last executing test programs: 9m49.38402603s ago: executing program 3 (id=5063): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{r5, 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000040)) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffffc}, @TCA_PIE_LIMIT={0x8, 0x2, 0x80000000}, @TCA_PIE_ALPHA={0x8, 0x4, 0x1d}]}}]}, 0x48}}, 0x0) 9m49.178942011s ago: executing program 3 (id=5064): socket$kcm(0xf, 0x3, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="220000000400000010000000", @ANYRES64=r0], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a3f4fc2c9a6bb6a7a00e70a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280080003400000013014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 9m48.822698384s ago: executing program 3 (id=5067): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe88000000000000000000000000000100000000000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x97ff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x68, 0x1, [@m_nat={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0x13, 0x6, "5422002fcf6706afb352af162f6c49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) 9m48.677362607s ago: executing program 3 (id=5068): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80001, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x100) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9m47.884398131s ago: executing program 3 (id=5072): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r3, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) 9m47.576349126s ago: executing program 3 (id=5073): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090805070000002bbd7000ffdbdf25020009003ca0"], 0x38}}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c"], 0x34}}, 0x0) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000), 0x4) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x2, 0x7fff8000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x648}, {}, {}, [@jmp={0x5, 0x0, 0x3, 0x9, 0xb, 0x100, 0xffffffffffffffff}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async) syz_emit_ethernet(0xfef3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010020641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200", @ANYRES32], 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x6, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@deltaction={0x48, 0x31, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x48}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b0000070000000900010073797a300000000014000000030a01010000000000000000000000002c000000200a05000000000000000000070000010900010073797a30000000000c0005"], 0x392c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000004100010000000000000000000101000000000000040008000400028020000180100004000000000000000000000000000c001c"], 0x40}}, 0x0) (rerun: 32) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x40}}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r10, &(0x7f00000001c0), 0x0}, 0x20) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r11) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x24, r12, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r13}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) r14 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000000)='illinois', 0xff81) 9m32.407218007s ago: executing program 32 (id=5073): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090805070000002bbd7000ffdbdf25020009003ca0"], 0x38}}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c"], 0x34}}, 0x0) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000), 0x4) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x2, 0x7fff8000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x648}, {}, {}, [@jmp={0x5, 0x0, 0x3, 0x9, 0xb, 0x100, 0xffffffffffffffff}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async) syz_emit_ethernet(0xfef3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010020641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200", @ANYRES32], 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x6, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@deltaction={0x48, 0x31, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x48}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b0000070000000900010073797a300000000014000000030a01010000000000000000000000002c000000200a05000000000000000000070000010900010073797a30000000000c0005"], 0x392c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000004100010000000000000000000101000000000000040008000400028020000180100004000000000000000000000000000c001c"], 0x40}}, 0x0) (rerun: 32) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x40}}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r10, &(0x7f00000001c0), 0x0}, 0x20) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r11) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x24, r12, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r13}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) r14 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000000)='illinois', 0xff81) 5m55.781138726s ago: executing program 2 (id=6150): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffff8, @mcast1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 5m54.676129033s ago: executing program 2 (id=6156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}]}]}, 0x2c}}, 0x0) 5m54.503240017s ago: executing program 2 (id=6158): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000180)=0x1f5, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000180004801400030074"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x15, 0xc8, r4}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x20}}, 0x40000c0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x18, 0x4, 0x5, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x100000}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r6, &(0x7f0000001600), &(0x7f0000001700)=@udp=r5, 0x2}, 0x20) socket$inet(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x14, 0x2d, 0x0, 0x1, [@nested={0xd, 0x9, 0x0, 0x1, [@generic="e59b06f6f044058215"]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x10, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42a87}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x440b0) 5m54.215409526s ago: executing program 2 (id=6160): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@generic="af19e38c"]}]}]}, 0x24}, 0x1, 0x5000000000000000, 0x0, 0x4c084}, 0xc000) 5m53.971069073s ago: executing program 2 (id=6163): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f00000001c0)) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl0\x00', r1, 0x2f, 0x0, 0x3, 0x1c, 0x41, @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x8000, 0x3, 0x6}}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0xc00, 0x0, {0x7, 0x0, 0x0, r9, 0x40, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmmsg$inet(r2, &(0x7f0000001d40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @broadcast}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x60, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7708}]}, @ssrr={0x89, 0x1f, 0xf9, [@private=0xa010102, @initdev={0xac, 0x1e, 0x4, 0x0}, @multicast2, @broadcast, @loopback, @loopback, @rand_addr=0x64010101]}, @end, @timestamp={0x44, 0x14, 0x5e, 0x0, 0x7, [0xfffffff3, 0x6, 0x1, 0x8]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xb, [@empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @local, @loopback, @empty]}, @timestamp_addr={0x44, 0xc, 0x86, 0x1, 0x9, [{@broadcast, 0xd0}]}, @lsrr={0x83, 0xb, 0xce, [@empty, @multicast2]}, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x34, 0x43, 0x1, 0x0, [{@rand_addr=0x64010101}, {@remote, 0xfffffffd}, {@multicast2}, {@rand_addr=0x64010101, 0x6}, {@local, 0x15}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast2}}}], 0x170}}, {{&(0x7f0000000b80)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000bc0)="7b88eb9b7ece1419fbfc0e69a575bf06786b96ffbf7e6dbe", 0x18}, {&(0x7f0000000c00)="06a2f85ef9be715f4396d46ad216fe83fca698dbd1c3d888f2c4bd24555b69cad68b0eec5d6092c2eb744b7879fdbbd1483f1a11e64665b8506d33e8d6049f3b491d5de1c761f42980e00cb6d547cf435072143bde06d30f88213485472b269140471a3152d7cbf0000b29b82e67fd4a587e7ecc49c23ae4d2a49d5b4fdb5db4414757bb3f0bb961ca362181119a8b8241b423f7c9c6cde2c581", 0x9a}, {&(0x7f0000000cc0)="c3101f63ae864dd2748da50aae27badf3d34e67fdabaedc74417d15069358d9e8a97904dd8bec900cd220452483ca4196a2a0e32c3bc9e", 0x37}, {&(0x7f0000000d40)="b2dd6cc67ceb81c3e062c5e7e3f51a3f30dff9ca1db1abe4b3c28c0ee64de238225a3668dc75485d1572c907535e2c19ea560d4c77ee7f440108041fc6bb260ea633319c7d005687943cb245bcfd98afc93b8e8ce482e81a1ee246cd02a3d79b5ddfc438528c2883b31a2b6dd48319da8041234b6caead4545250b4809a3c0c67aeb8b000760b5d4b4bae4ff125d2487cf532bcd315af72a548df6dd49b9c7382ccc509b696d1d9001ef194b6af847ff2f881437a64f0824c8afc494e73b916af1323ce8bffb7348f1b085fb68040d9c10bb48813f1db17ca5144921fc9cf2b3ac3f13b5b7bdd5c1a0065dd3fe6eec854e92", 0xf2}, {&(0x7f0000000ec0)="ae59d5d070ecd2095bd3aec8bb3dddb322bbc38c9571ed7506e67e2bc237dbaed9514e8836ec598fea734defb0da3fbf900af37b484ce81e6a42c714200911bff6d21e5f39d15a53bfd1d636ad7a931150238dc3c201e09ce33baa4c8a23a018c9156729efd8400a2b32b05dff509cbcfc0eaaef436ee50da65b482fbaead13ef3bd06cab79863c4c0d96fd81d2531f0cec96a4442bdec2e7a73", 0x9a}], 0x5, &(0x7f0000001000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @rand_addr=0x64010102}}}], 0x20}}, {{&(0x7f0000001040)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001100)=[{&(0x7f0000001080)="87fe7b827e5a7bb9d93f22858297bb7bb4123371bec3cc4fd7e8fa015335910374141a70cc98446ec5d0ecba06f9bc3a399ada98b0d3b2b9ed50eeedf89b36a8d1d466a74057fdfc5c54c8b64e1d6d448a4e9aac9da8b660e248a066da", 0x5d}], 0x1, &(0x7f0000001140)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4e1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xa8}}, {{&(0x7f0000001200)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000001240)="4173e729abbbef3569792d16491c0faaa576d1455473da7e727c62d71efef7a77051ff2129c19599d0b4ca78343a0b93af0453d23a01aebc0e336aee2265c0d85a6b2ad662905b83392cc30ca9fdf8cbba007c00fc0952134e77fae57da2c14df35dc25aec0f718e3ec4761e6e2dd575b6757f1445d43d2384b84fb7482ca8d3144ef4d611e759598c75f9d1f80ff35f73b516730b30caba26190ecd34253c7926c7e36b12a5f23f4b571b66282346092e6956e61f6c42493f4376dac9050e079444e1ed647c0f9f2fb79e8dc29882afa1d6e33b7d3defb82f76ee11ad79", 0xde}, {0x0}, {&(0x7f0000001380)="04", 0x1}], 0x3, &(0x7f0000001400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010101, @loopback}}}], 0x20}}, {{&(0x7f0000001440)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001480)="ed8396796c98062280c52f34c7cd683963f187fd185f9c9f806410751668388151d4c96847d21e55d9b7e39df9f33a06c7c1eb771337d45555bfe67fe32c8cc530522f7b6d3feaf2d510882d1f41623300f3574209e36c78f1feffc745617c0dcd71c087b2e3655fd398b7f4b4b6ac7e2dcfbcb9a492a2f2715c51b942964260fbd06e946d285688f29aa8d38bf15562a1eb9dc5f81db6fd4e87a6c30ff8f321d63ad36c7f8f8787c4ebb741a44a", 0xae}], 0x1}}, {{&(0x7f0000001580)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001680)=[{&(0x7f00000015c0)="776c447f6c2f62ab7dc1fa856e004261a0f916cc75a25cd401f3eac9a20fc4657b1c8e967c37c19279034da939847b54a3548c246c09d8b5188f546aa263cd0aa8222f7ad5f89d3354957b5a78732f55cf28de270c1f19682a2e170d3222a62441fb8babf70ee92a5ea6845d4013f471863d43965e1b3b64835d596f3e48aee1463468daeb56d24cfd30377e05554d5ac922e346e67324fe69bf8c81f27b64e1bc028aacf806", 0xa6}], 0x1, &(0x7f00000016c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010100, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}], 0xb8}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000018c0)="679dfb05ada8f812f3005291f7bdf850012bc6b2c266ff28f2d6156058654b04122f885c0c4900802ffc61525fc60f1f563ea12a6ef67b060ec8eca13c6e35995850d9f64e24100f48f53a0ac1503c957480b6670c895da18cc9422dc288f1268dfb53ff15a438813da4a2c80be1a5495c716b2613dfb699410e6a0065f88aa151abe35ea0579cfde57aaefc92537d5b48e7d41cea5e06c1347d5a90d495449c53d5bc03215fa559c39ca3ae48bafe3dfaa537db1d3b08244d5727841cf27a6f183d248fd7640b9df78e2f", 0xcb}], 0x1, &(0x7f0000001a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}], 0x48}}, {{&(0x7f0000001a80)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001ac0)="1b5e3ded5855cc41a08d56216c1fd52503cf04afee1479d9f7a8e1a7b2f50df0acc1cd2c84c416dac76ef2c7f08250d195b63039dcd25beddc0d8f5f6c2c179b34d4acec04951a619f9e3539db98201f0dc70743f70c90f3d9eab46d7ee4dcf0caa9f4047fa3c9b87c20fcb17aae3d0f9e70ba0b545b9de878bd0a811b58c976c214f63253cb0fe24c6d141f891e34512df4de311fffca2dc268618038f2d8b4108eedd4bba416bfa75e3574a25a69c1be577d65b2ce20b1f262e2ba928da6598cc13ba0265daaffd5171a33ab0fd30bc5dfc45a8fab", 0xd6}, {&(0x7f0000001bc0)="3c6fbba45d255c173d1df9c8157bb7d4c1f55cfca3ac9dd6dcfe6bfdf25b70e2e2af0a3bcd8b5561e6d18b9091e676c80615ae3736ee24e3f0843321f6bd3068d5eee512cd6ca3f0212e57498b841843ad27f699639f4b9111f198f228a23ade30bb865088c92fadb9223151b8509eec268e994e8705047384d0507e6cade263fc188a9262a5ee", 0x87}], 0x2, &(0x7f0000001cc0)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc9}}], 0x48}}], 0x8, 0x20004000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000000580)=""/33, 0x21}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000002380)=[{0x0}, {&(0x7f0000002340)=""/17, 0x11}], 0x2}, 0x1}], 0x2, 0x10002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) close(0x3) 5m52.878448001s ago: executing program 2 (id=6170): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESDEC=0x0], 0x0, 0x26}, 0x28) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) close(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c40000001000000000d0a00"/38], &(0x7f0000001f40)=""/4089, 0x26, 0xfef, 0x1, 0x10000410}, 0x28) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x18}, 0xc) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000029205a4be695b3cf93de0ad03d78e34d92eea4505ebc9210d005b23d0ef90c2fb4522406d9885e38b8ce8541ebdd980300000040229b32ed4508980b0b000000004971ab24073cbf3e66dadd35d56a1bd777564d4c34145894f271c9b36009e2709e788e2cda49e303e2da41bb22fbdbcc567bba323f84cf6f32f5176e39a4c0217b", @ANYRES32=r4, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="04000000030000000100"/28], 0x50) listen(r3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100070c10000000000001400000", 0x58}], 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000600000001dcdf250900020073797a3000000000080041007278650014003300626f6e64300000000000000000000080"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c004981ec2807800800040004000000080973ab3dc7e7b15e633ed800010018000000080002000900000008000400050000000800040000040000d660828272b2665d4b816518d76bd49628207c"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104030000000006000000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 5m37.723965097s ago: executing program 33 (id=6170): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESDEC=0x0], 0x0, 0x26}, 0x28) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) close(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c40000001000000000d0a00"/38], &(0x7f0000001f40)=""/4089, 0x26, 0xfef, 0x1, 0x10000410}, 0x28) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x18}, 0xc) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000029205a4be695b3cf93de0ad03d78e34d92eea4505ebc9210d005b23d0ef90c2fb4522406d9885e38b8ce8541ebdd980300000040229b32ed4508980b0b000000004971ab24073cbf3e66dadd35d56a1bd777564d4c34145894f271c9b36009e2709e788e2cda49e303e2da41bb22fbdbcc567bba323f84cf6f32f5176e39a4c0217b", @ANYRES32=r4, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="04000000030000000100"/28], 0x50) listen(r3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100070c10000000000001400000", 0x58}], 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000600000001dcdf250900020073797a3000000000080041007278650014003300626f6e64300000000000000000000080"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c004981ec2807800800040004000000080973ab3dc7e7b15e633ed800010018000000080002000900000008000400050000000800040000040000d660828272b2665d4b816518d76bd49628207c"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104030000000006000000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 6.179018862s ago: executing program 5 (id=8679): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x3, 0x24, 0x64, 0x0, 0x4b, 0x21, 0x0, @remote, @local}, {{0x4e23, 0x4e21, 0x4, 0x1, 0x9, 0x0, 0x0, 0x5, 0x1, "8a2526", 0x2, "b857a5"}}}}}}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (rerun: 64) connect$inet(r1, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}], 0x3, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x20}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="6f178a87079705f8d80979b3c669"}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="580000000202010800000000050000000a00000a440002802c000180140003000000000000000000000000000000000e140004000000000000000000000000000000000506000340000400000c0002"], 0x58}, 0x1, 0x0, 0x0, 0x20000094}, 0x80004) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xa}, 0x1) (async, rerun: 32) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x3, @none, 0x0, 0x1}, 0xe) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r5}, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYRES64=r4, @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="20800000410007012dbd700009000000000000000c002d8008000a804be78992"], 0x20}, 0x1, 0x0, 0x0, 0x2400c090}, 0xc000) 5.782383648s ago: executing program 5 (id=8681): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x3, 0x0, 0x2, 0x3, 0xa, 0xfffe}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000043c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000c2b9c5"], 0xa8}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b0f, &(0x7f0000000040)) r4 = socket(0x2a, 0x6, 0x2) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000940)={@tipc=@id={0x1e, 0x3, 0x1, {0x4e20}}, {&(0x7f00000000c0)=""/42, 0x2a}, &(0x7f0000000900), 0x10}, 0xa0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'team_slave_1\x00', {0xfffffffe}, 0x1ff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000880)={0x0, 0xfffffffffffffef1, &(0x7f0000000840)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34366d723c470000000007010200000001000000000000000809cbce4975e4fcba56cd29451e28a32f0001007344481b3a797a31000000001cfd010073797a30000000000800054000000003c64d7704"], 0x34}, 0x1, 0x0, 0x0, 0x2404c01c}, 0x400d0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="6ff567452d54cc0c26783778eec9dc8ded24919bcd401b7cb7d66dc849685a31eccd51a5676180af5bb6ac61d689d1b0fb4da01beca89044cb52ac9cd4f5bba708238b199d08f9a306bd223383b8c13e6ee7a9bc027fc18dfb3d0dd481e590c3abe71645691a84ff01000000000000000000000000afe377c4213127d3cac6f15c745bebe8eb78503f6b63116fe4d9437baa2ef970117e1d74e70508ec92b84c5d52b74f44b4748daa", 0xa9}, {&(0x7f00000021c0)="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"/3608, 0xe18}], 0x2}}], 0x1, 0x4854) r8 = accept4$unix(r7, 0x0, 0x0, 0x800) recvfrom$unix(r8, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f00000001c0)) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r10, 0x1, 0x28, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r9, @ANYRES64=r9, @ANYRES16=r9, @ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r9], 0xb0}}, 0x24040801) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000de0000000000000007000000181100006ad65df83677daa3c4e2f9f3a99f623618f78ad56016ccd084de37716cb42915e210f51f8e491054a16cdfe6f68d63f03f44760b50be87dbd80f94e98c648f1d551eb3ee35942bfd0957c0af827a175f6d3a18e51c09284d4879db9d0550bf615ce005a1aa483ccc4a09977dee43679dc47cba17ab3ec079e3089ead80b1c3636a4dafa2e5ca176b06f2b41643802818e67d3a71a65658884cfeac9070a46050d4c394adfcaef046d6d75eb96afe52affd233a678d997357563c67cca0dfca18ed63384430c8e4", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fbffffff85100000feffffff555020001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086f9fbffbe91000000000000b7020000010000008500000085000000b7000300000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0xc, 0x0, 0x0, 0xc0f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x6, 0xd, 0x8000, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x400}, 0x94) 5.517300151s ago: executing program 5 (id=8684): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x0, 0x4, 0x2, 0x5, 0x50}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x35471edb37b5d8c9}, 0x40c0080) r0 = socket(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000001a80)="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", 0xbf0, 0x48c4, 0x0, 0xff5f) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0), r4) connect$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r3}, 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) sendto(r3, &(0x7f0000001480)="694ff5822a1f1f7ae5e8d01b488ce64812385c2b0c4b525451615d07f93f5cbd15db4d5bc974df0a602dc5f661560cdcd9133c0c4a84f7fbf49006a7c4f081a58f181b7d6a8dbcd191c7830adc648b619f03b0f93dd31536c037cac722c45cb751584c41cfa2334651c7b07f4b98b0a93d73bd642109958fd5a343156fd6cd016a775f8f39fe9f487110ff9539ce02eea7396cd8f209c170758181127ceae96d33aca72f377be37141ebd668bc73433d3e7fd8e9de5ea9ce25393c33c2dea868c796cd433ed87bf68c11ad596dc93fd4651c494bc9b443d6431e3a7de087cd99a3294436", 0xe4, 0x844, &(0x7f0000001580)=@generic={0xb, "f52af0b81a358242380077f940a1c922851a041eb18f4730c4d99b1bbb672c6bfed42cb54c4d0395735b507337c503b4ee8714d390b99f6ed999e38d824b6f1312b259071a20594ab56f239d0837e9e43a38d00d68f0361ceac45d69800639ccb52d6dca82cd9574f91be8b19327a28c9119480bce587849997c90fe66a7"}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@jmp={0x5, 0x1, 0xb, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c}, 0x94) r6 = socket(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x8}}, {{0xa, 0x4e08, 0xffff8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) 4.472684216s ago: executing program 5 (id=8691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x291f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x36b77a584084f982}, 0x4000000) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host}, 0x10, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000200)={r3, r4/1000+10000}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @host}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe}}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x40) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r7, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", ""]}, 0x1c}}, 0x10) r10 = accept$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x10) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x541b, &(0x7f0000000740)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_newnexthop={0x18, 0x68, 0x800, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x2, 0x0, 0x26}}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x1) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'sit0\x00', 0x0, 0x80, 0x80, 0xffffff81, 0x4, {{0x10, 0x4, 0x0, 0x4, 0x40, 0x67, 0x0, 0x96, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@ra={0x94, 0x4}, @generic={0x88, 0xf, "ab1c1a3ae7de79346e49917f7f"}, @cipso={0x86, 0x16, 0x6ac32629a98e0d72, [{0x0, 0x7, "72cee6ba83"}, {0x6, 0x9, "8ccae13d6b5294"}]}, @noop]}}}}}) sendmsg$inet(r11, &(0x7f0000000b00)={&(0x7f0000000880)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000008c0), 0x0, &(0x7f00000009c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@generic={0x83, 0xf, "4e6b976ceb10634147499a7b66"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x3f, [@broadcast, @multicast2, @local, @broadcast]}, @cipso={0x86, 0x52, 0x1, [{0x6, 0x4, 'W_'}, {0x5, 0xe, "4fc8e417e62f3138f94818ce"}, {0x7, 0x3, "e6"}, {0x1, 0x7, "ae27323f16"}, {0x5, 0xd, "4ad08b479939e8350ca67b"}, {0x5, 0x3, "ab"}, {0x1, 0xd, "114ac2ac7ffc6238eaaf10"}, {0x5, 0x5, "0f4e18"}, {0x5, 0x3, '5'}, {0x7, 0xb, "44f20bde5c7c7b7424"}]}, @timestamp={0x44, 0x8, 0xa2, 0x0, 0x8, [0x4]}, @lsrr={0x83, 0x1f, 0xff, [@empty, @loopback, @empty, @multicast1, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @loopback, @broadcast}}}], 0x118}, 0x0) nanosleep(&(0x7f0000000b40)={0x77359400}, &(0x7f0000000b80)) recvmsg(r2, &(0x7f0000000e40)={&(0x7f0000000bc0)=@un=@abs, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/234, 0xea}], 0x1, &(0x7f0000000d80)=""/166, 0xa6}, 0x40) unshare(0x40000280) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000002200)={{r11, &(0x7f0000000e80)='devlink\x00', 0x200101, &(0x7f0000000ec0)={@_ha_fsid={[0x6e154a54]}, {0x4d, 0x7, 0x2, 0x5}}, 0xffffffc0, &(0x7f0000000f00)={@_ha_fsid}, &(0x7f0000000f40)=0x13}, 0x4, &(0x7f0000002180)=[{0x2, 0x2, &(0x7f0000000f80)='netdevsim\x00', &(0x7f0000000fc0)="8b9d296b99195eea1a5a407733fe4362205ac04bee667717ee1c4e721219a8919f", 0x21, 0x2a}, {0x0, 0x0, &(0x7f0000001000)='netdevsim\x00', &(0x7f0000001040)="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", 0x1000, 0x8}, {0x3, 0x3, &(0x7f0000002040)=',$\xe0-\x00', &(0x7f0000002080)="657796e8459cbd13ecef9f61ef44984a555c3b720740a4e0e8734e34c4af7ce4b3a3d3e899b91035c2709a3914cfa2c585f849222f67c15e020551ddc9580f0803bb5fb2cd11a8", 0x47, 0x24}, {0x1, 0x7, &(0x7f0000002100)='\x00', &(0x7f0000002140)="cc649fd44eb3c362109743a3e0cc5f0983dfa420d5da9dbf64c373", 0x1b, 0xa68bb8168f3234c5}]}) sendmsg$AUDIT_SET_FEATURE(r13, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x20, 0x3fa, 0x20, 0x70bd2d, 0x25dfdbfb, {0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x10000}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4801d}, 0x20004811) 3.827507511s ago: executing program 4 (id=8700): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000008000000000000000d0000008500000030000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1240}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000440)={0x1, {{0xa, 0x4e22, 0x5, @loopback, 0x6ec}}, {{0xa, 0x4e24, 0x6, @mcast2, 0x2}}}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES8=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.748963161s ago: executing program 4 (id=8701): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x1d, 0x5, 0x0) write$tun(r2, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 3.718259981s ago: executing program 0 (id=8702): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in=@loopback, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c0007f981b0a69e3b483567941b7fdfb37651a22098cbb049aa0dc4a1d39ec44f2aa5fd097fc46fda9be036465a2ae64955b5365cfd54364270a64091cc8304151862ad415b545474543f1f78e769ff75175edf10b55121ab67f9ca2a6fd7f0c0ce347dc39533cfd61c0e7cf48cc3ba87ef6d0bdb4f29d82997183b8217c0429b7a037404b58b693fbfbbfe0fd797e967e0ca1892ee544acc684c254bace9096f3e73bf08b365c25d3937"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x2000c050) 3.477694385s ago: executing program 0 (id=8704): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002021, 0x0, 0xfffffe84) sendmsg$802154_dgram(r0, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d0301000000000007020000ffb00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x48) 2.637359625s ago: executing program 4 (id=8707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80000001}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000980)="000000007286caa51c9369984c1da2ad87ce8d", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000005646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c000500000111000001f500010244132403b1fd606412c3258e3d67aa5b00010000000000000000001d2bffc1264d04000280040003"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118aa000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2.633610781s ago: executing program 6 (id=8708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x94) 2.492044527s ago: executing program 0 (id=8709): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, 0x0, &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000810f1000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.251972034s ago: executing program 0 (id=8710): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYRES64], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40002002, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close(0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000002c0)={'raw\x00', 0x0, [0x5, 0x1ff, 0xa7, 0x9, 0xe]}, &(0x7f0000000400)=0x54) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="04000000050000000400"/28], 0x50) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00', 0x1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e21, 0x7, @local, 0xa2}], 0x58) 2.250770899s ago: executing program 6 (id=8711): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000000000), 0xb97a, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x702, 0xe98, 0x0, &(0x7f0000000380)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.387045637s ago: executing program 4 (id=8713): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000180), {[{{@arp={@local, @local, 0xff000000, 0xff, 0x0, 0x4, {@mac=@local, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x200, 0x9, 0x7, 0x8, 0x2, 0x5, 'wg2\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x11}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0xc143, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @broadcast, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@broadcast, @multicast1, @rand_addr=0x64010100, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x40c, 0x0, 0xfffd, 0x0, 0x80}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x400000, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$inet(0x2, 0x80001, 0x84) listen(r6, 0x3a5) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_getaddr={0x74, 0x16, 0x2, 0x70bd2a, 0x25dfdbfb, {0xa, 0x10, 0x80, 0xc8, r1}, [@IFA_FLAGS={0x8, 0x8, 0x300}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x800, 0x7, 0x3}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x14, 0x2, @private2}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 1.172993143s ago: executing program 0 (id=8714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000740)=@qipcrtr={0x2a, 0x0, 0x4001}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)="f7db77ccfb4588aca6a69118558a11ef321ca628c43a044d4c7e87203c86d71dba8693079a42599416a343a1bb33425c5609dfd6be3021b8bfb8f5557c2e98ac2cd0bdaa42fc497a73514e68895729b824231d40109cfef603ac3016b7c09618bf59764662941bb427ae904b41ce2b75cb285b3f2565633e5d77dc64c87b144d1f2c6ebd0c4e9ca362170146cee30cd80738ef0186e53f23121dda1bc8ff2c3ba41e4fb45ee3307a9f39caa8e849c00268f84697313c3173ae13a7319e27063091a4b1fc51b3ded82efd116e42e5", 0xce}], 0x1}, 0x40010) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x20, 0x3, 0x388, 0x138, 0xa, 0x148, 0x0, 0x10, 0x348, 0x2a8, 0x2a8, 0x348, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff000000, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x18f, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'pimreg1\x00', 'tunl0\x00', {}, {}, 0x20, 0x2}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0xfffffffffffffffe, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'pim6reg1\x00', {0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3e8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRES32=r2, @ANYRESHEX=0x0], 0xd0}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x6, 0xfffffffd}, &(0x7f0000000080)=0x10) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6) write(r7, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000800b000100627207006765000010000200001000000000eb0d00"/40], 0x40}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x10}}]}}}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) 1.112031313s ago: executing program 5 (id=8715): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) connect(r0, &(0x7f0000000480)=@ll={0x11, 0x5, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x80) recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg2\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2, &(0x7f0000000240)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x6}, 0x94) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8, 0x2000000000032, 0xffffffffffffffff, 0x0) 1.111277671s ago: executing program 1 (id=8716): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a", 0x481}], 0x1}, 0xff00) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x29, 0x5, 0x2, 0x9, 0x50, @dev={0xfe, 0x80, '\x00', 0x35}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x700, 0x700, 0x1, 0x7}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001300050002000000fcdb9f2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300767863616e310000000000000000000008001c00", @ANYRES32=0xc9, @ANYBLOB="04001980"], 0x40}}, 0x0) 995.448763ms ago: executing program 6 (id=8717): r0 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r4, 0x913df000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f0000707000/0x2000)=nil, 0x2000, 0x3, 0x12, r5, 0xc3ceb000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190000022dbd7000000000002001000000000000000000000000000000000000000000000000ffff0a01010000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ae00000000010000ff0f000000000000ffffffffffffffff0004000000000000ffffffffffffffffffffff7fe847621400000100000000000200000000000000ffff00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d43c"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r9 = socket$kcm(0xa, 0x3, 0x106) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x46, 0x2}, 0x80, 0x0}, 0x20048840) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @loopback, 0x64}, 0x72) socket$nl_generic(0x10, 0x3, 0x10) 829.786564ms ago: executing program 5 (id=8718): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000fffd010000000000", @ANYRES32=0x1, @ANYBLOB="0000000000001700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"], 0x50) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan3\x00', 0x0}) (async) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYRES16=r0, @ANYRES32=r5, @ANYBLOB="0500250003000000080002000c0251050002b1709fac97f1c1d6c0068e2a4b701ced28aac6577f8ac063de91eb097e33d44e7024ae4f15858ddbc43f1acf09c8b71412690333bd639e8fff775e305518cfe0a5fea53464b32b9d278d583120f2b61c094545905b5a3d93995c57cb8557b6cbf4a8b69a21c950198dcd744284c5557e49e45a9ce9bd1413ea390577ca788ba4d95f89e05c2a4debb173cae04e78508ab0b28c7d11840b296110c2fa4169614ad675d09def4da85849e2624653195cb870ccb29a16a92cb8a26b63342614afcc12c1e757a16421", @ANYRES32=r2, @ANYBLOB="05002300040000000500280003000000"], 0x60}}, 0x4000040) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x8, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xc9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) 748.205875ms ago: executing program 4 (id=8719): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d0008"], 0x1c}], 0x1, 0x0, 0x0, 0x44804}, 0x20004010) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) recvmmsg(r0, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) (async) recvmmsg(r0, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) 676.93694ms ago: executing program 6 (id=8720): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'sit0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x20, 0x700, 0x7f, 0x40, {{0x24, 0x4, 0x3, 0xc, 0x90, 0x65, 0x0, 0x87, 0x2f, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4}, @end, @lsrr={0x83, 0x13, 0x15, [@remote, @local, @rand_addr=0x64010102, @loopback]}, @noop, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x0, 0xe, "acd9545bc9eac29d6c60c115"}, {0x6, 0x2}, {0x1, 0x9, "d062fa788992e4"}, {0x0, 0x10, "31a64e9512ed851e3ea6e95ab66d"}]}, @ssrr={0x89, 0x13, 0x7d, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @local, @rand_addr=0x64010101]}, @noop, @cipso={0x86, 0x1f, 0x3, [{0x1, 0x8, "391083ef51e4"}, {0x2, 0x5, "3285fa"}, {0x6, 0xc, "0291c47aca8c26e4d6b7"}]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@getstats={0x1c, 0x5e, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5202) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0x28040680) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r7, &(0x7f00000002c0)='ps}', &(0x7f0000000300)}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, r10, 0xee01}, {0x0, 0x28c, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x6c}, 0x0, @in6=@remote, 0x3507, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7a}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32, @ANYBLOB="05000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 593.430537ms ago: executing program 1 (id=8721): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0xfd, 0x4000}, {0x16, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 408.030911ms ago: executing program 1 (id=8722): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 340.099066ms ago: executing program 1 (id=8723): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100040001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000dbdf25050000001800d2801400010020010000000000000000000000000001000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) 236.021496ms ago: executing program 1 (id=8724): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x3, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 208.973451ms ago: executing program 0 (id=8725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000001c0)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040) bind$can_raw(r2, &(0x7f00000005c0), 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010015be4c385af31d4911"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pwritev(r8, &(0x7f00000007c0)=[{&(0x7f0000000600)="7e907546ea946bf7fa9814c042ababa38bef0e83c9b5b04aee18adedc481e178c694a77742dad0786c251a5d84a536e29e837aba9bc015b41f136585a4715a086c4cf02584694a0c554fa8e1515e674b6abee2f0c83d970cf837ea61b92451ad7dfee030b5cbf95f53da989bcd1ebf31404e675017e82061fb46de385985801e69295e285ab042413d8562118ef05f8be4a9a2acbdc6ec653cf5024f99f5c211840deb32b898cd43adabaea1b13eedd342f1d91736d3fae9fe39184abb94279b12364cbdd1394f9aca59214b67801907d5cfbe89220890685151871cb388b538f3470e", 0xe3}, {&(0x7f0000000700)="e7022b6896d1eb9da36a11eeeed9e82df8de5958507244fc5665f2847215ae3cf5bbd724d4441e3503a352fa3a3ebeec97a229877f105d31e8cb68f1423a09f4f153ff919313390c9fc2dc30af8750f036642442424d8387babd1a644eb485d40596aee8e58269923b366faf882ca07d07888bd178fe78b57015558fdc351ce4aec397b6ef6002b0a845a1d7", 0x8c}], 0x2, 0xb, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r9, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r10 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) close(r8) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x884) 202.263352ms ago: executing program 4 (id=8726): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r0, @ANYBLOB=' '], 0x38}}, 0x6404481c) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x800}, &(0x7f0000000f80)=0x8) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001100)={'syztnl1\x00', &(0x7f0000001080)={'ip6gre0\x00', 0x0, 0x4, 0xc2, 0x9, 0x201e, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x7800, 0x40, 0xf, 0x6}}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x200001a1, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000015c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002abf9b000000040008e28000", @ANYRES32=r9, @ANYBLOB="0c0000800800090064010101"], 0x24}], 0x1}, 0x0) sendmsg$nl_netfilter(r7, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000001240)=ANY=[@ANYBLOB="34020000120901012dbd7000ffdbdf250000000a3e00fa804496c6aefb39df43bf4862947cb44e4d5579cd12aaef543ffcabef04fb26739aeff7090a56270c006300010000000000000008003f00", @ANYRES32=r6, @ANYBLOB="0000a89aba901942fbfc3b489929125346055552ddd0b7665e77781f7550f32c09439213d879bbf6acd7b2b66b7cb01fbf4e089f01bd6acaad54419028fa151b0ccb40099c2b55a7980fd682cdfd43918e8d10806d30dba3d69a711e6a3be63af2985de4b2d3e6df19c2b6349bbd9da92dd22bd609357223a68cd203803befa5a7613ef4973f9d6fadf3d25a3fdd4b5109ba6c68c00f73b52b4689996bf1c52b944a1eb5f7e94962f015772d46651dbf15b74eea8f9b583a65a5f4360b15583762239c439343eed92a408c53a554c7638b7cb2ccfe53d845be22c68694c9d74f92e209312c37801b9d48bf76f2af7ab5b75d533c276e3e55c2db10c852de29db2f352ebb603bf6675bddc0e69f4cce516f9634bf4ad55f8527c6f64d04560592eafc1d19b83c239caec0fb0faabbb56b0b003a007b5e293a2a7d00003d00540040cda0708e72fdc73129f41f58adb55e1fe28177feb065f05daa6949f0541c044267524ec90a20d671dee2ec896ad25bac893169d53bb86f430000005800928008005800", @ANYRESHEX=0x0, @ANYBLOB="080067002e7300003d001e0060b79f3ac52621410f16d29c898f0cfb062ba7d23bf9fb95a113023f2252d61a764746592526c9413e949c174823e263567985cf31bc23f86a00000004000880"], 0x234}, 0x1, 0x0, 0x0, 0x40008c4}, 0x4008850) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001140)={{{@in=@private=0xa010100, @in=@broadcast, 0x4e24, 0x40, 0x4e24, 0x2, 0xa, 0x0, 0xc0, 0x2c, r5, r9}, {0x80, 0x5, 0x9, 0x1, 0x9, 0x12, 0x6, 0x3}, {0x9, 0x7, 0x192}, 0x1, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6, 0x1d}, 0x2, @in6=@remote, 0x0, 0x4, 0x0, 0x67, 0x100}}, 0xe8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000fc0)={r2, 0x7ff}, &(0x7f0000001000)=0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r11 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r11, &(0x7f00000014c0)="600000000014334000e4331e26bff073b302d6b8b34123ca00000000000000000000a455e4d7b1ad2b9ee9b7f447dd00000000010000131ad8f54008dcc88ae4d6dfaaf4dc574e5eb12d7f432078a2e7eb7c4c60951c91a29ecc2bd992f052e7c7160272b99df0efb1bfc8d0b9b5193572882b1af84aaa264411e100"/139, 0x8b, 0x8800, &(0x7f0000001480)={0xa, 0x0, 0xfffffffd, @loopback}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r10, 0xffffffffffffffff, 0x39, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x33fe0}}, 0x4000050) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000001040)={0x7, 0x3fc, 0xfb, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a4f0ff000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 170.715327ms ago: executing program 6 (id=8727): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000500)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x200000, &(0x7f00000000c0)={@_ha_fsid={[0xe46, 0x2]}, {0xffff, 0xc, 0x48, 0x4}}, 0x8001, &(0x7f0000000240), &(0x7f0000000280)=0x7}, 0x1, &(0x7f0000000440)=[{0x1, 0x1, &(0x7f00000002c0)='+G[\x00', &(0x7f0000000300)="fb43259829c7a455b1ab8b5479", 0xd, 0x30}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000580)={r4, 0x31, "7e6bb42fc99870070b83d869b3ec96d3ef9481c2859c4a6b45ed3fdbfdc31781e2c87ad99044b1ea9ee077c3d4240c3beb"}, &(0x7f00000005c0)=0x39) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="6ff567452d54cc0c26783778eec9dc8ded24919bcd401b7cb7d66dc849685a31eccd51a5676180af5bb6ac61d689d1b0fb4da01beca89044cb52ac9cd4f5bba708238b199d08f9a306bd223383b8c13e6ee7a9bc027fc18dfb3d0dd481e590c3abe71645691a84ff01000000000000000000000000afe377c4213127d3cac6f15c745bebe8eb78503f6b63116fe4d9437baa2ef970117e1d74e70508ec92b84c5d52b74f44b4748daa0a11", 0xab}, {&(0x7f0000001380)="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", 0xe16}], 0x2}}], 0x1, 0x88c0) r7 = accept4$unix(r6, 0x0, 0x0, 0x800) recvfrom$unix(r7, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 126.334434ms ago: executing program 1 (id=8728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000200)=[{r4, 0x1210}], 0x1, 0x1ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x168, 0x9, 0x0, 0xb, 0x248, 0x250, 0x250, 0x248, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x100, 0x148, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@ipcomp={{0x30}, {[], 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) getsockopt$inet_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x0, 0x3ff) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) unshare(0x6a060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) listen(r7, 0x2) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r9, 0x79811ce565b51061, 0x70bd27, 0x27dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x724fb049}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48084}, 0x80) 0s ago: executing program 6 (id=8729): socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x4, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="090b000000000000100005000000080003"], 0x1c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x40}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x40}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x58, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x8fa, 0x0, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0xd}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) (async) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) write$nci(r10, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r10, &(0x7f0000000700)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x9, {0x0, 0x5, 0x80, 0x0, 0x3, 0x53, 0x0, 0x200, 0x83, "3447b6cbe47f950df10242228860ea625feee799f9d538ff7f870c9ea6d1afffee637aa8f0c608e48a2a4493ef222b6f081ac58d449a1db8df6012025ea76edceff5cf8047af09a6ab9a0e900c1a145a15473eec351c3fe25c7d1fa663404d791d504d171ed949ac0d8ea6c5766253953b08ad2f4748fb4f38479ea8763f50cbc214d9"}}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711824000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711824000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x24}, 0x94) kernel console output (not intermixed with test programs): etlink socket, switching to perfect channel medium [ 1170.013613][ T3815] gretap0: entered promiscuous mode [ 1170.014676][ T3815] gretap0: left promiscuous mode [ 1170.056254][ T3821] gretap0: entered promiscuous mode [ 1170.057846][ T3821] gretap0: left promiscuous mode [ 1170.236726][ T3827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1170.602682][ T3850] xt_hashlimit: size too large, truncated to 1048576 [ 1170.602705][ T3850] xt_hashlimit: max too large, truncated to 1048576 [ 1170.602719][ T3850] xt_hashlimit: Unknown mode mask B86BCC12, kernel too old? [ 1170.899538][ T3865] netlink: 'syz.1.7365': attribute type 9 has an invalid length. [ 1170.899565][ T3865] netlink: 'syz.1.7365': attribute type 6 has an invalid length. [ 1171.571851][ T3898] pim6reg: entered allmulticast mode [ 1171.656175][ T3900] netlink: 'syz.0.7375': attribute type 1 has an invalid length. [ 1171.656200][ T3900] __nla_validate_parse: 8 callbacks suppressed [ 1171.656215][ T3900] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7375'. [ 1171.743243][ T2789] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1171.774989][ T3905] bond17: entered promiscuous mode [ 1171.775054][ T3905] bond17: entered allmulticast mode [ 1171.775541][ T3905] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1171.811889][ T2787] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1171.864667][ T3910] netlink: 'syz.1.7378': attribute type 9 has an invalid length. [ 1171.864695][ T3910] netlink: 'syz.1.7378': attribute type 6 has an invalid length. [ 1171.879638][T12706] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1171.974352][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7381'. [ 1172.114602][ T3925] netlink: 'syz.6.7383': attribute type 4 has an invalid length. [ 1172.296920][ T31] audit: type=1804 audit(1789265544.963:17): pid=3933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7386" name="/newroot/325/cgroup.controllers" dev="tmpfs" ino=1678 res=1 errno=0 [ 1172.297417][ T31] audit: type=1800 audit(1789265544.983:18): pid=3933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7386" name="cgroup.controllers" dev="tmpfs" ino=1678 res=0 errno=0 [ 1172.350091][ T3933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7386'. [ 1172.422749][ T3937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7388'. [ 1172.423661][ T3937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7388'. [ 1172.547707][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7390'. [ 1172.802776][ T3957] Cannot find del_set index 17 as target [ 1172.849649][ T3958] Cannot find del_set index 17 as target [ 1172.916892][ T3968] netlink: 'syz.4.7393': attribute type 1 has an invalid length. [ 1172.963219][ T3948] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1173.025584][T12716] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1173.026172][T12716] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1173.176123][ T2787] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1173.273576][ T3987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7396'. [ 1173.304769][ T3987] netlink: zone id is out of range [ 1173.304787][ T3987] netlink: zone id is out of range [ 1173.304797][ T3987] netlink: zone id is out of range [ 1173.304807][ T3987] netlink: zone id is out of range [ 1173.304817][ T3987] netlink: zone id is out of range [ 1173.304826][ T3987] netlink: zone id is out of range [ 1173.304840][ T3987] netlink: zone id is out of range [ 1173.304850][ T3987] netlink: zone id is out of range [ 1173.304860][ T3987] netlink: zone id is out of range [ 1173.465671][ T3992] veth1_to_bond: entered promiscuous mode [ 1173.465696][ T3992] veth1_to_bond: entered allmulticast mode [ 1173.700332][ T4003] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1173.722722][ T4001] x_tables: duplicate underflow at hook 1 [ 1174.355480][ T4032] netlink: 380 bytes leftover after parsing attributes in process `syz.4.7411'. [ 1174.355511][ T4032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7411'. [ 1174.355530][ T4032] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7411'. [ 1174.584532][ T4043] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1174.706419][ T4047] netlink: 'syz.5.7416': attribute type 4 has an invalid length. [ 1174.733026][ T4049] syzkaller1: entered promiscuous mode [ 1174.733051][ T4049] syzkaller1: entered allmulticast mode [ 1174.938589][ T4055] ±ÿ)”ëfl: renamed from lo [ 1174.984841][ T4053] lo: entered promiscuous mode [ 1175.590729][ T4090] net_ratelimit: 498 callbacks suppressed [ 1175.590752][ T4090] ip_tables: iptables: counters copy to user failed while replacing table [ 1175.787159][ T4087] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1175.869906][ T4098] netlink: 'syz.0.7426': attribute type 2 has an invalid length. [ 1175.870671][ T4101] netlink: 'syz.0.7426': attribute type 2 has an invalid length. [ 1175.941311][ T4099] Unsupported ieee802154 address type: 0 [ 1176.326793][ T4117] netlink: 'syz.1.7430': attribute type 12 has an invalid length. [ 1176.651122][ T4127] bond13: entered promiscuous mode [ 1177.016528][ T4141] __nla_validate_parse: 8 callbacks suppressed [ 1177.016552][ T4141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7436'. [ 1177.114609][ T4142] syzkaller0: entered promiscuous mode [ 1177.114637][ T4142] syzkaller0: entered allmulticast mode [ 1177.369439][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1177.457314][ T4147] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7438'. [ 1177.607265][ T4156] openvswitch: netlink: IP tunnel TTL not specified. [ 1177.752307][ T4164] ip_tables: iptables: counters copy to user failed while replacing table [ 1177.910783][ T4166] netlink: 'syz.0.7442': attribute type 1 has an invalid length. [ 1177.975007][ T4166] bond13: entered promiscuous mode [ 1177.976625][ T4166] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1177.994968][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7442'. [ 1178.035313][ T4166] bond13 (unregistering): Released all slaves [ 1178.704783][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7443'. [ 1178.734112][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7443'. [ 1178.889383][ T4189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7449'. [ 1179.053065][ T4192] netlink: 'syz.5.7450': attribute type 4 has an invalid length. [ 1179.409618][ T4204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7454'. [ 1179.448989][ T4204] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1179.616646][ T4210] bridge0: port 6(veth0_to_team) entered blocking state [ 1179.619000][ T4210] bridge0: port 6(veth0_to_team) entered disabled state [ 1179.619180][ T4210] veth0_to_team: entered allmulticast mode [ 1179.637048][ T4210] veth0_to_team: entered promiscuous mode [ 1179.755192][ T4221] netlink: 'syz.0.7458': attribute type 10 has an invalid length. [ 1179.755254][ T4221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7458'. [ 1180.037494][ T4231] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7463'. [ 1180.038085][ T4231] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7463'. [ 1180.199190][T26297] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1180.607677][ T4265] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1180.830095][ T4272] : renamed from dummy0 (while UP) [ 1180.839374][ T2787] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1180.996923][ T4282] syzkaller0: entered promiscuous mode [ 1180.996949][ T4282] syzkaller0: entered allmulticast mode [ 1181.013457][ T4283] netlink: 'syz.6.7476': attribute type 28 has an invalid length. [ 1181.040593][ T4282] geneve2: entered promiscuous mode [ 1181.100877][ T4287] syzkaller0: left promiscuous mode [ 1181.101224][ T4287] syzkaller0: left allmulticast mode [ 1181.506978][ T4309] netlink: 'syz.6.7482': attribute type 1 has an invalid length. [ 1181.513448][ T4313] macvtap1: entered allmulticast mode [ 1181.513472][ T4313] veth0_to_bridge: entered allmulticast mode [ 1181.570800][ T4313] veth0_to_bridge: left allmulticast mode [ 1181.620237][ T4323] netlink: 'syz.5.7485': attribute type 39 has an invalid length. [ 1181.624317][ T4322] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1181.744078][ T4324] netlink: 'syz.1.7486': attribute type 4 has an invalid length. [ 1181.793964][ T4324] netlink: 'syz.1.7486': attribute type 4 has an invalid length. [ 1181.956400][ T4327] netlink: 'syz.6.7489': attribute type 1 has an invalid length. [ 1182.023676][ T4331] ip_tables: iptables: counters copy to user failed while replacing table [ 1182.487895][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1183.105913][ T4371] xt_bpf: check failed: parse error [ 1183.160277][ T4371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.234565][ T4366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.318601][ T4385] xt_hashlimit: size too large, truncated to 1048576 [ 1183.706483][ T4392] __nla_validate_parse: 10 callbacks suppressed [ 1183.706508][ T4392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7504'. [ 1183.759517][ T4393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7503'. [ 1183.849815][ T4396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7505'. [ 1184.058139][ T4408] netlink: 'syz.4.7507': attribute type 40 has an invalid length. [ 1184.061388][ T4414] netlink: 'syz.4.7507': attribute type 40 has an invalid length. [ 1184.110470][ T4407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7508'. [ 1184.173139][ T4407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7508'. [ 1184.855475][ T4433] netlink: 'syz.1.7511': attribute type 12 has an invalid length. [ 1184.855525][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7511'. [ 1185.045530][ T4438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.470266][ T4449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7515'. [ 1186.327625][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1186.576876][ T4472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7523'. [ 1186.619096][ T4471] IPVS: Unknown mcast interface: macsec0 [ 1186.863905][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7524'. [ 1187.072397][ T4474] ip_tables: iptables: counters copy to user failed while replacing table [ 1187.131232][ T4493] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7529'. [ 1187.613430][ T4518] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1187.774862][ T4531] netlink: 'syz.0.7539': attribute type 1 has an invalid length. [ 1188.072944][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.072974][ T4546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.075144][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.075166][ T4546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.211676][ T4548] tunl0: entered promiscuous mode [ 1188.211942][ T4548] gre0: entered promiscuous mode [ 1188.212306][ T4548] gretap0: entered promiscuous mode [ 1188.212538][ T4548] erspan0: entered promiscuous mode [ 1188.212795][ T4548] ip_vti0: entered promiscuous mode [ 1188.213046][ T4548] ip6_vti0: entered promiscuous mode [ 1188.213290][ T4548] sit0: entered promiscuous mode [ 1188.213519][ T4548] ip6tnl0: entered promiscuous mode [ 1188.213753][ T4548] ip6gre0: entered promiscuous mode [ 1188.214005][ T4548] syz_tun: entered promiscuous mode [ 1188.214262][ T4548] ip6gretap0: entered promiscuous mode [ 1188.214613][ T4548] bridge0: entered promiscuous mode [ 1188.214868][ T4548] vcan0: entered promiscuous mode [ 1188.215775][ T4548] bond0: entered promiscuous mode [ 1188.215788][ T4548] bond_slave_0: entered promiscuous mode [ 1188.215906][ T4548] bond_slave_1: entered promiscuous mode [ 1188.216023][ T4548] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1188.217120][ T4548] team0: entered promiscuous mode [ 1188.217133][ T4548] team_slave_0: entered promiscuous mode [ 1188.217310][ T4548] team_slave_1: entered promiscuous mode [ 1188.218617][ T4548] dummy0: entered promiscuous mode [ 1188.218902][ T4548] nlmon0: entered promiscuous mode [ 1188.219163][ T4548] batadv0: entered promiscuous mode [ 1188.219446][ T4548] vxcan0: entered promiscuous mode [ 1188.219688][ T4548] vxcan1: entered promiscuous mode [ 1188.220079][ T4548] veth0: entered promiscuous mode [ 1188.220347][ T4548] veth1: entered promiscuous mode [ 1188.220609][ T4548] wg0: entered promiscuous mode [ 1188.220875][ T4548] wg1: entered promiscuous mode [ 1188.221149][ T4548] wg2: entered promiscuous mode [ 1188.221419][ T4548] veth1_to_bridge: entered promiscuous mode [ 1188.222302][ T4548] veth0_to_bond: entered promiscuous mode [ 1188.441723][ T4548] veth1_to_bond: left allmulticast mode [ 1188.444216][ T4548] veth0_to_team: entered promiscuous mode [ 1188.444815][ T4548] veth1_to_team: entered promiscuous mode [ 1188.445408][ T4548] veth0_to_batadv: entered promiscuous mode [ 1188.445909][ T4548] batadv_slave_0: entered promiscuous mode [ 1188.446359][ T4548] veth1_to_batadv: entered promiscuous mode [ 1188.446812][ T4548] batadv_slave_1: entered promiscuous mode [ 1188.447243][ T4548] xfrm0: entered promiscuous mode [ 1188.447696][ T4548] veth0_to_hsr: entered promiscuous mode [ 1188.448543][ T4548] veth1_to_hsr: entered promiscuous mode [ 1188.555122][ T31] audit: type=1800 audit(1789265561.223:19): pid=4550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7545" name=B702 dev="tmpfs" ino=1834 res=0 errno=0 [ 1188.776143][ T4559] __nla_validate_parse: 8 callbacks suppressed [ 1188.776177][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7547'. [ 1188.808962][ T31] audit: type=1804 audit(1789265561.473:20): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7549" name="/newroot/258/cgroup.controllers" dev="tmpfs" ino=1340 res=1 errno=0 [ 1188.809126][ T31] audit: type=1800 audit(1789265561.473:21): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7549" name="cgroup.controllers" dev="tmpfs" ino=1340 res=0 errno=0 [ 1188.809954][ T31] audit: type=1800 audit(1789265561.473:22): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7549" name="cgroup.controllers" dev="tmpfs" ino=1340 res=0 errno=0 [ 1188.899956][ T31] audit: type=1800 audit(1789265561.573:23): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7549" name="cgroup.controllers" dev="tmpfs" ino=1340 res=0 errno=0 [ 1188.900615][ T31] audit: type=1800 audit(1789265561.573:24): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7549" name="cgroup.controllers" dev="tmpfs" ino=1340 res=0 errno=0 [ 1189.022474][ T31] audit: type=1800 audit(1789265561.713:25): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7549" name="cgroup.controllers" dev="tmpfs" ino=1340 res=0 errno=0 [ 1189.023185][ T31] audit: type=1800 audit(1789265561.713:26): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7549" name="cgroup.controllers" dev="tmpfs" ino=1340 res=0 errno=0 [ 1189.023877][ T31] audit: type=1800 audit(1789265561.713:27): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7549" name="cgroup.controllers" dev="tmpfs" ino=1340 res=0 errno=0 [ 1189.024600][ T31] audit: type=1800 audit(1789265561.713:28): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7549" name="cgroup.controllers" dev="tmpfs" ino=1340 res=0 errno=0 [ 1189.245347][ T4582] netlink: 'syz.5.7551': attribute type 1 has an invalid length. [ 1189.245374][ T4582] netlink: 220 bytes leftover after parsing attributes in process `syz.5.7551'. [ 1189.531995][ T4588] tipc: Enabled bearer , priority 0 [ 1189.537766][ T4587] syzkaller0: entered promiscuous mode [ 1189.537798][ T4587] syzkaller0: entered allmulticast mode [ 1189.654958][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7553'. [ 1189.654985][ T4587] openvswitch: netlink: Flow actions attr not present in new flow. [ 1189.794357][ T4596] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7557'. [ 1189.884655][ T4596] batman_adv: batadv0: Removing interface: dummy0 [ 1189.908471][ T4599] tipc: Resetting bearer [ 1190.148060][ T4615] netlink: 'syz.4.7562': attribute type 1 has an invalid length. [ 1190.148086][ T4615] netlink: 'syz.4.7562': attribute type 2 has an invalid length. [ 1190.148101][ T4615] netlink: 'syz.4.7562': attribute type 3 has an invalid length. [ 1190.148116][ T4615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7562'. [ 1190.255136][ T4586] tipc: Resetting bearer [ 1190.344609][ T4619] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7562'. [ 1190.378174][ T4624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7564'. [ 1190.378214][ T4624] netlink: 'syz.0.7564': attribute type 7 has an invalid length. [ 1190.378230][ T4624] netlink: 'syz.0.7564': attribute type 8 has an invalid length. [ 1190.378245][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7564'. [ 1190.424826][ T4586] tipc: Disabling bearer [ 1190.550666][ T4615] pim6reg1: entered allmulticast mode [ 1190.610303][ T4630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7566'. [ 1190.624245][ T4633] SET target dimension over the limit! [ 1191.014570][ T4654] ip_tables: iptables: counters copy to user failed while replacing table [ 1191.396017][ T4666] ip_tables: iptables: counters copy to user failed while replacing table [ 1191.471650][ T4670] lo: entered allmulticast mode [ 1191.560799][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7577'. [ 1191.584716][ T4673] lo: left allmulticast mode [ 1192.511506][ T4702] xfrm0: entered allmulticast mode [ 1192.511935][ T4702] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1192.733030][ T4700] syzkaller0: entered promiscuous mode [ 1192.733055][ T4700] syzkaller0: entered allmulticast mode [ 1192.851865][ T4715] bond0: (slave lo): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 1192.852116][ T4715] Bluetooth: hci0: unsupported parameter 5135 [ 1192.852135][ T4715] Bluetooth: hci0: unsupported parameter 8192 [ 1192.852149][ T4715] Bluetooth: hci0: unsupported parameter 5135 [ 1192.852163][ T4715] Bluetooth: hci0: unsupported parameter 8192 [ 1196.470839][ T4723] ip6erspan0: mtu less than device minimum [ 1196.486112][ T4728] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1196.735660][ T4736] __nla_validate_parse: 3 callbacks suppressed [ 1196.735685][ T4736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7595'. [ 1196.783806][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7596'. [ 1196.783825][ T4744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7596'. [ 1196.855669][ T4746] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7598'. [ 1196.855695][ T4746] netlink: 'syz.6.7598': attribute type 1 has an invalid length. [ 1196.890540][ T4747] syzkaller0: entered promiscuous mode [ 1196.890565][ T4747] syzkaller0: entered allmulticast mode [ 1197.007012][ T4751] netlink: 'syz.6.7600': attribute type 30 has an invalid length. [ 1197.076711][ T4756] tipc: Enabled bearer , priority 0 [ 1197.077515][ T4756] syzkaller0: entered promiscuous mode [ 1197.077549][ T4756] syzkaller0: entered allmulticast mode [ 1197.116051][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7601'. [ 1197.116076][ T4756] openvswitch: netlink: Flow actions attr not present in new flow. [ 1197.246627][ T4761] openvswitch: netlink: IP tunnel dst address not specified [ 1197.246664][ T4761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1197.358426][ T4766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7604'. [ 1197.475253][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7605'. [ 1197.480870][ T4769] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1197.505889][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7605'. [ 1197.712405][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7606'. [ 1197.940274][ T4755] tipc: Resetting bearer [ 1198.073716][ T4755] tipc: Disabling bearer [ 1198.150487][ T4788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7608'. [ 1198.154280][ T2787] tipc: Node number set to 1494569365 [ 1199.095425][ T4818] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1200.734610][ T4862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1200.772425][ T4865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1201.024614][ T4869] syzkaller0: left promiscuous mode [ 1201.024656][ T4869] syzkaller0: left allmulticast mode [ 1202.023799][ T4902] netlink: 'syz.6.7639': attribute type 3 has an invalid length. [ 1202.024481][ T4902] netlink: 'syz.6.7639': attribute type 3 has an invalid length. [ 1202.024510][ T4903] netlink: 'syz.6.7639': attribute type 3 has an invalid length. [ 1202.024706][ T4902] __nla_validate_parse: 13 callbacks suppressed [ 1202.024716][ T4903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7639'. [ 1202.024723][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7639'. [ 1202.024735][ T4903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7639'. [ 1202.024739][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7639'. [ 1202.122417][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7639'. [ 1202.122441][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7639'. [ 1202.123195][ T4903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7639'. [ 1202.123216][ T4903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7639'. [ 1202.150168][T12708] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.150217][T12708] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.150254][T12708] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.150289][T12708] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.271328][ T4905] netlink: 596 bytes leftover after parsing attributes in process `syz.4.7640'. [ 1202.641399][ T4938] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7648'. [ 1203.389106][ T4970] netlink: 'syz.0.7653': attribute type 9 has an invalid length. [ 1203.540927][ T4973] netlink: 'syz.0.7653': attribute type 9 has an invalid length. [ 1203.636112][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1203.878376][ T4994] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1203.920212][ T4994] netlink: 'syz.4.7655': attribute type 1 has an invalid length. [ 1204.019960][ T4994] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1204.137817][ T5005] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1204.213183][ T5005] bridge_slave_0 (unregistering): left allmulticast mode [ 1204.213291][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.811634][ T5039] IPv6: addrconf: prefix option has invalid lifetime [ 1204.838288][ T5041] IPv6: addrconf: prefix option has invalid lifetime [ 1205.622951][ T5079] netlink: 'syz.6.7675': attribute type 58 has an invalid length. [ 1205.644170][ T5078] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1206.732061][ T5104] gretap4: entered promiscuous mode [ 1207.265585][ T5121] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1207.289634][ T5121] netlink: 'syz.5.7687': attribute type 1 has an invalid length. [ 1207.338045][ T5121] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1207.355659][ T5125] tipc: Started in network mode [ 1207.355694][ T5125] tipc: Node identity eed5827bc749, cluster identity 4711 [ 1207.355862][ T5125] tipc: Enabled bearer , priority 0 [ 1207.356858][ T5125] syzkaller0: entered promiscuous mode [ 1207.356881][ T5125] syzkaller0: entered allmulticast mode [ 1207.373324][ T5125] __nla_validate_parse: 80 callbacks suppressed [ 1207.373384][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7689'. [ 1207.373443][ T5125] openvswitch: netlink: Flow actions attr not present in new flow. [ 1207.745557][ T5140] tipc: Resetting bearer [ 1207.766821][ T5140] pim6reg: entered allmulticast mode [ 1207.892713][ T5150] netlink: 'syz.1.7693': attribute type 10 has an invalid length. [ 1207.913769][ T5151] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7692'. [ 1208.110926][ T5158] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7694'. [ 1208.111047][ T5158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7694'. [ 1208.181124][ T5162] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7694'. [ 1208.181349][ T5123] tipc: Resetting bearer [ 1208.202727][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7697'. [ 1208.261907][ T5123] tipc: Disabling bearer [ 1208.361433][ T5123] pim6reg: left allmulticast mode [ 1208.402980][ T5168] openvswitch: netlink: Message has -2 unknown bytes. [ 1208.403016][ T5168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1208.719610][ T5180] syz.6.7700: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1208.719692][ T5180] CPU: 0 UID: 0 PID: 5180 Comm: syz.6.7700 Not tainted syzkaller #0 PREEMPT(full) [ 1208.719720][ T5180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1208.719734][ T5180] Call Trace: [ 1208.719744][ T5180] [ 1208.719756][ T5180] dump_stack_lvl+0xe8/0x150 [ 1208.719797][ T5180] warn_alloc+0x24d/0x270 [ 1208.719823][ T5180] ? kasan_save_track+0x4f/0x80 [ 1208.719848][ T5180] ? kasan_save_track+0x3e/0x80 [ 1208.719876][ T5180] ? __pfx_warn_alloc+0x10/0x10 [ 1208.719896][ T5180] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1208.719928][ T5180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.719990][ T5180] __vmalloc_node_range_noprof+0x127/0x1540 [ 1208.720052][ T5180] ? rcu_is_watching+0x16/0xb0 [ 1208.720089][ T5180] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1208.720132][ T5180] ? __kmalloc_cache_noprof+0x321/0x600 [ 1208.720157][ T5180] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1208.720180][ T5180] ? xskq_create+0x56/0x220 [ 1208.720210][ T5180] xskq_create+0x148/0x220 [ 1208.720233][ T5180] ? xsk_init_queue+0x8a/0xe0 [ 1208.720273][ T5180] xsk_init_queue+0x8a/0xe0 [ 1208.720310][ T5180] xsk_setsockopt+0x52a/0x960 [ 1208.720348][ T5180] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1208.720385][ T5180] ? __pfx_aa_sk_perm+0x10/0x10 [ 1208.720424][ T5180] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1208.720454][ T5180] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1208.720492][ T5180] do_sock_setsockopt+0x17c/0x1b0 [ 1208.720527][ T5180] __x64_sys_setsockopt+0x13d/0x1b0 [ 1208.720563][ T5180] do_syscall_64+0x166/0x520 [ 1208.720588][ T5180] ? trace_irq_disable+0x3b/0x140 [ 1208.720613][ T5180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.720637][ T5180] ? clear_bhb_loop+0x70/0xc0 [ 1208.720666][ T5180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.720690][ T5180] RIP: 0033:0x7ff6a339e159 [ 1208.720713][ T5180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.720733][ T5180] RSP: 002b:00007ff6a41c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1208.720758][ T5180] RAX: ffffffffffffffda RBX: 00007ff6a3625fa0 RCX: 00007ff6a339e159 [ 1208.720776][ T5180] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1208.720791][ T5180] RBP: 00007ff6a343503b R08: 0000000000000004 R09: 0000000000000000 [ 1208.720806][ T5180] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.720822][ T5180] R13: 00007ff6a3626038 R14: 00007ff6a3625fa0 R15: 00007ffc755cff18 [ 1208.720864][ T5180] [ 1208.720887][ T5180] Mem-Info: [ 1208.720898][ T5180] active_anon:13532 inactive_anon:0 isolated_anon:0 [ 1208.720898][ T5180] active_file:35 inactive_file:43774 isolated_file:0 [ 1208.720898][ T5180] unevictable:0 dirty:267 writeback:0 [ 1208.720898][ T5180] slab_reclaimable:14048 slab_unreclaimable:153502 [ 1208.720898][ T5180] mapped:29853 shmem:561 pagetables:1471 [ 1208.720898][ T5180] sec_pagetables:0 bounce:0 [ 1208.720898][ T5180] kernel_misc_reclaimable:0 [ 1208.720898][ T5180] free:1214474 free_pcp:10299 free_cma:0 [ 1208.720959][ T5180] Node 0 active_anon:54128kB inactive_anon:0kB active_file:140kB inactive_file:174888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119412kB dirty:1068kB writeback:0kB shmem:2244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:21988kB pagetables:5756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1208.721023][ T5180] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1208.721085][ T5180] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.721361][ T5180] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 1208.721409][ T5180] Node 0 DMA32 free:898448kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:54128kB inactive_anon:0kB active_file:140kB inactive_file:174888kB unevictable:0kB writepending:1068kB zspages:0kB present:3129332kB managed:2546620kB mlocked:0kB bounce:0kB free_pcp:41176kB local_pcp:18412kB free_cma:0kB [ 1208.721478][ T5180] lowmem_reserve[]: 0 0 0 0 0 [ 1208.721521][ T5180] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.721585][ T5180] lowmem_reserve[]: 0 0 0 0 0 [ 1208.721623][ T5180] Node 1 Normal free:3944088kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.721689][ T5180] lowmem_reserve[]: 0 0 0 0 0 [ 1208.721730][ T5180] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1208.721866][ T5180] Node 0 DMA32: 1339*4kB (UME) 1058*8kB (UME) 894*16kB (UM) 923*32kB (UME) 573*64kB (UME) 166*128kB (UME) 198*256kB (UM) 82*512kB (UME) 24*1024kB (UME) 3*2048kB (UME) 161*4096kB (UM) = 898428kB [ 1208.722088][ T5180] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1208.722227][ T5180] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 8*16kB (UM) 8*32kB (UM) 10*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3944088kB [ 1208.722412][ T5180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1208.722432][ T5180] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1208.722452][ T5180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1208.722471][ T5180] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1208.722489][ T5180] 44366 total pagecache pages [ 1208.722499][ T5180] 0 pages in swap cache [ 1208.722508][ T5180] Free swap = 124996kB [ 1208.722517][ T5180] Total swap = 124996kB [ 1208.722527][ T5180] 2097051 pages RAM [ 1208.722535][ T5180] 0 pages HighMem/MovableOnly [ 1208.722544][ T5180] 428780 pages reserved [ 1208.722553][ T5180] 0 pages cma reserved [ 1209.033390][ T5198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7701'. [ 1209.033470][ T5198] netlink: 'syz.0.7701': attribute type 1 has an invalid length. [ 1209.089489][ T5180] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1209.541738][ T5186] veth9: entered allmulticast mode [ 1209.615581][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7702'. [ 1209.616895][ T5203] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1209.619526][ T5203] netlink: 'syz.6.7702': attribute type 1 has an invalid length. [ 1209.853789][ T5203] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1209.916483][ T5209] bond11: (slave gretap1): making interface the new active one [ 1209.926692][ T5209] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 1209.946282][ T5217] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7705'. [ 1210.035143][ T5219] syzkaller0: entered promiscuous mode [ 1210.035169][ T5219] syzkaller0: entered allmulticast mode [ 1210.230234][ T5226] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7708'. [ 1210.942324][ T5252] bond14: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1210.946835][ T5252] bond14 (unregistering): Released all slaves [ 1211.058120][ T5262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.060782][ T5262] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.064694][ T5262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.175573][ T5270] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1211.236676][ T5270] netlink: 'syz.0.7719': attribute type 1 has an invalid length. [ 1211.381817][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.386080][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.431366][ T5262] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1211.455967][T12716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.456080][T12716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.511401][ T5288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1211.603194][ T5270] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1211.695104][ T5300] netlink: 'syz.4.7723': attribute type 10 has an invalid length. [ 1212.781800][ T5328] ovs-s!: entered promiscuous mode [ 1212.995856][ T5340] __nla_validate_parse: 3 callbacks suppressed [ 1212.995913][ T5340] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7733'. [ 1213.196591][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7734'. [ 1213.221669][ T5346] batadv0: entered promiscuous mode [ 1213.224973][ T5346] macsec0: entered promiscuous mode [ 1213.225237][ T5346] macsec0: entered allmulticast mode [ 1213.225254][ T5346] batadv0: entered allmulticast mode [ 1213.226754][ T5346] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 1213.333265][ T5346] batadv0: left allmulticast mode [ 1213.333517][ T5346] batadv0: left promiscuous mode [ 1213.586524][ T5356] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 1213.893004][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7741'. [ 1214.780627][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7746'. [ 1214.916592][ T5408] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7749'. [ 1214.916623][ T5408] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7749'. [ 1214.917843][ T5409] netlink: zone id is out of range [ 1214.917859][ T5409] netlink: zone id is out of range [ 1214.917869][ T5409] netlink: zone id is out of range [ 1214.917880][ T5409] netlink: zone id is out of range [ 1214.917890][ T5409] netlink: zone id is out of range [ 1214.917899][ T5409] netlink: zone id is out of range [ 1214.917914][ T5409] netlink: zone id is out of range [ 1214.917925][ T5409] netlink: zone id is out of range [ 1214.917934][ T5409] netlink: zone id is out of range [ 1214.917943][ T5409] netlink: zone id is out of range [ 1215.790003][ T5403] bridge0: port 3(veth0) entered disabled state [ 1215.790629][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.791243][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.899495][ T5449] x_tables: ip6_tables: conntrack.2 match: invalid size 160 (kernel) != (user) 168 [ 1215.900178][ T5451] x_tables: ip6_tables: conntrack.2 match: invalid size 160 (kernel) != (user) 168 [ 1217.469305][ T5403] macvlan0: left promiscuous mode [ 1217.858702][ T5403] ip6tnl1: left allmulticast mode [ 1217.930932][ T5403] ip6erspan0: left allmulticast mode [ 1218.250713][ T5403] bond9: left promiscuous mode [ 1218.250743][ T5403] bridge1: left promiscuous mode [ 1218.250946][ T5403] bond9: left allmulticast mode [ 1218.250963][ T5403] bridge1: left allmulticast mode [ 1218.396703][ T5403] geneve2: left promiscuous mode [ 1218.490134][T12695] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.490197][T12695] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.491832][T12716] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.491903][T12716] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.492000][T12716] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.492063][T12716] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.492166][T12716] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.492229][T12716] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.623957][ T5505] siw: device registration error -23 [ 1219.665608][ T5522] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1219.681862][ T5522] netlink: 'syz.1.7767': attribute type 1 has an invalid length. [ 1219.787388][T12695] tipc: Subscription rejected, illegal request [ 1219.791921][ T5522] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1223.267616][ T5568] sctp: [Deprecated]: syz.6.7773 (pid 5568) Use of int in max_burst socket option deprecated. [ 1223.267616][ T5568] Use struct sctp_assoc_value instead [ 1223.731819][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7781'. [ 1223.731849][ T5593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7781'. [ 1223.832012][ T5598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7782'. [ 1223.891603][ T5598] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1223.895026][ T5598] netlink: 'syz.4.7782': attribute type 1 has an invalid length. [ 1223.981213][ T5598] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1224.011358][ T5596] lo speed is unknown, defaulting to 1000 [ 1224.191411][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7787'. [ 1224.248163][ T5615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7788'. [ 1224.249130][ T5615] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1224.263965][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1224.264536][ T5615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7788'. [ 1224.446311][ T5625] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7791'. [ 1224.579509][ T5628] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7789'. [ 1224.679104][ T5617] siw: device registration error -23 [ 1224.953772][ T5646] netlink: 'syz.1.7796': attribute type 1 has an invalid length. [ 1225.269191][ T5666] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7798'. [ 1225.357667][ T5664] bridge3: entered promiscuous mode [ 1225.457543][ T5667] net_ratelimit: 496 callbacks suppressed [ 1225.457569][ T5667] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1225.642921][ T5681] syzkaller0: left promiscuous mode [ 1225.642946][ T5681] syzkaller0: left allmulticast mode [ 1225.863107][ T5695] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 1226.125596][ T5721] netlink: 252 bytes leftover after parsing attributes in process `syz.0.7809'. [ 1226.490114][ T5758] netlink: 'syz.5.7815': attribute type 2 has an invalid length. [ 1227.264644][ T5785] block nbd11: server does not support multiple connections per device. [ 1227.265209][ T5785] block nbd11: shutting down sockets [ 1228.391104][ T5845] block nbd11: server does not support multiple connections per device. [ 1228.391712][ T5845] block nbd11: shutting down sockets [ 1228.449314][ T5838] dvmrp0: entered allmulticast mode [ 1228.454639][ T5841] dvmrp1: entered allmulticast mode [ 1228.491192][ T5853] dvmrp0: left allmulticast mode [ 1228.491315][ T5853] dvmrp1: left allmulticast mode [ 1228.727398][ T5864] tc_dump_action: action bad kind [ 1229.381775][ T5876] syzkaller0: entered promiscuous mode [ 1229.381801][ T5876] syzkaller0: entered allmulticast mode [ 1230.072044][ T5915] syzkaller0: left promiscuous mode [ 1230.072069][ T5915] syzkaller0: left allmulticast mode [ 1230.449915][ T5921] ip_tables: iptables: counters copy to user failed while replacing table [ 1230.492465][ T5923] netlink: 'syz.5.7849': attribute type 1 has an invalid length. [ 1231.479643][ T5963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1231.548562][ T5963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1231.604419][ T5969] netlink: 'syz.4.7861': attribute type 1 has an invalid length. [ 1231.669092][ T5969] bond12: (slave geneve2): making interface the new active one [ 1231.670116][ T5969] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 1231.671349][T12705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1231.672467][T12705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1231.672664][T12705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1231.672835][T12705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1231.680945][ T5969] __nla_validate_parse: 5 callbacks suppressed [ 1231.680964][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7861'. [ 1231.696525][ T5969] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1231.814523][ T31] kauditd_printk_skb: 57 callbacks suppressed [ 1231.814545][ T31] audit: type=1804 audit(1789265604.493:86): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7862" name="/newroot/361/cgroup.controllers" dev="tmpfs" ino=1875 res=1 errno=0 [ 1231.816050][ T31] audit: type=1800 audit(1789265604.493:87): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7862" name="cgroup.controllers" dev="tmpfs" ino=1875 res=0 errno=0 [ 1232.463766][ T5990] netlink: Unknown conntrack attr (type=9221, max=9) [ 1232.463810][ T5990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1232.521200][ T5992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.995475][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7869'. [ 1233.714944][ T6025] syzkaller0: entered promiscuous mode [ 1233.714971][ T6025] syzkaller0: entered allmulticast mode [ 1234.302488][ T6031] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1234.302521][ T6031] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1234.303743][ T6031] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1234.305599][ T6031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1234.305620][ T6031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1235.271614][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.368368][ T6037] dummy0: left promiscuous mode [ 1235.708112][ T6074] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 1235.985669][ T6037] veth1_to_team: left allmulticast mode [ 1236.060654][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.132619][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.192881][ T6037] 0·: left allmulticast mode [ 1236.192901][ T6037] hsr_slave_0: left allmulticast mode [ 1236.472907][ T6037] mac80211_hwsim hwsim62 wlan0: left promiscuous mode [ 1236.472937][ T6037] mac80211_hwsim hwsim62 wlan0: left allmulticast mode [ 1236.755042][ T6037] batman_adv: batadv0: Interface deactivated: gretap1 [ 1236.812915][ T6037] veth7: left allmulticast mode [ 1236.831131][ T6037] bond13: left promiscuous mode [ 1236.831363][ T6037] gretap4: left promiscuous mode [ 1236.834465][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1236.834496][ T6038] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1236.888607][T12708] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1236.888646][T12708] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.889646][T12708] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1236.889690][T12708] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.889742][T12708] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1236.889772][T12708] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.909989][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1237.079284][ T6034] ieee80211 phy92: Failed to add default virtual iface [ 1237.081462][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7886'. [ 1237.081499][ T6076] netlink: 'syz.4.7886': attribute type 10 has an invalid length. [ 1237.081518][ T6076] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7886'. [ 1237.134558][ T6076] geneve3: entered promiscuous mode [ 1237.134582][ T6076] geneve3: entered allmulticast mode [ 1237.153542][T12705] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1237.153669][T12705] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1237.153770][T12705] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1237.153862][T12705] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1237.219033][ T6078] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1237.285555][ T6078] netlink: 'syz.5.7885': attribute type 1 has an invalid length. [ 1237.495324][ T6078] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1237.655973][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7889'. [ 1237.820731][ T6094] syzkaller0: entered promiscuous mode [ 1237.820772][ T6094] syzkaller0: entered allmulticast mode [ 1238.175829][ T6103] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7892'. [ 1238.705738][ T6116] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 1238.823643][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7897'. [ 1238.846548][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7896'. [ 1239.225129][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7901'. [ 1239.225300][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7901'. [ 1239.308295][ T6137] netlink: 'syz.4.7902': attribute type 7 has an invalid length. [ 1239.829665][ T6147] netlink: 192 bytes leftover after parsing attributes in process `syz.5.7906'. [ 1239.935119][ T6151] syzkaller0: entered promiscuous mode [ 1239.935144][ T6151] syzkaller0: entered allmulticast mode [ 1240.435322][ T6161] lo: entered promiscuous mode [ 1240.435510][ T6161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1240.785947][ T6188] set match dimension is over the limit! [ 1241.594112][ T6213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1242.002772][ T6240] netlink: 'syz.0.7927': attribute type 1 has an invalid length. [ 1242.012611][ T6240] __nla_validate_parse: 5 callbacks suppressed [ 1242.012628][ T6240] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1242.172681][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7928'. [ 1242.424078][ T6253] syzkaller0: entered promiscuous mode [ 1242.424115][ T6253] syzkaller0: entered allmulticast mode [ 1242.508559][ T6264] netlink: 'syz.6.7934': attribute type 1 has an invalid length. [ 1242.529254][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7934'. [ 1242.553488][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7933'. [ 1242.553725][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7933'. [ 1242.793110][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7937'. [ 1242.830507][ T6270] x_tables: duplicate underflow at hook 2 [ 1242.832419][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7936'. [ 1242.859869][ T6275] netlink: 100 bytes leftover after parsing attributes in process `syz.6.7937'. [ 1242.862100][ T6280] netlink: 100 bytes leftover after parsing attributes in process `syz.6.7937'. [ 1242.884748][ T6277] netlink: 312 bytes leftover after parsing attributes in process `syz.5.7936'. [ 1242.939758][ T6283] lo: entered allmulticast mode [ 1242.942560][ T6282] lo: left allmulticast mode [ 1243.292196][ T6297] netlink: 'syz.1.7943': attribute type 1 has an invalid length. [ 1243.562197][ T6298] bond16: (slave geneve2): Enslaving as an active interface with an up link [ 1243.564181][ T6301] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1243.639258][T12703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1243.639645][T12703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1243.639687][T12703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1243.970729][ T6328] SET target dimension over the limit! [ 1244.497415][ T31] audit: type=1800 audit(1789265617.173:88): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7960" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2007 res=0 errno=0 [ 1245.031038][ T6358] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1245.032779][ T6358] bond16: (slave bond17): Enslaving as an active interface with an up link [ 1245.083927][ T6361] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1245.116792][ T6367] syzkaller0: entered promiscuous mode [ 1245.116819][ T6367] syzkaller0: entered allmulticast mode [ 1246.054723][ T6410] netlink: 'syz.0.7978': attribute type 1 has an invalid length. [ 1246.054749][ T6410] nbd: error processing sock list [ 1246.061034][ T6410] block nbd11: shutting down sockets [ 1246.137118][ T6409] siw: device registration error -23 [ 1246.163454][ T6420] netlink: 'syz.1.7979': attribute type 34 has an invalid length. [ 1246.354973][ T6420] bond17: option lacp_strict: invalid value (64) [ 1246.373429][ T6420] bond17 (unregistering): Released all slaves [ 1246.697393][ T6444] syzkaller0: entered promiscuous mode [ 1246.697419][ T6444] syzkaller0: entered allmulticast mode [ 1246.768587][ T6446] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1246.826550][ T6455] nbd: socks must be embedded in a SOCK_ITEM attr [ 1247.261167][ T6466] netlink: 'syz.0.7991': attribute type 3 has an invalid length. [ 1247.261230][ T6466] __nla_validate_parse: 14 callbacks suppressed [ 1247.261264][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7991'. [ 1247.429603][ T6473] mac80211_hwsim hwsim66 wlan0: entered promiscuous mode [ 1247.429632][ T6473] mac80211_hwsim hwsim66 wlan0: entered allmulticast mode [ 1247.508897][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7995'. [ 1247.561308][ T6479] netlink: 'syz.0.7996': attribute type 1 has an invalid length. [ 1247.561333][ T6479] netlink: 'syz.0.7996': attribute type 2 has an invalid length. [ 1247.564418][ T6485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7995'. [ 1247.615931][ T6481] netlink: 'syz.0.7996': attribute type 1 has an invalid length. [ 1247.615956][ T6481] netlink: 'syz.0.7996': attribute type 2 has an invalid length. [ 1247.690784][ T6485] bond13: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 1247.691491][ T6485] bond13: (slave ip6tnl2): Error -95 calling set_mac_address [ 1248.022980][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8000'. [ 1248.185501][ T6507] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1248.510765][ T6524] macvtap0: entered allmulticast mode [ 1248.510838][ T6524] veth0_to_bridge: entered allmulticast mode [ 1248.536967][ T6524] veth0_to_bridge: left allmulticast mode [ 1248.709950][ T6527] siw: device registration error -23 [ 1248.736060][ T6527] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8005'. [ 1248.964178][ T6532] netlink: 'syz.1.8007': attribute type 1 has an invalid length. [ 1249.180985][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8007'. [ 1249.255804][ T6548] Unknown options in mask 6 [ 1249.256390][ T6548] netlink: 'syz.6.8010': attribute type 1 has an invalid length. [ 1249.256413][ T6548] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8010'. [ 1249.602552][ T6564] veth0: left allmulticast mode [ 1249.602582][ T6564] veth0: left promiscuous mode [ 1249.602828][ T6564] bridge0: port 3(veth0) entered disabled state [ 1249.642264][ T6564] bridge_slave_0: left allmulticast mode [ 1249.642291][ T6564] bridge_slave_0: left promiscuous mode [ 1249.642533][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.669162][ T6564] bridge_slave_1: left allmulticast mode [ 1249.669189][ T6564] bridge_slave_1: left promiscuous mode [ 1249.669390][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.674172][ T6564] bond0: (slave bond_slave_0): Releasing backup interface [ 1249.723709][ T6564] bond0: (slave bond_slave_1): Releasing backup interface [ 1249.743624][ T6564] team0: Port device team_slave_0 removed [ 1249.745666][ T6564] team0: Port device team_slave_1 removed [ 1249.746078][ T6564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1249.799772][ T6564] vlan0: entered promiscuous mode [ 1250.101521][ T6576] siw: device registration error -23 [ 1250.117845][ T6576] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8018'. [ 1250.455780][ T6608] syzkaller1: entered allmulticast mode [ 1250.616640][ T6611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8025'. [ 1251.004029][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8027'. [ 1251.004069][ T6627] netlink: 'syz.4.8027': attribute type 10 has an invalid length. [ 1251.045243][ T6629] netlink: 'syz.4.8027': attribute type 10 has an invalid length. [ 1251.643974][ T6645] xt_hashlimit: size too large, truncated to 1048576 [ 1251.724462][ T6646] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1251.922688][ T6651] siw: device registration error -23 [ 1252.276994][ T6661] __nla_validate_parse: 6 callbacks suppressed [ 1252.277018][ T6661] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8037'. [ 1252.395452][ T6664] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8039'. [ 1252.632347][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8040'. [ 1252.795861][ T6681] veth9: entered allmulticast mode [ 1252.849104][ T6686] siw: device registration error -23 [ 1252.888382][ T6689] x_tables: duplicate underflow at hook 1 [ 1253.118946][ T6693] FAULT_INJECTION: forcing a failure. [ 1253.118946][ T6693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.118987][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.6.8048 Not tainted syzkaller #0 PREEMPT(full) [ 1253.119016][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1253.119031][ T6693] Call Trace: [ 1253.119041][ T6693] [ 1253.119052][ T6693] dump_stack_lvl+0xe8/0x150 [ 1253.119100][ T6693] should_fail_ex+0x410/0x560 [ 1253.119135][ T6693] _copy_from_user+0x2d/0xb0 [ 1253.119169][ T6693] ___sys_sendmsg+0x1c6/0x360 [ 1253.119212][ T6693] ? __lock_acquire+0x747/0x2de0 [ 1253.119244][ T6693] ? __pfx____sys_sendmsg+0x10/0x10 [ 1253.119316][ T6693] ? __fget_files+0x2a/0x420 [ 1253.119352][ T6693] ? __fget_files+0x3a2/0x420 [ 1253.119397][ T6693] __x64_sys_sendmsg+0x1b1/0x290 [ 1253.119432][ T6693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1253.119489][ T6693] do_syscall_64+0x166/0x520 [ 1253.119516][ T6693] ? trace_irq_disable+0x3b/0x140 [ 1253.119541][ T6693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.119567][ T6693] ? clear_bhb_loop+0x70/0xc0 [ 1253.119598][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.119622][ T6693] RIP: 0033:0x7ff6a339e159 [ 1253.119644][ T6693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.119666][ T6693] RSP: 002b:00007ff6a41c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1253.119692][ T6693] RAX: ffffffffffffffda RBX: 00007ff6a3625fa0 RCX: 00007ff6a339e159 [ 1253.119711][ T6693] RDX: 0000000000000000 RSI: 0000200000001d00 RDI: 0000000000000009 [ 1253.119727][ T6693] RBP: 00007ff6a41c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.119743][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.119758][ T6693] R13: 00007ff6a3626038 R14: 00007ff6a3625fa0 R15: 00007ffc755cff18 [ 1253.119797][ T6693] [ 1253.125953][ T6693] 0: reclassify loop, rule prio 0, protocol 03 [ 1253.853252][ T6717] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8053'. [ 1254.029817][ T6723] netlink: 'syz.6.8056': attribute type 9 has an invalid length. [ 1254.373353][ T6735] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1254.386842][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8059'. [ 1254.410123][ T6736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8057'. [ 1254.410408][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8057'. [ 1254.523443][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8059'. [ 1254.560881][ T6735] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1254.569758][ T6735] bond13: (slave bond14): Enslaving as an active interface with an up link [ 1254.582407][ T6732] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 1254.582502][ T6732] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 1254.582654][ T6732] veth0_virt_wifi: entered allmulticast mode [ 1254.584595][ T6732] veth0_virt_wifi: entered promiscuous mode [ 1254.620239][ T6744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8061'. [ 1254.798012][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8062'. [ 1255.048080][ T6731] udevd[6731]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1255.147102][ T6763] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20003 [ 1255.336566][ T6766] FAULT_INJECTION: forcing a failure. [ 1255.336566][ T6766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.336604][ T6766] CPU: 1 UID: 0 PID: 6766 Comm: syz.1.8066 Not tainted syzkaller #0 PREEMPT(full) [ 1255.336631][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1255.336646][ T6766] Call Trace: [ 1255.336656][ T6766] [ 1255.336667][ T6766] dump_stack_lvl+0xe8/0x150 [ 1255.336707][ T6766] should_fail_ex+0x410/0x560 [ 1255.336740][ T6766] _copy_from_user+0x2d/0xb0 [ 1255.336770][ T6766] __copy_msghdr+0x390/0x590 [ 1255.336806][ T6766] ___sys_sendmsg+0x213/0x360 [ 1255.336836][ T6766] ? __lock_acquire+0x747/0x2de0 [ 1255.336866][ T6766] ? __pfx____sys_sendmsg+0x10/0x10 [ 1255.336935][ T6766] ? __fget_files+0x2a/0x420 [ 1255.336969][ T6766] ? __fget_files+0x3a2/0x420 [ 1255.337013][ T6766] __x64_sys_sendmsg+0x1b1/0x290 [ 1255.337056][ T6766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1255.337111][ T6766] do_syscall_64+0x166/0x520 [ 1255.337136][ T6766] ? trace_irq_disable+0x3b/0x140 [ 1255.337159][ T6766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.337183][ T6766] ? clear_bhb_loop+0x70/0xc0 [ 1255.337211][ T6766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.337235][ T6766] RIP: 0033:0x7f0dc599e159 [ 1255.337257][ T6766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.337277][ T6766] RSP: 002b:00007f0dc6876028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1255.337303][ T6766] RAX: ffffffffffffffda RBX: 00007f0dc5c25fa0 RCX: 00007f0dc599e159 [ 1255.337321][ T6766] RDX: 0000000000000000 RSI: 0000200000001d00 RDI: 0000000000000009 [ 1255.337337][ T6766] RBP: 00007f0dc6876090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.337352][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.337367][ T6766] R13: 00007f0dc5c26038 R14: 00007f0dc5c25fa0 R15: 00007ffff661b8d8 [ 1255.337404][ T6766] [ 1255.903858][ T6780] syzkaller0: entered promiscuous mode [ 1255.903920][ T6780] syzkaller0: entered allmulticast mode [ 1257.150183][ T6822] FAULT_INJECTION: forcing a failure. [ 1257.150183][ T6822] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.150221][ T6822] CPU: 0 UID: 0 PID: 6822 Comm: syz.6.8081 Not tainted syzkaller #0 PREEMPT(full) [ 1257.150247][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1257.150261][ T6822] Call Trace: [ 1257.150271][ T6822] [ 1257.150283][ T6822] dump_stack_lvl+0xe8/0x150 [ 1257.150323][ T6822] should_fail_ex+0x410/0x560 [ 1257.150357][ T6822] should_failslab+0xa8/0x100 [ 1257.150390][ T6822] __kmalloc_noprof+0xfe/0x720 [ 1257.150416][ T6822] ? sock_kmalloc+0xd6/0x160 [ 1257.150447][ T6822] ? sock_kmalloc+0xd6/0x160 [ 1257.150486][ T6822] sock_kmalloc+0xd6/0x160 [ 1257.150521][ T6822] ____sys_sendmsg+0x1be/0x850 [ 1257.150558][ T6822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1257.150600][ T6822] ? import_iovec+0x73/0xa0 [ 1257.150634][ T6822] ___sys_sendmsg+0x2a5/0x360 [ 1257.150663][ T6822] ? __lock_acquire+0x747/0x2de0 [ 1257.150693][ T6822] ? __pfx____sys_sendmsg+0x10/0x10 [ 1257.150776][ T6822] ? __fget_files+0x2a/0x420 [ 1257.150806][ T6822] ? __fget_files+0x3a2/0x420 [ 1257.150856][ T6822] __x64_sys_sendmsg+0x1b1/0x290 [ 1257.150890][ T6822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1257.150944][ T6822] do_syscall_64+0x166/0x520 [ 1257.150969][ T6822] ? trace_irq_disable+0x3b/0x140 [ 1257.150993][ T6822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.151017][ T6822] ? clear_bhb_loop+0x70/0xc0 [ 1257.151045][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.151068][ T6822] RIP: 0033:0x7ff6a339e159 [ 1257.151090][ T6822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.151109][ T6822] RSP: 002b:00007ff6a41a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1257.151139][ T6822] RAX: ffffffffffffffda RBX: 00007ff6a3626090 RCX: 00007ff6a339e159 [ 1257.151157][ T6822] RDX: 0000000000000000 RSI: 0000200000001d00 RDI: 0000000000000009 [ 1257.151172][ T6822] RBP: 00007ff6a41a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.151187][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.151202][ T6822] R13: 00007ff6a3626128 R14: 00007ff6a3626090 R15: 00007ffc755cff18 [ 1257.151239][ T6822] [ 1257.161423][ T6822] 0: reclassify loop, rule prio 0, protocol 03 [ 1258.073167][ T6826] xt_hashlimit: size too large, truncated to 1048576 [ 1258.128449][ T6830] netlink: 'syz.0.8083': attribute type 8 has an invalid length. [ 1258.212592][ T6834] __nla_validate_parse: 35 callbacks suppressed [ 1258.212618][ T6834] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8083'. [ 1258.530142][T12724] smbdirect: ib_dev[s`z1] removed [ 1258.712711][T32177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1258.716555][T32177] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1258.737153][T32177] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1258.738833][T32177] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1258.739527][T32177] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1258.930800][T25522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1258.946477][T25522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1258.948593][T25522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1258.993687][T25522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1259.000497][T25522] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1261.048593][T25522] Bluetooth: hci1: command tx timeout [ 1262.819967][ T6845] lo speed is unknown, defaulting to 1000 [ 1262.824480][ T6920] syzkaller0: left promiscuous mode [ 1262.824503][ T6920] syzkaller0: left allmulticast mode [ 1262.849772][ T6924] ip_tables: iptables: counters copy to user failed while replacing table [ 1262.850208][ T6924] ip_tables: iptables: counters copy to user failed while replacing table [ 1262.919689][ T6928] netlink: 'syz.1.8099': attribute type 4 has an invalid length. [ 1262.921517][ T6930] netlink: 'syz.1.8099': attribute type 4 has an invalid length. [ 1263.094030][ T6939] netlink: 'syz.6.8100': attribute type 12 has an invalid length. [ 1263.094411][ T6939] netlink: 'syz.6.8100': attribute type 1 has an invalid length. [ 1263.094656][ T6935] netlink: 'syz.6.8100': attribute type 12 has an invalid length. [ 1263.147669][T25522] Bluetooth: hci1: command tx timeout [ 1263.618008][ T6944] bridge0: port 1(veth0_to_team) entered blocking state [ 1263.618564][ T6944] bridge0: port 1(veth0_to_team) entered disabled state [ 1263.619018][ T6944] veth0_to_team: entered allmulticast mode [ 1263.659387][ T6944] veth0_to_team: entered promiscuous mode [ 1263.691957][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1263.692089][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1263.697001][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1263.697071][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1263.849681][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1263.849799][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1263.893071][ T6949] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1264.068112][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.068265][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.068405][ T6845] bridge_slave_0: entered allmulticast mode [ 1264.070369][ T6845] bridge_slave_0: entered promiscuous mode [ 1264.100989][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.101178][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.101327][ T6845] bridge_slave_1: entered allmulticast mode [ 1264.103279][ T6845] bridge_slave_1: entered promiscuous mode [ 1264.148837][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1264.168113][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.188467][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.332325][ T6955] syzkaller0: entered promiscuous mode [ 1264.332354][ T6955] syzkaller0: entered allmulticast mode [ 1264.374082][ T6845] team0: Port device team_slave_0 added [ 1264.387750][ T6845] team0: Port device team_slave_1 added [ 1264.412164][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1264.479119][ T6957] lo speed is unknown, defaulting to 1000 [ 1264.481066][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.481083][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.481109][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.993595][ T6979] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8110'. [ 1265.215235][T32177] Bluetooth: hci1: command tx timeout [ 1267.303729][T32177] Bluetooth: hci1: command tx timeout [ 1268.015802][ C1] net_ratelimit: 1 callbacks suppressed [ 1268.015828][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1268.015890][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1268.318548][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.318568][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.318598][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.370768][ T6973] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1268.671444][ T6972] lo speed is unknown, defaulting to 1000 [ 1268.695924][ T6845] hsr_slave_0: entered promiscuous mode [ 1268.697138][ T6845] hsr_slave_1: entered promiscuous mode [ 1268.982206][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8116'. [ 1269.272523][ T6999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8117'. [ 1269.708157][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1270.449772][ T7030] xt_policy: output policy not valid in PREROUTING and INPUT [ 1271.047202][T12705] dvmrp1: left allmulticast mode [ 1271.453266][ T7054] netlink: 'syz.0.8125': attribute type 17 has an invalid length. [ 1271.453291][ T7054] netlink: 'syz.0.8125': attribute type 27 has an invalid length. [ 1271.711486][ T5900] hid-generic 0005:0008:0009.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1271.846630][ T7065] fido_id[7065]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 1272.145108][ T7072] siw: device registration error -23 [ 1272.145925][ T7072] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8128'. [ 1272.331052][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8129'. [ 1272.379182][T12705] bond0 (unregistering): Released all slaves [ 1272.398594][T12705] bond1 (unregistering): Released all slaves [ 1272.415442][T12705] bond2 (unregistering): Released all slaves [ 1272.457501][T12705] bond3 (unregistering): Released all slaves [ 1272.485855][T12705] bond4 (unregistering): Released all slaves [ 1272.526997][T12705] bond5 (unregistering): Released all slaves [ 1272.571043][T12705] bond6 (unregistering): Released all slaves [ 1272.589556][T12705] bond7 (unregistering): Released all slaves [ 1272.610172][T12705] bond8 (unregistering): Released all slaves [ 1272.622188][T12705] bond9 (unregistering): Released all slaves [ 1272.632319][T12705] bond10 (unregistering): Released all slaves [ 1272.656863][T12705] bond11 (unregistering): Released all slaves [ 1272.675774][T12705] bond12 (unregistering): Released all slaves [ 1272.696090][T12705] bond13 (unregistering): Released all slaves [ 1272.734012][T12705] bond14 (unregistering): Released all slaves [ 1272.758146][T12705] bond15 (unregistering): Released all slaves [ 1272.785285][T12705] bond16 (unregistering): Released all slaves [ 1272.822686][T12705] bond17 (unregistering): Released all slaves [ 1272.845193][T12705] bond18 (unregistering): Released all slaves [ 1272.873711][T12705] bond19 (unregistering): Released all slaves [ 1272.893332][T12705] bond20 (unregistering): Released all slaves [ 1272.912519][T12705] bond21 (unregistering): Released all slaves [ 1272.935667][T12705] bond22 (unregistering): Released all slaves [ 1273.357088][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8130'. [ 1273.360018][T12705] tipc: Disabling bearer [ 1273.360164][T12705] tipc: Left network mode [ 1273.852305][ T6845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1273.900563][ T6845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1273.904640][ T6845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1273.962618][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8134'. [ 1274.078169][ T6845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1274.112002][ T7098] veth0_to_team: left allmulticast mode [ 1274.112032][ T7098] veth0_to_team: left promiscuous mode [ 1274.112267][ T7098] bridge0: port 6(veth0_to_team) entered disabled state [ 1274.189560][ T7098] syz_tun: left allmulticast mode [ 1274.189590][ T7098] syz_tun: left promiscuous mode [ 1274.209717][ T7098] bridge0: port 5(syz_tun) entered disabled state [ 1274.282795][ T7098] erspan0: left allmulticast mode [ 1274.282843][ T7098] erspan0: left promiscuous mode [ 1274.285664][ T7098] bridge0: port 4(erspan0) entered disabled state [ 1274.339921][ T7098] bond1: left allmulticast mode [ 1274.340020][ T7098] bond1: left promiscuous mode [ 1274.340341][ T7098] bridge0: port 3(bond1) entered disabled state [ 1274.378583][ T7098] bridge_slave_1: left allmulticast mode [ 1274.378613][ T7098] bridge_slave_1: left promiscuous mode [ 1274.378829][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.525493][ T6845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1274.626235][ T6845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1274.722281][ T6845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1274.799652][ T6845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1275.189343][ T7128] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8139'. [ 1275.475520][ T7133] netlink: zone id is out of range [ 1275.475538][ T7133] netlink: zone id is out of range [ 1275.475548][ T7133] netlink: zone id is out of range [ 1275.475557][ T7133] netlink: zone id is out of range [ 1275.475566][ T7133] netlink: zone id is out of range [ 1275.475576][ T7133] netlink: zone id is out of range [ 1275.475589][ T7133] netlink: zone id is out of range [ 1275.475598][ T7133] netlink: zone id is out of range [ 1275.475607][ T7133] netlink: zone id is out of range [ 1275.475616][ T7133] netlink: zone id is out of range [ 1275.701387][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.729174][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.735310][T32259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.735451][T32259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.795932][T32259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.796073][T32259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.886245][ T7159] siw: device registration error -23 [ 1276.898647][ T7159] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8146'. [ 1277.000479][ T7166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8147'. [ 1277.250186][ T7164] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8145'. [ 1277.275018][ T7160] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8145'. [ 1277.796081][ T7192] netlink: 100 bytes leftover after parsing attributes in process `syz.6.8148'. [ 1278.406742][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.776471][ T7210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8155'. [ 1278.983173][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8156'. [ 1279.028385][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8153'. [ 1279.052579][T12705] IPVS: stop unused estimator thread 0... [ 1279.281984][ T6845] veth0_vlan: entered promiscuous mode [ 1279.291995][ T6845] veth1_vlan: entered promiscuous mode [ 1279.432661][ T6845] veth0_macvtap: entered promiscuous mode [ 1279.460485][ T6845] veth1_macvtap: entered promiscuous mode [ 1279.487801][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.513762][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.542163][ T7240] tipc: Enabling of bearer rejected, failed to enable media [ 1279.581568][T12724] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.636661][T12724] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.728744][T12712] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.728812][T12712] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.889656][T12729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.889681][T12729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.131861][T12712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.131883][T12712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.313461][ T7263] tipc: Invalid UDP bearer configuration [ 1280.313514][ T7263] tipc: Enabling of bearer rejected, failed to enable media [ 1280.563989][ T7275] sch_fq: defrate 8 ignored. [ 1280.634285][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8172'. [ 1280.656610][ T7283] IPVS: Error connecting to the multicast addr [ 1280.839012][ T7285] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8175'. [ 1280.839037][ T7285] tc_dump_action: action bad kind [ 1280.839195][ T7286] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8175'. [ 1280.839212][ T7286] tc_dump_action: action bad kind [ 1282.096692][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8181'. [ 1282.552026][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8186'. [ 1282.618326][ T7348] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1282.639622][ T7344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8188'. [ 1282.647619][ T7341] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8187'. [ 1282.675846][ T7336] lo speed is unknown, defaulting to 1000 [ 1282.816389][ T7356] lo: entered allmulticast mode [ 1282.826540][ T7356] lo: left allmulticast mode [ 1282.917811][ T7338] netlink: 'syz.6.8186': attribute type 1 has an invalid length. [ 1283.171713][ T7338] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1283.293440][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8189'. [ 1283.568858][T12695] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1283.569091][T12695] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1283.569158][T12695] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1283.576557][T12695] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1284.303847][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8195'. [ 1284.504586][ T7417] veth5: entered allmulticast mode [ 1285.431808][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8201'. [ 1285.681469][ T7466] siw: device registration error -23 [ 1285.722778][ T7466] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8205'. [ 1285.749414][ T7460] netlink: 'syz.4.8204': attribute type 5 has an invalid length. [ 1285.892799][ T7474] netlink: 'syz.1.8206': attribute type 8 has an invalid length. [ 1285.892824][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8206'. [ 1285.980839][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8207'. [ 1285.980873][ T7476] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8207'. [ 1286.006968][ T7476] macvlan3: entered allmulticast mode [ 1286.007035][ T7476] gretap0: entered allmulticast mode [ 1286.313710][ T7489] macvlan2: entered promiscuous mode [ 1286.313737][ T7489] vlan11: entered promiscuous mode [ 1286.313752][ T7489] gretap0: entered promiscuous mode [ 1286.320301][ T7489] vlan11: left promiscuous mode [ 1286.320324][ T7489] gretap0: left promiscuous mode [ 1286.449992][ T7501] net_ratelimit: 1708 callbacks suppressed [ 1286.450017][ T7501] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 1286.454078][ T7501] bond0: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1286.901091][ T7512] siw: device registration error -23 [ 1287.733594][ T7529] 0: reclassify loop, rule prio 0, protocol 03 [ 1288.190788][ T7545] __nla_validate_parse: 6 callbacks suppressed [ 1288.190808][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8229'. [ 1288.404209][ T7558] siw: device registration error -23 [ 1288.404975][ T7558] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8230'. [ 1288.486168][ T7564] ªªªªªª: renamed from vlan0 [ 1289.034848][ T7580] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8234'. [ 1289.153376][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8235'. [ 1289.153416][ T7582] netlink: 'syz.1.8235': attribute type 30 has an invalid length. [ 1289.209208][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8235'. [ 1289.209302][ T7588] netlink: 'syz.1.8235': attribute type 30 has an invalid length. [ 1289.813924][ T7606] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8237'. [ 1289.813987][ T7606] nbd: must specify at least one socket [ 1289.814783][ T7606] block nbd6: NBD_DISCONNECT [ 1289.814848][ T7606] block nbd6: Send disconnect failed -32 [ 1289.814906][ T7606] block nbd6: Send disconnect failed -32 [ 1289.814946][ T7606] block nbd6: shutting down sockets [ 1289.873155][ T7582] vxlan1: entered promiscuous mode [ 1289.873183][ T7582] vxlan1: entered allmulticast mode [ 1289.958940][T12729] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.958992][T12729] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.959066][T12729] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1290.132438][ T7606] netlink: 'syz.6.8237': attribute type 1 has an invalid length. [ 1290.215504][ T7611] netlink: 328 bytes leftover after parsing attributes in process `syz.6.8237'. [ 1290.215563][ T7611] netlink: 'syz.6.8237': attribute type 9 has an invalid length. [ 1290.215579][ T7611] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8237'. [ 1290.215596][ T7611] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8237'. [ 1290.267789][ T7606] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1290.307210][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8239'. [ 1290.759493][ T7641] netlink: 'syz.1.8246': attribute type 9 has an invalid length. [ 1291.169524][ T7664] sctp: [Deprecated]: syz.5.8251 (pid 7664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1291.169524][ T7664] Use struct sctp_sack_info instead [ 1291.292057][ T7672] bridge0: entered allmulticast mode [ 1291.293702][ T7672] veth0_to_team: left allmulticast mode [ 1291.293727][ T7672] veth0_to_team: left promiscuous mode [ 1291.293951][ T7672] bridge0: port 1(veth0_to_team) entered disabled state [ 1291.867514][ T7690] sock: sock_set_timeout: `syz.6.8259' (pid 7690) tries to set negative timeout [ 1291.867711][ T7689] sock: sock_set_timeout: `syz.6.8259' (pid 7689) tries to set negative timeout [ 1291.999226][T32177] block nbd6: Receive control failed (result -32) [ 1291.999772][T25522] block nbd6: Receive control failed (result -32) [ 1292.364784][ T7708] xfrm1: entered promiscuous mode [ 1292.364809][ T7708] xfrm1: entered allmulticast mode [ 1292.642101][ T7727] netlink: 'syz.5.8272': attribute type 2 has an invalid length. [ 1292.643020][ T7727] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1292.643055][ T7727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1292.686182][ T7727] netlink: 'syz.5.8272': attribute type 2 has an invalid length. [ 1292.687172][ T7727] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1292.687206][ T7727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1292.885955][ T7748] Bluetooth: hci0: unsupported parameter 5135 [ 1292.885982][ T7748] Bluetooth: hci0: unsupported parameter 8192 [ 1292.885999][ T7748] Bluetooth: hci0: unsupported parameter 5135 [ 1292.886014][ T7748] Bluetooth: hci0: unsupported parameter 8192 [ 1293.232226][ T7761] SET target dimension over the limit! [ 1293.655011][ T7771] vxcan0: tx drop: invalid da for name 0x0000000000200003 [ 1293.801760][ T7781] __nla_validate_parse: 17 callbacks suppressed [ 1293.801785][ T7781] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8287'. [ 1293.838956][ T7788] sctp: [Deprecated]: syz.5.8288 (pid 7788) Use of int in maxseg socket option. [ 1293.838956][ T7788] Use struct sctp_assoc_value instead [ 1294.125986][ T7802] syzkaller1: entered promiscuous mode [ 1294.126014][ T7802] syzkaller1: entered allmulticast mode [ 1294.156630][ T7802] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1295.035724][ T7839] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8302'. [ 1295.280111][ T7857] IPv6: NLM_F_CREATE should be specified when creating new route [ 1295.280212][ T7857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1295.280224][ T7857] IPv6: NLM_F_CREATE should be set when creating new route [ 1295.280267][ T7857] IPv6: NLM_F_CREATE should be set when creating new route [ 1295.280293][ T7857] IPv6: NLM_F_CREATE should be set when creating new route [ 1295.331347][ T7857] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.8307'. [ 1295.410984][ T7860] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8307'. [ 1295.546430][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8308'. [ 1295.586432][ T7861] syzkaller1: entered promiscuous mode [ 1295.586458][ T7861] syzkaller1: entered allmulticast mode [ 1295.697495][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8313'. [ 1295.784693][ C1] TC_ACT_REPEAT abuse ? [ 1295.809309][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8312'. [ 1295.867407][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8312'. [ 1295.867432][ T7897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8312'. [ 1296.489262][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8317'. [ 1296.605110][ T7925] IPv6: NLM_F_CREATE should be specified when creating new route [ 1296.605209][ T7925] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1296.605221][ T7925] IPv6: NLM_F_CREATE should be set when creating new route [ 1296.605263][ T7925] IPv6: NLM_F_CREATE should be set when creating new route [ 1296.605290][ T7925] IPv6: NLM_F_CREATE should be set when creating new route [ 1296.671786][ T7931] tipc: Started in network mode [ 1296.671819][ T7931] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 1296.671982][ T7931] tipc: Enabled bearer , priority 10 [ 1296.847771][ T7933] bridge_slave_0: default FDB implementation only supports local addresses [ 1297.085193][ T7948] siw: device registration error -23 [ 1297.401011][ T7955] syzkaller1: entered promiscuous mode [ 1297.401038][ T7955] syzkaller1: entered allmulticast mode [ 1297.426360][ T7961] ipvlan2: entered allmulticast mode [ 1297.426383][ T7961] macvlan1: entered allmulticast mode [ 1297.426415][ T7961] veth1_vlan: entered allmulticast mode [ 1297.449068][ T7961] batman_adv: batadv0: Adding interface: ipvlan2 [ 1297.449087][ T7961] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.449123][ T7961] batman_adv: batadv0: Interface activated: ipvlan2 [ 1297.743116][ T5899] tipc: Node number set to 8432298 [ 1297.954410][ T7984] ip_tables: iptables: counters copy to user failed while replacing table [ 1298.199380][ T7991] xt_CT: No such helper "syz1" [ 1298.357535][ T7963] =v: renamed from veth0_to_bond [ 1298.694056][ T8001] lo speed is unknown, defaulting to 1000 [ 1298.694123][ T8001] lo speed is unknown, defaulting to 1000 [ 1298.695023][ T8001] lo speed is unknown, defaulting to 1000 [ 1298.696137][ T8001] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1298.696173][ T8001] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1298.696219][ T8001] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1298.813061][ T8001] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 1298.959618][ T8001] lo speed is unknown, defaulting to 1000 [ 1298.983374][ T8001] lo speed is unknown, defaulting to 1000 [ 1298.985430][ T8001] lo speed is unknown, defaulting to 1000 [ 1298.987402][ T8001] lo speed is unknown, defaulting to 1000 [ 1298.989280][ T8001] lo speed is unknown, defaulting to 1000 [ 1299.005040][ T8018] __nla_validate_parse: 9 callbacks suppressed [ 1299.005094][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8344'. [ 1299.013073][ T8001] lo speed is unknown, defaulting to 1000 [ 1299.018014][ T8001] lo speed is unknown, defaulting to 1000 [ 1299.093218][ T8001] lo speed is unknown, defaulting to 1000 [ 1299.106739][ T8001] lo speed is unknown, defaulting to 1000 [ 1299.124450][ T8025] ip_tables: iptables: counters copy to user failed while replacing table [ 1299.147781][ T8001] lo speed is unknown, defaulting to 1000 [ 1299.150008][ T8001] lo speed is unknown, defaulting to 1000 [ 1299.152165][ T8001] lo speed is unknown, defaulting to 1000 [ 1299.483559][ T8035] lo speed is unknown, defaulting to 1000 [ 1300.222302][ T8051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1302.497803][ T8035] lo speed is unknown, defaulting to 1000 [ 1302.529296][ T8036] §: renamed from sit0 (while UP) [ 1302.619889][ T8048] pimreg: entered allmulticast mode [ 1302.661225][ T8051] pimreg: left allmulticast mode [ 1302.903794][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8355'. [ 1302.981358][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8355'. [ 1303.102797][ T8077] ip_tables: iptables: counters copy to user failed while replacing table [ 1303.193136][ T8081] ip_tables: iptables: counters copy to user failed while replacing table [ 1303.312688][ T8073] bond0 (unregistering): Released all slaves [ 1303.469437][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8359'. [ 1303.706055][ T8099] openvswitch: netlink: Flow actions attr not present in new flow. [ 1304.628904][ T8122] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8367'. [ 1304.629261][ T8122] unsupported nlmsg_type 40 [ 1304.824204][ T8126] ip_tables: iptables: counters copy to user failed while replacing table [ 1304.970665][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8374'. [ 1305.670891][ T8166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8381'. [ 1305.807319][ T8173] netlink: 'syz.4.8381': attribute type 17 has an invalid length. [ 1305.940729][ T8177] ip_tables: iptables: counters copy to user failed while replacing table [ 1306.133865][ T8172] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8382'. [ 1306.152615][ T8186] sctp: [Deprecated]: syz.4.8381 (pid 8186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1306.152615][ T8186] Use struct sctp_sack_info instead [ 1306.155320][ T8172] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8382'. [ 1306.386710][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.387337][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.492148][ T8172] tipc: Resetting bearer [ 1306.556117][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8388'. [ 1306.687964][ T8205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8391'. [ 1306.739617][ T8172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1306.791572][ T8172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1306.882801][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8392'. [ 1307.089966][ T8193] bond17: entered allmulticast mode [ 1307.116233][ T8196] macvlan4: entered promiscuous mode [ 1307.116268][ T8196] macvlan4: entered allmulticast mode [ 1307.134978][ T8196] bond17: (slave macvlan4): Opening slave failed [ 1307.320018][T12729] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.320070][T12729] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1307.320115][T12729] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.320146][T12729] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1307.320186][T12729] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.320216][T12729] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1307.320256][T12729] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.320286][T12729] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1307.600886][ T8228] ip_tables: iptables: counters copy to user failed while replacing table [ 1308.082999][ T8245] tc_dump_action: action bad kind [ 1308.392737][ T8260] netlink: 'syz.1.8402': attribute type 21 has an invalid length. [ 1308.392763][ T8260] netlink: 'syz.1.8402': attribute type 22 has an invalid length. [ 1308.392780][ T8260] netlink: 'syz.1.8402': attribute type 23 has an invalid length. [ 1308.392795][ T8260] netlink: 'syz.1.8402': attribute type 25 has an invalid length. [ 1308.392811][ T8260] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8402'. [ 1309.097257][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8405'. [ 1309.501240][ T8277] netlink: 'syz.1.8408': attribute type 1 has an invalid length. [ 1309.756185][ T8277] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1309.792134][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8407'. [ 1309.876467][ T8281] bond18: entered promiscuous mode [ 1309.876533][ T8281] bond18: entered allmulticast mode [ 1310.278433][ T8292] ip_tables: iptables: counters copy to user failed while replacing table [ 1310.455110][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8411'. [ 1310.476039][ T8301] FAULT_INJECTION: forcing a failure. [ 1310.476039][ T8301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1310.476105][ T8301] CPU: 0 UID: 0 PID: 8301 Comm: syz.5.8415 Not tainted syzkaller #0 PREEMPT(full) [ 1310.476130][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1310.476148][ T8301] Call Trace: [ 1310.476158][ T8301] [ 1310.476168][ T8301] dump_stack_lvl+0xe8/0x150 [ 1310.476207][ T8301] should_fail_ex+0x410/0x560 [ 1310.476239][ T8301] _copy_from_user+0x2d/0xb0 [ 1310.476268][ T8301] __copy_msghdr+0x390/0x590 [ 1310.476304][ T8301] ___sys_sendmsg+0x213/0x360 [ 1310.476340][ T8301] ? __lock_acquire+0x747/0x2de0 [ 1310.476388][ T8301] ? __pfx____sys_sendmsg+0x10/0x10 [ 1310.476460][ T8301] ? __fget_files+0x2a/0x420 [ 1310.476491][ T8301] ? __fget_files+0x3a2/0x420 [ 1310.476536][ T8301] __x64_sys_sendmsg+0x1b1/0x290 [ 1310.476571][ T8301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1310.476626][ T8301] do_syscall_64+0x166/0x520 [ 1310.476651][ T8301] ? trace_irq_disable+0x3b/0x140 [ 1310.476674][ T8301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.476699][ T8301] ? clear_bhb_loop+0x70/0xc0 [ 1310.476728][ T8301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.476752][ T8301] RIP: 0033:0x7f6c16f9e159 [ 1310.476773][ T8301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1310.476793][ T8301] RSP: 002b:00007f6c17e63028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1310.476817][ T8301] RAX: ffffffffffffffda RBX: 00007f6c17225fa0 RCX: 00007f6c16f9e159 [ 1310.476836][ T8301] RDX: 0000000004040050 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1310.476851][ T8301] RBP: 00007f6c17e63090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.476866][ T8301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.476881][ T8301] R13: 00007f6c17226038 R14: 00007f6c17225fa0 R15: 00007ffc2b9f3db8 [ 1310.476918][ T8301] [ 1310.555263][ T8305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8414'. [ 1311.013553][ T8312] batadv0: entered allmulticast mode [ 1311.024332][ T8312] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1311.079160][ T8313] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1311.286152][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8420'. [ 1311.902943][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8427'. [ 1311.954943][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8426'. [ 1311.954971][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8426'. [ 1312.116334][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8429'. [ 1312.240861][ T8362] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8431'. [ 1312.241575][ T8362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.322450][ T8365] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8432'. [ 1312.968441][ T8403] netlink: 'syz.1.8437': attribute type 1 has an invalid length. [ 1313.029627][ T8403] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1313.668534][T25522] Bluetooth: hci1: link tx timeout [ 1313.668858][T25522] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1314.180217][ T8448] ip6gre2: entered promiscuous mode [ 1314.180242][ T8448] ip6gre2: entered allmulticast mode [ 1314.183004][T12733] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1314.185670][T12733] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1314.216119][ T852] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1314.361119][ T8458] sit0: entered promiscuous mode [ 1314.361291][ T8458] netlink: 'syz.0.8452': attribute type 1 has an invalid length. [ 1314.362590][ T8464] netlink: NAT attribute has 4 unknown bytes [ 1314.362625][ T8464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1314.434761][ T8461] batman_adv: batadv0: Adding interface: macvtap1 [ 1314.434786][ T8461] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1314.668125][ T5752] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1314.714586][ T8474] nbd: must specify at least one socket [ 1314.725665][ T8469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1314.925878][ T8484] __nla_validate_parse: 13 callbacks suppressed [ 1314.925901][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8462'. [ 1315.018228][ T8483] lo speed is unknown, defaulting to 1000 [ 1315.057615][ T5752] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1315.396310][ T8483] lo speed is unknown, defaulting to 1000 [ 1315.488441][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8467'. [ 1315.524048][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8469'. [ 1315.526800][ T8506] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8467'. [ 1315.526830][ T8506] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8467'. [ 1315.778341][T32177] Bluetooth: hci1: command 0x0406 tx timeout [ 1315.947668][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8472'. [ 1316.069881][ T8521] macvlan0: entered allmulticast mode [ 1316.069906][ T8521] gretap0: entered allmulticast mode [ 1316.072751][ T8523] tipc: Cannot configure node identity twice [ 1316.784265][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8477'. [ 1316.954764][ T8547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1316.974570][ T8534] syzkaller1: entered promiscuous mode [ 1316.974596][ T8534] syzkaller1: entered allmulticast mode [ 1317.847616][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1319.284624][ T8570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8480'. [ 1319.349861][ T8572] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8481'. [ 1319.349892][ T8572] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1319.414764][ T8578] ip6erspan1: entered allmulticast mode [ 1319.483495][ T8579] x_tables: duplicate underflow at hook 3 [ 1319.955909][ T8598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8489'. [ 1319.955935][ T8598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8489'. [ 1319.993444][ T8598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8489'. [ 1319.993469][ T8598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8489'. [ 1320.094693][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8493'. [ 1320.115441][ T8619] netlink: 'syz.4.8493': attribute type 10 has an invalid length. [ 1320.115467][ T8619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8493'. [ 1320.166533][ T8617] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1320.238766][ T8624] syzkaller0: entered promiscuous mode [ 1320.238792][ T8624] syzkaller0: entered allmulticast mode [ 1320.398126][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8495'. [ 1320.560759][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8498'. [ 1320.838515][ T8645] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8500'. [ 1321.151408][ T8658] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (32769) ! [ 1321.366921][ T8674] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8507'. [ 1321.863898][ T8684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1322.267413][ T8706] netlink: 'syz.0.8520': attribute type 1 has an invalid length. [ 1322.315696][ T8706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1322.481864][ T8716] netlink: 'syz.1.8525': attribute type 10 has an invalid length. [ 1322.756196][ T8728] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1322.990462][ T8736] netlink: 'syz.1.8531': attribute type 1 has an invalid length. [ 1323.037563][ T8736] bond20: option mode: invalid value (7) [ 1323.046248][ T8736] bond20 (unregistering): Released all slaves [ 1323.264952][ T8757] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1323.286678][ T8757] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1323.444709][ T8766] bond20: option downdelay: invalid value (18446744073709551487) [ 1323.444740][ T8766] bond20: option downdelay: allowed values 0 - 2147483647 [ 1323.447523][ T8766] bond20 (unregistering): Released all slaves [ 1323.529468][ T8772] ip_tables: iptables: counters copy to user failed while replacing table [ 1323.625746][ T8779] ip_tables: iptables: counters copy to user failed while replacing table [ 1324.156889][ T8798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1324.156907][ T8798] IPv6: NLM_F_CREATE should be set when creating new route [ 1324.156951][ T8798] IPv6: NLM_F_CREATE should be set when creating new route [ 1324.283898][ T8799] netlink: 'syz.5.8547': attribute type 2 has an invalid length. [ 1324.906665][ T8812] siw: device registration error -23 [ 1325.027897][ T8819] siw: device registration error -23 [ 1325.030845][ T8826] netlink: 'syz.5.8547': attribute type 2 has an invalid length. [ 1325.031096][ T8819] __nla_validate_parse: 8 callbacks suppressed [ 1325.031113][ T8819] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8552'. [ 1325.217864][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1325.984730][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8559'. [ 1326.094681][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8559'. [ 1326.127820][ T8834] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8555'. [ 1326.480568][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8556'. [ 1326.571794][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8562'. [ 1326.658402][ T8875] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1326.658444][ T8875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1326.658816][ T8875] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1326.658850][ T8875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1326.659192][ T8875] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1326.659225][ T8875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1326.659590][ T8875] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1326.659623][ T8875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1326.847827][ T8874] ksmbd: Unknown IPC event: 12, ignore. [ 1327.526272][ T8893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8566'. [ 1327.972924][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.972969][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973000][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973030][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973060][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973089][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973130][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973158][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973186][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973214][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973242][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973270][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973298][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973327][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973355][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973389][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973419][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973447][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973476][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1327.973504][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.112191][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.112320][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.112406][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.112481][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.112556][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.112631][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.112703][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.112778][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.112857][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.112930][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113004][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113079][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113139][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113220][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113259][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113286][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113320][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113349][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113377][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113404][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113432][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113459][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113487][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113515][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113543][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113571][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113598][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113626][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113653][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113680][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113707][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113734][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113761][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113788][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113816][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113844][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113872][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113899][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113926][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113954][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.113981][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.114008][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.114036][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.114065][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.114093][ T8900] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20001 [ 1328.708521][ T8914] netlink: 'syz.0.8573': attribute type 30 has an invalid length. [ 1328.728793][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8572'. [ 1328.795736][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8575'. [ 1328.952821][ T8924] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8577'. [ 1328.968675][ T8923] netlink: 'syz.1.8578': attribute type 30 has an invalid length. [ 1329.049172][ T5896] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1329.091873][ T8918] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1329.134294][ T8923] bond20: option arp_missed_max: invalid value (0) [ 1329.134321][ T8923] bond20: option arp_missed_max: allowed values 1 - 255 [ 1329.164655][ T8923] bond20 (unregistering): Released all slaves [ 1329.612549][T32258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.612574][T32258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.848573][ T5896] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1330.211651][ T8956] __nla_validate_parse: 3 callbacks suppressed [ 1330.211684][ T8956] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8586'. [ 1331.008433][ T8963] udevd[8963]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1331.063606][ T8962] udevd[8962]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1331.298118][ T8979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8591'. [ 1331.420079][ T8985] bridge0: entered promiscuous mode [ 1331.424598][ T8985] macvlan5: entered promiscuous mode [ 1331.516292][ T8990] xt_esp: unknown flags DD [ 1331.726274][ T9001] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8598'. [ 1331.805940][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8599'. [ 1331.970131][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8600'. [ 1332.905446][ T9026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1332.944945][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8607'. [ 1332.950361][ T9016] syzkaller0: entered promiscuous mode [ 1332.950390][ T9016] syzkaller0: entered allmulticast mode [ 1332.958310][ T9029] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8605'. [ 1332.974332][ T9029] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1333.030256][ T9032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1333.072094][ T9021] tc_dump_action: action bad kind [ 1333.980232][ T9045] siw: device registration error -23 [ 1333.983997][ T9045] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8613'. [ 1338.318736][ T9062] netlink: 200 bytes leftover after parsing attributes in process `syz.4.8617'. [ 1338.372050][ T9060] syzkaller1: entered promiscuous mode [ 1338.372076][ T9060] syzkaller1: entered allmulticast mode [ 1338.394715][ T9066] FAULT_INJECTION: forcing a failure. [ 1338.394715][ T9066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.394753][ T9066] CPU: 1 UID: 0 PID: 9066 Comm: syz.6.8619 Not tainted syzkaller #0 PREEMPT(full) [ 1338.394797][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1338.394820][ T9066] Call Trace: [ 1338.394829][ T9066] [ 1338.394840][ T9066] dump_stack_lvl+0xe8/0x150 [ 1338.394883][ T9066] should_fail_ex+0x410/0x560 [ 1338.394926][ T9066] _copy_from_iter+0x3b0/0x1660 [ 1338.394967][ T9066] ? __pfx__copy_from_iter+0x10/0x10 [ 1338.394990][ T9066] ? __lock_acquire+0x747/0x2de0 [ 1338.395034][ T9066] tun_get_user+0x52f/0x44d0 [ 1338.395135][ T9066] ? __lock_acquire+0x747/0x2de0 [ 1338.395171][ T9066] ? __lock_acquire+0x747/0x2de0 [ 1338.395206][ T9066] ? __pfx_tun_get_user+0x10/0x10 [ 1338.395234][ T9066] ? __lock_acquire+0x747/0x2de0 [ 1338.395267][ T9066] ? aa_file_perm+0x18b/0x15f0 [ 1338.395304][ T9066] ? ref_tracker_alloc+0x341/0x4b0 [ 1338.395336][ T9066] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1338.395367][ T9066] ? lock_acquire+0x115/0x350 [ 1338.395391][ T9066] ? tun_get+0x1c/0x2f0 [ 1338.395422][ T9066] ? tun_get+0x1c/0x2f0 [ 1338.395445][ T9066] ? tun_get+0x1c/0x2f0 [ 1338.395475][ T9066] tun_chr_write_iter+0x113/0x200 [ 1338.395502][ T9066] do_iter_readv_writev+0x612/0x8c0 [ 1338.395532][ T9066] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1338.395562][ T9066] ? bpf_lsm_file_permission+0x9/0x20 [ 1338.395595][ T9066] ? security_file_permission+0x75/0x260 [ 1338.395635][ T9066] ? rw_verify_area+0x203/0x4c0 [ 1338.395675][ T9066] vfs_writev+0x343/0x990 [ 1338.395713][ T9066] ? __pfx_vfs_writev+0x10/0x10 [ 1338.395757][ T9066] ? __fget_files+0x2a/0x420 [ 1338.395795][ T9066] ? __fget_files+0x3a2/0x420 [ 1338.395826][ T9066] ? __fget_files+0x2a/0x420 [ 1338.395868][ T9066] do_writev+0x154/0x2e0 [ 1338.395898][ T9066] ? __pfx_do_writev+0x10/0x10 [ 1338.395946][ T9066] do_syscall_64+0x166/0x520 [ 1338.395973][ T9066] ? trace_irq_disable+0x3b/0x140 [ 1338.395997][ T9066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.396022][ T9066] ? clear_bhb_loop+0x70/0xc0 [ 1338.396052][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.396076][ T9066] RIP: 0033:0x7ff6a339e159 [ 1338.396098][ T9066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.396118][ T9066] RSP: 002b:00007ff6a41c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1338.396144][ T9066] RAX: ffffffffffffffda RBX: 00007ff6a3625fa0 RCX: 00007ff6a339e159 [ 1338.396162][ T9066] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 1338.396177][ T9066] RBP: 00007ff6a41c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.396192][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.396207][ T9066] R13: 00007ff6a3626038 R14: 00007ff6a3625fa0 R15: 00007ffc755cff18 [ 1338.396245][ T9066] [ 1338.865929][ T9067] bond20: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1338.881440][ T9067] bond20 (unregistering): Released all slaves [ 1338.975449][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8618'. [ 1338.979502][ T9080] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1338.979542][ T9080] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1338.979586][ T9080] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1339.038594][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8618'. [ 1339.060341][ T9080] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1339.176753][ T9093] netlink: 'syz.5.8625': attribute type 1 has an invalid length. [ 1339.214748][ T9093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1339.287508][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1339.891813][ T9127] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8634'. [ 1340.021128][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8634'. [ 1340.301026][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8641'. [ 1340.301053][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8641'. [ 1340.301082][ T9152] netlink: 'syz.4.8641': attribute type 14 has an invalid length. [ 1340.301099][ T9152] netlink: 'syz.4.8641': attribute type 13 has an invalid length. [ 1340.387620][ T9147] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8638'. [ 1340.411214][ T9147] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8638'. [ 1340.468104][ T9154] block nbd11: Unsupported socket: should be TCP or UNIX. [ 1340.560162][T12707] IPVS: starting estimator thread 0... [ 1340.657657][ T9157] IPVS: using max 37 ests per chain, 88800 per kthread [ 1340.994810][ T9171] siw: device registration error -23 [ 1340.996736][ T9171] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8646'. [ 1341.834155][ T9196] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1341.878078][ T9196] netlink: 'syz.1.8650': attribute type 1 has an invalid length. [ 1341.929169][ T9196] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1342.415717][ T9222] Cannot find set identified by id 0 to match [ 1343.109609][ T31] audit: type=1804 audit(1789265715.793:89): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.8661" name="/newroot/472/cgroup.controllers" dev="tmpfs" ino=2441 res=1 errno=0 [ 1343.113004][ T31] audit: type=1800 audit(1789265715.793:90): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8661" name="cgroup.controllers" dev="tmpfs" ino=2441 res=0 errno=0 [ 1343.326874][ T852] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1343.337874][ T9252] macsec0: entered promiscuous mode [ 1343.340205][ T9252] macsec0: entered allmulticast mode [ 1343.340613][ T9252] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 1343.373943][ T9244] siw: device registration error -23 [ 1343.375124][ T9244] __nla_validate_parse: 9 callbacks suppressed [ 1343.375143][ T9244] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8662'. [ 1343.561652][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8665'. [ 1343.565428][ T9258] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1343.588130][ T9258] netlink: 'syz.5.8665': attribute type 1 has an invalid length. [ 1343.728972][ T9260] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8665'. [ 1344.019445][ T852] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1344.066673][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8667'. [ 1344.117016][ T9262] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1344.131854][ T9262] netlink: 'syz.4.8667': attribute type 1 has an invalid length. [ 1344.171194][ T9257] bridge_slave_1 (unregistering): left allmulticast mode [ 1344.171228][ T9257] bridge_slave_1 (unregistering): left promiscuous mode [ 1344.171322][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.243235][ T9258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1344.271192][ T9269] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8667'. [ 1344.360363][ T9262] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1344.787330][ T9289] nbd: couldn't find a device at index 0 [ 1344.956685][ T9301] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8677'. [ 1345.078552][ T9311] pim6reg1: entered promiscuous mode [ 1345.078579][ T9311] pim6reg1: entered allmulticast mode [ 1345.095633][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8677'. [ 1345.522944][ T9296] veth3: entered allmulticast mode [ 1345.556001][ T9296] dvmrp8: entered allmulticast mode [ 1345.598149][ T9295] veth3: left allmulticast mode [ 1345.605055][ T9337] sctp: [Deprecated]: syz.0.8683 (pid 9337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1345.605055][ T9337] Use struct sctp_sack_info instead [ 1345.684046][ T9343] netlink: 'syz.0.8685': attribute type 9 has an invalid length. [ 1345.684071][ T9343] netlink: 'syz.0.8685': attribute type 5 has an invalid length. [ 1346.602968][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8689'. [ 1346.768928][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8692'. [ 1346.848119][ T9368] lo speed is unknown, defaulting to 1000 [ 1346.926534][ T9378] netlink: 'syz.1.8690': attribute type 1 has an invalid length. [ 1347.193448][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8698'. [ 1347.441288][ T9368] lo speed is unknown, defaulting to 1000 [ 1347.465124][ T9391] siw: device registration error -23 [ 1347.526984][ T9404] net_ratelimit: 58 callbacks suppressed [ 1347.527007][ T9404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1347.669230][ T9397] can: request_module (can-proto-0) failed. [ 1348.008860][T25522] Bluetooth: hci1: command 0x0406 tx timeout [ 1348.917017][ T9431] sctp: [Deprecated]: syz.0.8710 (pid 9431) Use of int in maxseg socket option. [ 1348.917017][ T9431] Use struct sctp_assoc_value instead [ 1349.174313][ T9438] __nla_validate_parse: 2 callbacks suppressed [ 1349.174338][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8712'. [ 1350.004102][ T9451] x_tables: duplicate underflow at hook 1 [ 1350.065081][ T9450] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 1350.065611][ T9450] syzkaller1: entered promiscuous mode [ 1350.065633][ T9450] syzkaller1: entered allmulticast mode [ 1350.403097][ T9474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8714'. [ 1350.999762][ T9493] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1351.300241][ T9495] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1351.323194][ T9493] IPVS: Scheduler module ip_vs_sip not found [ 1351.366670][ T9503] nbd11: detected capacity change from 0 to 127 [ 1351.379237][ T1708] [ 1351.381653][ T1708] ====================================================== [ 1351.388796][ T1708] WARNING: possible circular locking dependency detected [ 1351.395923][ T1708] syzkaller #0 Not tainted [ 1351.400371][ T1708] ------------------------------------------------------ [ 1351.407482][ T1708] kworker/0:1H/1708 is trying to acquire lock: [ 1351.413668][ T1708] ffff88805e412a68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 1351.422841][ T1708] [ 1351.422841][ T1708] but task is already holding lock: [ 1351.430238][ T1708] ffff888027e57178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1351.438706][ T1708] [ 1351.438706][ T1708] which lock already depends on the new lock. [ 1351.438706][ T1708] [ 1351.449133][ T1708] [ 1351.449133][ T1708] the existing dependency chain (in reverse order) is: [ 1351.458171][ T1708] [ 1351.458171][ T1708] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1351.465498][ T1708] __mutex_lock+0x19d/0x1550 [ 1351.470651][ T1708] nbd_queue_rq+0xc1/0xff0 [ 1351.475636][ T1708] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1351.481818][ T1708] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1351.488763][ T1708] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1351.495308][ T1708] blk_mq_run_work_fn+0x16c/0x300 [ 1351.500902][ T1708] process_scheduled_works+0xc3d/0x1630 [ 1351.507007][ T1708] worker_thread+0xa47/0xfb0 [ 1351.512150][ T1708] kthread+0x38b/0x480 [ 1351.516766][ T1708] ret_from_fork+0x514/0xb70 [ 1351.521910][ T1708] ret_from_fork_asm+0x1a/0x30 [ 1351.527227][ T1708] [ 1351.527227][ T1708] -> #5 (set->srcu){.+.+}-{0:0}: [ 1351.534375][ T1708] __synchronize_srcu+0xc9/0x2f0 [ 1351.539910][ T1708] elevator_switch+0x1e8/0x7b0 [ 1351.545306][ T1708] elevator_change+0x2fa/0x480 [ 1351.550618][ T1708] elevator_set_default+0x375/0x440 [ 1351.556364][ T1708] blk_register_queue+0x3f3/0x4e0 [ 1351.561985][ T1708] __add_disk+0x6b8/0xdb0 [ 1351.566872][ T1708] add_disk_fwnode+0x100/0x3a0 [ 1351.572192][ T1708] nbd_dev_add+0x733/0xb60 [ 1351.577151][ T1708] nbd_init+0x168/0x1f0 [ 1351.581937][ T1708] do_one_initcall+0x250/0x870 [ 1351.587260][ T1708] do_initcall_level+0x10a/0x1a0 [ 1351.592753][ T1708] do_initcalls+0x59/0xa0 [ 1351.597644][ T1708] kernel_init_freeable+0x29d/0x3e0 [ 1351.603400][ T1708] kernel_init+0x22/0x1d0 [ 1351.608291][ T1708] ret_from_fork+0x514/0xb70 [ 1351.613429][ T1708] ret_from_fork_asm+0x1a/0x30 [ 1351.618749][ T1708] [ 1351.618749][ T1708] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1351.626619][ T1708] __mutex_lock+0x19d/0x1550 [ 1351.631850][ T1708] elevator_change+0x1af/0x480 [ 1351.637162][ T1708] elevator_set_none+0xb5/0x140 [ 1351.642550][ T1708] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1351.648910][ T1708] nbd_start_device+0x189/0xb30 [ 1351.654311][ T1708] nbd_genl_connect+0x167d/0x1cd0 [ 1351.659955][ T1708] genl_family_rcv_msg_doit+0x233/0x340 [ 1351.666046][ T1708] genl_rcv_msg+0x614/0x7a0 [ 1351.671100][ T1708] netlink_rcv_skb+0x226/0x4a0 [ 1351.676423][ T1708] genl_rcv+0x28/0x40 [ 1351.680944][ T1708] netlink_unicast+0x7bd/0x940 [ 1351.686251][ T1708] netlink_sendmsg+0x813/0xb40 [ 1351.691562][ T1708] sock_sendmsg_nosec+0x13a/0x180 [ 1351.697139][ T1708] ____sys_sendmsg+0x54e/0x850 [ 1351.702463][ T1708] ___sys_sendmsg+0x2a5/0x360 [ 1351.707685][ T1708] __x64_sys_sendmsg+0x1b1/0x290 [ 1351.713172][ T1708] do_syscall_64+0x166/0x520 [ 1351.718305][ T1708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.724741][ T1708] [ 1351.724741][ T1708] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1351.733475][ T1708] blk_alloc_queue+0x544/0x690 [ 1351.738799][ T1708] __blk_mq_alloc_disk+0x194/0x390 [ 1351.744459][ T1708] nbd_dev_add+0x494/0xb60 [ 1351.749440][ T1708] nbd_init+0x168/0x1f0 [ 1351.754331][ T1708] do_one_initcall+0x250/0x870 [ 1351.759680][ T1708] do_initcall_level+0x10a/0x1a0 [ 1351.765154][ T1708] do_initcalls+0x59/0xa0 [ 1351.770023][ T1708] kernel_init_freeable+0x29d/0x3e0 [ 1351.775765][ T1708] kernel_init+0x22/0x1d0 [ 1351.780690][ T1708] ret_from_fork+0x514/0xb70 [ 1351.785836][ T1708] ret_from_fork_asm+0x1a/0x30 [ 1351.791168][ T1708] [ 1351.791168][ T1708] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1351.798407][ T1708] fs_reclaim_acquire+0x71/0x100 [ 1351.803914][ T1708] __kmalloc_node_track_caller_noprof+0xb9/0x720 [ 1351.810836][ T1708] xfrm_user_policy+0x1a7/0x790 [ 1351.816317][ T1708] do_ipv6_setsockopt+0x162a/0x2960 [ 1351.822109][ T1708] ipv6_setsockopt+0x59/0x170 [ 1351.827335][ T1708] do_sock_setsockopt+0x17c/0x1b0 [ 1351.832911][ T1708] __x64_sys_setsockopt+0x13d/0x1b0 [ 1351.838653][ T1708] do_syscall_64+0x166/0x520 [ 1351.843792][ T1708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.850237][ T1708] [ 1351.850237][ T1708] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1351.858351][ T1708] lock_sock_nested+0x41/0x100 [ 1351.863664][ T1708] inet_shutdown+0x6a/0x390 [ 1351.868784][ T1708] nbd_mark_nsock_dead+0x2cb/0x550 [ 1351.874436][ T1708] recv_work+0x1cee/0x1e10 [ 1351.879402][ T1708] process_scheduled_works+0xc3d/0x1630 [ 1351.885518][ T1708] worker_thread+0xa47/0xfb0 [ 1351.890665][ T1708] kthread+0x38b/0x480 [ 1351.895282][ T1708] ret_from_fork+0x514/0xb70 [ 1351.900419][ T1708] ret_from_fork_asm+0x1a/0x30 [ 1351.905740][ T1708] [ 1351.905740][ T1708] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 1351.913523][ T1708] __lock_acquire+0x164c/0x2de0 [ 1351.918933][ T1708] lock_acquire+0x115/0x350 [ 1351.924019][ T1708] __mutex_lock+0x19d/0x1550 [ 1351.929165][ T1708] nbd_queue_rq+0x373/0xff0 [ 1351.934228][ T1708] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1351.940335][ T1708] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1351.947244][ T1708] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1351.953806][ T1708] blk_mq_run_work_fn+0x16c/0x300 [ 1351.959437][ T1708] process_scheduled_works+0xc3d/0x1630 [ 1351.965569][ T1708] worker_thread+0xa47/0xfb0 [ 1351.970716][ T1708] kthread+0x38b/0x480 [ 1351.975341][ T1708] ret_from_fork+0x514/0xb70 [ 1351.980583][ T1708] ret_from_fork_asm+0x1a/0x30 [ 1351.985918][ T1708] [ 1351.985918][ T1708] other info that might help us debug this: [ 1351.985918][ T1708] [ 1351.996182][ T1708] Chain exists of: [ 1351.996182][ T1708] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 1351.996182][ T1708] [ 1352.008382][ T1708] Possible unsafe locking scenario: [ 1352.008382][ T1708] [ 1352.015863][ T1708] CPU0 CPU1 [ 1352.021313][ T1708] ---- ---- [ 1352.026718][ T1708] lock(&cmd->lock); [ 1352.030733][ T1708] lock(set->srcu); [ 1352.037170][ T1708] lock(&cmd->lock); [ 1352.043705][ T1708] lock(&nsock->tx_lock); [ 1352.048148][ T1708] [ 1352.048148][ T1708] *** DEADLOCK *** [ 1352.048148][ T1708] [ 1352.056362][ T1708] locks held by kworker/0:1H/1708: 4, last CPU#0: [ 1352.062851][ T1708] #0: ffff888020ecc140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1352.073960][ T1708] #1: ffffc90006387c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1352.086874][ T1708] #2: ffff888027c6e698 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 1352.096375][ T1708] #3: ffff888027e57178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1352.105287][ T1708] [ 1352.105287][ T1708] stack backtrace: [ 1352.111195][ T1708] CPU: 0 UID: 0 PID: 1708 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 1352.120670][ T1708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1352.130745][ T1708] Workqueue: kblockd blk_mq_run_work_fn [ 1352.136333][ T1708] Call Trace: [ 1352.139638][ T1708] [ 1352.142597][ T1708] dump_stack_lvl+0xe8/0x150 [ 1352.147262][ T1708] print_circular_bug+0x2e2/0x300 [ 1352.152327][ T1708] check_noncircular+0x12f/0x150 [ 1352.157302][ T1708] __lock_acquire+0x164c/0x2de0 [ 1352.162267][ T1708] lock_acquire+0x115/0x350 [ 1352.166803][ T1708] ? nbd_queue_rq+0x373/0xff0 [ 1352.171519][ T1708] __mutex_lock+0x19d/0x1550 [ 1352.176141][ T1708] ? nbd_queue_rq+0x373/0xff0 [ 1352.180844][ T1708] ? do_raw_spin_lock+0x12b/0x2f0 [ 1352.185904][ T1708] ? nbd_queue_rq+0x373/0xff0 [ 1352.190607][ T1708] ? __pfx___mutex_lock+0x10/0x10 [ 1352.195672][ T1708] ? rcu_is_watching+0x16/0xb0 [ 1352.200463][ T1708] ? trace_sched_exit_tp+0x3a/0x130 [ 1352.205690][ T1708] nbd_queue_rq+0x373/0xff0 [ 1352.210222][ T1708] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1352.215300][ T1708] ? irqentry_exit+0x218/0x910 [ 1352.220084][ T1708] ? __pfx___schedule+0x10/0x10 [ 1352.224975][ T1708] ? irqentry_exit+0x218/0x910 [ 1352.229769][ T1708] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1352.235349][ T1708] ? sbitmap_get+0x229/0x390 [ 1352.239971][ T1708] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1352.245982][ T1708] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1352.251824][ T1708] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1352.258197][ T1708] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1352.264991][ T1708] ? lock_acquire+0x115/0x350 [ 1352.269695][ T1708] ? process_scheduled_works+0x97a/0x1630 [ 1352.275466][ T1708] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1352.281477][ T1708] ? blk_mq_run_work_fn+0x144/0x300 [ 1352.286705][ T1708] blk_mq_run_work_fn+0x16c/0x300 [ 1352.291765][ T1708] ? process_scheduled_works+0x97a/0x1630 [ 1352.297515][ T1708] process_scheduled_works+0xc3d/0x1630 [ 1352.303113][ T1708] ? __pfx_process_scheduled_works+0x10/0x10 [ 1352.309131][ T1708] ? assign_work+0x3cf/0x5d0 [ 1352.313839][ T1708] worker_thread+0xa47/0xfb0 [ 1352.318467][ T1708] ? __kthread_parkme+0x71/0x1f0 [ 1352.323442][ T1708] kthread+0x38b/0x480 [ 1352.327544][ T1708] ? __pfx_worker_thread+0x10/0x10 [ 1352.332681][ T1708] ? __pfx_kthread+0x10/0x10 [ 1352.337289][ T1708] ret_from_fork+0x514/0xb70 [ 1352.341899][ T1708] ? __pfx_ret_from_fork+0x10/0x10 [ 1352.347075][ T1708] ? __switch_to+0xc89/0x1420 [ 1352.351795][ T1708] ? __pfx_kthread+0x10/0x10 [ 1352.356432][ T1708] ret_from_fork_asm+0x1a/0x30 [ 1352.361419][ T1708] [ 1352.395781][ T9503] lo speed is unknown, defaulting to 1000 [ 1352.587043][ T9503] lo speed is unknown, defaulting to 1000 [ 1352.996122][T32177] block nbd11: Receive control failed (result -104) [ 1354.271329][ T9505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1355.687387][ T9512] block nbd11: Connection timed out, retrying (0/1 alive) [ 1355.687459][ T9512] block nbd11: Connection timed out, retrying (0/1 alive) [ 1355.687519][ T9512] block nbd11: Dead connection, failed to find a fallback [ 1355.687538][ T9512] block nbd11: shutting down sockets [ 1355.687553][ T9512] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1355.687585][ T9512] Buffer I/O error on dev nbd11, logical block 1, async page read [ 1355.687605][ T9512] Buffer I/O error on dev nbd11, logical block 2, async page read [ 1355.687621][ T9512] Buffer I/O error on dev nbd11, logical block 3, async page read [ 1355.687646][ T9512] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1355.687671][ T9512] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1355.688005][ T1740] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1355.688041][ T1740] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1355.688064][ T1740] Buffer I/O error on dev nbd11, logical block 1, async page read [ 1355.688076][ T1740] Buffer I/O error on dev nbd11, logical block 2, async page read [ 1355.688098][ T1740] Buffer I/O error on dev nbd11, logical block 3, async page read [ 1355.688231][ T9512] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1355.688260][ T9512] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1355.688337][ T9512] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1355.688365][ T9512] Buffer I/O error on dev nbd11, logical block 1, async page read [ 1355.688438][ T9512] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1355.688525][ T9512] I/O error, dev nbd11, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1355.688620][ T9512] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1355.688706][ T9512] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1355.688791][ T9512] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1355.690506][ T9373] ldm_validate_partition_table(): Disk read failed. [ 1355.691637][ T9373] Dev nbd11: unable to read RDB block 0 [ 1355.693022][ T9373] nbd11: unable to read partition table [ 1355.792471][ T9373] ldm_validate_partition_table(): Disk read failed. [ 1355.795086][ T9373] Dev nbd11: unable to read RDB block 0 [ 1355.797961][ T9373] nbd11: unable to read partition table