last executing test programs: 16m3.911941161s ago: executing program 4 (id=367): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={r10, 0x1b, "000000808fdcbb26c870be4df29b09a17f4d6a38e9406c29e40000"}, &(0x7f0000000080)=0x23) 16m3.709010523s ago: executing program 4 (id=370): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'pim6reg\x00', {0x2, 0x0, @broadcast}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000040)='pim6reg\x00', 0x680002, &(0x7f0000000080)={@_ha_fsid, {0xf7, 0x8000, 0x800, 0x6}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x8}, 0x3, &(0x7f0000000400)=[{0x3, 0x6, &(0x7f0000000140)='(\\$\x00', &(0x7f0000000180)="2f8714d74196fb636f67b5be087be49a96f4dd736d22ba6a986cdcfa26175e1ea0bcbab542d9597c0b0ccd5e22f738875c0ac608e7e6007f5df95f3680d3942c991ee86bbe404eaa1c15c343a20fff3f", 0x50}, {0x2, 0x1, &(0x7f0000000200)='#+\'\x00', &(0x7f0000000240)="0ff4b4e43574880eb4b09ce6d22afa8e6eeb9f67507190787cca4a6fa6c997e02d61c267ac511707056528925d9c93a3473c85bb813178f2eec6d8e25ca124bed3951d0997075e655b578f29c3b26e09b343d632bbf6c9216598a6bb45903817abd0bfc6b44efb5d69a562a55a22828dc1307b3551339f7750c2df92ef6f14dbf5e6f23d1fda3727", 0x88, 0x8}, {0x1, 0x72, &(0x7f0000000300)='}%@:\x00', &(0x7f0000000340)="d71b94d35266b772a1f3c0a6aec8ba381cff722c1e12b83a17381257c9bd3a276cd8fb11452993008d7d6b456eeca1046cd0299e701b5b2d9091504aebf37739ea9f598336b0602fda43c10c3ee5fd1770470098fc70e3f35da7b4b92a37573ee26e9c5cc9236968888681b4eb4a6d6b82db91cdf9aa454fd433b2709c5b28b28412b5a1878584568200c21094c90b76eda2d81af7113f44636b9a9ad44df2752d22267c73492cad6f70f89be08ace0cc6765ff9", 0xb4, 0x2}]}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000500)={0x41, 0x0, 0x3}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x0, 0x2, 0x1}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000680)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x214, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xd2, 0x45, "0293196169fc0391d349ee3bfb7fc15cf0c4924d899cd24bedc87b3bc84dcc3f71e9f31c1e2fdda9d3ce9ad5f9439685c37bb389a006bb56a8b7f3949a200c5abc2840d0a364effb35fd3c17db60a8bdb4bb23219482b3b4c99b3561ff61eb4f10350fad2a532d897d3ef487e09659bb3599629314f988c4a3f3c6b7dd9a04b81566d42d22ab64bcd57fa2b36adb31688a444abf4793dec971b2b281f3304e604fac37679cea50526089b71dcb23fdd68dab9ee12fc2f59887ea892a9302df4d9407e56a06dceab6c05675ff9e80"}, @NL80211_ATTR_TESTDATA={0x53, 0x45, "fe600a63fc301c44812acbe0899c1921c55f473982130729f3aa86b23c92315e39277935c6f53d25a87e442536ef8575cffd349abc672109420d774de63aa5702b27362bfeab44ff812513c2ea6d2f"}, @NL80211_ATTR_TESTDATA={0xbb, 0x45, "bdf21aabe3a9facf03393e0811a6169472271e0ca9a4c560063dbfc78604d2c7efb88c910a04ffb864dcfafadbbb2ddea49a98e1fec911453b3cd80cdeef1e36a42c035aaaa63a2444e7804a857bdf0e90f3950e661aaf3d355b7327dd05ffb245cbe1afefda481c81016f016f9dd9eaf8a61f27b307ded7fb3ce6a0d161ea90e712ac1cd2b00bf4338c1bee5cd1ae1886a7e6ca35418f34bb96050c57d34517024268ad1a9f5333fb50ae71218dab86dfa34799ffadbb"}, @NL80211_ATTR_TESTDATA={0x1a, 0x45, "62b3623b4e1ad7ecb056b35891482d8786b945cf1f64"}]}, 0x214}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000a40)=@name={0x1e, 0x2, 0x1, {{0x42}, 0x3}}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000a80)="78c0c3ecc59ad311d45a9c5558e7a962ca8a0180c0e6c83faabe3fa08b2f27723929266c81a413b34ba5d90693d1c646f6fe6c8f77ccdf9618a25bbad5d888c674de29dce7b2e0f45127e918", 0x4c}, {&(0x7f0000000b00)="06af282f4faea865ecd8a5ecdd2bf1befc7ae334aeb6a5da6501bb4a97705d51a4d3f16bd3d7260f8180d070bc9afb1cd06853862b86c648120d0721c04004e1b66e1be64fec0c0d887c23f07628964eaaff951b7638ddba2003b1d2b4b90729", 0x60}, {&(0x7f0000000b80)="dd622a29930d22cb6838ff0eedc90047dfd36515bd424a264c0003eabf2e337ed9e742fdedeb887051c87f85598f12ee48b3bf87eba00c920f06dca0491cab5acd6b068fd4b2e6a20f63e48d43c30bb61cb6656623ae32248904d7a57efcabbff945ffccc4c6bb5a0dd9e88a46e38943c0c876fd0b70bdefe3768f10a5f6706dc4e3d3a3ae55c0c3f2c0413942f16e2c296b3bbbcc60bb2b65452805b0443cb2b5e19adacc8cd8fa21b91c5d566918563fc3c1d5c672967d6b4ce468b086827eb6fb9e6e326c7006bb02fc4d574b808f1f497772bff0", 0xd6}, {&(0x7f0000000c80)="b6f7d6d328af5872bcd0b2c9a3bdb441460428842b3ceafbf4dfe0a11cee96d32eac830a76880594cdbc04bf690fdefaef35ba762ae2f7b0c85bd148bac02aaa40333cf48d9b623270ba78c1d914fa3240339005ad8a052cf26de9e3b721c9ff8584168b65e6e5335fb502ef98baabe542022d4ebb3d3905534aa9d66eb2935dd29166faadd96e697ff1b380fb9ae37b3d5c69edab8432783f151f313642f72ef55148d93f92b419be898308be3330c49d55a5e0150d1a1ddeb8e70874915dde7cb406e4eea92860734a68c425093566f1a25f512805ff9e7b7c6eeba0e675507a", 0xe1}, {&(0x7f0000000d80)="20f319d6ffa98a157130d61df67b0cdbeab0a9ea379fb1217e114a0d4ed4c2944d49ed1e96155709d793dc04b68e809d4807d9345a6eb0a71acaa6cc655e652f34546b39a99c45cd7ac2db74fe1f6a808459bcb34a739769c12559766a4c875f491c4eca88ee6a52c88a30e6443c4f0d5ce1218db936038acfe036bb7345144773c8715419fe7b7160db1140271cd2c08afa025c6c3d7022f3498d609f492ba0a8911b9c307cddb6f9391bcb5de17f30faf5b841cf94aff5ca22e6e37f271b", 0xbf}], 0x5, &(0x7f0000000ec0)="1abb3c030ab9a693c0ae7baad7eb2eda68d945742314504236a03d9ec18c6fda85246e8d9aee17a0c1c209f7c9f0a4c6dec5da6d16f64a933a3d96215cfce8ff459e474034a7faf44e3804e7a84864b3e14dfdb5fbd360144cac0720034c", 0x5e, 0x4000840}, 0x14) r4 = socket$phonet(0x23, 0x2, 0x1) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x3f7, 0x200, 0x70bd2a, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000001180)={0x40, 0x4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r2, 0x0, 0xcd, 0x62, &(0x7f00000011c0)="45fb4d827573532903a4a25e0e45d0795a69b0d9c6d096a784cde02f613e5bbd7977769e29e99f81de273bfd7d716bd005732e0324b2a252e8361067765344a6e3c2983f2080be546c065d2bdae7a2c21608c2fa68e9c48b0c68c9d99a38373d20db23f6656601ae82d4c2606192d98594d4e83a1524a46543bba1abed475703da241424d43030344df21cccf7d1ad990385eeaf1621755db8598096eaaf4c0e131a71ee5088da25cbfe94ef976d027ac61a5b3c6cac60572baba20443d944b0dabeff8c48aec91db90972d06a", &(0x7f00000012c0)=""/98, 0x6, 0x0, 0x98, 0xc7, &(0x7f0000001340)="4ea632eeecebe05fffd226693f80c76d2b57a192937b6f4e031680953dc3cd361785910ac12dce778dfe28566b21d6cf636d34ec1a61a6aaad843e35684ed254d259fe995a9fddda7f6e258b97bd45f8b23ea6f73e491c7a5ec8321e0a5ed8654a58ca56166557b7dff31ac4703ac5f0411474a6eaec9ac2d140d2da3800e38ab61d5cab240aa0c110d80d535534a680e6e70950c81f3880", &(0x7f0000001400)="d617459e6be957cb397642ae908e806735fc87c22cc5688f131638ab23a509bd66182f23b748e8506b902551248f52c888e7d142ddb42292543e51b9e4884a942f5d4f394a8ef41288281e92ec66312b128964c51330482daeb2bc9492eab4b485e0e8ba676ef099e2ad68adc57fbd289f8d8fe744a8c763e743ca494c5fa61aa98bbb4064376bdbff56f8b069ef9c7777437db0785d60cd209991463e746730fa9ae8b7308fb9f0d42efd58a86e45fb621ac54d6c2adf245bc1839c25310878eae0bfd455257c", 0x0, 0x0, 0x8000}, 0x50) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003940)={&(0x7f0000001580)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10, &(0x7f0000003840)=[{&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="148228c78704aea908503ca1c35a0006b0aa369decc5cc81e03f720c61b07c597b494d6e170cab2760128078385bb71dab5a226dad3dd953edba089f4d4a2f10d9ac598ec54588f0326a6b067cfc59771b8d58f26a0137cfdee71a98b7096323eba8a3a6ffd2cc4363340e59d72fc20d8a0fc8eb140f84d32d9d088fb518303b4232dcea4708cca9922891ba2356d3de3e387f4912fe5cc0db0d7b5be068050143a2b97c723cbea534a9db5602", 0xad}, {&(0x7f0000003680)="4740bba9836166a2ef36ede0d863f49b168a40e6a7285861f51d7fa58b6fef81df3fa9e3e52be35e7b51f01f", 0x2c}, {&(0x7f00000036c0)="507ee92e899d94ecba4d54823d07fc6ab4474858ce7cee18acd519841c4afe64e601349da3390f69c26b553c4d6e3c07e38bb42bad08e06a9c651c6f8f0efd592a6e5b75e7ac28d3992277d3cd3dda4fc41c67dc616f3fb121db8c62fcee3843461aaccb0ea333e9118773d599ddbb2ec943d3fe9f0fbe64977983af7fcff95853a817dfd8f6ac260c4208a0f3cb16eb939d3611a76bcefe7812bdd8d059fc6e0a7cdf72d1fc926bd221c76e0967bbe14cd406cb5af30db3", 0xb8}, {&(0x7f0000003780)="1b3ec1b96ace76fcfac827b18c4539c95cd06e9457f9f9deda1f7c0c231f08c2ea3ae7446b957d3b11397cc0bfaece31374e75288e94e9fb", 0x38}, {&(0x7f00000037c0)="06193ad7183e6abfc81b6c56e6e850fe2c820c79973b76", 0x17}, {&(0x7f0000003800)="0df0", 0x2}], 0x8, &(0x7f00000038c0)="8c720bfc9e77607a6c15875508cbaa2077a535aee34d3fd29d5d844a380347bea85f53920451da72b192d2e4c818981579e2233331b93538433d5eb3c70d42c3034734767dae9a9f760db6c19918e3f59b8ad603ab8ec8570094e10a503e724e9f9d18eaa703d48c5b69424b6c9a86a3be", 0x71, 0x850}, 0x240000c4) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000039c0)=0x0, &(0x7f0000003a00)=0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000003b80)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003b40)={&(0x7f0000003a40)={0xc4, 0x13, 0x4, 0x70bd25, 0x25dfdbff, {0x2a, 0x9, 0x7, 0xea, {0x4e22, 0x4e24, [0xc8, 0x13, 0xfffff001, 0x8], [0x1, 0x9, 0x1, 0x2a21], r5, [0x439, 0x120d]}, 0xd, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x75, 0x1, "118dabfec3f9d75e752351e20af094bc48e151abd6afbe9488f9bbb696092b54ff196895d20e485ff087c8d9c6bbe79615a8f47882b761096e27f57110933ef4f77719a3670e5acd895645327133fa6e6373c660f5705c507e1f8153dcf30c8ccfb94c14686539d1ecec8e2349705735c7"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x880}, 0x4008000) connect$qrtr(r2, &(0x7f0000003bc0)={0x2a, 0x3, 0x2}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003d40)={0xffffffff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000003e00)={0x18, 0x6, &(0x7f0000003c00)=@raw=[@jmp={0x5, 0x0, 0x8, 0xe, 0x9, 0x5c, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xa8}, @generic={0x4, 0x4, 0x6, 0x9, 0x8001}, @alu={0x7, 0x0, 0x5, 0x2, 0x5, 0xfffffffffffffff4, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f0000003c40)='syzkaller\x00', 0x8352, 0xa, &(0x7f0000003c80)=""/10, 0x41000, 0x0, '\x00', r5, @fallback=0xc, r0, 0x8, &(0x7f0000003cc0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000003d00)={0x1, 0x3, 0x8000, 0xffffffff}, 0x10, r6, r0, 0x8, 0x0, &(0x7f0000003d80)=[{0x3, 0x2, 0x6}, {0x2, 0x5, 0xf, 0x4}, {0x2, 0x4, 0xd, 0x2}, {0x1, 0x3, 0xd, 0x350e988105a9fdb1}, {0x0, 0x5, 0x3, 0x3}, {0x1, 0x1, 0xf, 0x6}, {0x3, 0x1, 0xc, 0x2}, {0x1, 0x1, 0x9, 0x8}], 0x10, 0x8000000}, 0x94) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000003ec0)) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000003f40)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000004040)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004000)={&(0x7f0000003fc0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004015) r7 = accept(r0, 0x0, &(0x7f0000004080)) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000040c0)={'batadv0\x00', 0x400}) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000004200)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000041c0)={&(0x7f0000004140)={0x5c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240000a0}, 0x20004008) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000004240)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000004280)=0xe, 0x4) 16m3.522376119s ago: executing program 4 (id=373): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@exit, @generic={0xe, 0xc, 0x3, 0x0, 0xbfe3}]}, &(0x7f0000000100)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x9, 0x701bcbdb, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x5, 0x1, 0x3, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@cgroup=r4, r2, 0x19, 0x0, r1, @void, @value=r1, @void, @void, r3}, 0x20) 16m3.373504611s ago: executing program 4 (id=375): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x86, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x10}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x10) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r1, 0x34de5000) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r3, &(0x7f00000009c0)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0x5}}}, 0x7) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) 16m3.275125355s ago: executing program 4 (id=378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2, 0x0, 0x33}}]}]}, 0x16c}}, 0x0) 16m3.093278058s ago: executing program 4 (id=380): r0 = socket(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) (async) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x8, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0015000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 15m47.903025614s ago: executing program 32 (id=380): r0 = socket(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) (async) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x8, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0015000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 2.998065186s ago: executing program 5 (id=8981): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140)="9cba264d486bcd6cd45fc7de77918aedd0395e7b8070e0822ed44181c57e9a15743ba384d96948538c9cedc163a8e64c4e009452549aba3b8883693811f203c85c98daabb67a28975787d575aa7f550d9ac933605d0f752921b59a4d6c75e1bb67a19c86486cd62bacfd4b41ad0c2c3336ea532c241fa2ff4ab548e264e72eab5aab07c4ecb709ce25ef2d343153675db2606488c8c10a2bb31079863e94dceb", &(0x7f0000000200)=@tcp6=r2}, 0x20) 2.991185961s ago: executing program 1 (id=8982): r0 = socket(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000006080)={0x2c, 0x140f, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c015}, 0x40000c0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e20, 0x9, @private0, 0xffff2cb8}, {0xa, 0x4e20, 0x7, @mcast1, 0x6}, 0xffffffffffffffff, {[0x26be1df0, 0xfffffff9, 0x1ff, 0x10001, 0x8, 0x1000, 0x6, 0x1]}}, 0x5c) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a1a01000000020020a58a28b3320000", @ANYRES32=0x0, @ANYBLOB="00000800089da9c91f3237e00002002d1c4e"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040084) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r0, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) 2.776249492s ago: executing program 1 (id=8985): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) sendmmsg$alg(r1, &(0x7f0000007dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40000}], 0x1, 0x24000000) sendto$inet(r1, &(0x7f0000000240)='F', 0x1, 0x840, 0x0, 0x0) 2.545646491s ago: executing program 1 (id=8986): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4) sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x24040000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x92}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x94}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="ace041bf85bb5a", 0x7}, {&(0x7f00000000c0)="fa6f8370250734859949db841823e3473940377c8c26d75324abf60c10ed0c56b98a1458dc0cfe092e3d7fc12723748e1df2b41706c45923235975cc2ccc9a5bce8667eb9557b66f260eda317ba890c7aec885a3273356f295c910894573acb075e7527cb183b07b1713653cbbdf0b7dd43a4351df06347df501a13a680c74b21623d55df94dc222012b06d453fd0e125d6e53547557061129861cbcf93e963b66f9bd39cbbcf646494330b3bfb0afc52626e593d7bba5ea3a525f499d78c9dc", 0xc0}, {&(0x7f0000000180)="ca0054694a35af04c3269e09ac469b6110cbb6160171a862665e234b42ccc3749905b7a1368ad60d679c1791faab9b9867eb20123085770ae89e3f2c1e23d9e7f2a5940d16e625d8680062386cfa265031ee97a7ba0ed24e1700ed429de07ff7fd8de286392f1dfef13a3d25412b929184dde76c57947823c2e28291bcfc3a43deb90ac17e6594d8080b724ece7377890c4ef8a3de9358039038b3a4084075dcff64", 0xa2}, {&(0x7f0000000300)="7272ab146a8c18c06de5defb0f3b47665c90d5fe56d8f1ae284eea6dd750f3d2daba0ab62b6e9dacad5f9833d1c90d1341cf3fb3aec3a6b46081039cf6be6b33b6f9854c65f873788fc18960020e8d662650b87031", 0x55}, {&(0x7f0000000380)="b3848d7e4e690d40d334d612c082dd41a97734a1dad9a22fce611880c657e3", 0x1f}], 0x5, &(0x7f0000000440)=[@op={0x18}], 0x18, 0x20000001}], 0x2, 0x11) 2.528786666s ago: executing program 1 (id=8987): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_address={0x0, 0x5, 0x32, 0x20, 0x0, @in6={0xa, 0x4e23, 0xa, @remote, 0x2901559c}}, @sadb_sa={0x0, 0x1, 0x4d6, 0x4, 0x9, 0x51, 0x0, 0x40000001}, @sadb_ident={0x0, 0xb, 0x75c, 0x0, 0x7}]}, 0x11}}, 0x20000084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="ffff00000000000000000000018000009111490045f200009500003600000000"], &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.87352618s ago: executing program 5 (id=8989): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001100)={0x0, "bf0df08e7cc7023526c770b4832f2db5"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000002c0)={0x10, 0x3, {0x0, @usage=0x800, r1, 0x4, 0x65, 0x8, 0x9, 0xd, 0x80, @struct={0x8, 0x2}, 0x1, 0x4, [0x8, 0xff, 0x2, 0x200000000000, 0x1, 0x1]}, {0x2, @struct={0x2, 0xa527}, 0x0, 0x7, 0x200, 0x10000000000, 0xfa, 0x2f, 0x431, @struct={0x5, 0x80000000}, 0xf5f4, 0x7fff, [0xfffffffffffffff7, 0x4, 0x1, 0x0, 0xe, 0xb49d]}, {0x10, @struct={0x40, 0x5e03}, 0x0, 0x63654540, 0x2, 0x1000, 0x5, 0x0, 0x2, @struct={0xa, 0x101}, 0x0, 0x8, [0x97d, 0x3, 0x5, 0x4, 0xde, 0x3]}, {0x896, 0x2}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000006c0)={0x1, 0x1, @start={r2, 0x0, "4676028fb1e7db75628280b632f1f90572dd5fa2c459d5e6ec4ae6aaaa0fef8d786601a4f065aa7d114aaef073b130c7075428f7630a55f95cd30e37b199d1c3859fb9bc4cc70985b5f927053460448c187269a5a236e6d720f1718d94b16a9761b5c26227e0e6aad93d2718585158966ecce3c369ee39204e2bca154c11b7ea2248295d3c048a7bc0c955fdf7d8333aa01615f6aeb803087a945671fe443750606527544f968d8624eff4c341548aa4a7ea6af0ad8142cd791cfbbbefb39a56e7a8dc23faa69a76d3f159d9dfca83c1a52805437523d14155a4095cec2e2527d33071097aeae937b22908c7bdfa6e2da42b08c74373a0ac3033651789f9ddd6e8bfbd5dc15b5f95b664dc290b3c29ef633991c48b5d6f0a0399ba2804a23676e08a6121460df9710d350c768143e6ee35949667e48d1a082368aca0908cc3bdedce922b89cc9b22971a1dc85344938d026396e541eddff9236e8676cc3965eecc429ef04e874e6f4938a5bd62ec709305e51d4c6b3df4c4178d446d3b532edcd323f9ce2b0d9ddfc1b19f2f4fb39ad65b127e651ac7d7f1425a38646336ab1609b37b18d779e950192aad7f72e17517d1d8e38e4a070d901857bf4d732108f2a703b0b9af194b70336c1c1869f866d6e59ac0b5d55318e7497088c5f8251c3d978b9a8ae579a3f8426ec5391a6005f81a07c97694a62fbc2605bba758d1e3f5e81a3b617efe1737a27bedb24023ac7f3fe9eda6b4a483eccb59659418b4e72951ce280b24238b0d5fc73f23cce4b47876716d222cfc38f972720a792a29c76ef71a25e0fee84da9efe27864809225b357e86c5a8311f7ae098111a22a125eda0405f248cd1c63417ba425b867c53fd7cc2ce56349246e3aba2fe34fcc517ae8f907890eb115bb050ec67eb81e6b1b3630fc1b5cd98007fab2cfe850c921771f7615cfca2d244c8dea695f6dc4a7c2c48873581d4fbe500a418ab84130dc78d7cd933a0a6e31b2e7ce406f189fccb876be8ac61aa8e93a9a9bfd81692920e3891e0ef8fcb95fcfd9b09e6d7f9d2c60bd53ac824842e9811d8c99e0c47d52b1655d425c180c222c53ac1ac9fcfbe2768bdf530ae8e3c1cc90549d37dd66db7a94281c0ce74c4f1a57de2433445e9c768d5156129d2ff565e1b169232c51f10b88a8e87be80d1634ea227a39c87398576b9affe269549e947edc54f9015d5e680d7314452eb5e2a7ae13e5aa1cde5402c11496ca7ea53d2666db36cc295b9e3b1f622d4d2c7043957b70c7a56592b340b07d906e6e9ccb1edf6ebb660f44e2290805c327a42974a29f14d0983c945dae79820cfb10b80c1d70fb70df2ca72a968e072764a7a59d2e9943e6481a2ea1707ebcebe0a64863f5ca7513adab6ccda88b9ab759f22846c8fb4b3a2dd11cc3f73e9c9c7313c391511133e803d1b549426a70", "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"}, [0xa, 0x4b0, 0x2b4e, 0x4e7d9df5, 0x52b, 0x10, 0x64af, 0x2, 0x2, 0x0, 0x7, 0x8, 0x3, 0x8000000000000000, 0x10000, 0xd7, 0x331, 0x8000000000000000, 0x3, 0x8001, 0x2, 0x8, 0x7, 0x9, 0x8000, 0x5, 0x3, 0x2, 0x2, 0x7fffffffffffffff, 0x8000000000000000, 0x100, 0x8b75, 0xe, 0xfffffffffffffff1, 0x8, 0x9, 0xd, 0x1, 0x40, 0xb76, 0xfffffffffffffff7, 0xa0c, 0x2, 0x81, 0x2, 0x3041, 0x13ee, 0xfffffffffffffe00, 0x4, 0xfffffffffffffffd, 0xe76e, 0xf71, 0x7, 0x0, 0x3, 0x8, 0x3, 0x6, 0x7, 0x5, 0x3, 0x9]}) 1.871765804s ago: executing program 0 (id=8990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000001e40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e00)={&(0x7f0000001240)={0xb88, 0xd, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5ec, 0x3, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xe3, 0x6, 0x1, 0x0, "6ba906fe4ca532db1578719f0b93bdd92a1008f8ca0fc024d699c9fa46ac025ba678fb772bc3b31e39e8888c89cc356ce4b5d33af8181ce59576855fb1c6dec401530c68fe95730d42e9bb135e4cc1c17206ef36bf71f043e9112c94fe1a9f2ebe28f8f37722c3d9dba9dafb52c229666566b217678eb60c1197bb8d020171999fa1cde6562590079b98cc678bf0bbddd015e046d49626a6cac58003ae3d089c31a27f6e8a838ed07b931b6d569a46ed58218a588a0c180f1093db5bafa02eff8eff0164d40159c369c7a3de82c8bcb8be1c78d189c6ca809bfcb1ce4e0ab6"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9d5}]}, {0x420, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x90, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x89, 0x1, "4501237e7dd332ac6c1031e7221222541b3bd97d856c77df66a01ecdcdffdc6687c0bb339b4ab3da74d5e210bd4e94236a3c76051e23ec881df323b7ed98aca7a9886fec528c7742cbeaed10ed623fcd43329b139d4f3d90145c3177009b96bff753cff560ba3ffbdfcf55387e4e6ac9dd8b30c4dad243ab8d31e6410929215bd031b2b9b4"}]}, @NFTA_SET_ELEM_KEY_END={0x16c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x12, 0x1, "2188e6b716766d433089a275fd6d"}, @NFTA_DATA_VALUE={0x21, 0x1, "3ad7336f237cf04a1b4d650983de7ebd8cd919fd185f5323fa72aace3d"}, @NFTA_DATA_VALUE={0x38, 0x1, "ee870b3a6071c360bdd6f01407ab3a88b60575818f8e9aef135c2288033376419be5b4103f5dfb0ab9da5b06196f402545c30264"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xed, 0x1, "0bb1b25126ce3385991c882a7f701ce28112cc3fd79ea057395f44596709e17b95a253d0f129a53ca2addad8795206da82ae868e037b6755936f0f6e511b96958b94b0b1fce1fea0a571b84894c3eb55728978ed48b7665db7f907e6b94c85d8ca19e0919e5bb56fd1b8106fb58bd6409fada6ae1a3ad25ad2c873fe3d06c38e5709daf2a7b40f18571b4122f6a2c5c80fb9a445d58dc5970b85434cbf92c0506995f3b308db63204f380d23cc2ed193c07225ee8aeabc1b4b5fa96e865924a68188081a30f40f53f1a2d3b2b0668bb0379cc414d7911443ce475a7ee5833e55f50ca0bb6ee7af2448"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, @NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x96, 0x1, "e03f61b7c1e08a2e74821a0893faa7b43237cc93db3d2157e90fd05065c6c76ab4a4722318a3080283876ecc728fc85d6cd95586f8d7906d49599ccf34b36e4a2459166b2323548d664ce1473add4393b175a92364572e11955bf182867faf15b9dc2081a3b45d86756f4737751a3bd0fe5d3365814e0d9941a49c34fc631cafb990ba81bed1d7d339ff019613c3941cda80"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "aa8ec292feb0b21319be4c398d4ea15a07913a29d704dadac9d06aed9611dac05f3c039233d2be6165d47e9193b3f67fe15cfc2974dee0072879281ff15fd88d910ce7f06b9894838de224daa36fe79a6a455766c6691443dc2813bd8e5ac80d7a193de2973e33274f6bd5cd740ce7f3d90ea516ff3472"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x580, 0x3, 0x0, 0x1, [{0x464, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x92, 0x1, "81d30d697bc9fe8d211012c49e4367727952d4e985a27cbfbdbf7eb5c4b26222d9b51d65842cd196f0db4c9e7ff56b36510296fc68ce69e33ae92106cb9c5a41b97f254c7777031487229d0e56848ccec1c6520b0d87c8abe00976eae4f2f31c57fe04f4be921fb22194e49a7c2c733660f78b3d62c6aebeb1ee87e6f79a104c6bf74b44520e765f67900167d426"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xd8, 0x1, "98feede47198cb16a5a3fce50e10567846aa5171a71c3c267f41b57a308d8fd4548fb3d23890dd2c240d13d3830e8d774150d71828bb6b14c35016ea0d0cc9398e8d01ee0bbad1444b2041071a50a73d889558ac9da3cf5587c9dd8360a5ae6569fe3229871532ae1c4b64ae39a6c694cb765b288309d58131a4ee8a86676b916b001a465c12e3fc85fd66e5403a47e49374dc5171ac29808d24490d8591b69522a837d42874b04e7d2513add7e69ce541486d8617c9b300087eb80617172d66bb48318d3f09e56f68f5609c6fb8e3e35204b61f"}, @NFTA_DATA_VALUE={0x3a, 0x1, "0334274eaa79061ed5c967a1fbbc49b4eb158b81881183a0f8399de74cee4a041221535a715032ba53c6fd16d35e65b86a1140e81221"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_USERDATA={0xe3, 0x6, 0x1, 0x0, "6583b039ecf0f9f717a6da080e739ade6bcbb408db992c0ad217377230902f5282f56b06bffa759dded81a4c572c6efd6f5fe9e0bd9f134a0beb1f42a2c670ef093d170e7e4521e233f90cd2b186db19fd094ce141fd6eed646e78861f54c915721e2be3cced99d0177f913e5a1406e68e1420a5ab7955d1774a5628ab63bbd4d893d954792d77421e7fc755a3cebaf75fa21a33da6f8f980cb31a858af156ad147e07d126be1767132384572cf3c93295a6b8368cc8b36abcf28b74e29bacbfaa91278449cdadc3527d14eb2a812759bcabaa76d79b2db2373263f8aabd81"}, @NFTA_SET_ELEM_KEY_END={0x50, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf6, 0x6, 0x1, 0x0, "4581f0cd073fd66c651c3a62e73f42ba802ae8d7efbb88948177ef406a40449006f491deeacf489cf73ffb399b0ec81a55b18f7aa4358130e4d4afa35e9f96a3c21a6d525504618280ac84b727eae31311878becb49db50abf327a1c0fe55465b82361febe2dd74027fe29cc436a46ddc82ee0b1562b7e4dfb880ba1bb0aae1cfcbfd73dd545cdce6bb5e56bfdaea2fe9c18d3fb81974d0ef6419458f72d148fc82ab8701b583d589be9b4912222150660968c621cb6c3bad35b3248a4ce866e434de4ccb61aa52ffe9829cb30ab5751b6eef9775d236999329fbbb6d49cd4bad080a039b7aab8e3c2e04cd41d23a61d23d3"}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}]}]}, 0xb88}, 0x1, 0x0, 0x0, 0x80}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x0, 0x9, 0x7, {{0x1c, 0x4, 0x2, 0x2, 0x70, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @multicast2, {[@cipso={0x86, 0xa, 0x0, [{0x2, 0x4, ';N'}]}, @lsrr={0x83, 0x1b, 0xe6, [@remote, @loopback, @loopback, @private=0xa010102, @empty, @empty]}, @end, @timestamp_prespec={0x44, 0x24, 0x77, 0x3, 0x8, [{@local, 0x2}, {@remote, 0x9}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @generic={0x88, 0xe, "ab97561a478d3c787ab5fec8"}, @noop]}}}}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@fwd={0x6}, @float={0x4, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x61, 0x2e, 0x61, 0x5f, 0x2e, 0x5b, 0x30]}}, &(0x7f0000000140)=""/140, 0x39, 0x8c, 0x0, 0x7}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000011c0)={{r0, &(0x7f00000003c0)='syz0\x00', 0x40000, &(0x7f0000000400)={@align=0x9888, {0x0, 0x9, 0x4a, 0x1}}, 0x5, &(0x7f0000000440), &(0x7f0000000480)=0x6}, 0x7, &(0x7f00000010c0)=[{0x1, 0x5, &(0x7f00000004c0)='syz0\x00', &(0x7f0000000500)="cb6192093ca071efb5b5516983f8fef4dc8b3168ebcca99532dc075578015bf79c23e570df9e57c0aaf023f29dc5f23def2c7901954921b5615627b2484daea22b80a115b06c851e96a33920795c6a00b336ad86a4001dda114d6b29ae1ef691f9d7d1699126f3799a70e350e840d07fb08cb9902b6de8e345354cec7ea406c28913d5bd4a43c2d70b000e798862a4f44127c3baf078ee6cbe679be0aebea73e3f013d60dc9ca366a43985cad9cba3732342e1d6de", 0xb5, 0x8}, {0x2, 0x10, &(0x7f00000005c0)='\x00', &(0x7f00000009c0)="434c8cfcc862f23ba6a96b82a49e80e4614da2630909b875a973636528dcd6c4fb05caa5028705914a289bb8b01e67615b0f3680a5f811b4c8c5b76bf02d5246a22ca8baadc0e32bd8afa2a78bae318079e98e71eb8ae87e30fb707c19591175f20fd24f26a6fdb63e48c24ba4bd5296bf5fbd9b04ba4bd70dcf90473f50ebe995b7ec0b1e239eb9d18b355b03dc39de317699f41268c9f16684b9c123e1c3c05fdb26bdadc76cf8a52d774cfe1dc940335a7a4d9c045f52048d1840959e94df6d2352", 0xc3, 0x20}, {0x2, 0x9, &(0x7f0000000b00)='syztnl1\x00', &(0x7f0000000b40)="4f18c12eecd2d44790af76fd900c4830194f3a00", 0x14, 0x20}, {0x2, 0x6, &(0x7f0000000b80)='%\x00', &(0x7f0000000d00)="05c8d2157d24479fe7ee971743e2a74319c8880636a0ebdce206ff727579df357118e9166c37fa5be3c8ae6973e6e651fc53125431197130f8b8c505573c07c91ba6aa1204b1cc06d72eee30d72d7ebb5bd57391938dfa346dc7ac0b1204d4143fdb6fc890bb5220d0bb2c39373b28c8500a837a173380867c588445abbf7b78b192be88ee0e3abe8879f8660ab6c90cc3638bc0ea8530c30e2ca74bb9928b47b56f98e8eef4fa595251625656becb16d7dc81b54aea516984cccf0da80ded32d01f", 0xc2, 0x8}, {0x1, 0x0, &(0x7f0000000e00)='\x00', &(0x7f0000000e40)="b536f857cdc4629618d30680e8b92310b0f6c2d6bcc24cc6e421b2b95e95f42206200282e060f353bd19ba7d5c8c9b30085ae0d289c1dfcb0f1d3e5b41aace959f91fa05ea2bb16f2244f021cb7c6c7c485d64a5cd5bf46c30dc14bfe430bf28556e745a38806c140dac6bb02ac8f6857874fa470f122ba292d48d2fde9e099ed3e07d2eccd7314da29b70ca47579dd684ce33a39ff06b4b8bf66621b7a3e578810565c58336e30810fc362d93f60d0b80a97da8213409a2ad0d1a8aaf3237b79aa3d7ff75f36a26b85158f5b47e104ca3155de065b6b7567c390c74d6265a22d06d25f5cacf6abc68cbb1db", 0xec, 0xa}, {0x2, 0x6, &(0x7f0000000f40)='syz1\x00', &(0x7f0000000f80)="8ae1e08b727ec190258a6f08838d28c83ed0f6047c19", 0x16, 0x10}, {0x2, 0x3ff, &(0x7f0000000fc0)='syz1\x00', &(0x7f0000001000)="5b5e6eeac9577e60ef8a62ae8a3484ede2ad51e161ade13b82b34ddadb792c91977625d4b92ec8b3c08c8bbd743d08596fbdae5b12a315eb3a20b77bdb20c3adb9d24d3ef7dd1394009792f8b1b386c31a7f641d64ee75304ade8a92cf5dd47770ab16aa9f62e0c46a2cd739a1b951b07b61488e319f56eff64e3381a54b3f24f1d97661e63960dfb4d6353059453c", 0x8f, 0x10}]}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r6) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1d, 0xea, 0x1ea21208, 0x7, 0x4, r1, 0xe566, '\x00', r4, r5, 0x3, 0x1, 0x3}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0) setsockopt$llc_int(r8, 0x10c, 0x6, &(0x7f0000000bc0)=0x8001, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) ioctl$FICLONE(r1, 0x40049409, r5) 1.786577397s ago: executing program 1 (id=8991): r0 = socket(0xa, 0x80000, 0x87) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) (async) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f0000000740)=""/83, 0x0, 0x53, 0x1, 0xb0}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f0000000740)=""/83, 0x0, 0x53, 0x1, 0xb0}, 0x20) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r1, 0x0, 0x0) (async) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) shutdown(r3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3}, 0x47) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3}, 0x47) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0) (async) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000340)={@initdev, @private, 0x0}, &(0x7f0000000380)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000003c0)={@private2, 0x0}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) (async) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r14, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r11, &(0x7f0000000240)="44c394f305916c4516999da2080095a11ada0a96a7113c0ca50c0be5993e477c43fd", 0x22, 0x0, &(0x7f0000000440)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000500)={0x0, @empty, @multicast1}, &(0x7f0000000540)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x4dc, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7942}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x22ca}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r10}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2000000}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x4dc, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7942}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x22ca}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r10}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2000000}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$unix(r0, &(0x7f0000004440)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x40000a0) (async) sendmmsg$unix(r0, &(0x7f0000004440)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x40000a0) 1.773906254s ago: executing program 0 (id=8992): r0 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xac2}], 0x1, 0x40, 0x0) 1.695057247s ago: executing program 0 (id=8993): bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r2, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400004000fcffffff000003e4", @ANYRES32=r2, @ANYBLOB="0000000002000000200012800800010073697400140002800800140001"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r4) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$can_raw(0x1d, 0x3, 0x1) 1.541577288s ago: executing program 0 (id=8994): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x11a, 0x0, &(0x7f0000000300)="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", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 1.337986707s ago: executing program 3 (id=8995): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x1a) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000100)={r0, 0x0, 0x852, 0x400, 0x9, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x8895}, 0x40) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8931, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 1.213574072s ago: executing program 3 (id=8996): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000062eebdef623a3e6500caeace08b588ff7dfa115c0770916b8a77dec91b313d1768e1247a"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000062eebdef623a3e6500caeace08b588ff7dfa115c0770916b8a77dec91b313d1768e1247a"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000440), &(0x7f0000000140)=r2}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xae6c2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) 1.12607694s ago: executing program 5 (id=8997): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000100)=""/143, 0x8f}) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000001080008001d000000", 0x24) 1.124292353s ago: executing program 5 (id=8998): r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031200e4ff", 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffff81}, 0x10}, 0x94) socket(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031200e4ff", 0x6, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffff81}, 0x10}, 0x94) (async) 1.078592386s ago: executing program 2 (id=8887): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x54085}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}]}}}]}, 0x38}}, 0xc810) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390428bd700003000000004000000f0d52a4bb3686badee6d8885572099fe1e2e11f6c8a71a64996f2c207c9c9bc7a3b877a12c340e299f7096d00be2cd8d8e12dfe2d3a982fb7537e924d6487a5fdda6f09b1c781069505ca2a96048a03ae5fe2a02102e41c51c937ec56c4874c249f923b6a1a5018d46c15e39831f5aa85ce40a380574a83eceff1ad", @ANYRES32=r1, @ANYBLOB="00bd0700000000001800128008000100677265000c00028008000700ac1e0101"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x40104) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000e000000000000000000078a151f7508003900050021", 0x28) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000180)="b20c3e37a4098ab6631751e54edc0573bdd35b17e4a16a74eea49de6da90a2a8ec9684bd06d85089b3e8f1d143d8757bb9a7fe9e56a388662e5cbe911667f54adaed21ed81e6fb6b58cc96c312c9da450736789e87322695e8e5a170618c8795930300adacd3e7b8d38065bd09d45cc8f12b054518c869d77b8d22") r7 = socket(0x9, 0x1, 0x8) accept$inet(r7, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r10 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xdf, [@local]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x6, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x17, 0x2, {{0x4, 0x1, 0xff, 0x3, 0x80000001, 0xee9}}}}]}, 0x4c}}, 0x20040084) sendmsg$kcm(r0, &(0x7f0000003680)={&(0x7f0000000480)=@caif=@dgm={0x25, 0x2000000, 0x40}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000000600)="a7fda1670b777d51516c15920973d7cb899ee2a0986ec028a53e496a1eb8ff4d03a06e793e464bfd8cdfdbdcad566b25f8a998507671e838acacaa0afe8921504533012936872f32e29050d74c58be57fadfafd2", 0x54}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="37cb7ade7ccecdd2ee745105070c9602261d79a3149ffdb91a771b0dbae2a9e0691eef010057528399ad9855aa5b724df9152b849a8dbb752f9ce931e5544d5d36ab00b11a71e7efcd32848080fe5d5f5602ca3e7a61054ac33b0bb0db572acf48f905f317c3e4250cfb5016ecd70852bda78f7b62fe6f1728c6a80d454e80b58955496d32d85960248859cc42713be001e155454efd373744d2f1180b3551aff3e3036bdfbd930dca653fea7c6132a8b2a13ecab77cd5a0af4cacc6", 0xbc}, {&(0x7f00000023c0)="04257fb2a1637817aca2b394b1400ffff24192d3df2feaaad355aa5f8e69a16ff9094dff", 0x24}, {&(0x7f0000002400)="53f99e0262b98acc06ae4587209505b06eed1b7730f63909381c4fa2c6bd09bf91981fa681444d5ed144e6ba36908e0418d3e880390ceafb829a5b8b02caf8d3d281e572dfd0613efaaea9233dba3d9a051258f66d5fc837af7cf1047e190ad996a450fb11473e9447b96251483d7a86d6e852d487ea8b06ecf8cbc5ce6e2f858640e3429b744f33ddea03c9326e77470db30e3d442f379f38c4d3088fea7d277ffecfb27414665d0d872bba68337355c8c943819ac9d654dc837472c144a6d8b37749f67aa2d9460cb9ac8c1cff8482db8616551442f2c030061aab5aef05babf5b25360345733b3245b4acf6f32b9a4fe633cd70f3392705a201a0e5e5250f968f44d3b99161c39c34630cad571b0843378f155200e078a3f4655cc7131675c7826964c839e059a595835d2cb41b3dda870cb22c7242bf8c5844ebe0aba4dc99bd3f63d06fdd472cf5d3cd0b1993169e5bbba38c7348c12d839299ea6dce5fb06097601624593709833b0e26cdbcbcec833b9cb4eb824b517f85dd2fc40c4758c55ca4da8ef6220812164569e20e2c3ea1b7ff505557f8144608f2cb32c6c9caa661a792ef8baaec31daff8c2978399caf9bb9e45a68b4bb43332b6c82a45b4596fbc7021bc833b333853fb03ca6ab2376b355a655fa031555b2b27f33c368a8e882666b0119fb12eeaea926bced75d2e722ce444994f4f0bc9bfd1929cb85fb736e8d9ab3647407068356e534e25d47da6236ebc4c6b373901866778c15af160d9dcfffce6212215595a3267f90eb1677cf162a114e055ecb1536fe902d33e97d3ba1646d8141b2ceea18cb0f954eafef689ef139104d413543d280bef8e60f3d5e1e5c17404e6f730bb32eef1d3c4dcbd7c8564f2e9153582501cc308c4e550c2abde10249548f3739bb6dbec9251a414696b1c48a79bc649e180f61b6e0ae231497d0b19452a6bd6a46ad08cdcbdc239ccf075a273b26dd36581896030fdeedaaac0022efb06d1e947b69e6087b43976b82b28d21b42c7ff954ade0c12dec06b94ec9f689d8ee191fe421f77ad01cb726c696a2a052bfe6f63d94a4e46d73a29a97e2aaa7a17c1c7603318c7e944e3ef50957700741f87c78459b8c0c95d491d0dcd9c50ad26c1f1c3466fb0ff0362d62b111f18f92193b00f0922c3a4f473cadd25c9e4d804b12770c292a2a7c191d4bac959d9486e4b36fd0fdf01f2bdef3c2212f53fdac81a441f02a9cc63c1e9e52b01e3c8fe342d4cfd3c64565e5beb630a00137a9d427d7b551b6e86d67d561bf572f24c1d6acd3231a66129a62e25aa516058e0cb66f9032a931a378553c69c7a00b1872c1d5395655b37b687e2c7384b2f4609230be61ec5c25d453f093198a5f98836d4030f3fbc440752e60409f3c4511a8af2ac742c46237bb0cffcfa30609a420ee9d1ff70cea17e7c045767e5eb8b6224c8d8499e582670dde811c0e5b7ef14b5f62e5af47e285d6e7c32a4906f7251fa3bb757dbc298142382f0c87e67732d3c920281ed19b672964b8d8b894ceb22beca280c7e527ac80a10d37690af11cf0933e3ce6109035f5af25f088aae55ffa119c8d68095404df4d6606402aaee6f506703d990bb97d3f4cdd49bb6e527f804fb139d877f65256307b5d8ecd5bb1503c079f3d0db4e1e31b57e4110323c4b06573a597ecee29fc6149514bf8975016db4decb262b3672a8987929b8724b74b66e135e0ec8545d1b7b54a043bda0223f2e589e363b98cb223a9fcbdd66c61e2d7fc786aae6982099a49a28735ed0a9b226c8f665bd4c4ed9cba23e33ad6bb3873955b893db9f3e4b29c69134d6513dd5d736bbaf2fd196a1cbc6ec6bb5ba1e0fccd807a2bb0c98e512a5b95cbb88447d4d03b6ed26909426f2436c6d6af6dbcabb7394803f292e2fa806ffe7f2b71527dac88770579cc91ed15afd101ec9cc3910f5ab3ea411db489fd63e5910155673b091806aea5e1107522f8d61c0373f0c8729059ce71b48c2f820aac6d80440e1368ec39c90a228da678b70a6129faffd18719174937df0b5f34742fbd98c059374a271467e9df49283f3d146c28ea4ec25df12da38c502e66a826e54ca661472ea9b505b3b3caaab7766c7aa43d12abf71abd3e3419a1fa19f80bbb15059023b884d09c84157b1c6c7da3479e3b7c165291fcc10f8c773c42d924eb8345ee2dfa48ceb2dff1355c62de10edc541c6a50d1bd5581618d26d5bafd5f82553de0e212cc07c3e6b25f8ef92ca97dbdd6134719c1300d0092516423ec83dd07ad05b5acaae45321ad9532870ffcdb7364dbde001466ef96c86aa1209240a50f238fc2676bfa29670170577b44769dcb721f923b187d52f2fe7194082aade4d4fd63d11f19162f5359b1844083b9f7a20ab31b19430d261768bc49adde1c1fc7d1a8d3e0d6e2aa87e2c8f314fbd1f141c92d2f6c4b230696bc92db02e7f67c2521ef0bffff7fde621cb9c0cb0649437cb27b0f867822dfb0609fb2514043ad6558e4eb29757cbf316fcbc52fe0a0edfdab6f6965e1bbc8aae11dc66bec89cdeee5157633e445e7577b701c3d574ac0f3b91550e2f29bb3724c2ed11ace34cc8c764b98b96fe3811a3caf516576dac648735b60b9a966fe5c175c04191190085e57983a001026ed495f6c2d0662203138cb244f1b554ecff26ff8cf091844c33cb13aa314bbb386b13d6a26681d0df66f1d334c9a6f0ea525ffe6930d34a132261fef5c95e1f593e3972573d7749808eba0b82f44a39955488189599b407bacaec7229dd390b354b2d0778d94aafe3ae9941ab9d99c1586bc532b68d95354e216a84cedb0fca61d54a7c3f4fa8059c6a3643e7634f59c56e9badfb1e165dd1157bda3b19e5a14b381e93b073dd1f6564d0555fd6ccaea002d3225cf1c72dc7a79f34ee40be7283a669f73a1ca3d235c4c83c14b5556ce7ebc5a51ea9eabac0527082bfffc434dd6e01cf7a637e27878ada735cd448d53351b29ee3ee211382b2f5aaee3bdb361a8461dde13de4d8b83c01fbcb149dc211fb4cd1399cf551a54902b9ad8cbf6733dd3482626b007f498dfa7121c506a3d2503e8031523c79f63245fff56089222f567858eefbfa6b25f083957091dc5ef063644fb59606b41afb5f16664da3906cb02edb40069882bff017a9532a24a705a1d2d81982fd55ffd5e69567225d3b57c883caaa6bd4ff11064263a77f63e4fa90bd63bdc1fa8652eb417354d9f5b14efb0ab4f20459b6d8f1c0ac8bcf49b703c1c3e22e8d559f1ce37e5e936d44f6561f2f6253acaee742e43a712ab2f3eedbef6f97a7689b0b9588e3b9fb14ac525308b761b1ce0d7ff18c7a217b2781f130e378fcf48e68b8fddd182926f42b14c9494e6ff1e1f82ff35c68eb414c5698c0c9963d44a00680b7a68d595f0a58fc3888b24d950e11a160e1da57c7dcb67b9f58a022940e4e4d4711f2b4fcb8c43eb4751b349789bfe8de7d68fc0b8ff7f808f0cc38997f15fbf00a69063671934a33855a27201bb809c7a6aea3071ba18f8f92afbbcbd28ae5b58b04c1da9ee65c131878753e9a53ddbbf1a91b5e0e13488eb7c7ecfa7db5e7217204372d069fbd23330314a1340b7a150df7c3689f128a06d613a04ea60c1480c464e98ac4db7e0330c93cbc783c384db5242afc2d2e9c621c52e6efe8e1fd08ad68084d3a7d54c4266baee64f6d3876cccbca1d4b6d71c1efb6b380c82bdf946d66b53a60c8cd294e77286fd2aece1cce3277fff2a2cc169c6baa61b80fbfd79291562cffbfd93e2ac0d05ae8723b457fe3a20eb57740e7fd2ed0f77fc8d2f3d16399568b1193e9a0271a861235d5d722854f88458df7906714fe22b89d419ad4285737e6c5127d69ceae767d58cd37f206351ad334a5457f5793c3156c5d52ca5f5b30c783d56dc4151227cc51d473b0fc2587e141b8ad5299aac77a14491001f19e7ce830439e060fb5e8f5e9dbd8a40875c90a6490208883b8aaa7e9257674245d110b2f7e3b35b254a6e628cc05976eb714ae6ce01fd509e2bebace3c0e344b8c4d5a688665e5e6fc51c4e7f2034a100f88b11e78e5828a2970e0d6c024b74020a312fdbc6ccca3a9b8da7e03d15519f1858318cb8fec31a6b6c571cab29a2cc6e543e9f9ec46ffbf560f9f52a31104bb0920ee9ac8adc16839f6f308c32839dfb6ba08ca499f5fe09f05feba5e6ef3dec0d87d4176619d1ca9eeca33b2f04bab43b4595741ded705e01be8909e03bf6aa38e7f86db14a7124e7cfe0f74c44b663f73cf6c2ef8cdeca2d4b7cd3e2c212738e642232e0de6a920751a99e66564f8dd4b1ff52ec88630348763f3c778fdfc2e73e139336b3fa935fef0dae642aa3ee65d5598157bafa4d462b1b0cc24172c79b29bbe11ebf17e2731ccde570a594855fa0b80f9984b477d1197892db750aa9a60a2f73e2dd2e17a07ac086508823e16286e42ace8962c5d7c5bebce1c7ba8bfb69d0493806cf150c4efffc8353ea4b660011bfc5828ee1ff3fdbf80d7c429f313e04b163e2cefa8370da7ff0c1a52f68774b3c1345ca8b8a62e6ad48ff3562a242cc9b90052e0a8cbe59327c5232d3f89a6a790ee8a0dee58bde701e5674b9de58070f4ac8838bdf0dbbf232f5aeb696268bdb19ce401fac0b8438f58665a1cb6b4b76a5cc9c56c6ba6aa9fa2c578b349792cc355286cbb564bf2bc6bb4ed3e6b43af5d42c7a9e9d1c8fdc7f0cf34e3f3865fa20119b5268dcc27cced77c5121a029b176d0f73ba40c0037a2c8047f3fd88088326fd184b79053f8f5330e12a97b3b9d2924213c2925ba88a1e56cc93cba441fd4de3bbd664e285ad6d7d4b487ab88fca2fa141d447a2d160f2798cb4ee35d83945d413d87990f59736ed5352234021f1053be7a8ed2f0bf3cc6311835c9a4631fc3b7eb48f2a10f2101ca30314ff5a354b5ecd898e67522114af976928e098965da90bba27ceb6e841b6a8b157543594c19440d25f2270812eac4c8f87df6db6f46cdf485d427fd128eb630c58fd316b72041ef7eec97c6cc8371d152481fd57c93c68ca6b26051992818651318af08d6172d15b868afee20816f7a197c3848d3548a8c4d1626701875a73c2627a617349146732259d40ec1853b739e1873093e559b147710eff2f9c53b82e3620b71569d01e8e6512eca5f44c0d2d498de18258c3769a26862321871a85407404d7ac3df718b9c63ec8c758ab63a89d12ce0a79d475a385f76ef6771ef33f4fad46c32bc4fb45a458e8fff17f434d5ea33ab93c4db8f940765dc34376fd722553d87404deb68560988f19744e32cb7256ab43cb77bc49e47a356f9dbc6f4e062c7419024efad0aa2697eb27e56d08b373518dbdafb333d01ea3474658a06070d3f5abe2e314175505428beb7ae1eb800bbe65c81bbcc426589d0b601e624141ee3bfeaaa9e533b0fe4dca3cc0c00ff7d81ade176f6029196d8be44953b4dd2108b731166d06989f9186975b73c3d62a202bfd584a0e28ea692c995272706eed99f18d5caac51dee1caea1f5150701a762e40c3dd68b74d957cf5759e18a7970f9ea244901ac4863244d13f1bcfe79c6d3a6d9c5f31da685ee0ab63e1dbd7eab392a3b19ec8eb66488729a76bf12f1c857316dc1430f754be3e73b2fd2a9da011776cdfc50104b55e9017b1a1009c91667512657bfb41a68e546fc96c097ac840121dbe40c4b03ebb6da27e82a715e83df66baee162673619fbdcdd97a389049d46457c9a458a063dc126faa58dbfdfab605f2e76097a44165", 0x1000}, {&(0x7f0000003400)="8e7df6eadb400ac495a44a2c797ab2bbf7888a22da8499a8b5640c0266e78f81e47118642c6cdc725841c04c89efba9096e23cbd8ebeab9df6b563db1f62ae82bf7f1cd35c8b9e027642fdf167d6f4d0708894efebf0bac9c5753043f33541237c66388c97ef467f0f3112fed839d76e5182223cf4871f6cf1c67eaacb25d56d647f60f32847f0ed2d254343c6da230af5579f06dccc0f95cb3400c563b80fee2fed48117f6d9b", 0xa7}, {&(0x7f00000034c0)="75873788dc873dfff267e399cf9072ea36d1780a89969f507ecdee138f1d70797b5830ac9ea8fa6935bf530c9aaf5ab0d0fb5aad5245dc6ac00ccaa3917ee95bcbcc499eae4c1cc89634838ea1a4819e9917c09f56e6a8cb0150d32a09d09de6f83dd17e6ca1d95aef4d961e0b8180df89c561e8186e2a458eb796f386e7a2850e3399520e75eeed248bb5ba298c258b11dff0d0361230f7520fb33aa18fb20e0a691daa4d2864aaff2792c154b9be3a68558f72361333b1ca832be99a64aff8252f90bd7101e48b5d10a67607b5e0384b", 0xd1}], 0x7, &(0x7f0000003640)}, 0x20) 988.65351ms ago: executing program 3 (id=8999): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000950e000000000000c1560000850000001900000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x5) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r7) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1c0, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @local, 0xffffffd2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @loopback, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ad}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff8d4a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x26c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002600010125bd7000fcffff97637a6e000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4040996}, 0x2000000c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x2}}, 0xb8}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r10, 0x10, 0x40, 0x1, 0x2, {{0x11, 0x4, 0x1, 0x4, 0x44, 0x66, 0x0, 0x4, 0x2f, 0x0, @broadcast, @broadcast, {[@noop, @timestamp_addr={0x44, 0x14, 0x7f, 0x1, 0xc, [{@local, 0x5}, {@empty, 0xede}]}, @end, @rr={0x7, 0x13, 0xff, [@remote, @remote, @remote, @private=0xa010102]}, @ra={0x94, 0x4}]}}}}}) 837.531381ms ago: executing program 5 (id=9000): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth0\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711071000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e9}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'pim6reg1\x00', @random="1174e47eb9da"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000500)=ANY=[@ANYBLOB="3202020200000000fe800000000000e3450056000080000000383e8b52762bd031ebcd6aec07221b3a5dbc1613b7531454e3b3400c7ad58c2ab53dd43b10113607e2ec61436ab71ab856af74851e78a9a2224d593cd753ffc995fec5ef96a774c15c7ad8aab2881676e0da22d542328338dd3c4e087ea126704784cb3022f7f0cd022665bcd574cb"], 0x18) sendmsg$sock(r0, &(0x7f0000001640)={&(0x7f0000000200)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001900)="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", 0x1130}, {&(0x7f0000001280)="6f9f835b9d558776b748800ea0f1dec3867995ae354fbcc668ee075e3ce9c42997086c30222cad8ea2d463ac5742f7ef8c991fd2a644793dcd5b19227053db37a43a04b663cbec35a4a18d63646b51f4f94e136b9253dd4ff347d431bffe2596b05f552e2cde7d11a703f2bfef178979f20b55057cc86a5cfc916bb86f411930794d6bff10", 0x85}, {&(0x7f0000001340)="84a4446ab429d2feaffb30c1d6329485b8a287b661fe1d9200184ba496b02c369b7d06000000000000006ff5b9ce997628c60b8fb484130a79814725ea412478a2c7c6f27b97868b0a36874f21b2ab0df27029f2196e107b598b3da794266928a5ab4dc470492a9463edb671c2d9381642c4a9b40641cb4b5518e4aa8ecaad4b68d900000000", 0x86}, {&(0x7f0000001400)="e8ef108d85c67264fc54fdb52695236b33b460cc8de6b30b6de95ebde972d94ea21937ca12a6bbc341714a5dde76b9d59bb1e3efbcfd29cf725a682dc948c1d32768676b006ec834839d7efc", 0x4c}, {&(0x7f0000001480)="3a562f7124f285660a111501575ec1aef5d283973122e7700f2668f57fdd0e5aa680101441e4659e15cad9e12a", 0x2d}, {&(0x7f00000014c0)="f1953125628e5b17e24604d7ef4b8b89208047f031e56289410b1928533e9939005f30a3e6923f627cfce26b0ea017", 0x2f}, {&(0x7f0000001500)="57f81343d70a8e45f45d751f144228e50eb7ddd9a8b59c47e9ca8d04215e583e868183c86b5b58f9ebc5935cb3de3593c2f9590a8790d493e10e07fab3", 0x3d}], 0x7, &(0x7f00000015c0)=[@mark={{0x14, 0x1, 0x24, 0xe}}, @timestamping={{0x14, 0x1, 0x25, 0x300}}, @txtime={{0x18, 0x1, 0x3d, 0xff}}], 0x48}, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf251000000008000300", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20000040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x15020000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x11) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x1, 0x10, 0x7, 0x2, {{0xd, 0x4, 0x0, 0x5, 0x34, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0xc, 0xec, 0x1, 0x5, [{@loopback, 0x56b}]}, @cipso={0x86, 0x14, 0x0, [{0x7, 0xe, "ddc7b7ccab5698ff4d8a77ce"}]}]}}}}}) bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x4, r9, 0x3e, r0}, 0x10) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000000c0)=0x2, 0x4) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYRESDEC=r1], 0x28}}, 0x20004000) 799.016901ms ago: executing program 5 (id=9001): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044885}, 0x2040) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000510000009500000000000000496129dfafb2c1a96cf1c19e83af5c74056c880fb7a58c7e8a05b9f497c1f49d78538c27c8a4723aab2764f049366ae4b8186227d9ae029b759430d71c80215e27803467f5184db71d2468cf73ce1ec231d7cf03685467a409c4623f830513f44e3d713ca06a9f7d7d488ad36d4d2765dd96f04eb061384e50dbbfacb898c20a87279a8bd8af845c2a6b148ed74f35cb6beec027bf74d11547dbf526c21518c0cb232278a8a90c71d1ff572413d1544fd4d0f1e6eb05179c1ce29d424481"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000009f08dd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000900)=ANY=[@ANYRES16=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080061ae8480739ae547b7d8d8cc20001500000076000000bf98000000000000560800000000000085010000b4000000b70000000000000095000000000000006d7f", @ANYRES16=r6, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES8=r4, @ANYRESOCT, @ANYRESDEC=r6], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in, 0x4e23, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x7}}]}, 0xc4}}, 0x2c000010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ec0)=@delpolicy={0x358, 0x14, 0x800, 0x70bd29, 0x25dfdbfc, {{@in=@broadcast, @in=@rand_addr=0x64010101, 0x4e24, 0x369, 0x4e24, 0xfffe, 0xa, 0x20, 0x0, 0x21}, 0x6e6bbb, 0x2}, [@proto={0x5, 0x19, 0x2b}, @replay_thresh={0x8, 0xb, 0x8001}, @policy_type={0xa}, @algo_comp={0xef, 0x3, {{'deflate\x00'}, 0x538, "2aefa3609da3ab75824167e9433550b969bfdc5202866b3bdf1a2d91ea8ee2c1ec83050b5ac66230dc51e8d1a299baabf42fbfb18029e843043e692a8f59ae0732bcd82d9831d5472490ff6e2edab3369f100d6f04552b6387dba176622089b8bc8035a1d066dc00d5d25ac643e548a19bbbf2f9b301b769ab848749b745d786d8d1cb1199f30710ad07a187a6134f1a78340d6cc2e4606f4da1655e5f0d2edbc3ed3fdf0a41a4"}}, @migrate={0x9c, 0x11, [{@in6=@private0, @in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@broadcast, 0x6c, 0x0, 0x0, 0x34ff, 0xa, 0xa}, {@in6=@remote, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in6=@empty, 0x33, 0x3, 0x0, 0x34ff, 0x7, 0x2}]}, @algo_auth={0x120, 0x1, {{'md4\x00'}, 0x6c0, "53a67e97d3f203583f8422e039f83d1d2e80b03114a07f2b755560cdcab59d2b9a967f801d704d947e5a05a898f4e136144e8f129745eace6e68ded8e82ba01dee000000006701b91aecccb24d96b36232e0701e11ce5b1dbfcca09869457221d2823d12388fdd47b59b3d2ec4b05c2f89861ef1cf317a5913bb4adac8552f42e6ea12e6a3e7af4dde5778fee09f62a20af2c508cc75fe01b874295c1ff1919af0707370e3cc2845d760a68974d31bc88fa993f4dbac0974ae17c516d5860a68c32c38a76e3b1ef927527eef3d054e510b1ed946130366ad"}}, @etimer_thresh={0x8, 0xc, 0x9}, @lastused={0xc, 0xf, 0xb6}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, @in6=@mcast2, 0x0, 0x2}}]}, 0x358}}, 0x0) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r10 = socket$inet(0x2, 0x3, 0x2) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa", @ANYRES32, @ANYRES32=r11], 0x1c) listen(r9, 0xffffffff) r12 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e22, 0xf29e, @empty, 0x5}}, 0xfff7, 0x9}, &(0x7f00000001c0)=0x90) socket(0x2c, 0x1, 0x8308) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 779.950022ms ago: executing program 1 (id=9002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000400000540000000010900010073797a30"], 0xe4}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 729.879077ms ago: executing program 3 (id=9003): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000090000000000000000000085000000870000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24b40, r0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x1}]}}]}, 0x44}}, 0x24004000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x700, 0x7, 0x3d47, 0x6fa, {{0x23, 0x4, 0x1, 0xa, 0x8c, 0x68, 0x0, 0x4, 0x2f, 0x0, @local, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x2b, 0x8, [@private=0xa010102, @multicast2, @empty, @local, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @private=0xa010100]}, @ssrr={0x89, 0x13, 0x95, [@empty, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, @local]}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0xe, [{@broadcast, 0x3}, {@multicast1, 0x9}]}, @cipso={0x86, 0x21, 0x3, [{0x0, 0xa, "a5acb37ce5d50f7e"}, {0x1, 0x4, '90'}, {0x6, 0xa, "1c57fba368036f09"}, {0x2, 0x3, "df"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x5, 0xb, 0x9, 0x0, @local, @empty, 0x8, 0x7f01, 0x1, 0x5ff7}}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x24, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xe4}}, 0x4000081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x644, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x618, 0x2, [@TCA_BPF_ACT={0x614, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x1d8, 0x12, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4004, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a32031dc5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x100, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x4, 0x9, 0x7}}}]}, {0xae, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8f7910df14f457f0b939aa1f7843f8d23ac707b39fbf4f38ff98effeff9b08050eb3e0e7e3e0b71672db4998037b547ee365f59092089a7e3e54e904ebe868f339d0f6a5ad79a6287cdbb16e3238dc8077ad21fd0fe097a227ba67efad74f0a441dfcd88e59a523aa041d602fab87928dc5ebc4c007fb8856019ad4252708b18bb036e4b855a38630c6aec103073dae680d15fbf65d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x1d4, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x401, 0x5, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x7, 0xd}, @loopback, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x2, 0x10001, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x1, 0x3, 0xfd30, 0x1}, @dev={0xac, 0x14, 0x14, 0x41}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0x1000000fe}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x7b, 0x74e69dde}, @local, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x1, 0x3be6f802}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @private=0xa010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x6, 0xd}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x19, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff72"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x88, 0x9, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1df, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x468, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x4}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) socket$unix(0x1, 0x5, 0x0) 696.62337ms ago: executing program 0 (id=9004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xe}]}}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x81}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0) syz_emit_ethernet(0xb8, &(0x7f0000000000)={@random="5999326e2801", @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x4, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0xb}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x5, 0x0, 0x1}], @llc={@llc={0x6, 0x0, "4cef", "23da5c56439d5213818129ee69e1846485026bd7a99a19bb69eaff8cd77aff49c8db4322a8595db93d40e7cad90ea2e2ca362f11dce516a98c6aa39450aa5d0cc776e06b0c270bd28d64b36a169a239c1e15447f3c967c1e38d61026a100c9b8ab01fb802be15a68338f4666143e45355778307cccf6d729befd1051b3456bfc3a4bd2b92864bdb09559"}}}}}}, &(0x7f0000000100)={0x1, 0x2, [0x8a5, 0x657, 0x6f6, 0xc04]}) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x10, 0x8, 0x201, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x6}, [@typed={0x66, 0x74, 0x0, 0x0, @binary="e6918827d8abde1c8d055f2d46fa4cc473334c2aa8bc4e448ac685ec30b94c934fd9d7d2d4bb2d817078b4ccee113205c418c22f3eb1ed6453a36219d85b4645e3f0210f4e8f64321b23736c3ee1356d694f5c593fccd553f5ba99de490e0d8e64cd"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 576.349084ms ago: executing program 2 (id=9006): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x20, 0x37, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000000), 0x3}, 0x28) 453.699765ms ago: executing program 3 (id=9007): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) 452.317128ms ago: executing program 0 (id=9008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x0, r3}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001500010300000000000000010a"], 0x14}}, 0x0) 380.632946ms ago: executing program 2 (id=9009): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000064c0)=0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r0, 0xb15, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x1400c000) 148.975564ms ago: executing program 2 (id=9010): r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x42010) 37.687285ms ago: executing program 2 (id=9011): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0xa7, 0x6d8, 0x3, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8000, 0x8000, 0xe}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0edd60bdd04cdf4de2a6b9da92100c8808aec69a4ac8efe121c7f57b423b0a3f45fda867", @ANYRES32=r1], 0x30}}, 0x800) 34.064577ms ago: executing program 3 (id=9012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4d9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xea}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x18}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(0x3) 0s ago: executing program 2 (id=9013): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) (async) kernel console output (not intermixed with test programs): in network mode [ 892.554772][T31911] tipc: Node identity d26116e96d36, cluster identity 4711 [ 892.573026][T31911] tipc: Enabled bearer , priority 0 [ 892.581287][T31911] syzkaller0: entered promiscuous mode [ 892.586758][T31911] syzkaller0: entered allmulticast mode [ 892.594142][T31912] netlink: 'syz.1.6782': attribute type 4 has an invalid length. [ 892.618345][T31911] tipc: Resetting bearer [ 892.625419][T31910] tipc: Resetting bearer [ 892.642998][T31910] tipc: Disabling bearer [ 893.204732][T31936] syzkaller0: entered promiscuous mode [ 893.213325][T31936] syzkaller0: entered allmulticast mode [ 893.593072][T31949] syzkaller0: entered promiscuous mode [ 893.598583][T31949] syzkaller0: entered allmulticast mode [ 893.739700][T31955] syzkaller0: entered promiscuous mode [ 893.749696][T31955] syzkaller0: entered allmulticast mode [ 894.332973][T31978] tipc: Enabled bearer , priority 10 [ 894.884696][T32002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 894.894568][T32002] bond0: (slave bond2): Enslaving as an active interface with an up link [ 895.016920][T32005] syzkaller0: entered promiscuous mode [ 895.047002][T32005] syzkaller0: entered allmulticast mode [ 895.394906][T32013] syzkaller0: entered promiscuous mode [ 895.407836][T32013] syzkaller0: entered allmulticast mode [ 895.524052][T32026] netlink: 'syz.2.6837': attribute type 1 has an invalid length. [ 895.579388][T32029] netlink: 'syz.3.6838': attribute type 28 has an invalid length. [ 895.582076][T32030] netlink: 'syz.3.6838': attribute type 28 has an invalid length. [ 895.587242][T32029] netlink: 'syz.3.6838': attribute type 3 has an invalid length. [ 898.791292][T32026] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 898.791965][T32032] veth0_to_bond: left allmulticast mode [ 899.117787][T32066] __nla_validate_parse: 7 callbacks suppressed [ 899.117807][T32066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6845'. [ 899.208732][T32074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6848'. [ 899.257897][T32074] bond3: entered promiscuous mode [ 899.263260][T32074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 899.277258][T32079] openvswitch: netlink: Message has 1 unknown bytes. [ 899.307773][T32075] 8021q: adding VLAN 0 to HW filter on device bond3 [ 899.314877][T32075] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 899.315501][T32079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.345183][T32075] bond3: (slave sit1): Error -95 calling set_mac_address [ 899.394424][T32081] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6850'. [ 899.558982][T32092] validate_nla: 1 callbacks suppressed [ 899.559000][T32092] netlink: 'syz.3.6853': attribute type 21 has an invalid length. [ 899.602360][T32092] netlink: 'syz.3.6853': attribute type 22 has an invalid length. [ 899.610221][T32092] netlink: 'syz.3.6853': attribute type 23 has an invalid length. [ 899.618658][T32095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6853'. [ 899.627665][T32092] netlink: 'syz.3.6853': attribute type 25 has an invalid length. [ 899.636652][T32092] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6853'. [ 899.892822][T32112] netlink: 'syz.1.6859': attribute type 22 has an invalid length. [ 899.900750][T32112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6859'. [ 899.911803][T32112] netlink: 'syz.1.6859': attribute type 22 has an invalid length. [ 899.918347][T32113] netlink: 'syz.1.6859': attribute type 22 has an invalid length. [ 899.927433][T32113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6859'. [ 899.952579][T32112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6859'. [ 899.968454][T32113] netlink: 'syz.1.6859': attribute type 22 has an invalid length. [ 899.976297][T32113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6859'. [ 900.064996][T32126] openvswitch: netlink: Key type 153 is out of range max 32 [ 900.424928][T32146] vlan2: entered promiscuous mode [ 900.430331][T32146] bridge0: entered promiscuous mode [ 900.445518][T32152] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6869'. [ 900.547865][T32162] sch_tbf: peakrate 4 is lower than or equals to rate 2147483647 ! [ 900.563189][T32162] ip6erspan0: entered promiscuous mode [ 900.568666][T32162] ip6erspan0: entered allmulticast mode [ 900.707357][T32168] syzkaller0: entered promiscuous mode [ 900.712984][T32168] syzkaller0: entered allmulticast mode [ 900.975599][T32180] tipc: Enabled bearer , priority 0 [ 901.043760][T32180] tipc: Disabling bearer [ 901.055800][T32186] netlink: 'syz.2.6881': attribute type 1 has an invalid length. [ 901.352602][T32208] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 902.241681][T32260] tipc: Enabling of bearer rejected, already enabled [ 902.598525][T32283] netlink: 'syz.0.6913': attribute type 1 has an invalid length. [ 902.610373][T32287] nftables ruleset with unbound set [ 902.690053][T32283] 8021q: adding VLAN 0 to HW filter on device bond3 [ 902.715819][T32290] vlan2: entered promiscuous mode [ 902.720891][T32290] bond3: entered promiscuous mode [ 902.726108][T32290] vlan2: entered allmulticast mode [ 902.744463][T32290] bond3: entered allmulticast mode [ 903.074072][T32322] syzkaller0: entered promiscuous mode [ 903.113151][T32322] syzkaller0: entered allmulticast mode [ 903.300616][T32336] syzkaller0: entered promiscuous mode [ 903.306137][T32336] syzkaller0: entered allmulticast mode [ 903.816404][T32365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 904.283347][T32396] __nla_validate_parse: 15 callbacks suppressed [ 904.283365][T32396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6947'. [ 904.693535][T32416] validate_nla: 2 callbacks suppressed [ 904.693568][T32416] netlink: 'syz.2.6951': attribute type 29 has an invalid length. [ 904.830737][T32425] syzkaller0: entered promiscuous mode [ 904.848327][T32425] syzkaller0: entered allmulticast mode [ 904.864085][T32427] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 905.268322][ T5638] Bluetooth: hci2: link tx timeout [ 905.280217][ T5638] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 905.475327][T32464] x_tables: unsorted underflow at hook 4 [ 905.502745][T32465] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6961'. [ 905.534995][T32465] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 905.550912][ T5638] Bluetooth: hci2: link tx timeout [ 905.556159][ T5638] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 905.621875][ T5638] Bluetooth: hci2: link tx timeout [ 905.627131][ T5638] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 905.773641][T32485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6967'. [ 905.819784][T32485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6967'. [ 905.829421][ T5638] Bluetooth: hci2: link tx timeout [ 905.834607][ T5638] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 905.879908][ T5638] Bluetooth: hci2: link tx timeout [ 905.885123][ T5638] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 905.957204][T29290] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.010404][T32495] syzkaller0: entered promiscuous mode [ 906.017687][T32495] syzkaller0: entered allmulticast mode [ 906.038867][T32495] 0: reclassify loop, rule prio 0, protocol 800 [ 906.043392][T29290] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.081145][T29290] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.186333][T29290] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.637146][T32543] openvswitch: netlink: Missing key (keys=40, expected=100) [ 906.639743][T32541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6980'. [ 906.771607][T32546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6980'. [ 906.832576][T32541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 906.853134][T32554] x_tables: duplicate underflow at hook 1 [ 907.094336][T32556] syzkaller0: entered promiscuous mode [ 907.099842][T32556] syzkaller0: entered allmulticast mode [ 907.206098][T29267] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa3 [ 907.220223][ T5638] Bluetooth: hci2: link tx timeout [ 907.225476][ T5638] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 907.304662][T32562] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6987'. [ 907.308650][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 907.393640][T32554] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6984'. [ 907.538554][T32562] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 907.550776][T32562] gretap1: entered promiscuous mode [ 907.556084][T32562] gretap1: entered allmulticast mode [ 907.792750][T32595] lo: entered promiscuous mode [ 907.810178][T32595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 908.176457][T32608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6996'. [ 909.952020][T32566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 910.485999][T32641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7003'. [ 910.493950][T32644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7005'. [ 910.505808][T32644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7005'. [ 910.661079][T32658] xt_TCPMSS: Only works on TCP SYN packets [ 910.671386][T32657] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7010'. [ 910.710595][T32662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7011'. [ 910.737805][T32651] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7006'. [ 910.800211][T32669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7013'. [ 910.834719][T32669] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7013'. [ 910.872108][T32669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7013'. [ 910.876968][T32671] GUP no longer grows the stack in syz.1.7014 (32671): 200000003000-20000000a000 (200000001000) [ 910.882483][T32669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7013'. [ 910.892640][T32671] CPU: 0 UID: 0 PID: 32671 Comm: syz.1.7014 Not tainted syzkaller #0 PREEMPT(full) [ 910.892667][T32671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 910.892681][T32671] Call Trace: [ 910.892689][T32671] [ 910.892696][T32671] dump_stack_lvl+0xe8/0x150 [ 910.892729][T32671] __get_user_pages+0x238c/0x2720 [ 910.892792][T32671] ? __gup_longterm_locked+0xc3b/0x15c0 [ 910.892839][T32671] __gup_longterm_locked+0xd52/0x15c0 [ 910.892868][T32671] ? lock_acquire+0x106/0x350 [ 910.892904][T32671] gup_fast_fallback+0x1d8c/0x20e0 [ 910.892961][T32671] ? __pfx_gup_fast_fallback+0x10/0x10 [ 910.892990][T32671] ? is_valid_gup_args+0x11f/0x200 [ 910.893017][T32671] ? get_user_pages_fast+0x4d/0xb0 [ 910.893044][T32671] __iov_iter_get_pages_alloc+0x378/0xa40 [ 910.893084][T32671] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 910.893128][T32671] iov_iter_get_pages2+0x5e/0xa0 [ 910.893153][T32671] __se_sys_vmsplice+0x7b5/0x1660 [ 910.893195][T32671] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 910.893219][T32671] ? __pfx_futex_wait+0x10/0x10 [ 910.893308][T32671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.893332][T32671] do_syscall_64+0x174/0x580 [ 910.893354][T32671] ? trace_irq_disable+0x3b/0x140 [ 910.893374][T32671] ? clear_bhb_loop+0x40/0x90 [ 910.893398][T32671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.893418][T32671] RIP: 0033:0x7fa0d219de59 [ 910.893437][T32671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.893454][T32671] RSP: 002b:00007fa0d30a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 910.893474][T32671] RAX: ffffffffffffffda RBX: 00007fa0d2425fa0 RCX: 00007fa0d219de59 [ 910.893488][T32671] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 910.893501][T32671] RBP: 00007fa0d2233e6f R08: 0000000000000000 R09: 0000000000000000 [ 910.893513][T32671] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 910.893525][T32671] R13: 00007fa0d2426038 R14: 00007fa0d2425fa0 R15: 00007ffda7538988 [ 910.893556][T32671] [ 911.375558][T32680] bond1: option fail_over_mac: invalid value (16) [ 911.419702][T32680] bond1 (unregistering): Released all slaves [ 911.470164][T32693] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 911.562373][T32684] bond1: option fail_over_mac: invalid value (16) [ 911.588280][T32684] bond1 (unregistering): Released all slaves [ 911.832071][T32709] xt_hashlimit: max too large, truncated to 1048576 [ 911.860351][T32709] No such timeout policy "syz1" [ 911.887507][ T5731] IPVS: starting estimator thread 0... [ 911.903573][T32714] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20265 [ 912.009214][T32718] IPVS: using max 33 ests per chain, 79200 per kthread [ 912.317432][T32732] bond6: entered promiscuous mode [ 912.502885][T32738] bond4 (unregistering): Released all slaves [ 912.621968][T29276] tipc: Subscription rejected, illegal request [ 912.675334][T32750] vlan2: entered promiscuous mode [ 912.683400][T32750] bridge0: entered promiscuous mode [ 912.753429][T32758] bond3: entered allmulticast mode [ 913.016051][T32761] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20003 [ 913.106387][T32758] netlink: 'syz.1.7035': attribute type 1 has an invalid length. [ 913.136065][T32757] bond3: left allmulticast mode [ 913.161653][ T301] syzkaller1: entered promiscuous mode [ 913.180373][ T301] syzkaller1: entered allmulticast mode [ 913.397451][ T315] bond0: Invalid ad_actor_system MAC address. [ 913.403884][ T315] bond0: option ad_actor_system: invalid value (1) [ 913.413743][ T315] bond0 (unregistering): Released all slaves [ 913.542517][ T330] syzkaller0: entered promiscuous mode [ 913.572086][ T330] syzkaller0: entered allmulticast mode [ 913.643503][ T333] bond5: option all_slaves_active: invalid value (222) [ 913.651823][ T333] bond5 (unregistering): Released all slaves [ 913.732856][ T341] netlink: 'syz.2.7052': attribute type 1 has an invalid length. [ 914.034744][ T359] netlink: 'syz.5.7057': attribute type 1 has an invalid length. [ 915.272115][ T447] Bluetooth: MGMT ver 1.23 [ 915.606537][ T464] __nla_validate_parse: 13 callbacks suppressed [ 915.606560][ T464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7089'. [ 915.869194][ T484] netlink: 'syz.5.7096': attribute type 21 has an invalid length. [ 915.960495][ T489] bond0: (slave syz_tun): Releasing backup interface [ 915.969627][ T489] bridge_slave_0: left allmulticast mode [ 915.975600][ T489] bridge_slave_0: left promiscuous mode [ 915.983878][ T489] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.992925][ T489] bridge_slave_1: left allmulticast mode [ 915.999736][ T489] bridge_slave_1: left promiscuous mode [ 916.005545][ T489] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.024552][ T490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.059880][ T489] bond0: (slave bond_slave_0): Releasing backup interface [ 916.071352][ T489] bond0: (slave bond_slave_1): Releasing backup interface [ 916.093337][ T489] team0: Port device team_slave_0 removed [ 916.100480][ T489] team0: Port device team_slave_1 removed [ 916.106541][ T489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.126435][ T489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.134247][ T489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 916.169317][ T492] macvtap1: entered promiscuous mode [ 916.174905][ T492] macvtap1: entered allmulticast mode [ 916.180306][ T492] veth1_vlan: entered allmulticast mode [ 916.187730][ T499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7097'. [ 916.363293][ T513] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7103'. [ 916.393833][ T513] syzkaller1: entered promiscuous mode [ 916.405789][ T513] syzkaller1: entered allmulticast mode [ 916.502449][ T29] audit: type=1804 audit(1782947120.586:9): pid=528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7109" name="/newroot/112/cgroup.controllers" dev="tmpfs" ino=584 res=1 errno=0 [ 916.524569][ T29] audit: type=1800 audit(1782947120.586:10): pid=528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7109" name="cgroup.controllers" dev="tmpfs" ino=584 res=0 errno=0 [ 916.633934][ T535] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7112'. [ 916.636840][ T536] netlink: 'syz.5.7111': attribute type 1 has an invalid length. [ 916.651350][ T536] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7111'. [ 916.849550][ T543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7114'. [ 916.864904][ T543] netlink: 'syz.1.7114': attribute type 3 has an invalid length. [ 917.510764][ T583] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000 [ 917.614857][ T587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7129'. [ 918.079617][ T605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7135'. [ 918.105373][ T604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7135'. [ 918.442859][ T622] netlink: 'syz.2.7139': attribute type 16 has an invalid length. [ 918.471507][ T627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7141'. [ 918.472954][ T622] netlink: 'syz.2.7139': attribute type 3 has an invalid length. [ 918.532157][ T627] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 918.754069][ T657] xt_hashlimit: size too large, truncated to 1048576 [ 918.793893][ T660] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 918.811112][ T660] bond0 (unregistering): Released all slaves [ 919.325314][ T630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 919.462489][ T695] netlink: 'syz.0.7150': attribute type 16 has an invalid length. [ 919.470492][ T695] netlink: 'syz.0.7150': attribute type 17 has an invalid length. [ 919.478925][ T695] lo: left promiscuous mode [ 919.543034][ T695] syz_tun: left promiscuous mode [ 919.559245][ T702] netlink: 'syz.3.7149': attribute type 1 has an invalid length. [ 919.562550][ T695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.566999][ T702] netlink: 'syz.3.7149': attribute type 1 has an invalid length. [ 919.592673][ T695] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.605877][ T695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.825899][ T695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 919.859847][ T695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 919.887003][ T695] veth1_vlan: left promiscuous mode [ 919.894992][ T695] veth0_vlan: left promiscuous mode [ 919.902303][ T695] veth0_vlan: entered promiscuous mode [ 919.909607][ T695] veth1_vlan: entered promiscuous mode [ 919.918979][ T695] veth1_macvtap: left promiscuous mode [ 919.925376][ T695] veth0_macvtap: left promiscuous mode [ 919.931859][ T695] veth0_macvtap: entered promiscuous mode [ 919.939927][ T695] veth1_macvtap: entered promiscuous mode [ 919.950361][ T695] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 919.959248][ T695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 919.966843][ T695] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 919.975133][ T695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 919.983294][ T695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 919.993166][ T695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 920.011069][ T695] veth3: left allmulticast mode [ 920.018576][ T695] veth5: left allmulticast mode [ 920.031190][ T695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 920.038946][ T695] ip6gretap1: left promiscuous mode [ 920.044390][ T695] ip6gretap1: left allmulticast mode [ 920.056082][ T695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 920.064701][ T695] vlan2: left promiscuous mode [ 920.069840][ T695] bond3: left promiscuous mode [ 920.075003][ T695] vlan2: left allmulticast mode [ 920.079892][ T695] bond3: left allmulticast mode [ 920.087768][ T695] 8021q: adding VLAN 0 to HW filter on device bond4 [ 920.110744][ T703] netlink: 'syz.5.7153': attribute type 2 has an invalid length. [ 920.182475][T29282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.259201][T29282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.351136][T29282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.359910][T29282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.363903][ T740] x_tables: unsorted entry at hook 1 [ 920.383981][ T740] netlink: 'syz.1.7163': attribute type 2 has an invalid length. [ 920.642273][ T754] netlink: 'syz.1.7169': attribute type 28 has an invalid length. [ 920.669690][ T754] netlink: 'syz.1.7169': attribute type 3 has an invalid length. [ 920.677493][ T754] __nla_validate_parse: 12 callbacks suppressed [ 920.677511][ T754] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7169'. [ 921.501025][ T811] sctp: [Deprecated]: syz.2.7183 (pid 811) Use of int in max_burst socket option deprecated. [ 921.501025][ T811] Use struct sctp_assoc_value instead [ 921.548867][ T810] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7181'. [ 921.580809][ T810] syzkaller0: entered promiscuous mode [ 921.586319][ T810] syzkaller0: entered allmulticast mode [ 921.594393][ T810] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 921.678382][ T820] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7184'. [ 921.758295][ T826] tc action pedit offset 132 out of bounds [ 922.705514][ T883] bridge0: port 1(wlan0) entered blocking state [ 922.711981][ T883] bridge0: port 1(wlan0) entered disabled state [ 922.718573][ T883] mac80211_hwsim hwsim59 wlan0: entered allmulticast mode [ 922.728185][ T883] mac80211_hwsim hwsim59 wlan0: entered promiscuous mode [ 922.814361][ T889] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7204'. [ 922.827328][ T889] unsupported nla_type 7424 [ 922.900917][ T895] x_tables: duplicate underflow at hook 1 [ 923.051435][ T906] 8021q: adding VLAN 0 to HW filter on device bond5 [ 923.163286][ T906] bond5: (slave veth7): Enslaving as an active interface with a down link [ 923.234550][ T906] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 923.246835][ T906] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 923.361451][ T5638] Bluetooth: hci5: command 0x0406 tx timeout [ 923.398958][ T909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7211'. [ 923.553667][ T945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7218'. [ 923.563710][ T945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7218'. [ 923.573676][ T942] tap0: tun_chr_ioctl cmd 1074025676 [ 923.579428][ T942] tap0: owner set to 0 [ 923.599676][ T945] syzkaller0: entered promiscuous mode [ 923.613072][ T945] syzkaller0: entered allmulticast mode [ 923.696485][ T954] validate_nla: 4 callbacks suppressed [ 923.696502][ T954] netlink: 'syz.1.7221': attribute type 21 has an invalid length. [ 923.709867][ T954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7221'. [ 924.204837][ T978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.221727][ T980] bridge: RTM_NEWNEIGH with invalid ether address [ 924.290265][ T987] netlink: 'syz.5.7229': attribute type 1 has an invalid length. [ 924.324722][ T987] netlink: 756 bytes leftover after parsing attributes in process `syz.5.7229'. [ 924.430182][ T978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.440637][ T990] tipc: Enabled bearer , priority 0 [ 924.449884][ T990] syzkaller0: entered promiscuous mode [ 924.455385][ T990] syzkaller0: entered allmulticast mode [ 924.500674][ T990] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 924.571166][ T990] tipc: Resetting bearer [ 924.589463][ T989] tipc: Resetting bearer [ 924.671338][ T1001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7233'. [ 924.684685][ T989] tipc: Disabling bearer [ 924.819338][ T1010] netlink: 'syz.2.7234': attribute type 1 has an invalid length. [ 925.033407][ T1019] syzkaller0: entered promiscuous mode [ 925.040940][ T1019] syzkaller0: entered allmulticast mode [ 925.711442][ T1094] __nla_validate_parse: 7 callbacks suppressed [ 925.711461][ T1094] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7255'. [ 925.807669][ T1094] batman_adv: batadv0: Interface deactivated: wlan0 [ 926.133816][ T1117] syzkaller0: entered promiscuous mode [ 926.139334][ T1117] syzkaller0: entered allmulticast mode [ 926.223814][ T1094] bridge0: port 1(wlan0) entered disabled state [ 926.900725][ T1141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7263'. [ 929.172431][ T1151] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7265'. [ 929.212094][ T1151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7265'. [ 929.310690][ T1151] macsec1: entered promiscuous mode [ 929.336190][ T1151] bridge0: entered promiscuous mode [ 929.354004][ T1151] macsec1: entered allmulticast mode [ 929.372400][ T1151] bridge0: entered allmulticast mode [ 929.390576][ T1151] bridge0: port 1(macsec1) entered blocking state [ 929.400114][ T1151] bridge0: port 1(macsec1) entered disabled state [ 929.416617][ T1164] netlink: 'syz.5.7266': attribute type 1 has an invalid length. [ 929.436052][ T1151] bridge0: left allmulticast mode [ 929.478067][T23121] bridge0: left promiscuous mode [ 929.933352][ T1186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7275'. [ 930.389890][ T1228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7284'. [ 930.692957][ T1253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7290'. [ 930.725658][ T1253] vlan2: entered allmulticast mode [ 930.730827][ T1253] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 931.354049][ T1277] netlink: 'syz.1.7294': attribute type 1 has an invalid length. [ 931.375305][ T1277] netlink: 500 bytes leftover after parsing attributes in process `syz.1.7294'. [ 931.474574][ T1279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7293'. [ 931.551382][ T1285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7293'. [ 931.717117][ T1294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7298'. [ 931.763826][ T1294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7298'. [ 931.930383][T29267] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.938463][ T1309] SET target dimension over the limit! [ 931.947513][T29267] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.977838][T29267] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.986591][T29267] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.149272][ T1312] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7302'. [ 932.160282][ T1318] netlink: 'syz.2.7304': attribute type 11 has an invalid length. [ 932.220850][ T1318] netlink: 'syz.2.7304': attribute type 1 has an invalid length. [ 932.264792][ T1322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7305'. [ 932.711600][ T1350] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7312'. [ 932.756796][ T1352] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 933.063355][ T1368] macsec2: entered promiscuous mode [ 933.573433][ T1392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7319'. [ 933.591790][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 933.724310][ T1396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7321'. [ 933.956428][ T1396] bond7: entered promiscuous mode [ 933.962115][ T1396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 934.626453][ T1425] netlink: 'syz.2.7327': attribute type 1 has an invalid length. [ 935.038021][ T1426] bond4: (slave gretap1): making interface the new active one [ 935.087468][ T1426] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 935.123551][ T1441] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 935.302835][ T1450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 935.330239][ T1454] netlink: 'syz.1.7333': attribute type 2 has an invalid length. [ 935.519067][ T1467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.412307][ T1516] xt_hl: Unknown Hop Limit match mode: 206 [ 936.450237][ T1518] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 936.473412][ T1518] x_tables: duplicate underflow at hook 3 [ 936.509428][ T1520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.571248][ T1524] tipc: Enabling of bearer rejected, failed to enable media [ 936.768196][ T1530] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 936.790339][ T1530] bond6 (unregistering): Released all slaves [ 936.897815][ T1533] netlink: 'syz.2.7362': attribute type 4 has an invalid length. [ 936.908065][ T1528] __nla_validate_parse: 6 callbacks suppressed [ 936.908082][ T1528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7360'. [ 937.032403][ T1550] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7364'. [ 937.513855][ T1573] 8021q: VLANs not supported on ip_vti0 [ 937.557460][ T1574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7372'. [ 937.575128][ T1576] netlink: 'syz.3.7373': attribute type 1 has an invalid length. [ 937.626956][ T1576] bond0: entered promiscuous mode [ 937.659093][ T1576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.738939][ T1583] IPv6: sit1: Disabled Multicast RS [ 937.748932][ T1583] netlink: 'syz.3.7374': attribute type 1 has an invalid length. [ 937.783340][ T1583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 937.811082][ T1583] bond5: (slave gretap2): making interface the new active one [ 937.819638][ T1583] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 938.111603][ T1604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7380'. [ 938.316997][ T1613] syzkaller1: entered promiscuous mode [ 938.344333][ T1613] syzkaller1: entered allmulticast mode [ 938.354185][ T1616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7383'. [ 938.386642][ T1616] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 938.416586][ T1626] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7387'. [ 938.454572][ T1628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7385'. [ 938.481108][ T1626] xt_policy: neither incoming nor outgoing policy selected [ 938.604458][ T1634] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7389'. [ 938.756985][ T1646] syzkaller0: entered promiscuous mode [ 938.762496][ T1646] syzkaller0: entered allmulticast mode [ 939.383376][ T1677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 939.394294][ T1677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7400'. [ 939.460603][ T1679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7401'. [ 939.476781][ T1679] team0: entered promiscuous mode [ 939.484283][ T1679] erspan0: entered promiscuous mode [ 939.491306][ T1679] debugfs: 'hsr1' already exists in 'hsr' [ 939.497068][ T1679] Cannot create hsr debugfs directory [ 939.508782][ T1682] netlink: 'syz.3.7403': attribute type 10 has an invalid length. [ 939.542774][ T1677] syzkaller0: entered promiscuous mode [ 939.548523][ T1677] syzkaller0: entered allmulticast mode [ 939.582634][ T1682] team0: entered allmulticast mode [ 939.587792][ T1682] team_slave_0: entered allmulticast mode [ 939.593582][ T1682] team_slave_1: entered allmulticast mode [ 939.599508][ T1682] bridge0: port 1(team0) entered blocking state [ 939.605857][ T1682] bridge0: port 1(team0) entered disabled state [ 939.613624][ T1682] team0: entered promiscuous mode [ 939.618652][ T1682] team_slave_0: entered promiscuous mode [ 939.624396][ T1682] team_slave_1: entered promiscuous mode [ 939.865275][ T1701] sctp: [Deprecated]: syz.3.7408 (pid 1701) Use of int in maxseg socket option. [ 939.865275][ T1701] Use struct sctp_assoc_value instead [ 940.041106][ T1710] netlink: 'syz.2.7410': attribute type 11 has an invalid length. [ 940.059626][ T1710] netlink: 'syz.2.7410': attribute type 4 has an invalid length. [ 940.382355][ T1727] netlink: 'syz.1.7417': attribute type 1 has an invalid length. [ 940.607095][ T1731] syzkaller0: entered promiscuous mode [ 940.618084][ T1731] syzkaller0: entered allmulticast mode [ 940.648312][ T5860] IPVS: starting estimator thread 0... [ 940.799125][ T1749] IPVS: using max 27 ests per chain, 64800 per kthread [ 943.559768][ T1771] vlan0: entered promiscuous mode [ 943.567763][ T1760] smc: net device team0 applied user defined pnetid SYZ2 [ 943.732146][ T1780] __nla_validate_parse: 6 callbacks suppressed [ 943.732190][ T1780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7428'. [ 943.773877][ T1779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7428'. [ 943.913460][ T1790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 944.250301][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.257551][ T1824] IPv6: NLM_F_CREATE should be set when creating new route [ 944.264784][ T1824] IPv6: NLM_F_CREATE should be set when creating new route [ 944.285023][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.327949][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.335534][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.344066][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.351782][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.366409][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.374073][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.394397][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.401888][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.450005][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.457540][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.465018][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.472528][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.480002][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.487507][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.494964][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.502439][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.514325][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.542705][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.550227][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.557697][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.565161][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.572650][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.580166][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.587629][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.595102][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.630111][ T1845] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7445'. [ 944.631473][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.660833][ T1846] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7445'. [ 944.671995][ T1846] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7445'. [ 944.689557][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.697061][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.704535][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.712019][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.719488][ T1824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.786791][ T1850] syzkaller0: entered promiscuous mode [ 944.792535][ T1850] syzkaller0: entered allmulticast mode [ 944.838559][ T1854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 944.903844][ T1856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7449'. [ 945.088134][ T1862] netlink: 'syz.3.7451': attribute type 1 has an invalid length. [ 945.097274][ T1862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.154133][ T1868] IPVS: Unknown mcast interface: vcan0 [ 945.213488][ T1871] bond2: Removing last arp target with arp_interval on [ 945.223261][ T1871] netlink: 'syz.5.7454': attribute type 1 has an invalid length. [ 945.877362][T14218] IPVS: starting estimator thread 0... [ 945.936908][ T1920] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 945.937323][ T1913] xfrm0 speed is unknown, defaulting to 1000 [ 946.047888][ T1917] IPVS: using max 32 ests per chain, 76800 per kthread [ 946.223467][ T1932] syzkaller0: entered promiscuous mode [ 946.228979][ T1932] syzkaller0: entered allmulticast mode [ 946.296644][ T1913] xfrm0 speed is unknown, defaulting to 1000 [ 946.311240][ T1937] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7469'. [ 947.026383][ T1962] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.7477'. [ 947.121531][ T1967] netlink: 'syz.1.7478': attribute type 2 has an invalid length. [ 947.324102][ T1973] xt_l2tp: invalid flags combination: 0 [ 947.747776][ T1981] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7482'. [ 947.809525][ T1983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7483'. [ 947.899474][ T1983] netlink: 'syz.2.7483': attribute type 3 has an invalid length. [ 947.912370][ T1983] netlink: 'syz.2.7483': attribute type 3 has an invalid length. [ 947.978299][ T1983] netlink: 'syz.2.7483': attribute type 2 has an invalid length. [ 948.023551][ T1993] block nbd3: not configured, cannot reconfigure [ 948.618882][ T2021] No such timeout policy "syz0" [ 948.821175][ T2024] sctp: [Deprecated]: syz.5.7492 (pid 2024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 948.821175][ T2024] Use struct sctp_sack_info instead [ 949.502976][ T2049] gre0: entered promiscuous mode [ 949.518627][ T2049] gre0: entered allmulticast mode [ 949.705802][ T2056] syzkaller0: entered promiscuous mode [ 949.734399][ T2056] syzkaller0: entered allmulticast mode [ 950.082711][ T2077] __nla_validate_parse: 5 callbacks suppressed [ 950.082759][ T2077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7509'. [ 950.091395][ T2078] sctp: [Deprecated]: syz.3.7508 (pid 2078) Use of int in maxseg socket option. [ 950.091395][ T2078] Use struct sctp_assoc_value instead [ 950.116797][ T2074] sctp: [Deprecated]: syz.3.7508 (pid 2074) Use of int in maxseg socket option. [ 950.116797][ T2074] Use struct sctp_assoc_value instead [ 950.221876][ T2085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7511'. [ 950.237566][ T2085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7511'. [ 950.360877][ T2096] veth0_to_bond: mtu less than device minimum [ 950.510013][ T2103] netlink: 'syz.2.7516': attribute type 1 has an invalid length. [ 950.517795][ T2103] netlink: 16142 bytes leftover after parsing attributes in process `syz.2.7516'. [ 950.634142][ T2103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7516'. [ 950.652152][ T2106] gre0: left promiscuous mode [ 950.662542][ T2103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7516'. [ 950.668314][ T2106] gre0: left allmulticast mode [ 950.676236][ T2103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.696143][ T2106] bond3: left allmulticast mode [ 950.704189][ T2106] bond0: left promiscuous mode [ 950.996067][ T2120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7520'. [ 951.006845][ T2125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7520'. [ 951.033269][ T2128] SET target dimension over the limit! [ 951.044121][ T2128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7523'. [ 951.092514][ T2123] syzkaller0: entered promiscuous mode [ 951.107890][ T2123] syzkaller0: entered allmulticast mode [ 951.249855][ T2135] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7527'. [ 951.556135][ T2150] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 952.009553][ T2170] netlink: 'syz.3.7537': attribute type 1 has an invalid length. [ 952.028934][ T2171] netlink: 'syz.3.7537': attribute type 1 has an invalid length. [ 952.514097][ T2193] netlink: 'syz.3.7542': attribute type 4 has an invalid length. [ 952.546395][ T2194] netlink: 'syz.3.7542': attribute type 4 has an invalid length. [ 952.591898][ T2198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.783997][ T2209] tc action pedit offset must be on 32 bit boundaries [ 952.793366][ T2209] tc action pedit offset must be on 32 bit boundaries [ 952.800223][ T2209] tc action pedit offset must be on 32 bit boundaries [ 952.807018][ T2209] tc action pedit offset must be on 32 bit boundaries [ 952.813829][ T2209] tc action pedit offset must be on 32 bit boundaries [ 952.820635][ T2209] tc action pedit offset must be on 32 bit boundaries [ 952.827422][ T2209] tc action pedit offset must be on 32 bit boundaries [ 952.834279][ T2209] tc action pedit offset must be on 32 bit boundaries [ 952.841198][ T2209] tc action pedit offset must be on 32 bit boundaries [ 952.848034][ T2209] tc action pedit offset must be on 32 bit boundaries [ 952.854819][ T2209] 0: reclassify loop, rule prio 0, protocol 800 [ 952.963242][ T2222] block nbd1: NBD_DISCONNECT [ 952.967899][ T2222] block nbd1: Send disconnect failed -32 [ 952.973554][ T2222] block nbd1: Send disconnect failed -32 [ 953.085596][ T2231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 953.711156][ T2255] block nbd1: server does not support multiple connections per device. [ 953.724738][ T2255] block nbd1: shutting down sockets [ 953.821148][ T2270] bond8: Unable to set down delay as MII monitoring is disabled [ 953.846429][ T2270] bond8 (unregistering): Released all slaves [ 954.170126][ T2286] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 954.198804][ T2290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.262083][ T2290] bond0: entered promiscuous mode [ 954.293545][ T2290] batadv0: entered promiscuous mode [ 954.321162][ T2290] debugfs: 'hsr1' already exists in 'hsr' [ 954.347323][ T2290] Cannot create hsr debugfs directory [ 954.367145][ T2290] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 954.391690][ T2290] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 954.409861][ T2290] bond0: left promiscuous mode [ 954.424811][ T2290] batadv0: left promiscuous mode [ 954.907136][ T2327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 955.033287][ T2333] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 955.362681][ T2350] __nla_validate_parse: 20 callbacks suppressed [ 955.362702][ T2350] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7589'. [ 955.383338][ T2353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7588'. [ 955.671946][ T2367] team0: left allmulticast mode [ 955.684334][ T2367] team_slave_0: left allmulticast mode [ 955.690728][ T2367] team_slave_1: left allmulticast mode [ 955.696648][ T2367] team0: left promiscuous mode [ 955.702025][ T2367] team_slave_0: left promiscuous mode [ 955.708104][ T2367] team_slave_1: left promiscuous mode [ 955.714039][ T2367] bridge0: port 1(team0) entered disabled state [ 955.723209][ T2367] bridge_slave_1: left allmulticast mode [ 955.729425][ T2367] bridge_slave_1: left promiscuous mode [ 955.735215][ T2367] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.763797][ T2366] veth11: entered promiscuous mode [ 956.317410][ T2397] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7602'. [ 956.555794][ T2407] vcan0: entered allmulticast mode [ 956.863611][ T2415] netlink: 277 bytes leftover after parsing attributes in process `syz.2.7606'. [ 957.033189][ T2423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7608'. [ 958.796537][ T2373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 958.806961][ T2386] netlink: 'syz.1.7599': attribute type 12 has an invalid length. [ 958.891689][ T2394] netlink: 'syz.3.7600': attribute type 1 has an invalid length. [ 958.904215][ T2394] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7600'. [ 958.914787][ T2394] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 959.100606][ T2436] openvswitch: netlink: Duplicate or invalid key (type 0). [ 959.105593][ T2441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7614'. [ 959.108831][ T2436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.186098][ T2441] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.7614'. [ 959.223312][ T2424] Bluetooth: hci3: command 0x0406 tx timeout [ 959.235949][ T2451] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 959.267919][ T2424] Bluetooth: hci1: command 0x0406 tx timeout [ 959.411130][ T2459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.519109][ T2467] syzkaller1: entered allmulticast mode [ 959.557426][ T2467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 959.643318][ T2469] bridge_slave_1: entered promiscuous mode [ 959.651471][ T2473] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7623'. [ 959.857424][ T2489] xt_hashlimit: size too large, truncated to 1048576 [ 960.351825][ T2505] ip6gre1: entered allmulticast mode [ 960.471178][ T2518] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7635'. [ 960.612039][ T50] block nbd1: Receive control failed (result -32) [ 960.983149][ T2540] syzkaller0: entered promiscuous mode [ 960.994761][ T2540] syzkaller0: entered allmulticast mode [ 961.142809][ T2552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.225231][ T2587] syzkaller0: entered promiscuous mode [ 964.237736][ T2587] syzkaller0: entered allmulticast mode [ 964.908211][ T2588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 965.761202][ T2635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7659'. [ 966.941689][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888043832000: rx timeout, send abort [ 966.950623][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888043832000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 967.544711][ T2645] siw: device registration error -23 [ 967.792253][ T2655] netlink: 'syz.0.7665': attribute type 2 has an invalid length. [ 967.831988][ T2655] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7665'. [ 967.913882][ T2666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7668'. [ 967.974800][ T50] Bluetooth: hci2: link tx timeout [ 967.980104][ T50] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 968.234780][ T2701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7674'. [ 968.801287][ T2726] netlink: 'syz.2.7681': attribute type 13 has an invalid length. [ 969.126077][ T2743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7684'. [ 969.176982][ T2747] macsec0: entered promiscuous mode [ 969.185273][ T2745] netlink: 'syz.0.7686': attribute type 9 has an invalid length. [ 969.378740][ T2759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7691'. [ 969.490795][ T2761] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7690'. [ 969.522420][ T2761] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7690'. [ 969.538656][ T2763] IPVS: Error connecting to the multicast addr [ 969.557840][ T2761] netlink: 'syz.1.7690': attribute type 5 has an invalid length. [ 969.577697][ T2761] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7690'. [ 969.874659][ T2793] openvswitch: netlink: Actions may not be safe on all matching packets [ 969.912492][ T2798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7703'. [ 970.007784][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 970.052890][ T2806] veth13: entered promiscuous mode [ 970.133433][ T2809] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 970.168358][ T2809] netlink: 'syz.0.7708': attribute type 21 has an invalid length. [ 970.257339][ T2809] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 970.334616][ T2809] bond6 (unregistering): Released all slaves [ 970.392080][ T2821] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 970.714822][ T2834] netlink: 'syz.1.7710': attribute type 8 has an invalid length. [ 970.746551][ T2834] sch_fq: defrate 0 ignored. [ 970.838517][ T2839] __nla_validate_parse: 3 callbacks suppressed [ 970.838547][ T2839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7711'. [ 970.882681][ T2839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7711'. [ 970.931666][ T2839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7711'. [ 971.084210][ T2849] netlink: 'syz.1.7713': attribute type 1 has an invalid length. [ 971.495207][ T2885] veth7: entered promiscuous mode [ 971.527713][ T2885] veth7: entered allmulticast mode [ 972.705338][ T2944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7728'. [ 972.869961][ T2953] netlink: 'syz.3.7730': attribute type 1 has an invalid length. [ 973.114967][ T2961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7728'. [ 973.189613][ T2953] bond6: entered promiscuous mode [ 973.196056][ T2953] 8021q: adding VLAN 0 to HW filter on device bond6 [ 973.233296][ T2960] 8021q: adding VLAN 0 to HW filter on device bond6 [ 973.240461][ T2960] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 973.250728][ T2960] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 973.292133][ T2960] bond6: (slave ip6gre2): making interface the new active one [ 973.300533][ T2960] ip6gre2: entered promiscuous mode [ 973.307484][ T2960] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 973.410284][ T2977] x_tables: duplicate underflow at hook 1 [ 973.439430][ T2979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7734'. [ 973.873103][ T2999] netlink: 'syz.3.7742': attribute type 2 has an invalid length. [ 973.919101][ T2999] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7742'. [ 973.929623][ T3011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7743'. [ 974.089882][ T3018] netlink: 'syz.2.7745': attribute type 15 has an invalid length. [ 974.097737][ T3018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7745'. [ 974.138146][ T3015] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 974.149539][ T3019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7746'. [ 974.743848][ T3056] syzkaller1: entered promiscuous mode [ 975.633364][ T3112] syzkaller0: entered promiscuous mode [ 975.639139][ T3112] syzkaller0: entered allmulticast mode [ 975.716713][ T3099] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 975.755040][ T3099] bond9 (unregistering): Released all slaves [ 976.327731][ T3156] __nla_validate_parse: 3 callbacks suppressed [ 976.327749][ T3156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7775'. [ 976.769601][ T3182] netlink: 'syz.5.7781': attribute type 4 has an invalid length. [ 976.810203][ T3182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7781'. [ 976.968127][ T3200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7784'. [ 977.182736][ T3221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7787'. [ 977.280875][ T3229] netlink: 'syz.0.7790': attribute type 1 has an invalid length. [ 977.299572][ T3224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7788'. [ 977.327027][ T3229] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7790'. [ 977.366868][ T3234] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes. [ 977.625093][ T3259] nbd: socks must be embedded in a SOCK_ITEM attr [ 977.988519][ T3277] netlink: 'syz.3.7798': attribute type 1 has an invalid length. [ 978.030457][ T3277] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 978.100130][ T3290] netlink: 'syz.3.7799': attribute type 1 has an invalid length. [ 978.139409][ T3290] netlink: 'syz.3.7799': attribute type 1 has an invalid length. [ 978.147171][ T3290] netlink: 'syz.3.7799': attribute type 1 has an invalid length. [ 978.154900][ T3290] netlink: 'syz.3.7799': attribute type 2 has an invalid length. [ 978.162686][ T3290] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7799'. [ 978.171917][ T3292] netlink: 'syz.3.7799': attribute type 1 has an invalid length. [ 978.180691][ T3292] netlink: 'syz.3.7799': attribute type 1 has an invalid length. [ 978.188479][ T3292] netlink: 'syz.3.7799': attribute type 1 has an invalid length. [ 978.207639][ T3292] netlink: 'syz.3.7799': attribute type 2 has an invalid length. [ 978.215393][ T3292] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7799'. [ 978.310574][ T3298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7802'. [ 978.503810][ T3308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7805'. [ 978.651417][ T3320] syz_tun: entered allmulticast mode [ 978.689878][ T3313] x_tables: duplicate underflow at hook 1 [ 980.517042][ T3260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 980.639873][ T3321] syz_tun: left allmulticast mode [ 980.758044][ T3333] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20001 [ 980.791114][ T3333] x_tables: duplicate underflow at hook 2 [ 980.792102][ T3339] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 980.808439][ T3339] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 980.931331][ T3349] vcan1: entered promiscuous mode [ 980.936519][ T3349] vcan1: entered allmulticast mode [ 981.032472][ T3353] team_slave_1: entered promiscuous mode [ 981.125079][T29262] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 981.513640][ T3378] netlink: 'syz.1.7818': attribute type 3 has an invalid length. [ 981.521486][ T3378] __nla_validate_parse: 2 callbacks suppressed [ 981.521499][ T3378] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7818'. [ 981.565752][ T3380] pim6reg: entered allmulticast mode [ 981.572984][ T3380] pim6reg: left allmulticast mode [ 981.668411][ T3334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 982.085391][ T3397] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7826'. [ 982.108029][ T3397] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7826'. [ 982.149778][ T3403] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7826'. [ 982.243052][ T3403] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7826'. [ 982.978350][ T3455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 983.014250][ T3462] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 983.119433][ T3471] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 983.132135][ T3455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 983.149126][ T3455] bond3: (slave bond4): Enslaving as an active interface with a down link [ 983.159027][ T3469] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7846'. [ 983.191152][ T3473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7846'. [ 983.321074][ T3478] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7848'. [ 983.330622][ T3478] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7848'. [ 983.340600][ T3478] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7848'. [ 983.500348][ T3492] IPVS: Error joining to the multicast group [ 983.605761][ T3495] validate_nla: 8 callbacks suppressed [ 983.605781][ T3495] netlink: 'syz.1.7853': attribute type 1 has an invalid length. [ 983.800710][ T3508] syzkaller0: entered promiscuous mode [ 983.812692][ T3508] syzkaller0: entered allmulticast mode [ 983.833464][ T3508] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 984.566964][ T3550] xfrm0 speed is unknown, defaulting to 1000 [ 985.075925][ T3550] xfrm0 speed is unknown, defaulting to 1000 [ 985.514676][ T3577] netlink: 'syz.0.7877': attribute type 10 has an invalid length. [ 985.606593][ T3577] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 985.832589][ T3581] veth0: entered promiscuous mode [ 985.955814][ T3580] veth0: left promiscuous mode [ 986.946478][ T3626] netlink: 'syz.5.7894': attribute type 1 has an invalid length. [ 986.991584][ T3626] __nla_validate_parse: 11 callbacks suppressed [ 986.991605][ T3626] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7894'. [ 987.139324][ T3632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7895'. [ 987.306815][ T3640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 989.952446][ T3645] wg2: entered promiscuous mode [ 989.968574][ T3645] wg2: entered allmulticast mode [ 990.253140][ T3664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7903'. [ 990.284727][ T3664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7903'. [ 990.301554][ T3669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7905'. [ 990.339387][ T3669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7905'. [ 990.371356][ T3674] netlink: 'syz.5.7908': attribute type 15 has an invalid length. [ 990.397655][ T3674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7908'. [ 990.430005][ T48] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 990.438762][ T48] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 990.447484][ T48] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 990.456211][ T48] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 990.467148][ T3674] netlink: 'syz.5.7908': attribute type 15 has an invalid length. [ 990.489474][ T3674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7908'. [ 990.552478][ T3685] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7912'. [ 990.802822][ T3707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7918'. [ 991.010319][ T3721] x_tables: duplicate entry at hook 3 [ 991.016255][ T3720] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 991.621170][ T3753] netlink: 'syz.0.7932': attribute type 30 has an invalid length. [ 991.683341][ T3754] xfrm0 speed is unknown, defaulting to 1000 [ 991.686693][ T3756] netlink: 'syz.3.7935': attribute type 12 has an invalid length. [ 992.011737][ T3754] xfrm0 speed is unknown, defaulting to 1000 [ 992.185644][ T3791] __nla_validate_parse: 2 callbacks suppressed [ 992.185664][ T3791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7941'. [ 992.231426][ T3791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7941'. [ 993.015983][ T3824] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7950'. [ 993.150910][ T3836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7954'. [ 993.204110][ T3836] netlink: 'syz.0.7954': attribute type 7 has an invalid length. [ 993.211878][ T3836] netlink: 'syz.0.7954': attribute type 8 has an invalid length. [ 993.220778][ T3839] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7955'. [ 993.232838][ T3839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7955'. [ 993.241798][ T3839] netlink: 31 bytes leftover after parsing attributes in process `syz.1.7955'. [ 993.250791][ T3836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7954'. [ 993.286530][ T3836] erspan0: entered promiscuous mode [ 993.296878][ T3839] netlink: 'syz.1.7955': attribute type 2 has an invalid length. [ 993.304634][ T3839] netlink: 31 bytes leftover after parsing attributes in process `syz.1.7955'. [ 993.351456][ T3836] gretap0: entered promiscuous mode [ 993.410166][ T3836] erspan0: left promiscuous mode [ 993.423548][ T3836] gretap0: left promiscuous mode [ 993.478259][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7959'. [ 993.712862][ T3865] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 993.778836][ T3870] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 994.252609][ T5285] veth0_vlan: left promiscuous mode [ 994.310613][ T5860] veth0_vlan: entered promiscuous mode [ 994.808075][ T3925] syzkaller0: entered promiscuous mode [ 994.842938][ T3925] syzkaller0: entered allmulticast mode [ 995.313770][ T3947] netlink: 'syz.0.7980': attribute type 23 has an invalid length. [ 995.739813][ T3978] netlink: 'syz.3.7987': attribute type 11 has an invalid length. [ 995.900980][ T3985] tc_dump_action: action bad kind [ 995.929693][ T3991] netlink: 'syz.1.7991': attribute type 1 has an invalid length. [ 996.001365][ T3991] 8021q: adding VLAN 0 to HW filter on device bond9 [ 996.363773][ T4016] netlink: 'syz.5.7999': attribute type 10 has an invalid length. [ 996.371972][ T4016] veth1_macvtap: left promiscuous mode [ 996.381734][ T4016] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 996.745019][ T4035] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 996.764509][ T4035] bond6 (unregistering): Released all slaves [ 997.159206][ T4057] xt_CT: No such helper "snmp_trap" [ 997.164707][ T4058] xt_CT: No such helper "snmp_trap" [ 997.266725][ T4065] __nla_validate_parse: 15 callbacks suppressed [ 997.266746][ T4065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8016'. [ 997.294371][ T4069] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8014'. [ 997.437404][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8017'. [ 997.564034][ T4087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8020'. [ 997.603908][ T4087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8020'. [ 997.712377][ T4096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8020'. [ 998.066302][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8027'. [ 998.119608][ T4112] netlink: 'syz.0.8029': attribute type 1 has an invalid length. [ 1000.761401][ T4112] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1000.923044][ T4126] --map-set only usable from mangle table [ 1001.422572][ T4156] openvswitch: netlink: Key type 172 is out of range max 32 [ 1001.445156][ T4153] syzkaller1: entered promiscuous mode [ 1001.454660][ T4153] syzkaller1: entered allmulticast mode [ 1001.464232][ T4154] netlink: 'syz.2.8040': attribute type 1 has an invalid length. [ 1001.482179][ T4153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8039'. [ 1001.506848][ T4154] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8040'. [ 1001.523520][ T4153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1001.539989][ T4160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8044'. [ 1001.687272][ T4171] can: request_module (can-proto-0) failed. [ 1001.750474][ T4179] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1002.023243][T29276] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.037113][T29276] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.053839][T29276] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.069393][T29276] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.394485][ T4216] x_tables: duplicate underflow at hook 1 [ 1002.774314][ T4243] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1002.860041][ T4243] __nla_validate_parse: 7 callbacks suppressed [ 1002.860060][ T4243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8066'. [ 1002.923924][ T4251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8071'. [ 1002.943366][ T4247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8066'. [ 1003.224431][ T4262] syzkaller0: entered promiscuous mode [ 1003.230905][ T4262] syzkaller0: entered allmulticast mode [ 1006.205227][ T4287] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8081'. [ 1006.215589][ T4286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8081'. [ 1006.239099][ T4288] veth0: entered promiscuous mode [ 1006.244513][ T4289] batadv_slave_1: entered promiscuous mode [ 1006.284176][ T4285] batadv_slave_1: left promiscuous mode [ 1006.290130][ T4285] veth0: left promiscuous mode [ 1006.298060][ T4291] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1006.485987][ T4297] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1006.532442][ T4297] bond7 (unregistering): Released all slaves [ 1006.865818][ T4328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8091'. [ 1007.136372][ T4340] ip6t_srh: unknown srh match flags 4000 [ 1007.145255][ T4341] ip6t_srh: unknown srh match flags 4000 [ 1007.190722][ T4343] netlink: 'syz.2.8096': attribute type 1 has an invalid length. [ 1007.229144][ T4343] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1007.238654][ T4343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8096'. [ 1007.272823][ T4343] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1007.298845][ T4343] bond6 (unregistering): Released all slaves [ 1007.341138][ T4361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8102'. [ 1007.343430][ T4355] bond5: invalid ARP target 0.0.0.0 specified for addition [ 1007.350142][ T4361] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1007.370238][ T4355] bond5: option arp_ip_target: invalid value (0) [ 1007.390345][ T4355] bond5 (unregistering): Released all slaves [ 1007.430771][ T4367] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1007.499158][ T4372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8105'. [ 1007.522516][ T4370] syzkaller1: entered promiscuous mode [ 1007.528132][ T4370] syzkaller1: entered allmulticast mode [ 1007.536895][ T4372] tipc: Enabling of bearer rejected, media not registered [ 1008.284972][ T4420] netlink: 'syz.0.8116': attribute type 9 has an invalid length. [ 1008.342439][ T4424] veth0: entered promiscuous mode [ 1008.419169][ T4424] veth0: left promiscuous mode [ 1008.656870][ T4439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.709980][ T4439] vlan2: entered allmulticast mode [ 1008.715143][ T4439] bond0: entered allmulticast mode [ 1008.738219][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8121'. [ 1008.766085][ T4439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8121'. [ 1009.050737][ T4457] x_tables: duplicate underflow at hook 1 [ 1009.062127][ T4465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8128'. [ 1009.109193][ T4465] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8128'. [ 1009.182622][ T4465] geneve2: entered promiscuous mode [ 1009.217386][ T4465] geneve2: entered allmulticast mode [ 1009.407105][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8133'. [ 1009.446616][ T4490] team0: Device ipvlan2 is already an upper device of the team interface [ 1009.571828][ T4497] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8130'. [ 1009.581106][ T4497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8130'. [ 1009.591829][ T4497] netlink: 31 bytes leftover after parsing attributes in process `syz.3.8130'. [ 1009.609157][ T4497] netlink: 'syz.3.8130': attribute type 2 has an invalid length. [ 1009.619542][ T4497] netlink: 31 bytes leftover after parsing attributes in process `syz.3.8130'. [ 1009.703984][T29267] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1009.742944][ T4513] gretap0: entered promiscuous mode [ 1009.794020][ T4513] vlan3: entered promiscuous mode [ 1009.846460][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.964686][ T4525] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8138'. [ 1010.237142][ T4537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.271735][ T4541] netlink: 'syz.2.8143': attribute type 7 has an invalid length. [ 1010.343369][ T4553] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1010.374426][ T4553] syzkaller1: Linktype set failed because interface is up [ 1010.398241][T14218] syzkaller1: tun_net_xmit 90 [ 1010.558104][T14218] syzkaller1: tun_net_xmit 90 [ 1010.628088][ T4567] bond7: Unable to set down delay as MII monitoring is disabled [ 1010.638022][ T4567] bond7 (unregistering): Released all slaves [ 1010.743318][ T4576] syzkaller0: entered promiscuous mode [ 1010.750235][ T4576] syzkaller0: entered allmulticast mode [ 1010.785690][ T4577] netlink: 'syz.0.8154': attribute type 10 has an invalid length. [ 1010.849691][ T4577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1010.861132][ T4577] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1010.911295][ T4576] tipc: Enabled bearer , priority 0 [ 1010.922065][ T4575] tipc: Resetting bearer [ 1010.952819][ T4575] tipc: Disabling bearer [ 1010.979681][ T4580] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1011.396298][ T4608] netlink: 'syz.3.8165': attribute type 1 has an invalid length. [ 1011.399268][ T4610] netlink: 'syz.3.8165': attribute type 1 has an invalid length. [ 1011.411712][ T4607] tipc: Enabled bearer , priority 0 [ 1011.776545][ T4607] syzkaller0: entered promiscuous mode [ 1011.806743][ T4607] syzkaller0: entered allmulticast mode [ 1011.827137][ T4607] tipc: Resetting bearer [ 1012.201611][ T4605] tipc: Resetting bearer [ 1012.246392][ T4642] "syz.1.8175" (4642) uses obsolete ecb(arc4) skcipher [ 1015.238347][ T4605] tipc: Disabling bearer [ 1015.251322][T14223] tipc: Node number set to 3210155753 [ 1015.502448][ T4676] __nla_validate_parse: 43 callbacks suppressed [ 1015.502467][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8183'. [ 1015.509753][ T4672] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1015.693053][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8188'. [ 1015.696148][ T4693] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8189'. [ 1015.720235][ T4690] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8188'. [ 1016.336213][ T4730] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8200'. [ 1016.387197][ T4734] bridge0: port 2(dummy0) entered blocking state [ 1016.394770][ T4734] bridge0: port 2(dummy0) entered disabled state [ 1016.402600][ T4734] dummy0: entered allmulticast mode [ 1016.412280][ T4734] dummy0: entered promiscuous mode [ 1016.587312][ T4744] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8205'. [ 1016.890528][ T4757] netlink: 'syz.5.8209': attribute type 39 has an invalid length. [ 1016.935703][ T4760] netlink: 'syz.1.8208': attribute type 3 has an invalid length. [ 1017.203947][ T4768] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1017.533942][ T4791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8217'. [ 1017.614747][ T4783] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1017.627318][ T4783] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.795193][ T4793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8220'. [ 1017.847117][ T4783] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1017.857630][ T4783] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.959930][ T4783] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1017.970559][ T4783] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.042787][ T4810] bond10: option arp_all_targets: invalid value (18446744073709551613) [ 1018.053301][ T4810] bond10 (unregistering): Released all slaves [ 1018.091195][ T4821] netlink: 'syz.2.8227': attribute type 2 has an invalid length. [ 1018.098977][ T4821] netlink: 'syz.2.8227': attribute type 2 has an invalid length. [ 1018.184946][ T4831] syzkaller0: entered promiscuous mode [ 1018.190547][ T4831] syzkaller0: entered allmulticast mode [ 1018.275716][ T4783] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1018.286028][ T4783] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.409595][ T4841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8233'. [ 1018.656190][T29272] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1018.696341][T29272] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.736760][ T4849] Cannot find map_set index 135 as target [ 1018.748342][ T4849] netlink: 212 bytes leftover after parsing attributes in process `syz.0.8236'. [ 1018.765053][T29276] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1018.795072][T29276] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.814028][ T4854] netlink: 'syz.1.8237': attribute type 1 has an invalid length. [ 1018.842957][T29272] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1018.856170][T29272] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.911953][ T4854] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1018.926867][ T4856] vlan4: entered promiscuous mode [ 1018.931935][ T4856] bridge0: entered promiscuous mode [ 1018.954571][ T4857] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1018.965689][ T4857] bond10: (slave batadv1): making interface the new active one [ 1018.974634][ T4857] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 1019.066153][ T4862] netlink: 'syz.3.8239': attribute type 2 has an invalid length. [ 1019.074995][ T4862] netlink: 'syz.3.8239': attribute type 2 has an invalid length. [ 1019.083447][ T4862] netlink: 'syz.3.8239': attribute type 2 has an invalid length. [ 1019.092013][ T4862] netlink: 'syz.3.8239': attribute type 1 has an invalid length. [ 1019.105606][ T4862] netlink: 'syz.3.8239': attribute type 1 has an invalid length. [ 1019.207265][T29282] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1019.218639][T29282] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.374577][ T4785] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1019.387292][ T4785] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.524370][ T4785] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1019.556455][ T4785] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.049676][ T4785] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1020.059516][ T4785] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.240338][ T4785] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1020.250127][ T4785] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.509510][ T4922] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1020.559831][ T4924] __nla_validate_parse: 10 callbacks suppressed [ 1020.559848][ T4924] netlink: 172 bytes leftover after parsing attributes in process `syz.2.8259'. [ 1020.891764][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8264'. [ 1020.953360][ T4940] team1: entered promiscuous mode [ 1020.965990][ T4940] team1: entered allmulticast mode [ 1020.979632][ T4943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8264'. [ 1021.004362][ T4933] syzkaller0: entered promiscuous mode [ 1021.011214][ T4933] syzkaller0: entered allmulticast mode [ 1021.043423][ T4933] tc action pedit 'at' offset 20 out of bounds [ 1021.307420][ T4957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8266'. [ 1021.334255][ T4959] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8268'. [ 1021.369830][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8270'. [ 1021.449284][ T4966] bond7: entered promiscuous mode [ 1021.454781][ T4966] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1021.467418][ T4966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8271'. [ 1021.468495][ T4970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8272'. [ 1021.490123][ T4973] bond7: (slave bridge2): making interface the new active one [ 1021.497622][ T4973] bridge2: entered promiscuous mode [ 1021.503730][ T4973] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 1021.560821][ T4966] bond7: entered allmulticast mode [ 1021.570258][ T4966] bridge2: entered allmulticast mode [ 1021.819478][ T4998] pim6reg: entered allmulticast mode [ 1021.826564][ T4998] pim6reg: left allmulticast mode [ 1021.963242][ T5006] validate_nla: 6 callbacks suppressed [ 1021.963261][ T5006] netlink: 'syz.1.8282': attribute type 5 has an invalid length. [ 1022.172883][ T5020] netlink: 'syz.1.8285': attribute type 3 has an invalid length. [ 1022.202220][ T5017] bond6: entered allmulticast mode [ 1022.215632][ T5017] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1022.237831][ T5023] ip6gretap2: entered allmulticast mode [ 1022.244067][ T5023] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1022.258253][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8284'. [ 1022.367744][T29290] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1022.569291][T29276] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1022.652372][ T5052] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1023.387509][ T5091] syzkaller0: entered promiscuous mode [ 1023.419046][ T5091] syzkaller0: entered allmulticast mode [ 1023.594108][ T29] audit: type=1804 audit(1782947227.706:11): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8301" name="/newroot/503/cgroup.controllers" dev="tmpfs" ino=2582 res=1 errno=0 [ 1023.679555][ T29] audit: type=1800 audit(1782947227.716:12): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8301" name="cgroup.controllers" dev="tmpfs" ino=2582 res=0 errno=0 [ 1023.701358][ T29] audit: type=1804 audit(1782947227.746:13): pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8301" name="/newroot/503/cgroup.controllers" dev="tmpfs" ino=2582 res=1 errno=0 [ 1023.791063][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8303'. [ 1024.423116][ T5134] xt_l2tp: v2 doesn't support IP mode [ 1024.897331][ T5155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.371521][ T5180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.513511][ T5180] tipc: Resetting bearer [ 1025.563771][ T5180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.635462][ T5180] veth0_vlan: left promiscuous mode [ 1025.746910][ T5203] __nla_validate_parse: 8 callbacks suppressed [ 1025.746930][ T5203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8333'. [ 1025.820130][ T5180] veth1_vlan: left allmulticast mode [ 1025.854271][T29276] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.879124][T29276] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.046528][T29276] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.072818][T29276] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.302330][T29258] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1026.327720][T29258] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.449739][ T48] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1026.474306][ T48] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.551972][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8341'. [ 1026.591054][ T5238] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1026.676576][T29276] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1026.711056][T29276] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.764469][T29276] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1026.799799][T29276] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.939319][ T5271] IPv6: NLM_F_CREATE should be specified when creating new route [ 1026.948242][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8346'. [ 1027.063472][ T5290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1027.200222][ T5304] syzkaller1: entered promiscuous mode [ 1027.206211][ T5304] syzkaller1: entered allmulticast mode [ 1027.278330][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8352'. [ 1027.355281][ T5315] netlink: 'syz.5.8355': attribute type 1 has an invalid length. [ 1027.462046][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8352'. [ 1027.584208][ T5327] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1027.701383][ T5336] netlink: 'syz.0.8358': attribute type 1 has an invalid length. [ 1027.711100][ T5315] veth9: entered promiscuous mode [ 1027.754604][ T5342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8358'. [ 1027.810107][ T5327] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8355'. [ 1027.838010][ T5315] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 1027.996790][ T5327] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1028.000587][ T48] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1028.137495][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8361'. [ 1028.146544][ T8596] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1028.220841][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8363'. [ 1028.326785][ T5375] netlink: 'syz.0.8362': attribute type 1 has an invalid length. [ 1028.334551][ T5375] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8362'. [ 1028.367979][ T5383] ipt_REJECT: ECHOREPLY no longer supported. [ 1028.402753][ T5385] netlink: 'syz.3.8365': attribute type 1 has an invalid length. [ 1028.682422][ T5398] tc_dump_action: action bad kind [ 1028.790379][ T5408] netlink: 'syz.0.8370': attribute type 1 has an invalid length. [ 1028.848198][ T5408] netlink: 'syz.0.8370': attribute type 3 has an invalid length. [ 1029.115164][ T5421] bond6: entered promiscuous mode [ 1029.121694][ T5421] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1029.341337][ T5421] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1029.358327][ T5421] bond6: (slave sit1): The slave device specified does not support setting the MAC address [ 1029.386162][ T5421] bond6: (slave sit1): Error -95 calling set_mac_address [ 1029.469567][ T5454] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1029.501981][ T5458] netlink: 'syz.2.8384': attribute type 6 has an invalid length. [ 1029.509746][ T5458] netlink: 'syz.2.8384': attribute type 5 has an invalid length. [ 1029.613580][ T5470] netlink: 'syz.3.8387': attribute type 1 has an invalid length. [ 1029.943017][ T5495] veth0_macvtap: entered allmulticast mode [ 1029.966442][ T5495] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1030.116733][ T5505] syzkaller0: entered promiscuous mode [ 1030.132466][ T5505] syzkaller0: entered allmulticast mode [ 1030.153389][ T5505] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1030.672233][ T5520] sctp: [Deprecated]: syz.1.8402 (pid 5520) Use of int in max_burst socket option. [ 1030.672233][ T5520] Use struct sctp_assoc_value instead [ 1032.992296][ T5498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1033.021393][ T5514] __nla_validate_parse: 12 callbacks suppressed [ 1033.021410][ T5514] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8401'. [ 1033.203135][ T5530] netlink: 'syz.3.8404': attribute type 21 has an invalid length. [ 1033.239795][ T5530] netlink: 'syz.3.8404': attribute type 22 has an invalid length. [ 1033.248947][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8406'. [ 1033.258436][ T5530] netlink: 'syz.3.8404': attribute type 23 has an invalid length. [ 1033.258459][ T5530] netlink: 'syz.3.8404': attribute type 25 has an invalid length. [ 1033.258473][ T5530] netlink: 'syz.3.8404': attribute type 26 has an invalid length. [ 1033.258488][ T5530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8404'. [ 1033.259500][ T5541] netlink: zone id is out of range [ 1033.322520][ T5545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8407'. [ 1033.349155][ T5541] netlink: del zone limit has 4 unknown bytes [ 1033.400347][ T5549] openvswitch: netlink: Actions may not be safe on all matching packets [ 1033.662070][ T5564] xfrm0 speed is unknown, defaulting to 1000 [ 1033.945113][ T5585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8418'. [ 1033.948416][ T5583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8417'. [ 1033.984460][ T5564] xfrm0 speed is unknown, defaulting to 1000 [ 1034.242004][ T5600] netlink: 'syz.2.8422': attribute type 83 has an invalid length. [ 1034.647076][ T5640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8432'. [ 1034.688716][ T5645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8433'. [ 1034.869580][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8434'. [ 1034.944104][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8435'. [ 1036.586331][ T5727] netlink: 'syz.3.8455': attribute type 1 has an invalid length. [ 1036.657999][ T5727] bond7: entered promiscuous mode [ 1036.666614][ T5727] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1036.736268][ T5727] bond7: (slave bridge3): making interface the new active one [ 1036.753001][ T5727] bridge3: entered promiscuous mode [ 1036.759628][ T5727] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 1036.819258][ T5752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1037.150187][ T5769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1037.173313][ T5770] dvmrp1: entered allmulticast mode [ 1037.314925][ T5780] netlink: 'syz.5.8470': attribute type 39 has an invalid length. [ 1037.485290][ T5798] netlink: 'syz.5.8478': attribute type 1 has an invalid length. [ 1037.925562][ T5840] netlink: 'syz.0.8489': attribute type 1 has an invalid length. [ 1038.222435][ T5849] netlink: 'syz.5.8493': attribute type 1 has an invalid length. [ 1038.282656][ T5849] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1038.386867][ T5856] __nla_validate_parse: 13 callbacks suppressed [ 1038.386918][ T5856] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8494'. [ 1038.441699][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8493'. [ 1038.464844][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8494'. [ 1038.573206][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8497'. [ 1039.158390][ T5901] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8507'. [ 1039.318666][ T5909] netlink: 6440 bytes leftover after parsing attributes in process `syz.2.8508'. [ 1039.641997][ T5926] bond8 (unregistering): Released all slaves [ 1039.709309][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8516'. [ 1039.727229][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8517'. [ 1039.793284][ T5941] netlink: 'syz.0.8519': attribute type 64 has an invalid length. [ 1039.874522][ T5948] netlink: 'syz.0.8520': attribute type 2 has an invalid length. [ 1039.896765][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8521'. [ 1040.030680][ T5953] macsec1: entered allmulticast mode [ 1040.037912][ T5953] bond0: entered allmulticast mode [ 1040.050678][ T5953] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1040.077097][ T5953] bond0: left allmulticast mode [ 1040.105456][ T5959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1040.139415][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8526'. [ 1040.166399][ T5967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1040.515048][ T5989] openvswitch: netlink: Message has 512 unknown bytes. [ 1043.603259][ T5998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1043.810542][ T6042] netlink: 'syz.0.8543': attribute type 1 has an invalid length. [ 1043.845503][ T6045] netlink: 'syz.2.8546': attribute type 7 has an invalid length. [ 1043.906641][ T6034] bond9: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1043.993782][ T6034] veth15: entered promiscuous mode [ 1044.009374][ T6034] bond9: (slave veth15): Enslaving as a backup interface with a down link [ 1044.030803][ T6034] __nla_validate_parse: 9 callbacks suppressed [ 1044.030820][ T6034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8543'. [ 1044.163484][ T6034] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1044.173457][ T8596] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1044.220461][ T6073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8554'. [ 1044.271473][ T6069] veth1_to_bond: entered allmulticast mode [ 1044.279640][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8553'. [ 1044.296297][T29276] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1044.308451][ T6069] veth1_to_bond (unregistering): left allmulticast mode [ 1044.497755][ T6087] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8558'. [ 1044.645290][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8560'. [ 1044.816278][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8562'. [ 1044.844460][ T6097] bond0: ARP target 8.4.0.0 is already present [ 1044.850672][ T6097] bond0: option arp_ip_target: invalid value (1032) [ 1044.892409][ T6099] bridge_slave_0: left allmulticast mode [ 1044.898097][ T6099] bridge_slave_0: left promiscuous mode [ 1044.903882][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.912639][ T6101] netlink: 'syz.5.8563': attribute type 11 has an invalid length. [ 1044.920564][ T6101] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8563'. [ 1044.932605][ T6099] bridge_slave_1: left promiscuous mode [ 1044.939961][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.975229][ T6099] team0: Port device team_slave_0 removed [ 1044.983537][ T6099] team0: Port device team_slave_1 removed [ 1044.990616][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.000141][ T6099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1045.082588][ T6105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.150606][ T6101] bond8: option all_slaves_active: invalid value (222) [ 1045.187503][ T6101] bond8 (unregistering): Released all slaves [ 1045.477484][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8571'. [ 1045.491036][ T6136] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8571'. [ 1048.336047][ T6131] syzkaller0: entered promiscuous mode [ 1048.343491][ T6131] syzkaller0: entered allmulticast mode [ 1048.352407][ T6133] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1048.403560][ T6148] netlink: 'syz.3.8576': attribute type 12 has an invalid length. [ 1048.523506][ T6158] bridge_slave_1: default FDB implementation only supports local addresses [ 1048.600819][ T6158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1048.801149][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8581'. [ 1048.841046][ T6177] netlink: 'syz.2.8583': attribute type 2 has an invalid length. [ 1048.948830][ T6186] netlink: 'syz.3.8586': attribute type 10 has an invalid length. [ 1049.091955][ T6193] 8021q: VLANs not supported on xfrm0 [ 1049.165890][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8588'. [ 1049.363327][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8591'. [ 1049.454259][ T6209] netlink: 'syz.1.8593': attribute type 7 has an invalid length. [ 1049.503475][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8594'. [ 1049.541787][ T6212] netlink: 'syz.1.8593': attribute type 62 has an invalid length. [ 1049.796539][ T6219] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8597'. [ 1049.855778][ T6219] vlan2: entered allmulticast mode [ 1049.868591][ T6219] gretap0: entered allmulticast mode [ 1049.974358][ T6225] syzkaller0: entered promiscuous mode [ 1050.002772][ T6225] syzkaller0: entered allmulticast mode [ 1050.208951][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8606'. [ 1050.836953][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8615'. [ 1051.152263][ T6297] netlink: 'syz.2.8622': attribute type 1 has an invalid length. [ 1051.216890][ T6297] bond7: entered promiscuous mode [ 1051.225245][ T6297] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1051.295099][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8623'. [ 1051.422591][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8623'. [ 1051.469295][ T6316] netlink: 'syz.3.8625': attribute type 1 has an invalid length. [ 1051.538911][ T6313] hsr_slave_1 (unregistering): left promiscuous mode [ 1051.679001][ T6327] netlink: 'syz.5.8630': attribute type 2 has an invalid length. [ 1051.704047][ T6324] ip6gretap1: entered promiscuous mode [ 1051.717130][ T6324] ip6gretap1: entered allmulticast mode [ 1051.734828][ T6331] netlink: 'syz.2.8628': attribute type 21 has an invalid length. [ 1051.808721][ T6327] : entered promiscuous mode [ 1051.815918][ T6331] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8628'. [ 1051.954250][ T6342] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1052.074549][ T6350] syzkaller0: entered promiscuous mode [ 1052.080765][ T6350] syzkaller0: entered allmulticast mode [ 1052.212615][ T6358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8639'. [ 1052.231167][ T6362] vcan0: entered promiscuous mode [ 1052.236337][ T6362] vcan0: entered allmulticast mode [ 1052.277367][ T6358] netlink: 'syz.2.8639': attribute type 2 has an invalid length. [ 1052.285140][ T6358] netlink: 'syz.2.8639': attribute type 8 has an invalid length. [ 1052.340087][ T6358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1052.651678][ T6389] NCSI netlink: No device for ifindex 813332851 [ 1052.812100][ T6401] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1052.815764][ T6400] macvlan0: entered promiscuous mode [ 1052.819877][ T6401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1053.114640][ T6420] netlink: 'syz.0.8657': attribute type 11 has an invalid length. [ 1053.352137][ T6420] xfrm0 speed is unknown, defaulting to 1000 [ 1053.670783][ T6420] xfrm0 speed is unknown, defaulting to 1000 [ 1054.376292][ T6489] syzkaller0: entered promiscuous mode [ 1054.419587][ T6489] syzkaller0: entered allmulticast mode [ 1055.454727][ T6545] __nla_validate_parse: 13 callbacks suppressed [ 1055.454740][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8690'. [ 1055.494422][ T6546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8689'. [ 1055.554064][ T6548] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8691'. [ 1056.075660][ T6556] validate_nla: 3 callbacks suppressed [ 1056.075679][ T6556] netlink: 'syz.2.8695': attribute type 1 has an invalid length. [ 1056.130382][ T6556] netlink: 240 bytes leftover after parsing attributes in process `syz.2.8695'. [ 1056.152553][ T6556] netlink: 'syz.2.8695': attribute type 1 has an invalid length. [ 1056.354887][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8703'. [ 1056.374496][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8703'. [ 1056.505228][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8707'. [ 1056.511633][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8702'. [ 1056.566146][T29276] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.597000][T29276] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.616977][T29276] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.664672][T29276] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.690896][ T6614] netlink: 248 bytes leftover after parsing attributes in process `syz.3.8709'. [ 1056.739317][ T6614] netlink: 'syz.3.8709': attribute type 1 has an invalid length. [ 1057.109103][ T6636] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 1057.214468][ T6646] netlink: 'syz.0.8720': attribute type 1 has an invalid length. [ 1057.318497][ T6646] bond10: entered promiscuous mode [ 1057.346783][ T6646] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1057.410242][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8720'. [ 1057.468449][ T6646] bond10: (slave bridge4): making interface the new active one [ 1057.476045][ T6646] bridge4: entered promiscuous mode [ 1057.496061][ T6646] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 1057.698883][ T6692] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1057.804483][ T6691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1058.077263][ T6711] sctp: [Deprecated]: syz.1.8739 (pid 6711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1058.077263][ T6711] Use struct sctp_sack_info instead [ 1058.555204][ T6738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.619054][T29258] bond0: (slave bond2): link status definitely down, disabling slave [ 1058.635669][T29258] bond0: now running without any active interface! [ 1058.654610][ T6740] syzkaller1: entered promiscuous mode [ 1058.666769][ T6740] syzkaller1: entered allmulticast mode [ 1058.988566][ T6752] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1059.031766][ T6756] syzkaller0: entered promiscuous mode [ 1059.049825][ T6756] syzkaller0: entered allmulticast mode [ 1059.211741][ T6763] bond12 (unregistering): Released all slaves [ 1059.318707][ T6767] xfrm0 speed is unknown, defaulting to 1000 [ 1059.572641][ T6767] xfrm0 speed is unknown, defaulting to 1000 [ 1059.679287][ T6784] sctp: [Deprecated]: syz.0.8761 (pid 6784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1059.679287][ T6784] Use struct sctp_sack_info instead [ 1059.831849][ T6793] pim6reg527: entered allmulticast mode [ 1059.858579][ T6798] netlink: 'syz.0.8765': attribute type 1 has an invalid length. [ 1060.315117][ T6811] lo speed is unknown, defaulting to 1000 [ 1060.331840][ T6811] lo speed is unknown, defaulting to 1000 [ 1060.345260][ T6811] lo speed is unknown, defaulting to 1000 [ 1060.362965][ T6811] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1060.380799][ T6826] xt_hashlimit: size too large, truncated to 1048576 [ 1060.420602][ T6811] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1060.446972][ T6811] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1060.455017][ T6829] 0ªX¹¦Dö»: renamed from gretap0 [ 1060.491528][ T6811] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 1060.512670][ T6829] 0ªX¹¦Dö»: entered allmulticast mode [ 1060.651773][ T6811] lo speed is unknown, defaulting to 1000 [ 1060.686832][ T6811] lo speed is unknown, defaulting to 1000 [ 1060.874501][ T6844] netlink: 'syz.0.8778': attribute type 1 has an invalid length. [ 1061.042203][ T6811] lo speed is unknown, defaulting to 1000 [ 1061.048743][ T6844] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1061.055123][ T6811] lo speed is unknown, defaulting to 1000 [ 1061.109408][ T6811] lo speed is unknown, defaulting to 1000 [ 1061.222265][ T6811] lo speed is unknown, defaulting to 1000 [ 1061.253181][ T6811] lo speed is unknown, defaulting to 1000 [ 1061.260736][ T6811] lo speed is unknown, defaulting to 1000 [ 1061.268167][ T6811] lo speed is unknown, defaulting to 1000 [ 1061.306310][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1061.320047][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1061.330973][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1061.340677][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1061.356713][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1061.530542][ T6861] __nla_validate_parse: 12 callbacks suppressed [ 1061.530561][ T6861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8783'. [ 1061.903498][ T6889] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1062.007045][ T6853] xfrm0 speed is unknown, defaulting to 1000 [ 1062.054171][ T6894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8788'. [ 1062.085903][ T6893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8788'. [ 1062.212878][ T6901] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1062.292699][ T6903] bond12: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1062.512777][ T6853] xfrm0 speed is unknown, defaulting to 1000 [ 1062.687537][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8795'. [ 1062.833039][ T6920] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1062.929503][ T6853] lo speed is unknown, defaulting to 1000 [ 1063.142716][ T6931] xt_ipcomp: unknown flags 1D [ 1063.412154][ T6950] sock: sock_timestamping_bind_phc: sock not bind to device [ 1063.476578][ T5638] Bluetooth: hci0: command tx timeout [ 1063.491249][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8807'. [ 1063.496534][ T6954] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1063.539616][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8805'. [ 1063.614326][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.627303][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.634603][ T6853] bridge_slave_0: entered allmulticast mode [ 1063.641783][ T6853] bridge_slave_0: entered promiscuous mode [ 1063.667941][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.675517][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.703063][ T6853] bridge_slave_1: entered allmulticast mode [ 1063.710881][ T6853] bridge_slave_1: entered promiscuous mode [ 1063.740079][ T6853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.752627][ T6853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.814623][ T6853] team0: Port device team_slave_0 added [ 1063.824620][ T6853] team0: Port device team_slave_1 added [ 1063.859769][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.866764][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.892658][ T6853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.956393][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.963389][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.989274][ T6853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.066023][ T6853] hsr_slave_0: entered promiscuous mode [ 1064.072901][ T6853] hsr_slave_1: entered promiscuous mode [ 1064.079329][ T6853] debugfs: 'hsr0' already exists in 'hsr' [ 1064.085082][ T6853] Cannot create hsr debugfs directory [ 1064.268595][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8814'. [ 1064.283599][ T6983] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8814'. [ 1064.292593][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8814'. [ 1064.372696][ T6983] netlink: 'syz.0.8814': attribute type 3 has an invalid length. [ 1064.489404][ T6853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.630426][ T6853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.652004][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8817'. [ 1064.911526][ T6853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.983808][ T7027] xt_hashlimit: max too large, truncated to 1048576 [ 1064.994687][ T7027] No such timeout policy "syz1" [ 1065.103622][ T7033] siw: device registration error -23 [ 1065.179386][ T6853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1065.292547][ T7047] netlink: 'syz.2.8833': attribute type 5 has an invalid length. [ 1065.576359][ T7077] x_tables: duplicate underflow at hook 1 [ 1065.582795][ T7073] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1065.592403][ T5638] Bluetooth: hci0: command tx timeout [ 1065.593411][ T7078] IPVS: set_ctl: invalid protocol: 0 172.20.20.16:20004 [ 1065.606823][ T7077] x_tables: duplicate underflow at hook 1 [ 1065.613856][ T7077] x_tables: duplicate underflow at hook 1 [ 1065.622326][ T7077] x_tables: duplicate underflow at hook 1 [ 1065.623451][ T7073] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1065.628140][ T7077] x_tables: duplicate underflow at hook 1 [ 1065.628211][ T7077] x_tables: duplicate underflow at hook 1 [ 1065.628276][ T7077] x_tables: duplicate underflow at hook 1 [ 1065.628345][ T7077] x_tables: duplicate underflow at hook 1 [ 1065.659133][ T7077] x_tables: duplicate underflow at hook 1 [ 1065.662669][ T7073] gretap1: entered promiscuous mode [ 1065.664969][ T7077] x_tables: duplicate underflow at hook 1 [ 1065.702445][ T7073] gretap1: entered allmulticast mode [ 1065.926179][ T6853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1065.959369][ T6853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1065.967487][ T6853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1065.986962][ T6853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1066.003941][ T7095] gtp1: entered promiscuous mode [ 1066.023868][ T7095] gtp1: entered allmulticast mode [ 1066.031011][ T6853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1066.043254][ T6853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1066.051210][ T6853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1066.077474][ T6853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1066.115697][ T7103] openvswitch: netlink: IP tunnel dst address not specified [ 1066.314368][ T6853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.359086][ T6853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.385176][T29286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.392396][T29286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.414019][T29286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.421279][T29286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.487541][ T7122] kthread_run failed with err -4 [ 1066.906517][ T7154] netlink: 'syz.0.8863': attribute type 1 has an invalid length. [ 1066.935938][ T7154] netlink: 'syz.0.8863': attribute type 4 has an invalid length. [ 1066.951264][ T7154] __nla_validate_parse: 13 callbacks suppressed [ 1066.951282][ T7154] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8863'. [ 1067.160264][ T7175] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8868'. [ 1067.192926][ T7175] netlink: 'syz.5.8868': attribute type 26 has an invalid length. [ 1067.289701][ T6853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.383699][ T6853] veth0_vlan: entered promiscuous mode [ 1067.397831][ T6853] veth1_vlan: entered promiscuous mode [ 1067.431130][ T6853] veth0_macvtap: entered promiscuous mode [ 1067.441732][ T6853] veth1_macvtap: entered promiscuous mode [ 1067.483582][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.496511][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.524473][T29286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.554834][T29286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.583278][ T7191] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8873'. [ 1067.597803][T29286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.609586][T29286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.631170][ T7193] netlink: 'syz.1.8874': attribute type 39 has an invalid length. [ 1067.672928][ T7198] Bluetooth: MGMT ver 1.23 [ 1067.696348][ T5638] Bluetooth: hci0: command tx timeout [ 1067.770206][T29286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.806587][T29286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.868023][T29271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.882173][ T7206] netlink: 'syz.5.8876': attribute type 4 has an invalid length. [ 1067.893827][T29271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.944087][ T7206] netlink: 'syz.5.8876': attribute type 4 has an invalid length. [ 1068.089062][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8879'. [ 1068.100760][ T7215] IPVS: set_ctl: invalid protocol: 170 10.1.1.2:19999 [ 1068.148893][ T7216] netlink: 'syz.5.8876': attribute type 11 has an invalid length. [ 1068.255763][ T7219] IPVS: Unknown mcast interface: vcan0 [ 1068.286328][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8883'. [ 1068.632756][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1068.644709][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1068.652938][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1068.660936][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1068.680013][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1069.284809][ T7246] xfrm0 speed is unknown, defaulting to 1000 [ 1069.296952][ T7271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8895'. [ 1069.517177][ T7284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1069.731339][ T7246] xfrm0 speed is unknown, defaulting to 1000 [ 1069.785259][ T50] Bluetooth: hci0: command tx timeout [ 1069.829876][ T7301] IPv6: Can't replace route, no match found [ 1069.856145][ T7301] netlink: 'syz.0.8902': attribute type 1 has an invalid length. [ 1069.863926][ T7301] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8902'. [ 1069.921800][ T7301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1070.035758][ T7303] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1070.109438][ T7303] batman_adv: batadv0: Adding interface: gretap3 [ 1070.122878][ T7303] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.148345][ T7303] batman_adv: batadv0: Interface activated: gretap3 [ 1070.163169][ T7246] lo speed is unknown, defaulting to 1000 [ 1070.655081][ T7332] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8910'. [ 1070.788548][ T50] Bluetooth: hci6: command tx timeout [ 1070.895245][ T7354] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 1070.919393][ T7354] bond8 (unregistering): Released all slaves [ 1071.033039][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.042716][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.050862][ T7246] bridge_slave_0: entered allmulticast mode [ 1071.059289][ T7246] bridge_slave_0: entered promiscuous mode [ 1071.080208][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.097812][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.115747][ T7246] bridge_slave_1: entered allmulticast mode [ 1071.135033][ T7246] bridge_slave_1: entered promiscuous mode [ 1071.215979][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.241990][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.268813][ T7370] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8921'. [ 1071.270643][ T7375] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8921'. [ 1071.303552][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.310967][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.343235][ T7246] team0: Port device team_slave_0 added [ 1071.354053][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.361281][ T7380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.368851][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.376094][ T7380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.392561][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.399796][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.406933][ T7388] xt_hashlimit: size too large, truncated to 1048576 [ 1071.418107][ T7246] team0: Port device team_slave_1 added [ 1071.467002][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.487329][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.513864][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.587171][ T7386] bond13: invalid ARP target 0.0.0.0 specified for addition [ 1071.594561][ T7386] bond13: option arp_ip_target: invalid value (0) [ 1071.603095][ T7386] bond13 (unregistering): Released all slaves [ 1071.653149][ T7392] erspan0: entered allmulticast mode [ 1071.661367][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.685163][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.711905][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.848252][ T7246] hsr_slave_0: entered promiscuous mode [ 1071.855152][ T7246] hsr_slave_1: entered promiscuous mode [ 1071.861878][ T7246] debugfs: 'hsr0' already exists in 'hsr' [ 1071.867624][ T7246] Cannot create hsr debugfs directory [ 1071.952140][ T7404] set match dimension is over the limit! [ 1071.982425][ T7405] set match dimension is over the limit! [ 1072.102344][ T7410] syzkaller1: entered promiscuous mode [ 1072.117251][ T7410] syzkaller1: entered allmulticast mode [ 1072.586456][ T7246] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.798175][ T50] Bluetooth: hci6: command tx timeout [ 1073.091202][ T7437] IPv6: Can't replace route, no match found [ 1073.176745][ T7246] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.710184][ T7482] __nla_validate_parse: 2 callbacks suppressed [ 1073.710202][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8953'. [ 1073.725351][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8953'. [ 1073.731947][ T7246] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.873580][ T7493] pim6reg527: entered allmulticast mode [ 1074.014028][ T7501] netlink: 'syz.0.8956': attribute type 21 has an invalid length. [ 1074.021886][ T7501] IPv6: NLM_F_CREATE should be specified when creating new route [ 1074.123962][ T7246] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1074.131772][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8959'. [ 1074.155245][ T7507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.305955][ T7515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8961'. [ 1074.369340][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8963'. [ 1074.574425][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8967'. [ 1074.700827][ T7539] netlink: 13 bytes leftover after parsing attributes in process `syz.5.8969'. [ 1074.721161][ T7541] xt_check_table_hooks: 23 callbacks suppressed [ 1074.721180][ T7541] x_tables: unsorted underflow at hook 2 [ 1074.756073][ T7541] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8970'. [ 1074.804404][ T7541] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8970'. [ 1074.823076][ T7541] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8970'. [ 1074.861768][ T7541] x_tables: unsorted underflow at hook 2 [ 1074.880874][ T50] Bluetooth: hci6: command tx timeout [ 1074.918140][ T7246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1075.009202][ T7246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1075.019900][ T7544] netlink: 'syz.5.8971': attribute type 3 has an invalid length. [ 1075.034466][ T7246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1075.052536][ T7246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1075.060839][ T7246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1075.094844][ T7246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1075.112553][ T7246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1075.138917][ T7246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1075.159242][ T7553] netlink: 'syz.5.8973': attribute type 7 has an invalid length. [ 1075.167402][ T7553] netlink: 'syz.5.8973': attribute type 8 has an invalid length. [ 1075.311645][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.364116][ T7246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.390919][ T8597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.398162][ T8597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.419035][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.426241][ T8597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.465598][ T7564] veth0: entered promiscuous mode [ 1075.521425][ T7564] veth0: left promiscuous mode [ 1075.542582][ T7246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1075.794175][ T7584] netlink: 'syz.0.8979': attribute type 1 has an invalid length. [ 1075.875035][ T7584] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1075.993976][ T7589] block nbd0: reconnected socket [ 1076.001491][ T50] block nbd0: Receive control failed (result -107) [ 1076.113135][ T7596] xt_socket: unknown flags 0x8 [ 1076.665480][ T7578] bond12: (slave bridge6): making interface the new active one [ 1076.674849][ T7578] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 1076.968096][ T50] Bluetooth: hci6: command tx timeout [ 1077.003900][ T7246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.151131][ T7246] veth0_vlan: entered promiscuous mode [ 1077.163882][ T7246] veth1_vlan: entered promiscuous mode [ 1077.246878][ T7246] veth0_macvtap: entered promiscuous mode [ 1077.262450][ T7246] veth1_macvtap: entered promiscuous mode [ 1077.292162][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.335373][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.350908][T29286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.360430][T29286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.369153][T29286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.378399][T29286] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.535916][T29286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.549265][T29286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.581947][T29266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.593104][T29266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.582572][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1078.594081][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1078.630352][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1078.713919][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1078.752143][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1078.804980][ T50] [ 1078.807342][ T50] ====================================================== [ 1078.814371][ T50] WARNING: possible circular locking dependency detected [ 1078.821426][ T50] syzkaller #0 Not tainted [ 1078.825850][ T50] ------------------------------------------------------ [ 1078.832872][ T50] kworker/u9:0/50 is trying to acquire lock: [ 1078.838857][ T50] ffff88801be9d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1078.844223][ T7698] __nla_validate_parse: 12 callbacks suppressed [ 1078.844240][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9013'. [ 1078.849322][ T50] [ 1078.849322][ T50] but task is already holding lock: [ 1078.849331][ T50] ffff88801be9d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 1078.881155][ T50] [ 1078.881155][ T50] which lock already depends on the new lock. [ 1078.881155][ T50] [ 1078.891554][ T50] [ 1078.891554][ T50] the existing dependency chain (in reverse order) is: [ 1078.900570][ T50] [ 1078.900570][ T50] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1078.908569][ T50] down_write+0x96/0x200 [ 1078.913345][ T50] kernfs_add_one+0x41/0x5e0 [ 1078.918456][ T50] kernfs_create_dir_ns+0x1a1/0x230 [ 1078.924187][ T50] internal_create_group+0x440/0x1180 [ 1078.930081][ T50] cpuhp_invoke_callback+0x434/0x810 [ 1078.935914][ T50] cpuhp_issue_call+0x3f0/0x750 [ 1078.941286][ T50] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1078.947875][ T50] __cpuhp_setup_state+0x3f/0x60 [ 1078.953324][ T50] do_one_initcall+0x250/0x870 [ 1078.958601][ T50] do_initcall_level+0x10a/0x1a0 [ 1078.964201][ T50] do_initcalls+0x59/0xa0 [ 1078.969043][ T50] kernel_init_freeable+0x29d/0x3e0 [ 1078.974752][ T50] kernel_init+0x1d/0x1d0 [ 1078.979595][ T50] ret_from_fork+0x514/0xb70 [ 1078.984717][ T50] ret_from_fork_asm+0x1a/0x30 [ 1078.991827][ T50] [ 1078.991827][ T50] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1078.999656][ T50] [ 1078.999656][ T50] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1079.007418][ T50] cpus_read_lock+0x42/0x160 [ 1079.012539][ T50] static_key_slow_inc+0x12/0x30 [ 1079.018019][ T50] nbd_genl_reconfigure+0x1301/0x1e80 [ 1079.023981][ T50] genl_family_rcv_msg_doit+0x233/0x340 [ 1079.030047][ T50] genl_rcv_msg+0x614/0x7a0 [ 1079.035079][ T50] netlink_rcv_skb+0x226/0x4a0 [ 1079.040378][ T50] genl_rcv+0x28/0x40 [ 1079.044890][ T50] netlink_unicast+0x7bb/0x940 [ 1079.050169][ T50] netlink_sendmsg+0x813/0xb40 [ 1079.055447][ T50] sock_sendmsg_nosec+0x13a/0x180 [ 1079.060989][ T50] ____sys_sendmsg+0x54e/0x850 [ 1079.066266][ T50] ___sys_sendmsg+0x2a5/0x360 [ 1079.071451][ T50] __x64_sys_sendmsg+0x1b1/0x290 [ 1079.076897][ T50] do_syscall_64+0x174/0x580 [ 1079.082005][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.088411][ T50] [ 1079.088411][ T50] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1079.096049][ T50] __mutex_lock+0x19d/0x1550 [ 1079.101177][ T50] nbd_queue_rq+0x373/0x1150 [ 1079.106280][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1079.112443][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1079.119314][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1079.125804][ T50] blk_mq_run_work_fn+0x16c/0x300 [ 1079.131342][ T50] process_scheduled_works+0xa8e/0x14e0 [ 1079.137403][ T50] worker_thread+0xa47/0xfb0 [ 1079.142509][ T50] kthread+0x388/0x470 [ 1079.147092][ T50] ret_from_fork+0x514/0xb70 [ 1079.152191][ T50] ret_from_fork_asm+0x1a/0x30 [ 1079.157464][ T50] [ 1079.157464][ T50] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1079.164666][ T50] __mutex_lock+0x19d/0x1550 [ 1079.169764][ T50] nbd_queue_rq+0xc1/0x1150 [ 1079.174783][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1079.180844][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1079.187683][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1079.194186][ T50] blk_mq_run_work_fn+0x16c/0x300 [ 1079.199722][ T50] process_scheduled_works+0xa8e/0x14e0 [ 1079.205781][ T50] worker_thread+0xa47/0xfb0 [ 1079.210884][ T50] kthread+0x388/0x470 [ 1079.215462][ T50] ret_from_fork+0x514/0xb70 [ 1079.220563][ T50] ret_from_fork_asm+0x1a/0x30 [ 1079.225843][ T50] [ 1079.225843][ T50] -> #4 (set->srcu){.+.+}-{0:0}: [ 1079.232957][ T50] __synchronize_srcu+0xc9/0x2f0 [ 1079.238411][ T50] elevator_switch+0x1e8/0x7b0 [ 1079.243778][ T50] elevator_change+0x2fa/0x480 [ 1079.249062][ T50] elevator_set_default+0x375/0x440 [ 1079.254778][ T50] blk_register_queue+0x3f3/0x4e0 [ 1079.260362][ T50] __add_disk+0x6cb/0xe30 [ 1079.265220][ T50] add_disk_fwnode+0xfb/0x4b0 [ 1079.270407][ T50] nbd_dev_add+0x733/0xb60 [ 1079.275337][ T50] nbd_init+0x15f/0x1e0 [ 1079.280064][ T50] do_one_initcall+0x250/0x870 [ 1079.285344][ T50] do_initcall_level+0x10a/0x1a0 [ 1079.290794][ T50] do_initcalls+0x59/0xa0 [ 1079.295639][ T50] kernel_init_freeable+0x29d/0x3e0 [ 1079.301347][ T50] kernel_init+0x1d/0x1d0 [ 1079.306184][ T50] ret_from_fork+0x514/0xb70 [ 1079.311283][ T50] ret_from_fork_asm+0x1a/0x30 [ 1079.316557][ T50] [ 1079.316557][ T50] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1079.324399][ T50] __mutex_lock+0x19d/0x1550 [ 1079.329499][ T50] elevator_change+0x1af/0x480 [ 1079.334782][ T50] elevator_set_none+0xb5/0x140 [ 1079.340149][ T50] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1079.346474][ T50] nbd_start_device+0x189/0xb30 [ 1079.351835][ T50] nbd_genl_connect+0x1597/0x1c10 [ 1079.357396][ T50] genl_family_rcv_msg_doit+0x233/0x340 [ 1079.363455][ T50] genl_rcv_msg+0x614/0x7a0 [ 1079.368471][ T50] netlink_rcv_skb+0x226/0x4a0 [ 1079.373751][ T50] genl_rcv+0x28/0x40 [ 1079.378263][ T50] netlink_unicast+0x7bb/0x940 [ 1079.383553][ T50] netlink_sendmsg+0x813/0xb40 [ 1079.390144][ T50] sock_sendmsg_nosec+0x13a/0x180 [ 1079.395709][ T50] ____sys_sendmsg+0x54e/0x850 [ 1079.401001][ T50] ___sys_sendmsg+0x2a5/0x360 [ 1079.406211][ T50] __x64_sys_sendmsg+0x1b1/0x290 [ 1079.411678][ T50] do_syscall_64+0x174/0x580 [ 1079.416787][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.423191][ T50] [ 1079.423191][ T50] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1079.431789][ T50] blk_alloc_queue+0x544/0x690 [ 1079.437075][ T50] __blk_mq_alloc_disk+0x194/0x390 [ 1079.442702][ T50] nbd_dev_add+0x494/0xb60 [ 1079.447650][ T50] nbd_init+0x15f/0x1e0 [ 1079.452351][ T50] do_one_initcall+0x250/0x870 [ 1079.457624][ T50] do_initcall_level+0x10a/0x1a0 [ 1079.463073][ T50] do_initcalls+0x59/0xa0 [ 1079.467911][ T50] kernel_init_freeable+0x29d/0x3e0 [ 1079.473616][ T50] kernel_init+0x1d/0x1d0 [ 1079.478449][ T50] ret_from_fork+0x514/0xb70 [ 1079.483548][ T50] ret_from_fork_asm+0x1a/0x30 [ 1079.488822][ T50] [ 1079.488822][ T50] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1079.496021][ T50] fs_reclaim_acquire+0x71/0x100 [ 1079.501470][ T50] kmem_cache_alloc_noprof+0x64/0x5f0 [ 1079.507352][ T50] __kernfs_iattrs+0xdd/0x380 [ 1079.512536][ T50] kernfs_iop_setattr+0xe6/0x3f0 [ 1079.517982][ T50] notify_change+0xbba/0xea0 [ 1079.523083][ T50] do_truncate+0x1c2/0x250 [ 1079.528015][ T50] path_openat+0x2fed/0x3830 [ 1079.533118][ T50] do_file_open+0x23e/0x4a0 [ 1079.538130][ T50] do_sys_openat2+0x115/0x200 [ 1079.543315][ T50] __x64_sys_openat+0x138/0x170 [ 1079.548673][ T50] do_syscall_64+0x174/0x580 [ 1079.553773][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.560169][ T50] [ 1079.560169][ T50] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1079.568759][ T50] __lock_acquire+0x1520/0x2cf0 [ 1079.574141][ T50] lock_acquire+0x106/0x350 [ 1079.579154][ T50] down_write+0x96/0x200 [ 1079.583904][ T50] kernfs_link_sibling+0x4c7/0x5a0 [ 1079.589523][ T50] kernfs_add_one+0x1d2/0x5e0 [ 1079.594708][ T50] kernfs_create_dir_ns+0x1a1/0x230 [ 1079.600412][ T50] sysfs_create_dir_ns+0x12f/0x2a0 [ 1079.606039][ T50] kobject_add_internal+0x622/0xcd0 [ 1079.611825][ T50] kobject_add+0x163/0x240 [ 1079.616747][ T50] device_add+0x3fa/0xb80 [ 1079.621667][ T50] hci_conn_add_sysfs+0xd5/0x210 [ 1079.627197][ T50] hci_conn_complete_evt+0x8a8/0x1350 [ 1079.633131][ T50] hci_event_packet+0x6cd/0xf10 [ 1079.638486][ T50] hci_rx_work+0x3ee/0x1020 [ 1079.643503][ T50] process_scheduled_works+0xa8e/0x14e0 [ 1079.649589][ T50] worker_thread+0xa47/0xfb0 [ 1079.654730][ T50] kthread+0x388/0x470 [ 1079.659314][ T50] ret_from_fork+0x514/0xb70 [ 1079.664416][ T50] ret_from_fork_asm+0x1a/0x30 [ 1079.669695][ T50] [ 1079.669695][ T50] other info that might help us debug this: [ 1079.669695][ T50] [ 1079.679917][ T50] Chain exists of: [ 1079.679917][ T50] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1079.679917][ T50] [ 1079.694346][ T50] Possible unsafe locking scenario: [ 1079.694346][ T50] [ 1079.701787][ T50] CPU0 CPU1 [ 1079.707135][ T50] ---- ---- [ 1079.712478][ T50] lock(&root->kernfs_rwsem); [ 1079.717230][ T50] lock(cpuhp_state_mutex); [ 1079.724332][ T50] lock(&root->kernfs_rwsem); [ 1079.731600][ T50] lock(&root->kernfs_iattr_rwsem); [ 1079.736869][ T50] [ 1079.736869][ T50] *** DEADLOCK *** [ 1079.736869][ T50] [ 1079.744991][ T50] 4 locks held by kworker/u9:0/50: [ 1079.750087][ T50] #0: ffff88802735d940 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1079.761052][ T50] #1: ffffc90000ba7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1079.773047][ T50] #2: ffff88807b4940b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 1079.782867][ T50] #3: ffff88801be9d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 1079.792689][ T50] [ 1079.792689][ T50] stack backtrace: [ 1079.798566][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1079.798584][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1079.798595][ T50] Workqueue: hci5 hci_rx_work [ 1079.798616][ T50] Call Trace: [ 1079.798622][ T50] [ 1079.798629][ T50] dump_stack_lvl+0xe8/0x150 [ 1079.798648][ T50] print_circular_bug+0x2e1/0x300 [ 1079.798669][ T50] check_noncircular+0x12e/0x150 [ 1079.798691][ T50] __lock_acquire+0x1520/0x2cf0 [ 1079.798709][ T50] ? __lock_acquire+0x683/0x2cf0 [ 1079.798728][ T50] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1079.798745][ T50] lock_acquire+0x106/0x350 [ 1079.798759][ T50] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1079.798780][ T50] down_write+0x96/0x200 [ 1079.798797][ T50] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1079.798813][ T50] ? __pfx_down_write+0x10/0x10 [ 1079.798827][ T50] ? kernfs_root+0x1c/0x230 [ 1079.798841][ T50] ? kernfs_root+0x1c/0x230 [ 1079.798855][ T50] ? kernfs_root+0x1c/0x230 [ 1079.798869][ T50] ? kernfs_root+0x1ea/0x230 [ 1079.798884][ T50] kernfs_link_sibling+0x4c7/0x5a0 [ 1079.798904][ T50] kernfs_add_one+0x1d2/0x5e0 [ 1079.798921][ T50] kernfs_create_dir_ns+0x1a1/0x230 [ 1079.798939][ T50] sysfs_create_dir_ns+0x12f/0x2a0 [ 1079.798963][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1079.798987][ T50] ? do_raw_spin_unlock+0xf5/0x210 [ 1079.799009][ T50] kobject_add_internal+0x622/0xcd0 [ 1079.799036][ T50] kobject_add+0x163/0x240 [ 1079.799054][ T50] ? __pfx_kobject_add+0x10/0x10 [ 1079.799072][ T50] ? get_device_parent+0x366/0x3a0 [ 1079.799092][ T50] device_add+0x3fa/0xb80 [ 1079.799110][ T50] hci_conn_add_sysfs+0xd5/0x210 [ 1079.799134][ T50] hci_conn_complete_evt+0x8a8/0x1350 [ 1079.799152][ T50] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1079.799176][ T50] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1079.799192][ T50] ? skb_pull_data+0xf0/0x200 [ 1079.799212][ T50] hci_event_packet+0x6cd/0xf10 [ 1079.799229][ T50] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1079.799245][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 1079.799262][ T50] ? audit_trim_trees+0x280/0x7e0 [ 1079.799310][ T50] ? hci_send_to_monitor+0xe2/0x590 [ 1079.799331][ T50] hci_rx_work+0x3ee/0x1020 [ 1079.799349][ T50] ? process_scheduled_works+0xa20/0x14e0 [ 1079.799371][ T50] process_scheduled_works+0xa8e/0x14e0 [ 1079.799400][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 1079.799423][ T50] ? assign_work+0x3cf/0x5d0 [ 1079.799444][ T50] worker_thread+0xa47/0xfb0 [ 1079.799474][ T50] kthread+0x388/0x470 [ 1079.799490][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1079.799510][ T50] ? __pfx_kthread+0x10/0x10 [ 1079.799527][ T50] ret_from_fork+0x514/0xb70 [ 1079.799545][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 1079.799561][ T50] ? __switch_to+0xc89/0x1420 [ 1079.799584][ T50] ? __pfx_kthread+0x10/0x10 [ 1079.799600][ T50] ret_from_fork_asm+0x1a/0x30 [ 1079.799623][ T50] [ 1080.323741][ T7698] macsec1: entered promiscuous mode [ 1080.356298][ T7698] bridge0: entered promiscuous mode [ 1080.397774][ T7698] macsec1: entered allmulticast mode [ 1080.460523][ T7698] bridge0: entered allmulticast mode [ 1080.472769][ T7698] bridge0: port 3(macsec1) entered blocking state [ 1080.508021][ T7698] bridge0: port 3(macsec1) entered disabled state [ 1080.532304][ T7698] bridge0: left allmulticast mode [ 1080.548877][T23114] bridge0: left promiscuous mode [ 1080.676835][ T8576] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1080.686759][ T8576] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.852627][ T8576] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1080.862750][ T8576] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.922958][ T8576] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1080.933609][ T8576] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.991930][ T8576] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1081.003102][ T8576] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.103650][ T8576] dummy0: left allmulticast mode [ 1081.111296][ T8576] dummy0: left promiscuous mode [ 1081.116396][ T8576] bridge0: port 2(dummy0) entered disabled state [ 1081.124875][ T8576] mac80211_hwsim hwsim59 wlan0: left allmulticast mode [ 1081.132914][ T8576] bridge0: port 1(wlan0) entered disabled state [ 1081.144513][ T8576] vcan0: left allmulticast mode [ 1081.149967][ T8576] dvmrp1: left allmulticast mode [ 1081.157980][ T8576] batman_adv: batadv0: Interface deactivated: gretap3 [ 1081.320210][ T8576] bond5 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1081.333408][ T8576] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1081.344812][ T8576] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 16:2d:bf:12:97:30 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1081.455649][ T8576] batman_adv: batadv0: Removing interface: gretap3 [ 1081.506817][ T8576] bond0 (unregistering): Released all slaves [ 1081.518541][ T8576] bond1 (unregistering): Released all slaves [ 1081.530840][ T8576] bond2 (unregistering): Released all slaves [ 1081.543351][ T8576] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1081.560302][ T8576] bond3 (unregistering): (slave bond4): Releasing active interface [ 1081.569168][ T8576] bond3 (unregistering): Released all slaves [ 1081.580238][ T8576] bond4 (unregistering): Released all slaves [ 1081.593064][ T8576] bond5 (unregistering): (slave veth9): Releasing backup interface [ 1081.602724][ T8576] bond5 (unregistering): Released all slaves [ 1081.614426][ T8576] bond6 (unregistering): Released all slaves [ 1081.625931][ T8576] bond7 (unregistering): Released all slaves [ 1081.642013][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1081.724485][ T8576] : left promiscuous mode [ 1081.812372][ T8576] tipc: Left network mode [ 1082.096426][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1082.213518][ T8576] team0: left promiscuous mode [ 1082.279230][ T8576] hsr_slave_0: left promiscuous mode [ 1082.285056][ T8576] hsr_slave_1: left promiscuous mode [ 1082.294115][ T8576] veth0_macvtap: left promiscuous mode [ 1082.309508][ T8576] veth1_vlan: left promiscuous mode [ 1082.642064][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1082.964020][ T5285] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1083.039501][ T8576] IPVS: stop unused estimator thread 0... [ 1083.183667][ T8576] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.245243][ T8576] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.302498][ T8576] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.343498][ T8576] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.427371][ T8576] bridge_slave_1: left allmulticast mode [ 1083.436632][ T8576] bridge_slave_1: left promiscuous mode [ 1083.442618][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.453224][ T8576] bridge_slave_0: left allmulticast mode [ 1083.462150][ T8576] bridge_slave_0: left promiscuous mode [ 1083.468159][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.612885][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.624379][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.641699][ T8576] bond0 (unregistering): Released all slaves [ 1083.816379][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1084.099937][ T8576] hsr_slave_0: left promiscuous mode [ 1084.110207][ T8576] hsr_slave_1: left promiscuous mode [ 1084.116724][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.124780][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.133603][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.148276][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.162953][ T8576] veth1_macvtap: left promiscuous mode [ 1084.170306][ T8576] veth0_macvtap: left promiscuous mode [ 1084.176446][ T8576] veth1_vlan: left promiscuous mode [ 1084.182166][ T8576] veth0_vlan: left promiscuous mode [ 1084.400322][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 1084.413318][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 1084.492474][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1084.834232][ T8576] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.886437][ T8576] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.901094][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1084.915900][ T8576] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.969208][ T8576] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.081378][ T8576] bridge_slave_1: left allmulticast mode [ 1085.087950][ T8576] bridge_slave_1: left promiscuous mode [ 1085.093917][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.103328][ T8576] bridge_slave_0: left allmulticast mode [ 1085.112504][ T8576] bridge_slave_0: left promiscuous mode [ 1085.123799][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.274411][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.293815][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.306138][ T8576] bond0 (unregistering): Released all slaves [ 1085.318573][ T5285] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1085.740550][ T5285] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1085.816527][ T8576] hsr_slave_0: left promiscuous mode [ 1085.824791][ T8576] hsr_slave_1: left promiscuous mode [ 1085.838474][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.848800][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.857375][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.865797][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.882242][ T8576] veth1_macvtap: left promiscuous mode [ 1085.888384][ T8576] veth0_macvtap: left promiscuous mode [ 1085.894308][ T8576] veth1_vlan: left promiscuous mode [ 1085.901197][ T8576] veth0_vlan: left promiscuous mode [ 1086.154765][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 1086.168974][ T8576] team0 (unregistering): Port device team_slave_0 removed [ 1086.237493][ T5285] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1086.653458][ T5285] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1086.984911][ T5285] 8021q: adding VLAN 0 to HW filter on device eth12