_perm+0xff/0x1b0 [ 403.542227][T22393] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 403.542243][T22393] ? __pfx_xsk_setsockopt+0x10/0x10 [ 403.542266][T22393] do_sock_setsockopt+0x17c/0x1b0 [ 403.542290][T22393] __x64_sys_setsockopt+0x13f/0x1b0 [ 403.542314][T22393] do_syscall_64+0xfa/0xfa0 [ 403.542335][T22393] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.542358][T22393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.542374][T22393] ? clear_bhb_loop+0x60/0xb0 [ 403.542396][T22393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.542416][T22393] RIP: 0033:0x7fc80198f749 [ 403.542438][T22393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.542454][T22393] RSP: 002b:00007fc8027ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 403.542473][T22393] RAX: ffffffffffffffda RBX: 00007fc801be5fa0 RCX: 00007fc80198f749 [ 403.542486][T22393] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 403.542497][T22393] RBP: 00007fc801a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 403.542508][T22393] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.542520][T22393] R13: 00007fc801be6038 R14: 00007fc801be5fa0 R15: 00007ffc475819b8 [ 403.542552][T22393] [ 403.542563][T22393] Mem-Info: [ 403.554123][T22391] bridge4: entered promiscuous mode [ 403.582634][T22393] active_anon:4374 inactive_anon:0 isolated_anon:0 [ 403.582634][T22393] active_file:2820 inactive_file:40014 isolated_file:0 [ 403.582634][T22393] unevictable:768 dirty:65 writeback:0 [ 403.582634][T22393] slab_reclaimable:12908 slab_unreclaimable:119860 [ 403.582634][T22393] mapped:28929 shmem:1379 pagetables:1011 [ 403.582634][T22393] sec_pagetables:0 bounce:0 [ 403.582634][T22393] kernel_misc_reclaimable:0 [ 403.582634][T22393] free:1300679 free_pcp:12482 free_cma:0 [ 403.613150][T22391] bridge4: entered allmulticast mode [ 403.673149][T22393] Node 0 active_anon:18996kB inactive_anon:0kB active_file:11280kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115716kB dirty:260kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15512kB pagetables:3916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 403.677126][T22391] team0: Port device bridge4 added [ 403.680216][T22393] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 403.985064][T22393] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.018859][T22393] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 404.024661][T22393] Node 0 DMA32 free:1292124kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18992kB inactive_anon:0kB active_file:11280kB inactive_file:159856kB unevictable:1536kB writepending:260kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:32524kB local_pcp:11328kB free_cma:0kB [ 404.059731][T22393] lowmem_reserve[]: 0 0 0 0 0 [ 404.064503][T22393] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.095423][T22393] lowmem_reserve[]: 0 0 0 0 0 [ 404.100430][T22393] Node 1 Normal free:3893508kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17376kB local_pcp:10432kB free_cma:0kB [ 404.134244][T22393] lowmem_reserve[]: 0 0 0 0 0 [ 404.139369][T22393] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 404.140056][T22403] bridge0: port 3(team0) entered blocking state [ 404.154727][T22393] Node 0 DMA32: 1254*4kB (UM) 905*8kB (UME) 375*16kB (UM) 284*32kB (UME) 147*64kB (UME) 58*128kB (UME) 23*256kB (UM) 12*512kB (UME) 49*1024kB (UME) 5*2048kB (UME) 287*4096kB (M) = 1292176kB [ 404.161677][T22403] bridge0: port 3(team0) entered disabled state [ 404.187142][T22393] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 404.187486][T22403] team0: entered allmulticast mode [ 404.201712][T22393] Node 1 Normal: 199*4kB (UE) 57*8kB (UME) 52*16kB (UME) 111*32kB (UME) 32*64kB (UME) 8*128kB (UME) 3*256kB (ME) 2*512kB (M) 2*1024kB (ME) 3*2048kB (UE) 946*4096kB (M) = 3893508kB [ 404.223462][T22393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.232681][T22403] team_slave_0: entered allmulticast mode [ 404.233775][T22393] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 404.247715][T22403] team_slave_1: entered allmulticast mode [ 404.249688][T22393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.265900][T22393] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 404.275436][T22393] 44210 total pagecache pages [ 404.281515][T22393] 0 pages in swap cache [ 404.282398][T22403] team0: entered promiscuous mode [ 404.291534][T22393] Free swap = 124996kB [ 404.295704][T22393] Total swap = 124996kB [ 404.302842][T22393] 2097051 pages RAM [ 404.306974][T22393] 0 pages HighMem/MovableOnly [ 404.311976][T22393] 424124 pages reserved [ 404.316486][T22393] 0 pages cma reserved [ 404.317225][T22403] team_slave_0: entered promiscuous mode [ 404.323392][T22403] team_slave_1: entered promiscuous mode [ 404.466154][T22410] netlink: 'syz.4.4550': attribute type 4 has an invalid length. [ 404.990673][T22451] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.020170][T22451] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.028512][T22451] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.050926][T22451] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.272935][T22469] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 405.529587][T22482] __nla_validate_parse: 8 callbacks suppressed [ 405.529606][T22482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4571'. [ 405.553897][T22485] netlink: 'syz.2.4572': attribute type 1 has an invalid length. [ 405.563311][T22485] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4572'. [ 405.573455][T22485] NCSI netlink: No device for ifindex 0 [ 405.846993][T22509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4578'. [ 405.877506][T22506] syzkaller0: entered promiscuous mode [ 405.883876][T22506] syzkaller0: entered allmulticast mode [ 405.979457][T22513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4580'. [ 406.030381][T22519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4579'. [ 406.079469][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4582'. [ 406.089942][T22526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4583'. [ 406.103184][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4582'. [ 406.116830][T22522] netlink: zone id is out of range [ 406.123239][T22522] netlink: zone id is out of range [ 406.129404][T22522] netlink: zone id is out of range [ 406.134815][T22522] netlink: get zone limit has 4 unknown bytes [ 406.334198][T22537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4587'. [ 406.386800][T22538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4587'. [ 406.410490][T22546] netlink: 'syz.3.4589': attribute type 4 has an invalid length. [ 406.942390][T22583] netlink: 'syz.3.4600': attribute type 6 has an invalid length. [ 406.963413][T22585] syzkaller1: entered promiscuous mode [ 406.973035][T22585] syzkaller1: entered allmulticast mode [ 407.136419][T22591] bond8: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 407.150887][T22591] bond8 (unregistering): Released all slaves [ 407.471750][T22613] netlink: 'syz.3.4612': attribute type 1 has an invalid length. [ 407.752799][T22634] syzkaller1: entered promiscuous mode [ 407.758585][T22634] syzkaller1: entered allmulticast mode [ 407.961443][T13611] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 408.126789][T22668] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 408.935725][T22702] vlan2: entered allmulticast mode [ 409.191791][T22715] syzkaller1: entered promiscuous mode [ 409.211362][T22715] syzkaller1: entered allmulticast mode [ 410.150040][T22769] lo speed is unknown, defaulting to 1000 [ 410.431893][T22785] netlink: 'syz.4.4664': attribute type 4 has an invalid length. [ 410.440876][T22785] netlink: 'syz.4.4664': attribute type 4 has an invalid length. [ 410.888701][T22794] __nla_validate_parse: 21 callbacks suppressed [ 410.888720][T22794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4668'. [ 411.045641][T22811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4671'. [ 411.183519][T22816] x_tables: duplicate underflow at hook 1 [ 411.290858][T22826] tipc: Started in network mode [ 411.296405][T22826] tipc: Node identity d2ca68653d9f, cluster identity 4711 [ 411.309227][T22826] tipc: Enabled bearer , priority 0 [ 411.369089][T22826] syzkaller0: entered promiscuous mode [ 411.374918][T22826] syzkaller0: entered allmulticast mode [ 411.385396][T22830] C: renamed from team_slave_0 (while UP) [ 411.407070][T22830] netlink: 'syz.2.4679': attribute type 1 has an invalid length. [ 411.418445][T22830] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 411.464389][T22837] xfrm1: entered allmulticast mode [ 411.482013][T22826] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 411.502730][T22838] tipc: Enabling of bearer rejected, failed to enable media [ 411.521803][T22826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4676'. [ 411.567022][T22820] tipc: Resetting bearer [ 411.618815][T22820] tipc: Disabling bearer [ 411.751205][T22853] netlink: 'syz.1.4684': attribute type 83 has an invalid length. [ 411.762621][T22855] sctp: [Deprecated]: syz.3.4686 (pid 22855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.762621][T22855] Use struct sctp_sack_info instead [ 411.804475][T22853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4684'. [ 411.825289][T22858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4688'. [ 411.837835][T22858] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4688'. [ 411.848688][T22858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4688'. [ 411.999706][T22865] pimreg: left allmulticast mode [ 412.580356][T22896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4700'. [ 412.797404][T22910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.923358][T22917] syzkaller0: entered promiscuous mode [ 412.936065][T22917] syzkaller0: entered allmulticast mode [ 412.975070][T22923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4710'. [ 412.978374][T22919] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4707'. [ 413.008245][T22917] tipc: Enabled bearer , priority 0 [ 413.028364][T22916] tipc: Resetting bearer [ 413.091971][T22916] tipc: Disabling bearer [ 413.335163][T22942] netlink: 'syz.0.4717': attribute type 30 has an invalid length. [ 413.520587][T22947] netlink: 'syz.4.4718': attribute type 10 has an invalid length. [ 413.958740][T22928] delete_channel: no stack [ 414.070641][T22988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.077919][T22988] IPv6: NLM_F_CREATE should be set when creating new route [ 414.085178][T22988] IPv6: NLM_F_CREATE should be set when creating new route [ 414.092441][T22988] IPv6: NLM_F_CREATE should be set when creating new route [ 414.135719][T22998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.223295][T23001] x_tables: duplicate underflow at hook 1 [ 414.286889][T23003] netlink: 'syz.1.4737': attribute type 4 has an invalid length. [ 414.320805][T23005] netlink: 'syz.3.4736': attribute type 8 has an invalid length. [ 414.773458][T23034] openvswitch: netlink: IP tunnel dst address not specified [ 414.794581][T23036] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 414.808639][T23036] bond6 (unregistering): Released all slaves [ 414.931778][T23042] mac80211_hwsim hwsim37 ÿ: renamed from wlan1 (while UP) [ 415.434366][T23074] xt_limit: Overflow, try lower: 604147548/4200216962 [ 415.979148][T23111] __nla_validate_parse: 9 callbacks suppressed [ 415.979166][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4764'. [ 415.995655][T23113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4767'. [ 416.020092][T23113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4767'. [ 416.023519][T23111] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4764'. [ 416.060291][T23113] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4767'. [ 416.087389][T23118] veth3: entered promiscuous mode [ 416.092697][T23118] veth3: entered allmulticast mode [ 416.102858][T23120] nbd: must specify at least one socket [ 416.120962][T23113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4767'. [ 416.362666][T23139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4775'. [ 416.425333][T23134] openvswitch: netlink: Actions may not be safe on all matching packets [ 416.426180][T23139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.061188][T23140] pim6reg1: entered promiscuous mode [ 418.066534][T23140] pim6reg1: entered allmulticast mode [ 418.155457][T23123] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 418.167894][T23123] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 418.300436][T23123] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 418.306388][T23123] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 418.402238][T23166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4780'. [ 418.404851][T23162] syzkaller0: entered promiscuous mode [ 418.417212][T23162] syzkaller0: entered allmulticast mode [ 418.501422][T23123] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 418.527762][T23123] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 418.551434][T23174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4781'. [ 418.592553][T23176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4784'. [ 420.550781][T23203] bond11: entered promiscuous mode [ 420.556012][T23203] bond11: entered allmulticast mode [ 420.561768][T23203] 8021q: adding VLAN 0 to HW filter on device bond11 [ 420.744768][T23226] netlink: 'syz.2.4799': attribute type 1 has an invalid length. [ 420.807716][T23229] tipc: Enabled bearer , priority 0 [ 420.891026][T23236] veth1_virt_wifi: entered promiscuous mode [ 420.908824][T23236] veth1_virt_wifi: entered allmulticast mode [ 420.916106][T23233] IPv6: NLM_F_REPLACE set, but no existing node found! [ 420.943205][T23229] tipc: Resetting bearer [ 421.010971][T23228] tipc: Disabling bearer [ 421.019923][T23243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.179151][T23251] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 421.311547][T23261] __nla_validate_parse: 5 callbacks suppressed [ 421.311565][T23261] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4813'. [ 421.372880][T23267] x_tables: duplicate underflow at hook 1 [ 421.588557][T23277] ieee802154 phy0 wpan0: encryption failed: -22 [ 422.002710][T23314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4831'. [ 422.072465][T23314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4831'. [ 422.072592][T23320] sctp: [Deprecated]: syz.3.4833 (pid 23320) Use of int in maxseg socket option. [ 422.072592][T23320] Use struct sctp_assoc_value instead [ 422.083724][T23314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4831'. [ 422.190671][T23324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.394801][T23337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4837'. [ 422.480912][T23342] lo speed is unknown, defaulting to 1000 [ 422.564894][T23345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4841'. [ 422.649924][T23351] nbd: must specify an index to disconnect [ 422.656217][T23345] netlink: 'syz.1.4841': attribute type 12 has an invalid length. [ 422.680197][T23345] netlink: 'syz.1.4841': attribute type 29 has an invalid length. [ 422.723886][T23345] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4841'. [ 422.747677][T23345] netlink: 'syz.1.4841': attribute type 1 has an invalid length. [ 422.777820][T23345] netlink: 'syz.1.4841': attribute type 2 has an invalid length. [ 422.812448][T23345] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4841'. [ 422.965145][T23363] veth5: entered allmulticast mode [ 423.001855][T23365] macvlan0: entered promiscuous mode [ 423.199666][T23374] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 423.208950][T23374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.450049][T23392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4856'. [ 423.624632][T23405] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4857'. [ 423.749005][T23416] netlink: 'syz.2.4862': attribute type 3 has an invalid length. [ 424.181797][T23443] lo speed is unknown, defaulting to 1000 [ 424.204343][T23443] lo speed is unknown, defaulting to 1000 [ 424.215074][T23443] lo speed is unknown, defaulting to 1000 [ 424.511213][T23459] syzkaller1: entered promiscuous mode [ 424.523543][T23459] syzkaller1: entered allmulticast mode [ 424.634669][T23443] infiniband sz1: set down [ 424.649534][T23466] pim6reg: entered allmulticast mode [ 424.655093][T23443] infiniband sz1: added lo [ 424.671680][T10690] lo speed is unknown, defaulting to 1000 [ 424.691128][T23466] pim6reg: left allmulticast mode [ 424.748576][ T4420] bridge_slave_0: left allmulticast mode [ 424.754262][ T4420] bridge_slave_0: left promiscuous mode [ 424.769547][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.850089][T23443] RDS/IB: sz1: added [ 424.871182][T23443] smc: adding ib device sz1 with port count 1 [ 424.878334][T23443] smc: ib device sz1 port 1 has no pnetid [ 424.910397][ T4420] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 425.193599][ T4420] gretap0 (unregistering): left promiscuous mode [ 425.344814][ T4420] dvmrp0 (unregistering): left allmulticast mode [ 425.482447][T23493] openvswitch: netlink: Message has 6 unknown bytes. [ 425.960166][ T4420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.970003][ T4420] bond0 (unregistering): Released all slaves [ 426.074956][ T4420] bond1 (unregistering): Released all slaves [ 426.087416][ T4420] bond2 (unregistering): Released all slaves [ 426.192499][ T4420] bond3 (unregistering): Released all slaves [ 426.239140][ T5911] lo speed is unknown, defaulting to 1000 [ 426.246805][T23443] lo speed is unknown, defaulting to 1000 [ 426.343225][ T4420] : left promiscuous mode [ 426.511798][ T4420] tipc: Disabling bearer [ 426.522097][ T4420] tipc: Left network mode [ 426.531956][T23502] tc_dump_action: action bad kind [ 426.602285][ T4420] IPVS: stopping master sync thread 7316 ... [ 426.869182][T23443] lo speed is unknown, defaulting to 1000 [ 427.026938][T23524] syzkaller0: entered promiscuous mode [ 427.041515][T23524] syzkaller0: entered allmulticast mode [ 427.089359][T23524] tipc: Enabling of bearer rejected, media not registered [ 427.444687][T23546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.459780][T23547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.593871][T23443] lo speed is unknown, defaulting to 1000 [ 427.644510][T23565] netlink: 'syz.4.4900': attribute type 18 has an invalid length. [ 427.662356][T23558] netlink: 'syz.1.4899': attribute type 1 has an invalid length. [ 427.764525][T23558] syzkaller0: entered promiscuous mode [ 427.770186][T23558] syzkaller0: entered allmulticast mode [ 427.792330][T23569] __nla_validate_parse: 8 callbacks suppressed [ 427.792349][T23569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4902'. [ 427.856069][T23574] netlink: 'syz.3.4902': attribute type 1 has an invalid length. [ 428.206579][T23589] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 428.466788][T23443] lo speed is unknown, defaulting to 1000 [ 428.504863][T23609] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4912'. [ 428.581830][T23613] netlink: 'syz.1.4914': attribute type 1 has an invalid length. [ 428.653257][T23618] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 428.702851][T23622] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4916'. [ 428.711333][T23618] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 428.724247][T23618] bond12: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 428.899037][T23443] lo speed is unknown, defaulting to 1000 [ 429.500109][T23443] lo speed is unknown, defaulting to 1000 [ 429.803875][T23443] lo speed is unknown, defaulting to 1000 [ 429.874180][T23667] x_tables: duplicate entry at hook 2 [ 429.889482][T23667] netlink: 'syz.2.4929': attribute type 1 has an invalid length. [ 429.923171][T23667] bond8: entered promiscuous mode [ 429.934382][T23667] 8021q: adding VLAN 0 to HW filter on device bond8 [ 429.974555][T23667] bond8: (slave bridge4): making interface the new active one [ 429.993387][T23667] bridge4: entered promiscuous mode [ 430.016440][T23667] bridge4: left promiscuous mode [ 430.106889][T23443] lo speed is unknown, defaulting to 1000 [ 430.394045][T23692] netlink: 'syz.4.4938': attribute type 3 has an invalid length. [ 430.402844][T23692] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4938'. [ 430.513431][T23443] lo speed is unknown, defaulting to 1000 [ 430.531165][T23689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4937'. [ 430.556490][T23689] netlink: 'syz.2.4937': attribute type 1 has an invalid length. [ 430.571533][T23689] netlink: 'syz.2.4937': attribute type 2 has an invalid length. [ 430.785913][T23707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4943'. [ 430.869348][T23712] openvswitch: netlink: IP tunnel dst address not specified [ 431.002088][T23721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4947'. [ 431.011525][T23721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4947'. [ 431.172703][T23725] gtp1: entered promiscuous mode [ 431.192186][T23725] gtp1: entered allmulticast mode [ 431.206689][T23729] netlink: 'syz.4.4948': attribute type 39 has an invalid length. [ 431.415874][T23727] delete_channel: no stack [ 431.449570][T23733] siw: device registration error -23 [ 431.464313][T23735] SET target dimension over the limit! [ 431.468335][ T4420] team0: left promiscuous mode [ 431.495019][ T4420] team_slave_0: left promiscuous mode [ 431.512988][ T4420] team_slave_1: left promiscuous mode [ 431.540344][ T4420] hsr_slave_0: left promiscuous mode [ 431.551629][ T4420] hsr_slave_1: left promiscuous mode [ 431.578929][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.615239][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.653181][T23763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4959'. [ 432.705986][T23766] netlink: 'syz.1.4959': attribute type 6 has an invalid length. [ 432.760426][T23769] netlink: 'syz.1.4959': attribute type 1 has an invalid length. [ 433.060693][ T4420] team0 (unregistering): Port device team_slave_1 removed [ 433.099135][ T4420] team0 (unregistering): Port device team_slave_0 removed [ 433.447967][T23763] bond4: left promiscuous mode [ 433.475999][T23763] bridge0: port 3(bond4) entered disabled state [ 433.520393][T23763] bridge_slave_1: left allmulticast mode [ 433.537194][T23763] bridge_slave_1: left promiscuous mode [ 433.547980][T23763] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.568234][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4963'. [ 433.578562][T23763] bridge_slave_0: left allmulticast mode [ 433.584252][T23763] bridge_slave_0: left promiscuous mode [ 433.593981][T23763] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.637161][T23785] netlink: 'syz.0.4966': attribute type 1 has an invalid length. [ 433.647056][T23785] netlink: 'syz.0.4966': attribute type 15 has an invalid length. [ 433.692960][T23777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4963'. [ 433.728777][T23777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4963'. [ 433.749156][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4963'. [ 433.872987][T23799] netlink: 'syz.3.4968': attribute type 27 has an invalid length. [ 434.027145][T23808] veth7: entered allmulticast mode [ 434.035592][T23798] netlink: 'syz.1.4969': attribute type 5 has an invalid length. [ 434.139088][T23813] netlink: 'syz.3.4973': attribute type 1 has an invalid length. [ 434.201534][T23813] bond6: entered promiscuous mode [ 434.212603][T23813] bond6: entered allmulticast mode [ 434.219093][T23813] 8021q: adding VLAN 0 to HW filter on device bond6 [ 434.232662][T23818] macvlan0: entered promiscuous mode [ 434.238902][T23818] macvlan0: entered allmulticast mode [ 434.245464][T23818] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 434.270842][T23816] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4974'. [ 434.280782][T23816] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4974'. [ 434.290026][T23816] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 434.318984][ T4420] IPVS: stop unused estimator thread 0... [ 434.452297][T23829] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4978'. [ 434.452936][T23832] bond0: Caught tx_queue_len zero misconfig [ 434.539561][T23837] netlink: 'syz.2.4980': attribute type 10 has an invalid length. [ 434.559846][T23837] bond0: (slave wlan1): Opening slave failed [ 434.676041][T23848] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.4982'. [ 434.702077][T23852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4983'. [ 434.711374][T23848] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.4982'. [ 434.941897][T23867] netlink: 'syz.3.4986': attribute type 7 has an invalid length. [ 434.965025][T23867] netlink: 'syz.3.4986': attribute type 8 has an invalid length. [ 435.502712][T23911] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 435.944958][T23949] syzkaller1: entered promiscuous mode [ 435.985412][T23949] syzkaller1: entered allmulticast mode [ 435.991495][T23955] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 436.003231][T23955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.205835][T23964] geneve2: entered promiscuous mode [ 436.211867][T23964] geneve2: entered allmulticast mode [ 436.496683][T23991] gtp0: entered promiscuous mode [ 436.517785][T23991] gtp0: entered allmulticast mode [ 436.600503][T23991] syzkaller1: entered promiscuous mode [ 436.606032][T23991] syzkaller1: entered allmulticast mode [ 436.639475][T23999] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 436.721396][T24006] bond7 (unregistering): Released all slaves [ 437.080330][T24029] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 437.293766][T24046] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 437.326694][T24046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.942203][T24075] tipc: Enabled bearer , priority 0 [ 437.950690][T24075] syzkaller0: entered allmulticast mode [ 437.976622][T24075] tipc: Resetting bearer [ 437.989424][T24074] tipc: Resetting bearer [ 438.007143][T24074] tipc: Disabling bearer [ 438.294572][T24087] validate_nla: 7 callbacks suppressed [ 438.294589][T24087] netlink: 'syz.2.5064': attribute type 21 has an invalid length. [ 438.376838][T24083] sctp: [Deprecated]: syz.3.5063 (pid 24083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.376838][T24083] Use struct sctp_sack_info instead [ 438.584560][T24109] __nla_validate_parse: 20 callbacks suppressed [ 438.584578][T24109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5070'. [ 438.613356][T24109] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5070'. [ 438.655555][T24114] syzkaller1: entered promiscuous mode [ 438.662570][T24114] syzkaller1: entered allmulticast mode [ 438.856286][T24126] tipc: Enabled bearer , priority 0 [ 438.884808][T24126] syzkaller0: entered promiscuous mode [ 438.892174][T24126] syzkaller0: entered allmulticast mode [ 438.906022][T24126] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 438.941578][T24126] tipc: Resetting bearer [ 438.979459][T24124] tipc: Resetting bearer [ 439.039116][T24124] tipc: Disabling bearer [ 439.086118][T24132] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5078'. [ 439.292470][T24144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5083'. [ 439.376367][T24150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5082'. [ 439.491141][T24156] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 439.531021][T24156] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 439.548501][T24156] gretap1: entered promiscuous mode [ 439.558803][T24156] gretap1: entered allmulticast mode [ 439.576520][T24149] syzkaller1: entered promiscuous mode [ 439.583133][T24149] syzkaller1: entered allmulticast mode [ 439.646177][T24164] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 439.749627][T24180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5091'. [ 439.780151][T24180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.932574][T24180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.064196][T24191] bond9: entered allmulticast mode [ 440.244476][T24215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5101'. [ 440.255434][T24216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5101'. [ 440.390693][T24220] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 440.744993][T24247] sctp: [Deprecated]: syz.0.5112 (pid 24247) Use of int in max_burst socket option deprecated. [ 440.744993][T24247] Use struct sctp_assoc_value instead [ 440.764345][T24248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5112'. [ 440.774953][T24248] team0: left allmulticast mode [ 440.780652][T24248] team_slave_0: left allmulticast mode [ 440.794621][T24248] team_slave_1: left allmulticast mode [ 440.802581][T24248] team0: left promiscuous mode [ 440.807386][T24248] team_slave_0: left promiscuous mode [ 440.819407][T24248] team_slave_1: left promiscuous mode [ 440.825589][T24248] bridge0: port 3(team0) entered disabled state [ 440.836383][T24248] bridge_slave_1: left allmulticast mode [ 440.853290][T24248] bridge_slave_1: left promiscuous mode [ 440.874332][T24248] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.893032][T24262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5114'. [ 440.893948][T24248] bridge_slave_0: left allmulticast mode [ 440.902594][T24262] openvswitch: netlink: Flow actions attr not present in new flow. [ 440.920002][T24248] bridge_slave_0: left promiscuous mode [ 440.925869][T24248] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.290547][T24281] netlink: 'syz.4.5122': attribute type 1 has an invalid length. [ 441.317836][T24281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.813673][T24306] netlink: 'syz.4.5128': attribute type 1 has an invalid length. [ 441.930766][T24315] 8021q: VLANs not supported on ip6_vti0 [ 441.941180][T24323] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 441.990156][T24325] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 442.220540][T24337] set match dimension is over the limit! [ 442.260380][T24334] netlink: 'syz.1.5138': attribute type 29 has an invalid length. [ 442.339136][T24338] netlink: 'syz.1.5138': attribute type 29 has an invalid length. [ 442.441476][T24349] openvswitch: netlink: Unknown key attributes 2 [ 442.634852][T24362] ipt_REJECT: TCP_RESET invalid for non-tcp [ 442.649842][T24362] sit0: left promiscuous mode [ 442.691250][T24362] veth1_virt_wifi: left promiscuous mode [ 442.696935][T24362] veth1_virt_wifi: left allmulticast mode [ 442.718126][T24362] bond5: left promiscuous mode [ 442.733916][T24362] bridge4: left promiscuous mode [ 442.740007][T24362] bridge4: left allmulticast mode [ 442.752191][T24362] veth5: left allmulticast mode [ 442.760364][T24365] macvlan0: left promiscuous mode [ 442.774594][T24365] netlink: 'syz.1.5145': attribute type 1 has an invalid length. [ 442.783590][T24365] netlink: 'syz.1.5145': attribute type 2 has an invalid length. [ 443.167466][T24398] syzkaller0: entered promiscuous mode [ 443.176146][T24398] syzkaller0: entered allmulticast mode [ 443.274846][T24405] chnl_net:caif_netlink_parms(): no params data found [ 443.375802][T24413] netlink: 'syz.3.5162': attribute type 4 has an invalid length. [ 443.696294][T24432] syzkaller1: entered promiscuous mode [ 443.712794][T24432] syzkaller1: entered allmulticast mode [ 443.775402][T24440] __nla_validate_parse: 15 callbacks suppressed [ 443.775423][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5170'. [ 443.810499][T24440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5170'. [ 443.841578][T24442] netlink: 'syz.0.5171': attribute type 6 has an invalid length. [ 443.861513][T24442] netlink: 'syz.0.5171': attribute type 6 has an invalid length. [ 444.186593][T24472] netlink: 6012 bytes leftover after parsing attributes in process `syz.0.5181'. [ 444.224647][ T30] audit: type=1107 audit(1764523433.799:5): pid=24475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 444.282659][T24464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5178'. [ 444.520301][T24490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5185'. [ 444.572832][T24494] netlink: 71 bytes leftover after parsing attributes in process `syz.0.5186'. [ 444.922185][T24520] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5192'. [ 445.185543][T24539] openvswitch: netlink: IP tunnel dst address not specified [ 445.512242][T24557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5202'. [ 445.650251][T24568] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 445.803068][T24575] netem: incorrect ge model size [ 445.809422][T24575] netem: change failed [ 445.815201][T24572] tipc: Enabled bearer , priority 0 [ 445.825041][T24572] syzkaller0: entered promiscuous mode [ 445.866594][T24572] syzkaller0: entered allmulticast mode [ 445.920514][T24572] tipc: Resetting bearer [ 445.929187][T24571] tipc: Resetting bearer [ 445.949153][T24571] tipc: Disabling bearer [ 445.975950][T24584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5212'. [ 445.986630][T24584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5212'. [ 446.374079][T24601] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 446.385043][T24601] gretap1: left promiscuous mode [ 446.407205][T24601] ip6gre1: left promiscuous mode [ 446.416525][T24601] veth3: left promiscuous mode [ 446.424839][T24601] gtp0: left promiscuous mode [ 446.440813][T24601] bond8: left promiscuous mode [ 446.446515][T24601] geneve2: left promiscuous mode [ 446.767199][T24625] netlink: 'syz.1.5224': attribute type 2 has an invalid length. [ 446.788162][T24625] netlink: 'syz.1.5224': attribute type 1 has an invalid length. [ 446.803451][T24626] netlink: 'syz.1.5224': attribute type 1 has an invalid length. [ 446.832199][T24625] netlink: 'syz.1.5224': attribute type 1 has an invalid length. [ 446.843788][T24632] netlink: 'syz.0.5226': attribute type 33 has an invalid length. [ 447.164685][T24654] netlink: 'syz.3.5232': attribute type 1 has an invalid length. [ 447.368661][T24664] netlink: 'syz.1.5234': attribute type 21 has an invalid length. [ 447.909485][T24708] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 447.961609][T24710] x_tables: duplicate entry at hook 1 [ 448.416625][T24744] lo speed is unknown, defaulting to 1000 [ 448.432089][T24744] lo speed is unknown, defaulting to 1000 [ 448.448682][T24745] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 448.653036][T24762] validate_nla: 5 callbacks suppressed [ 448.653052][T24762] netlink: 'syz.0.5261': attribute type 7 has an invalid length. [ 448.708489][T24764] netlink: 'syz.4.5262': attribute type 1 has an invalid length. [ 448.716480][T24762] netlink: 'syz.0.5261': attribute type 8 has an invalid length. [ 448.780113][T24764] rdma_op ffff88806b6fb1f0 conn xmit_rdma 0000000000000000 [ 448.793195][T24767] __nla_validate_parse: 18 callbacks suppressed [ 448.793213][T24767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5263'. [ 449.084938][T24764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.324926][T24786] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 449.381657][ T4420] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.403840][ T4420] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.425951][ T4420] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.439742][ T4420] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.466707][ T4420] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.483490][ T4420] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.494537][T24792] netlink: 'syz.3.5268': attribute type 2 has an invalid length. [ 449.505473][T24793] netlink: 'syz.3.5268': attribute type 2 has an invalid length. [ 449.534656][T24795] netlink: 'syz.3.5268': attribute type 2 has an invalid length. [ 449.557417][T24792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5268'. [ 449.583183][T24793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5268'. [ 449.595487][T24795] netlink: 'syz.3.5268': attribute type 1 has an invalid length. [ 449.624311][ T4420] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.656466][ T4420] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.696776][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5271'. [ 449.925208][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5273'. [ 450.458147][T24845] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5278'. [ 450.502723][T24847] netlink: 'syz.3.5279': attribute type 58 has an invalid length. [ 450.503662][T24848] netlink: 'syz.3.5279': attribute type 58 has an invalid length. [ 450.556487][T24847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5279'. [ 450.601413][T24851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5280'. [ 450.619478][T24848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5279'. [ 450.652484][T24854] netlink: 'syz.2.5281': attribute type 25 has an invalid length. [ 450.671035][T24854] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5281'. [ 450.861841][T24845] [ 450.864215][T24845] ====================================================== [ 450.871238][T24845] WARNING: possible circular locking dependency detected [ 450.878274][T24845] syzkaller #0 Not tainted [ 450.882689][T24845] ------------------------------------------------------ [ 450.889707][T24845] syz.0.5278/24845 is trying to acquire lock: [ 450.895777][T24845] ffff88814332f1d8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1e5/0x4c0 [ 450.905199][T24845] [ 450.905199][T24845] but task is already holding lock: [ 450.912566][T24845] ffff88814332ec98 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 450.922782][T24845] [ 450.922782][T24845] which lock already depends on the new lock. [ 450.922782][T24845] [ 450.933187][T24845] [ 450.933187][T24845] the existing dependency chain (in reverse order) is: [ 450.942195][T24845] [ 450.942195][T24845] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 450.950796][T24845] lock_acquire+0x120/0x360 [ 450.955808][T24845] blk_alloc_queue+0x538/0x620 [ 450.961086][T24845] __blk_mq_alloc_disk+0x15c/0x340 [ 450.966700][T24845] nbd_dev_add+0x46c/0xae0 [ 450.971634][T24845] nbd_init+0x1c6/0x240 [ 450.976299][T24845] do_one_initcall+0x236/0x820 [ 450.981574][T24845] do_initcall_level+0x104/0x190 [ 450.987019][T24845] do_initcalls+0x59/0xa0 [ 450.991856][T24845] kernel_init_freeable+0x334/0x4b0 [ 450.997561][T24845] kernel_init+0x1d/0x1d0 [ 451.002400][T24845] ret_from_fork+0x4bc/0x870 [ 451.007493][T24845] ret_from_fork_asm+0x1a/0x30 [ 451.012764][T24845] [ 451.012764][T24845] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 451.019963][T24845] lock_acquire+0x120/0x360 [ 451.024983][T24845] fs_reclaim_acquire+0x72/0x100 [ 451.030431][T24845] __kmalloc_cache_node_noprof+0x45/0x6f0 [ 451.036660][T24845] create_worker+0x112/0x720 [ 451.041764][T24845] workqueue_prepare_cpu+0xe4/0x170 [ 451.047482][T24845] cpuhp_invoke_callback+0x445/0x860 [ 451.053276][T24845] _cpu_up+0x2c9/0x580 [ 451.057868][T24845] cpu_up+0x1d2/0x220 [ 451.062356][T24845] cpuhp_bringup_mask+0xb2/0x1a0 [ 451.067810][T24845] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 451.074137][T24845] bringup_nonboot_cpus+0x17/0x30 [ 451.079673][T24845] smp_init+0x32/0x110 [ 451.084253][T24845] kernel_init_freeable+0x316/0x4b0 [ 451.089959][T24845] kernel_init+0x1d/0x1d0 [ 451.094799][T24845] ret_from_fork+0x4bc/0x870 [ 451.099895][T24845] ret_from_fork_asm+0x1a/0x30 [ 451.105166][T24845] [ 451.105166][T24845] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 451.112885][T24845] lock_acquire+0x120/0x360 [ 451.117900][T24845] cpus_read_lock+0x42/0x160 [ 451.123004][T24845] static_key_slow_inc+0x12/0x30 [ 451.128453][T24845] nbd_genl_reconfigure+0x10d8/0x1a50 [ 451.134331][T24845] genl_family_rcv_msg_doit+0x215/0x300 [ 451.140384][T24845] genl_rcv_msg+0x60e/0x790 [ 451.145396][T24845] netlink_rcv_skb+0x208/0x470 [ 451.150663][T24845] genl_rcv+0x28/0x40 [ 451.155192][T24845] netlink_unicast+0x82f/0x9e0 [ 451.160470][T24845] netlink_sendmsg+0x805/0xb30 [ 451.165739][T24845] __sock_sendmsg+0x21c/0x270 [ 451.170928][T24845] ____sys_sendmsg+0x505/0x830 [ 451.176210][T24845] ___sys_sendmsg+0x21f/0x2a0 [ 451.181391][T24845] __x64_sys_sendmsg+0x19b/0x260 [ 451.186845][T24845] do_syscall_64+0xfa/0xfa0 [ 451.191865][T24845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.198264][T24845] [ 451.198264][T24845] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 451.205898][T24845] lock_acquire+0x120/0x360 [ 451.210905][T24845] __mutex_lock+0x187/0x1350 [ 451.215998][T24845] nbd_queue_rq+0x257/0xf10 [ 451.221011][T24845] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 451.227074][T24845] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 451.233914][T24845] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 451.240406][T24845] blk_mq_run_hw_queue+0x348/0x4f0 [ 451.246026][T24845] blk_mq_dispatch_list+0xd0c/0xe00 [ 451.251733][T24845] blk_mq_flush_plug_list+0x469/0x550 [ 451.257614][T24845] __blk_flush_plug+0x3d3/0x4b0 [ 451.262973][T24845] __submit_bio+0x2d3/0x5a0 [ 451.267982][T24845] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 451.274132][T24845] block_read_full_folio+0x599/0x830 [ 451.279927][T24845] filemap_read_folio+0x117/0x380 [ 451.285462][T24845] do_read_cache_folio+0x350/0x590 [ 451.291078][T24845] read_part_sector+0xb6/0x2b0 [ 451.296351][T24845] adfspart_check_ICS+0xa4/0xa50 [ 451.301815][T24845] bdev_disk_changed+0x75f/0x14b0 [ 451.307348][T24845] blkdev_get_whole+0x380/0x510 [ 451.312703][T24845] bdev_open+0x31e/0xd30 [ 451.317457][T24845] blkdev_open+0x457/0x600 [ 451.322379][T24845] do_dentry_open+0x953/0x13f0 [ 451.327655][T24845] vfs_open+0x3b/0x340 [ 451.332229][T24845] path_openat+0x2ee5/0x3830 [ 451.337336][T24845] do_filp_open+0x1fa/0x410 [ 451.342347][T24845] do_sys_openat2+0x121/0x1c0 [ 451.347533][T24845] __x64_sys_openat+0x138/0x170 [ 451.352894][T24845] do_syscall_64+0xfa/0xfa0 [ 451.357909][T24845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.364310][T24845] [ 451.364310][T24845] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 451.371512][T24845] lock_acquire+0x120/0x360 [ 451.376525][T24845] __mutex_lock+0x187/0x1350 [ 451.381628][T24845] nbd_queue_rq+0xc8/0xf10 [ 451.386550][T24845] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 451.392606][T24845] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 451.399449][T24845] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 451.405955][T24845] blk_mq_run_hw_queue+0x348/0x4f0 [ 451.411598][T24845] blk_mq_dispatch_list+0xd0c/0xe00 [ 451.417313][T24845] blk_mq_flush_plug_list+0x469/0x550 [ 451.423203][T24845] __blk_flush_plug+0x3d3/0x4b0 [ 451.428577][T24845] __submit_bio+0x2d3/0x5a0 [ 451.433586][T24845] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 451.439729][T24845] block_read_full_folio+0x599/0x830 [ 451.445525][T24845] filemap_read_folio+0x117/0x380 [ 451.451055][T24845] do_read_cache_folio+0x350/0x590 [ 451.456671][T24845] read_part_sector+0xb6/0x2b0 [ 451.461952][T24845] adfspart_check_ICS+0xa4/0xa50 [ 451.467399][T24845] bdev_disk_changed+0x75f/0x14b0 [ 451.472935][T24845] blkdev_get_whole+0x380/0x510 [ 451.478294][T24845] bdev_open+0x31e/0xd30 [ 451.483049][T24845] blkdev_open+0x457/0x600 [ 451.487970][T24845] do_dentry_open+0x953/0x13f0 [ 451.493243][T24845] vfs_open+0x3b/0x340 [ 451.497818][T24845] path_openat+0x2ee5/0x3830 [ 451.502916][T24845] do_filp_open+0x1fa/0x410 [ 451.507928][T24845] do_sys_openat2+0x121/0x1c0 [ 451.513114][T24845] __x64_sys_openat+0x138/0x170 [ 451.518469][T24845] do_syscall_64+0xfa/0xfa0 [ 451.523485][T24845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.529882][T24845] [ 451.529882][T24845] -> #1 (set->srcu){.+.+}-{0:0}: [ 451.536993][T24845] lock_sync+0xba/0x160 [ 451.541655][T24845] __synchronize_srcu+0x96/0x3a0 [ 451.547105][T24845] elevator_switch+0x12b/0x640 [ 451.552380][T24845] elevator_change+0x315/0x4c0 [ 451.557654][T24845] elevator_set_default+0x186/0x260 [ 451.563365][T24845] blk_register_queue+0x34e/0x3f0 [ 451.568897][T24845] __add_disk+0x677/0xd50 [ 451.573738][T24845] add_disk_fwnode+0xfc/0x480 [ 451.578925][T24845] nbd_dev_add+0x717/0xae0 [ 451.583850][T24845] nbd_init+0x1c6/0x240 [ 451.588512][T24845] do_one_initcall+0x236/0x820 [ 451.593783][T24845] do_initcall_level+0x104/0x190 [ 451.599227][T24845] do_initcalls+0x59/0xa0 [ 451.604066][T24845] kernel_init_freeable+0x334/0x4b0 [ 451.609774][T24845] kernel_init+0x1d/0x1d0 [ 451.614609][T24845] ret_from_fork+0x4bc/0x870 [ 451.619705][T24845] ret_from_fork_asm+0x1a/0x30 [ 451.624975][T24845] [ 451.624975][T24845] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 451.632780][T24845] validate_chain+0xb9b/0x2140 [ 451.638053][T24845] __lock_acquire+0xab9/0xd20 [ 451.643236][T24845] lock_acquire+0x120/0x360 [ 451.648242][T24845] __mutex_lock+0x187/0x1350 [ 451.653335][T24845] elevator_change+0x1e5/0x4c0 [ 451.658612][T24845] elevator_set_none+0x42/0xb0 [ 451.663887][T24845] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 451.670201][T24845] nbd_start_device+0x17f/0xb10 [ 451.675559][T24845] nbd_genl_connect+0x135b/0x18f0 [ 451.681101][T24845] genl_family_rcv_msg_doit+0x215/0x300 [ 451.687154][T24845] genl_rcv_msg+0x60e/0x790 [ 451.692163][T24845] netlink_rcv_skb+0x208/0x470 [ 451.697429][T24845] genl_rcv+0x28/0x40 [ 451.701915][T24845] netlink_unicast+0x82f/0x9e0 [ 451.707189][T24845] netlink_sendmsg+0x805/0xb30 [ 451.712454][T24845] __sock_sendmsg+0x21c/0x270 [ 451.717641][T24845] ____sys_sendmsg+0x505/0x830 [ 451.722938][T24845] ___sys_sendmsg+0x21f/0x2a0 [ 451.728139][T24845] __x64_sys_sendmsg+0x19b/0x260 [ 451.733589][T24845] do_syscall_64+0xfa/0xfa0 [ 451.738608][T24845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.745010][T24845] [ 451.745010][T24845] other info that might help us debug this: [ 451.745010][T24845] [ 451.755217][T24845] Chain exists of: [ 451.755217][T24845] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 451.755217][T24845] [ 451.768944][T24845] Possible unsafe locking scenario: [ 451.768944][T24845] [ 451.776378][T24845] CPU0 CPU1 [ 451.781728][T24845] ---- ---- [ 451.787074][T24845] lock(&q->q_usage_counter(io)#52); [ 451.792441][T24845] lock(fs_reclaim); [ 451.798930][T24845] lock(&q->q_usage_counter(io)#52); [ 451.806810][T24845] lock(&q->elevator_lock); [ 451.811383][T24845] [ 451.811383][T24845] *** DEADLOCK *** [ 451.811383][T24845] [ 451.819507][T24845] 6 locks held by syz.0.5278/24845: [ 451.824685][T24845] #0: ffffffff8f331e90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 451.832860][T24845] #1: ffffffff8f331ca8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 451.841815][T24845] #2: ffff888024adb9c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 451.853199][T24845] #3: ffff888024adb8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 451.864151][T24845] #4: ffff88814332ec98 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 451.875990][T24845] #5: ffff88814332ecd0 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 451.886884][T24845] [ 451.886884][T24845] stack backtrace: [ 451.892761][T24845] CPU: 0 UID: 0 PID: 24845 Comm: syz.0.5278 Not tainted syzkaller #0 PREEMPT(full) [ 451.892780][T24845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.892790][T24845] Call Trace: [ 451.892797][T24845] [ 451.892804][T24845] dump_stack_lvl+0x189/0x250 [ 451.892826][T24845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.892850][T24845] ? __pfx__printk+0x10/0x10 [ 451.892865][T24845] ? print_lock_name+0xde/0x100 [ 451.892880][T24845] print_circular_bug+0x2ee/0x310 [ 451.892899][T24845] check_noncircular+0x134/0x160 [ 451.892918][T24845] validate_chain+0xb9b/0x2140 [ 451.892943][T24845] __lock_acquire+0xab9/0xd20 [ 451.892958][T24845] ? elevator_change+0x1e5/0x4c0 [ 451.892977][T24845] lock_acquire+0x120/0x360 [ 451.892990][T24845] ? elevator_change+0x1e5/0x4c0 [ 451.893014][T24845] __mutex_lock+0x187/0x1350 [ 451.893027][T24845] ? elevator_change+0x1e5/0x4c0 [ 451.893048][T24845] ? xa_find_after+0xae/0x430 [ 451.893064][T24845] ? xa_find_after+0x402/0x430 [ 451.893077][T24845] ? elevator_change+0x1e5/0x4c0 [ 451.893095][T24845] ? xa_find_after+0xae/0x430 [ 451.893109][T24845] ? __pfx___mutex_lock+0x10/0x10 [ 451.893124][T24845] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 451.893142][T24845] elevator_change+0x1e5/0x4c0 [ 451.893164][T24845] elevator_set_none+0x42/0xb0 [ 451.893185][T24845] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 451.893207][T24845] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 451.893228][T24845] ? sysfs_add_file_mode_ns+0x259/0x300 [ 451.893248][T24845] nbd_start_device+0x17f/0xb10 [ 451.893265][T24845] ? device_create_file+0xf4/0x1c0 [ 451.893282][T24845] nbd_genl_connect+0x135b/0x18f0 [ 451.893300][T24845] ? __pfx_nbd_genl_connect+0x10/0x10 [ 451.893316][T24845] ? rcu_is_watching+0x15/0xb0 [ 451.893333][T24845] ? __nla_parse+0x40/0x60 [ 451.893349][T24845] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 451.893372][T24845] genl_family_rcv_msg_doit+0x215/0x300 [ 451.893392][T24845] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 451.893416][T24845] ? stack_trace_save+0x9c/0xe0 [ 451.893435][T24845] genl_rcv_msg+0x60e/0x790 [ 451.893455][T24845] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.893471][T24845] ? __pfx_nbd_genl_connect+0x10/0x10 [ 451.893490][T24845] netlink_rcv_skb+0x208/0x470 [ 451.893503][T24845] ? __lock_acquire+0xab9/0xd20 [ 451.893516][T24845] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.893534][T24845] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.893554][T24845] ? down_read+0x1ad/0x2e0 [ 451.893568][T24845] genl_rcv+0x28/0x40 [ 451.893585][T24845] netlink_unicast+0x82f/0x9e0 [ 451.893607][T24845] ? __pfx_netlink_unicast+0x10/0x10 [ 451.893627][T24845] ? netlink_sendmsg+0x642/0xb30 [ 451.893640][T24845] ? skb_put+0x11b/0x210 [ 451.893656][T24845] netlink_sendmsg+0x805/0xb30 [ 451.893673][T24845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.893688][T24845] ? aa_sock_msg_perm+0xf1/0x1d0 [ 451.893709][T24845] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.893723][T24845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.893737][T24845] __sock_sendmsg+0x21c/0x270 [ 451.893757][T24845] ____sys_sendmsg+0x505/0x830 [ 451.893774][T24845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.893792][T24845] ? import_iovec+0x74/0xa0 [ 451.893811][T24845] ___sys_sendmsg+0x21f/0x2a0 [ 451.893827][T24845] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.893859][T24845] ? __fget_files+0x2a/0x420 [ 451.893872][T24845] ? __fget_files+0x3a0/0x420 [ 451.893889][T24845] __x64_sys_sendmsg+0x19b/0x260 [ 451.893905][T24845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.893926][T24845] ? do_syscall_64+0xbe/0xfa0 [ 451.893947][T24845] do_syscall_64+0xfa/0xfa0 [ 451.893966][T24845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.893980][T24845] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 451.893994][T24845] ? clear_bhb_loop+0x60/0xb0 [ 451.894009][T24845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.894023][T24845] RIP: 0033:0x7ff67a98f749 [ 451.894038][T24845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.894051][T24845] RSP: 002b:00007ff678bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.894067][T24845] RAX: ffffffffffffffda RBX: 00007ff67abe5fa0 RCX: 00007ff67a98f749 [ 451.894078][T24845] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 451.894089][T24845] RBP: 00007ff67aa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 451.894098][T24845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.894107][T24845] R13: 00007ff67abe6038 R14: 00007ff67abe5fa0 R15: 00007ffe85571798 [ 451.894125][T24845] [ 452.361668][T24874] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 452.423061][ T5831] block nbd3: Receive control failed (result -32) [ 452.423131][ T5842] block nbd3: Receive control failed (result -32) [ 452.431386][ T5831] block nbd3: Receive control failed (result -32) [ 452.436661][ T5842] block nbd3: Receive control failed (result -32) [ 452.443485][ T5831] block nbd3: Receive control failed (result -32) [ 452.443535][ T5831] block nbd3: Receive control failed (result -32)