last executing test programs: 2m45.698555811s ago: executing program 4 (id=5897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x13, 0x4c, &(0x7f0000000440)="cc9f4d42ef21760fc9ae7ef1558f46be00d0b5", 0xfffffffffffffffd, 0x2000002, 0x0, 0x0, 0xfffffe18, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x21) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xb8, 0x101, 0x2}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 2m45.4195202s ago: executing program 4 (id=5899): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}, {0x0, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}, {0x0, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0xffc4, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x4048840) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m45.207403478s ago: executing program 4 (id=5903): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e23, @loopback}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000480)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x7, 0x1}, 0x6f) 2m45.018914232s ago: executing program 1 (id=5905): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32, @ANYBLOB="1c005a8018000180140003009e59d1c408001e0072000900000299e876fe3917205cd5de2b485ac65ab7c3b1186f878e7adec180c1168312e17feebc71e8d41ac578a5119d17863fa811e2c6d11ea2cf2e4768962072e102b3f42c2e8a0b7a83dc1010a6489412a703ac40c02f93bb8193f277162e9642cba3608e440067ae1662fc6752458ac557d1b8af9cd59db4781e30bc0c38cc110054d64d8ba2d38558934c9e7f84b903d08bbe1a508d82c477bcfb785d23b58f62da69509728"], 0x38}}, 0x4000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000001580)=ANY=[], 0xa40}, 0x1, 0x0, 0x0, 0x10}, 0x4000814) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)="c2", 0x1}], 0x1, 0x3) close(r8) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) splice(r7, 0x0, r8, 0x0, 0x10500, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000084000000000000001fc7"], 0x18, 0x48060}], 0x1, 0x200000d0) 2m44.860901429s ago: executing program 4 (id=5908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r7}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) r8 = socket(0xa, 0x3, 0x87) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000480)={@private2, 0x18, r10}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x7, 0x0, 0x8000, 0x373, {{0x16, 0x4, 0x2, 0x6, 0x58, 0x64, 0x0, 0x0, 0x6, 0x0, @local, @multicast2, {[@generic={0x86, 0xc, "b3557ba5371f7df18189"}, @ssrr={0x89, 0xf, 0x85, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @end, @cipso={0x86, 0x26, 0x1, [{0x6, 0xd, "2279ca5efd3b51b908056c"}, {0x6, 0x5, "432aaa"}, {0x6, 0x5, "e1b8f6"}, {0x6, 0x9, "d2e9a8f92a2542"}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b8, r1, 0x12, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x4}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40085}, 0x4048800) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x10}, {0x6, 0x10}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1004c040) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r16, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000005e6bf02f000000180001801400020076657468315f746f5f626174616476000c000380"], 0x38}}, 0x0) 2m44.383625729s ago: executing program 1 (id=5911): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={@mcast2, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000, 0x0, 0x7d, 0x0, 0xfffffffffffffffc, 0x80200}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x15}, 0x6, 0x0, 0x6, 0x400, 0x400000000000000b, 0x80910220}) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4, 0x5e9}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x1}]}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002600090025bd7000fddbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4008007}, 0x4000080) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x481}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB='.\x00\x00'], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={r7, 0x280}, &(0x7f0000000100)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITHAW(r8, 0xc0045878) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x34, r9, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xfffffffffffffd3a, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000019ffff0f0000000001000201180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000020b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xfe4, &(0x7f0000001e00)=""/4068, 0x40f00, 0xa, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="449af0f78d435e666d", @ANYRES32=0x0, @ANYBLOB="4200000021200000240012800b00010067726574617000001400028005000a000100000008000100", @ANYRES32=r13, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$FS_IOC_GETFSUUID(r12, 0x80111500, &(0x7f0000000080)) ioctl$NILFS_IOCTL_SET_SUINFO(r10, 0x40186e8d, &(0x7f0000000140)={&(0x7f00000000c0)=[{0xe1f, 0x1, 0x0, {0x0, 0x2}}, {0x5e287762, 0x2, 0x0, {0x2204, 0xa, 0x2}}, {0x81, 0x0, 0x0, {0x8, 0xad, 0x1}}, {0x1, 0x2, 0x0, {0x7fff, 0x6, 0x1}}], 0x4, 0x20, 0x5}) 2m43.835191721s ago: executing program 4 (id=5914): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x4, 0x43, [0x6, 0x0, 0x1, 0x3ff, 0x1, 0x401], 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=""/67}, &(0x7f0000000300)=0x78) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000020, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/77, 0x4d}], 0x1}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000b000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r9, 0x110, 0x3) 2m43.546198227s ago: executing program 4 (id=5919): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000092920dbe3e41ce1fa97f89d791b600", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x10}}], 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, r1, 0x311d0000) 2m43.445384475s ago: executing program 1 (id=5921): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @dev}, &(0x7f0000000040)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@mcast2, 0x60, r1}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000140)={&(0x7f00000000c0)=""/104, 0x68}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @multicast2}, &(0x7f00000001c0)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in6=@mcast1, 0x4e22, 0x3, 0x4e22, 0x8001, 0x2, 0x80, 0x0, 0x87, 0x0, r3}, {0xb, 0x8, 0x3, 0x6c05, 0x5, 0x0, 0xfffffffffffffe00, 0xfd}, {0x4, 0x400, 0x4, 0xfffffffffffffffa}, 0xd76, 0x6e6bc0, 0x1, 0x0, 0x2, 0x4}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x3c}, 0x2, @in6=@mcast1, 0x3502, 0x4, 0x3, 0x4, 0xfffffff9, 0x8b2, 0x6}}, 0xe8) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000700)=@broute={'broute\x00', 0x20, 0x2, 0x2bc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000440], 0x0, &(0x7f0000000400), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x58, 0x1a, 'pim6reg0\x00', 'ip6tnl0\x00', 'veth1_to_bond\x00', 'veth0_to_bridge\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, [0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xae, 0xf6, 0x146, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0xd234, {0x1}}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x0, 0x9, {0x2}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz0\x00', {0xf}}}}}]}, {0x0, '\x00', 0x1, 0x7, 0x1, [{0x5, 0x8, 0x6004, 'wlan1\x00', 'nr0\x00', 'vlan1\x00', 'veth0_to_team\x00', @local, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, [0xff, 0xff, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0xe6, [@state={{'state\x00', 0x0, 0x8}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x53, 0x7, {0x2}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x334) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x6, [@union={0x9, 0x3, 0x0, 0x5, 0x1, 0x240, [{0x10, 0x1, 0x5}, {0xd, 0x4, 0x800}, {0x4, 0x5, 0xfffffff8}]}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x3}, {0x9, 0x800}, {0x1, 0x4}]}, @enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0x0, 0x4}, {0xf, 0x9}]}]}, {0x0, [0x30, 0x5f, 0x30, 0x0]}}, &(0x7f0000000840)=""/56, 0x8e, 0x38}, 0x28) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xda}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x20004950) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = accept4(r4, 0x0, &(0x7f00000009c0), 0x800) sendmmsg(r8, &(0x7f0000001c40)=[{{&(0x7f0000000a00)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000a80)="993447e3b32e31bc41817f08924a2fbb499494779f3c9c75a082dd379f1356031cd97c2cd6a4d8e2c20945c4d1606191bfdc77a62d29eff4aa064da6771fe3f9a06e5001f53cd678a8b7a62992b1d9aa6482f41df3476ecd39883b6d69adf3ae1459d9006e5ead0d819e8b212add42873f8bb4c05f54264a6ee6fb0812be2f1963135d823477726bf0254b8675cde80dc7a1d2bd75aae6f4179b1db0f0c43e121a47773235ab88cd3787de41", 0xac}, {&(0x7f0000000b40)="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", 0x1000}], 0x2, &(0x7f0000001b80)=[{0x50, 0x10e, 0x9, "22e9c12d5c2766c8cd7ad1512cc374ccb60107fa0b6ffb5484bb728882346fdd33c721ddb6977989a1add90d2ceb241cd6503df563bf097315"}, {0x48, 0x107, 0xf, "9696b18104e1b01657bf21435709468f4a26aef7be35683d99f6f028b879d6ed11a05e811cd66be1d11171146197f33db0f293680b"}], 0x98}}], 0x1, 0x1) ioctl$XFS_IOC_ERROR_INJECTION(r8, 0x40085874, &(0x7f0000001c80)={r5, 0x9}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d00)=@generic={&(0x7f0000001cc0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@bloom_filter={0x1e, 0x9, 0x5, 0x0, 0x1000, r9, 0x0, '\x00', r1, r6, 0x0, 0x5, 0x2, 0xc}, 0x50) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e00), r8) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, r10, 0x20, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x24040000) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000001f00)="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") r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r8) sendmsg$BATADV_CMD_GET_GATEWAYS(r11, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x44, r12, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb62c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40004) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000002180)={0x0, @multicast2, @multicast2}, &(0x7f00000021c0)=0xc) syz_genetlink_get_family_id$SEG6(&(0x7f0000002200), r11) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x6c, 0xb, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_COMMENT={0x7, 0x1a, '+^\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) socket$packet(0x11, 0x3, 0x300) 2m43.160595151s ago: executing program 1 (id=5923): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000009"], 0x38}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4018804}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1f0, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x80000000}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e9aa081}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x1f0}}, 0x8004) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000080)) r3 = socket(0x2d, 0x2, 0x0) unshare(0x600) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, 0x0, 0x0, 0x4}, 0x20) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f00000000c0)=@in6={0x21, 0x4, 0x2, 0xb, {0xa, 0x1b59, 0x20007, @empty, 0x200}}, 0x24) sendto$inet(r3, 0x0, 0x0, 0x20000080, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 2m42.646602737s ago: executing program 1 (id=5928): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000016c0)) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0xc) splice(r3, 0x0, r5, 0x0, 0x10d00, 0xf) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x731, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f0000000080), 0x72a, 0x0, 0x0) poll(&(0x7f0000000180)=[{r9, 0x8004}, {r9, 0x28}], 0x2, 0x939a) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x28, r11, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x84) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x14, r11, 0x4479d6fe70cfecda, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8814) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000c40)=ANY=[@ANYBLOB="700608000001000600000000000000bf00ff02030100"], 0x58) 2m41.618837958s ago: executing program 1 (id=5931): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={@mcast2, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000, 0x0, 0x7d, 0x0, 0xfffffffffffffffc, 0x80200}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x15}, 0x6, 0x0, 0x6, 0x400, 0x400000000000000b, 0x80910220}) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4, 0x5e9}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x1}]}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002600090025bd7000fddbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4008007}, 0x4000080) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x481}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={r6, 0x280}, &(0x7f0000000100)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITHAW(r7, 0xc0045878) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x34, r8, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xfffffffffffffd3a, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000019ffff0f0000000001000201180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000020b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xfe4, &(0x7f0000001e00)=""/4068, 0x40f00, 0xa, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="449af0f78d435e666d", @ANYRES32=0x0, @ANYBLOB="4200000021200000240012800b00010067726574617000001400028005000a000100000008000100", @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$FS_IOC_GETFSUUID(r11, 0x80111500, &(0x7f0000000080)) ioctl$NILFS_IOCTL_SET_SUINFO(r9, 0x40186e8d, &(0x7f0000000140)={&(0x7f00000000c0)=[{0xe1f, 0x1, 0x0, {0x0, 0x2}}, {0x5e287762, 0x2, 0x0, {0x2204, 0xa, 0x2}}, {0x81, 0x0, 0x0, {0x8, 0xad, 0x1}}, {0x1, 0x2, 0x0, {0x7fff, 0x6, 0x1}}], 0x4, 0x20, 0x5}) 2m28.506173034s ago: executing program 32 (id=5919): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000092920dbe3e41ce1fa97f89d791b600", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x10}}], 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, r1, 0x311d0000) 2m26.494555696s ago: executing program 33 (id=5931): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={@mcast2, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000, 0x0, 0x7d, 0x0, 0xfffffffffffffffc, 0x80200}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x15}, 0x6, 0x0, 0x6, 0x400, 0x400000000000000b, 0x80910220}) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@nop, @mss={0x2, 0x4, 0x5e9}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x1}]}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002600090025bd7000fddbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4008007}, 0x4000080) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x481}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={r6, 0x280}, &(0x7f0000000100)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITHAW(r7, 0xc0045878) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x34, r8, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xfffffffffffffd3a, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000019ffff0f0000000001000201180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000020b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xfe4, &(0x7f0000001e00)=""/4068, 0x40f00, 0xa, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="449af0f78d435e666d", @ANYRES32=0x0, @ANYBLOB="4200000021200000240012800b00010067726574617000001400028005000a000100000008000100", @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$FS_IOC_GETFSUUID(r11, 0x80111500, &(0x7f0000000080)) ioctl$NILFS_IOCTL_SET_SUINFO(r9, 0x40186e8d, &(0x7f0000000140)={&(0x7f00000000c0)=[{0xe1f, 0x1, 0x0, {0x0, 0x2}}, {0x5e287762, 0x2, 0x0, {0x2204, 0xa, 0x2}}, {0x81, 0x0, 0x0, {0x8, 0xad, 0x1}}, {0x1, 0x2, 0x0, {0x7fff, 0x6, 0x1}}], 0x4, 0x20, 0x5}) 4.554226721s ago: executing program 5 (id=7233): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0xa, 0x4, 0x1000}) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x5, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x0, 0xfffe, 0x0, 0x0, 0x2, 0x20, 0x10, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x1000, 0x0, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xffffffffffffffff}, 0x200, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x6, 0xb, 0x0, 0x0, @str='$\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000011000000000000001701000003"], 0x1140, 0x4004084}], 0x1, 0x40800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x8c, r7, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe54b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1bc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcdd}]}]}]}, 0x8c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(r6, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="5f82f2b87e9cdb67204e595c269f150d05812bd7081611b3bddc5460e211ba96b2f7d50a2bcf2afc99557e1fe038fd46d740aff15be513e66612e6b6eb7e7141be44d04aa36b3d7d9d4184648ed896581ae8839626f65cb99318952f57d465add22181dcd247563f135981439fcf598663727d2737b300289d68e84702036e14301a70bb622d8b2e927c78a250df81605104414fb93ca8c4c3fe51abad77ec4c608622055c7e22116c6669875e9d2901ab93dc23f6e8f297eefcaa5592056d8bc017fffd1c10c95d226c3aefe2f0c26a81df8ef1cf441cb6b4b47e7ebafa421746788f", @ANYRES32=r9, @ANYBLOB="00000073006300fdc0c80169aaa53bf604dab1d5f233939ffbf251591b5ac097433ad68212eef4cbad28fdbf8ec64734804ad9e204f7946d6a1e182bcca19b6c0de450f40f1d6bf751cb856ed74482ffff1992e62141061df8da9f0ca88e16996c0d9ca9de34750a8cc55d08096307f3d509bd4ddca6005300bb804d8c52af5aa3543fd54b15a8dd0ce0a1a0ec60fd7a844c244a081f0225e16ea2040057804d1ae06d342d820bc4967748364ba4aa33fbe4f992372af7dd9c901d3206070400888008006900", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="9bb77d08004500ffffffff0c0013008100"/28], 0x7bc}, 0x1, 0x0, 0x0, 0x880}, 0x804) r10 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') r11 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r4, 0xa12, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0xf}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffb, 0x20}}, @NL80211_ATTR_PID={0x8, 0x52, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) 4.278614205s ago: executing program 5 (id=7237): unshare(0x64000600) (async) unshare(0x64000600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4623, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, r3}, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socket$kcm(0x10, 0x400000002, 0x0) (async) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) (async) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) listen(r2, 0x50) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa7482fd, 0x8, 0x25dfdc00, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0xa00}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) 3.387049059s ago: executing program 6 (id=7243): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) r4 = socket$kcm(0x2d, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4}) write(r0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x1416, 0x300, 0x0, 0x0, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}}, 0x40) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) 2.615747483s ago: executing program 6 (id=7251): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x1, 0x28012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x15015000) mmap(&(0x7f0000611000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES8], 0x18, 0x20040801}}], 0x1, 0x4000000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r1, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000090) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 2.397533859s ago: executing program 6 (id=7254): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4) bind$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x10, 0xc}, {0x0, 0xffff}, {0x4, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) bind$llc(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x90, 0x700001b, 0x148, 0x0, 0x148, 0x128, 0x206, 0x240, 0x128, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010102, @rand_addr, 0xffffffff, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x33, 0x1}, 0x1ea, 0x70, 0x90, 0x0, {0x390, 0x8f00}}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x90}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffffffffffda6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x3a, 0x0, r11, 0x1, 0x0, 0x6, @local}, 0x14) 2.294679402s ago: executing program 2 (id=7255): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) writev(r0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) (async) 2.218664603s ago: executing program 3 (id=7256): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r2, 0x4) 2.1610002s ago: executing program 2 (id=7258): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1000}) (async) close(0x3) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async, rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f00000012c0)=""/4107, 0xbc5) recvmsg(r0, &(0x7f0000000800)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/125, 0x7d}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000000680)=""/24, 0x18}], 0x3, &(0x7f0000000780)=""/102, 0x66}, 0x2022) sendmmsg$alg(r5, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc5", 0x6e}, {&(0x7f0000002300)="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", 0xa09}], 0x4, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000850}], 0x1, 0x4000080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) (async, rerun: 64) r7 = accept$alg(r6, 0x0, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) read(r7, &(0x7f0000001040)=""/221, 0xdd) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)="683f0057954e837474512fcaea99bc671e3d", 0x12}, {&(0x7f0000000580)="a492e95857d9dad0c70b72425db11aaf3ffd93dad70350", 0x17}, {&(0x7f0000000400)="9f52141c0fb098", 0x7}], 0x5) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 32) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.015433792s ago: executing program 6 (id=7259): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r10 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.008880137s ago: executing program 3 (id=7260): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4085, 0xff5}], 0x1}, 0x100) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x47c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x440, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x370, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x84, 0x4, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x70, 0xc, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x7, 0x47d3, 0x5}) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000380)='bpf\x00', 0x800, &(0x7f00000003c0)={@align=0x6, {0xffff, 0x3, 0x6, 0x956}}, 0x7, &(0x7f0000000440), &(0x7f00000004c0)=0xf}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x8, 0x0}, 0x8) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)={0x14, r8, 0xc2699618ba151721, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48880}, 0x20000010) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRES32=r9, @ANYBLOB="ffde000000000000b7080000000000007b8af800a6020000f8ffffffb703000003000000b70400000000040085000000330000009500"/65], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r12, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r10}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x12, 0x18, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x2, 0x0, 0x0, 0x2, 0xb, 0xfffffffffffffffc, 0xfffffffffffffff0}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000280)='syzkaller\x00', 0x1, 0x6e, &(0x7f00000002c0)=""/110, 0x41000, 0x0, '\x00', r3, @cgroup_sock_addr=0x14, r4, 0x8, &(0x7f0000000540)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x6, 0x8001}, 0x10, r5, 0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[0x1, r6, r7, r9, r12, r0, r13, 0x1], &(0x7f0000000700)=[{0x3, 0x1, 0xa, 0xc}, {0x1, 0x3, 0x2, 0x6}, {0x3, 0x1, 0xd, 0x8}], 0x10, 0x9}, 0x94) r14 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.923616794s ago: executing program 2 (id=7261): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x20}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="e51b", 0x2}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0x388, 0x1c0, 0x0, 0x388, 0xd0, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff, 0xffffff00], [0x0, 0xff, 0xff], 'ip6gretap0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0xfa, 0x4, 0x31}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}, @ipv6=@private1, 0xf, 0x13, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0x0, 0x0, 0x0, 0xff000000], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x0, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) 1.844448599s ago: executing program 5 (id=7263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010080000100001302000000010000002000070000000000005f"], 0x0, 0x35}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="ec1000003d00010325bd7000fcffffff01"], 0x10ec}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280)="07a55e9ee366", &(0x7f0000000300)=@udp6=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write(r1, &(0x7f0000000040)="05000000010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100df1f646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000ff030000000000850000007000000018110000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) 1.7066818s ago: executing program 2 (id=7264): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x5, &(0x7f00000000c0), 0x31, 0x0, 0x0, 0x44895}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r4) (async) close(r0) 1.675699393s ago: executing program 5 (id=7265): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x88, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1.599293555s ago: executing program 3 (id=7266): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8fff3ff0000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) mmap(&(0x7f0000336000/0x4000)=nil, 0x4000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 1.501430757s ago: executing program 5 (id=7267): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r10) recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001680)=""/139, 0x8b}, {&(0x7f0000000380)=""/160, 0xc4}, {&(0x7f00000005c0)=""/4107, 0x1014}, {&(0x7f0000000540)=""/118, 0x76}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f00000027c0)=""/4096}], 0x5}, 0x22) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_newnexthop={0x9c, 0x68, 0x8, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x3}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0x2c, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x0, 0xe}, {0x0, 0x6}, {0x2, 0x3}]}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010102}, @NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x2c, 0x2, [{0x0, 0x7}, {}, {0x1, 0x9}, {0x0, 0x6}, {0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000004}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 1.480916302s ago: executing program 6 (id=7268): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="3000000040000701feff", @ANYRES16=r0, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x59) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400f8b17d9ea92d2e55bafeb3", @ANYRES32=r4, @ANYBLOB="11980400419804002000128008000100736974001400028008000300ac14"], 0x40}}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05d9", 0x2, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf9100000000000007080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r9, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.342806419s ago: executing program 2 (id=7269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x50, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44894}, 0x4000080) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x98, 0xb, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xe}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_PACKETS={0xc}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4856) close(0x3) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x200000d, 0x2000000000032, 0xffffffffffffffff, 0xb0793000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x1, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) shutdown(0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000600) close(0x3) recvfrom(r5, 0x0, 0x0, 0x10020, 0x0, 0x0) close(0x3) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4048880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="dbaa00fe5000000071101600000000007f8501000000000095", @ANYRES16=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r6) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 1.339600132s ago: executing program 3 (id=7271): r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESDEC=r0], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.198524453s ago: executing program 3 (id=7273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xe}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82020054}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7f}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10021}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.104039006s ago: executing program 0 (id=7274): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ef}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) r1 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000300)="0000000000000000000000130000000000000000", 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) 937.648999ms ago: executing program 0 (id=7275): unshare(0x8000400) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x101d0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 582.592259ms ago: executing program 0 (id=7276): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113200000000008510000002000000850000000500000095003300000000009500a505000000001933f910ea19d40acb70ca8b820301c52cf6a09dc4ce4f1b8471f8d6b4c3d1fb17bc3b1b3510b4aabb7e839555e7894edbb18bcd8d146ea92214abc899867df9f7365fdda01a71d91a22e6c6ddc53e4c56c95ffb"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0xe, 0x0, &(0x7f0000000680)="00882bd0269cd8209319417b6ca6", 0x0, 0x0, 0x0, 0xb9, 0x0, &(0x7f0000000a40)="d580a67cd67831c9f16041b021b29fb3183fff11edb3d73df0548a9ca5d9bdf23cadf9255b0689c039f35371fe0f709b536d0b0901193c19d3c0a1b38c7fd63ebb2b20d9ae7b403f05ca637e344c29200f863c642d3fb488450c0e4d4a8b5b529d647e44c68cd9758b79a36622ac8d49c011ec34f60ba673d8626fc1f1669b6a47a02a79eb6c8bb7d05007d6ed2467d7173a2f5207599a9d0c255ab64ea1bc8cd350db318477bbcb01c58945f1a0220f05349d8b024e5e8d65", 0x0}, 0x50) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x34, 0x8, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c000}, 0x84) bind$alg(r0, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(xcbc(camellia-generic))\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10) shutdown(r4, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r5, 0x8001}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200)={r6}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRES16=r6, @ANYBLOB="e9f41e5832a2817927ecee39aca2ac1f5208847c65159fe551ee822f52e762baf72f7465a5ba27dd51ef68a36ea6beefd82f8a86775d7c11c771ccbb22c4055b1cfceb322e3b30dd5723b6cae3f3bde3b0391f0c16c10664d03e054c12bdc041c3dbf6e5e8f49c4fbd952d06c8f78988f7f5b3e3391ef71676fd005e6a6ec0c8518ef3172ab1571d342fe7883d7979598e6c2a33806e66fe85c995d39eb76c9f7487f6790c81d4ad5889d9756e53f8907b1b993c6e25ace39c07dfccac492de7", @ANYRES16=r7, @ANYBLOB="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", @ANYRES8=r7], 0x392c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000130a050000000009000000000000000a0c00064000000000000000020900020073797a300900020073797a30000000000800034000000004"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x9081) 406.224139ms ago: executing program 2 (id=7277): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x51) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x80}, 0x1) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) close(r1) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x8010, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) 248.560222ms ago: executing program 0 (id=7278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x140d, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x4008001) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{0x0}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x90}}, 0x0) 131.417285ms ago: executing program 0 (id=7279): syz_emit_ethernet(0x2ed, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "75ccac", 0x2b7, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, {[@hopopts={0x0, 0x1b, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x3, 0x8, [0x7, 0xffffffff]}}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xf}, @generic={0xb, 0x3d, "4d23acd95d49536c121bea8bb349571eb9e0b40de621c2111bee70b307e7e1850eb97f00ef9f5be910abaece1858b6b94fe6df50809bdeae6f3ff254ea"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x7c, 0x9, [0xc51, 0x1000, 0x2, 0xfffffffc, 0x8, 0x4, 0x4, 0x5, 0x7]}}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x7b, 0x7, "75364b7f07a8e7"}]}, @srh={0x87, 0x10, 0x4, 0x8, 0x6, 0x60, 0xad0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, @rand_addr=' \x01\x00', @mcast1, @dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x21}, @private0, @empty]}, @dstopts={0x11, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xffff}, @jumbo={0xc2, 0x4, 0x401}]}, @dstopts={0x87, 0x0, '\x00', [@pad1]}, @dstopts={0x32, 0x13, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x4, [0x6]}}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x38, {0x1, 0xc, 0x2, 0x7, [0xc00b, 0x16, 0x5, 0xd, 0x2e649d8d, 0x2]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x7}]}, @routing={0x1f, 0x4, 0x1, 0x4, 0x0, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts, @routing={0x87, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @mcast1]}], @payload_direct={{{{0x27, 0x0, 0x0, 0x1, 0x1, 0x8, 0x2, 0x2, 0xffff, 0x0, 0x1, 0x5, 0x4, 0x3, 0xfff9, 0x1000, 0x1, 0x4e23, 0x4e21}, 0x0, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 97.227079ms ago: executing program 5 (id=7280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x24004804) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c081}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) (async) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) (async) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x16}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004804}, 0x20004000) 54.092298ms ago: executing program 6 (id=7281): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0x3860}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e0000010100800c0001"], 0x114}], 0x1}, 0x40000) (async, rerun: 32) socket(0x28, 0x5, 0x0) (async, rerun: 32) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x43, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x6}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x9, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@dstopts={{0x18, 0x29, 0x37, {0x33}}}, @dstopts={{0x18, 0x29, 0x37, {0x6}}}], 0x30}}], 0x2, 0x40) (async) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @mss={0x2, 0x3}, @mss={0x2, 0x7}, @sack_perm, @timestamp, @mss={0x2, 0xb}, @sack_perm, @window={0x3, 0x2, 0x1}, @timestamp, @window={0x3, 0x0, 0xf24c}], 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) (async) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 10.792846ms ago: executing program 3 (id=7282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000000080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a32010000002c000000030a05000000000000000000010000050c0002400000f9210000000000010900010073797a3000000000140000001100010000000000000000000704000a"], 0xa8}}, 0x48010) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700001000000000000002000000140001800600010002000000e729fde506be5020"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYRES16=r9, @ANYRESOCT, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r11, @ANYRESHEX=r7, @ANYRES32=r11, @ANYBLOB="080004069534f8476717e3ad366c909b40aaadf5cf5609056498796112af1fb31648ec146cc45c706b9a4dbd558349a47430777ba6e701d8f9784f8ddb0a0f427ca31557132c675fc84d970847276b264257e1eb8757053fc165902a2f5d6fdfc3b601f88bd6d09a7ce6cb350006d4"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r6, 0x0, 0x48000) socket$netlink(0x10, 0x3, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 0s ago: executing program 0 (id=7283): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8fff8ff0000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) mmap(&(0x7f0000336000/0x4000)=nil, 0x4000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): lvl+0xe8/0x150 [ 878.245773][T28245] should_fail_ex+0x412/0x560 [ 878.245806][T28245] _copy_from_user+0x2d/0xb0 [ 878.245836][T28245] __copy_msghdr+0x3c5/0x5b0 [ 878.245869][T28245] ___sys_sendmsg+0x213/0x360 [ 878.245894][T28245] ? __lock_acquire+0x6b5/0x2cf0 [ 878.245923][T28245] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.245965][T28245] ? kstrtouint+0x6e/0xe0 [ 878.246017][T28245] ? __fget_files+0x2a/0x420 [ 878.246042][T28245] ? __fget_files+0x3a0/0x420 [ 878.246079][T28245] __sys_sendmmsg+0x27c/0x4e0 [ 878.246113][T28245] ? __pfx___sys_sendmmsg+0x10/0x10 [ 878.246138][T28245] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 878.246194][T28245] ? ksys_write+0x242/0x270 [ 878.246226][T28245] ? __pfx_ksys_write+0x10/0x10 [ 878.246263][T28245] __x64_sys_sendmmsg+0xa0/0xc0 [ 878.246290][T28245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.246312][T28245] do_syscall_64+0x15f/0xf80 [ 878.246335][T28245] ? trace_irq_disable+0x3b/0x140 [ 878.246363][T28245] ? clear_bhb_loop+0x40/0x90 [ 878.246389][T28245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.246408][T28245] RIP: 0033:0x7f8f2139cdd9 [ 878.246428][T28245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.246445][T28245] RSP: 002b:00007f8f221ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 878.246467][T28245] RAX: ffffffffffffffda RBX: 00007f8f21615fa0 RCX: 00007f8f2139cdd9 [ 878.246483][T28245] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000005 [ 878.246495][T28245] RBP: 00007f8f221ca090 R08: 0000000000000000 R09: 0000000000000000 [ 878.246508][T28245] R10: 0000000020044000 R11: 0000000000000246 R12: 0000000000000001 [ 878.246520][T28245] R13: 00007f8f21616038 R14: 00007f8f21615fa0 R15: 00007ffcc7785ff8 [ 878.246554][T28245] [ 878.911389][T28265] netlink: 'syz.0.5918': attribute type 1 has an invalid length. [ 878.955627][T28265] 8021q: adding VLAN 0 to HW filter on device bond6 [ 879.575366][T28291] netlink: 'syz.3.5925': attribute type 5 has an invalid length. [ 880.103201][T28312] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.349090][T28312] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.539387][T28312] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.651390][T28312] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.998977][ T1096] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.029671][T16312] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.037147][T28327] __nla_validate_parse: 9 callbacks suppressed [ 881.037168][T28327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5931'. [ 881.076052][T16312] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.164024][T16312] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.376578][T28338] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5935'. [ 881.833621][T28351] wg1 speed is unknown, defaulting to 1000 [ 881.917291][T28354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5941'. [ 881.944183][T28354] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.5941'. [ 882.971993][T28387] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5947'. [ 883.241277][T28392] nlmon0: Caught tx_queue_len zero misconfig [ 883.780633][T28426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5956'. [ 883.830668][T28426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5956'. [ 883.873467][T28433] lo speed is unknown, defaulting to 1000 [ 883.879468][T28433] lo speed is unknown, defaulting to 1000 [ 883.888347][T28433] lo speed is unknown, defaulting to 1000 [ 883.896362][T28433] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 883.911213][T28433] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 883.931587][T28433] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 883.941114][T28434] pim6reg: left allmulticast mode [ 883.953772][T28427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5956'. [ 883.956751][T28433] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 884.039069][T28433] lo speed is unknown, defaulting to 1000 [ 884.064704][T28433] lo speed is unknown, defaulting to 1000 [ 884.075567][T28433] lo speed is unknown, defaulting to 1000 [ 884.091204][T28433] lo speed is unknown, defaulting to 1000 [ 884.099657][T28433] lo speed is unknown, defaulting to 1000 [ 884.108543][T28433] lo speed is unknown, defaulting to 1000 [ 884.132048][T28433] lo speed is unknown, defaulting to 1000 [ 884.270376][T28447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5961'. [ 884.550254][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.556607][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.563171][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.570074][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.576608][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.583148][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.589673][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.596612][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.603572][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.609880][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.616234][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.622761][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.629197][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.635695][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.642746][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.649690][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.657831][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.664375][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.671003][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.677548][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.690533][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.697112][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.703987][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.710328][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.716928][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.723828][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.730189][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.737715][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.744514][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.750764][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.757482][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.766001][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.774950][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.781264][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.788016][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.794669][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.800914][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.808090][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.814818][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.821067][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.835740][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.842328][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.849798][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.857260][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.864236][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.870529][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.878871][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.886545][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.893307][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.899626][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.906223][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.912555][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.918991][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.925826][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.932202][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.939480][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.946538][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.952876][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.959098][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.966050][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.972302][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.979635][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.986291][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.994313][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 885.000920][T28459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 885.059777][T28474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'. [ 885.251672][T28485] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.259173][T28485] bridge0: port 1(1¾x9ÿ) entered disabled state [ 885.479545][T28485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.562747][ T5735] lo speed is unknown, defaulting to 1000 [ 885.569367][T28495] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 885.582766][ T5735] syz2: Port: 1 Link DOWN [ 886.154287][T28511] __nla_validate_parse: 4 callbacks suppressed [ 886.154306][T28511] netlink: 308 bytes leftover after parsing attributes in process `syz.2.5983'. [ 886.177405][T28514] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 886.220828][T28511] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.228634][T28511] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.305621][T28511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.321716][T28511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.407613][T16312] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.421865][T16312] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.432149][T16312] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.446656][T16312] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.503930][T28519] netlink: 'syz.3.5985': attribute type 1 has an invalid length. [ 886.777299][T28533] ip6t_rpfilter: unknown options [ 887.012239][T28542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5994'. [ 887.081175][T28543] wg1 speed is unknown, defaulting to 1000 [ 887.312055][T28543] lo speed is unknown, defaulting to 1000 [ 888.326867][T28572] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5997'. [ 888.646878][T28591] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 888.930458][T28603] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6005'. [ 889.182765][T28620] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6010'. [ 889.658765][T28644] netlink: 'syz.3.6019': attribute type 15 has an invalid length. [ 889.672317][T28647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6020'. [ 889.847664][T28659] sctp: [Deprecated]: syz.3.6024 (pid 28659) Use of int in max_burst socket option. [ 889.847664][T28659] Use struct sctp_assoc_value instead [ 890.069478][T28669] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 890.297888][T17721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 890.318127][T17721] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 890.326914][T17721] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 890.338969][T17721] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 890.349122][T17721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 890.963631][T28671] wg1 speed is unknown, defaulting to 1000 [ 891.109834][T28697] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 891.133060][T28699] syzkaller0: entered promiscuous mode [ 891.138629][T28699] syzkaller0: entered allmulticast mode [ 891.239603][T28671] lo speed is unknown, defaulting to 1000 [ 891.371634][T28707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6038'. [ 891.477177][T28711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6039'. [ 891.561167][T28716] netlink: 'syz.0.6040': attribute type 1 has an invalid length. [ 891.585988][T28716] netlink: 'syz.0.6040': attribute type 1 has an invalid length. [ 891.649161][T28722] netlink: 'syz.2.6042': attribute type 13 has an invalid length. [ 891.657707][T28722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6042'. [ 891.811203][T28671] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.819179][T28671] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.826736][T28671] bridge_slave_0: entered allmulticast mode [ 891.837471][T28671] bridge_slave_0: entered promiscuous mode [ 891.847253][T28671] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.855347][T28671] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.863955][T28671] bridge_slave_1: entered allmulticast mode [ 891.871876][T28671] bridge_slave_1: entered promiscuous mode [ 891.908031][T28737] vlan4: entered promiscuous mode [ 891.913192][T28737] bridge0: entered promiscuous mode [ 891.927146][T28671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.941305][T28671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.977431][T28671] team0: Port device team_slave_0 added [ 891.985862][T28671] team0: Port device team_slave_1 added [ 892.015230][T28671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.022234][T28671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.049522][T28671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.062037][T28671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.069562][T28671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.095970][T28671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.141882][T28671] hsr_slave_0: entered promiscuous mode [ 892.148838][T28671] hsr_slave_1: entered promiscuous mode [ 892.155706][T28671] debugfs: 'hsr0' already exists in 'hsr' [ 892.161559][T28671] Cannot create hsr debugfs directory [ 892.285193][T28671] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.336273][T28671] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.414698][T28671] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.444278][T17721] Bluetooth: hci5: command tx timeout [ 892.461450][T28671] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.057702][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 894.070620][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 894.081870][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 894.091350][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 894.099713][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 894.359366][T28741] wg1 speed is unknown, defaulting to 1000 [ 894.498221][T28741] lo speed is unknown, defaulting to 1000 [ 894.522678][T17721] Bluetooth: hci5: command tx timeout [ 894.612825][ T1768] block nbd2: Possible stuck request ffff888027607000: control (read@0,1024B). Runtime 180 seconds [ 894.624146][ T1768] block nbd2: Possible stuck request ffff8880276071c0: control (read@1024,1024B). Runtime 180 seconds [ 894.635612][ T1768] block nbd2: Possible stuck request ffff888027607380: control (read@2048,1024B). Runtime 180 seconds [ 894.648873][T28730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 894.661320][ T1768] block nbd2: Possible stuck request ffff888027607540: control (read@3072,1024B). Runtime 180 seconds [ 894.680024][T28671] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 894.718439][T28671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 894.727617][T28671] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 894.769420][T28671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 894.790266][T28671] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 894.829570][T28671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 894.866234][T28671] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 894.878475][T28671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 894.898654][T28758] ip6erspan0: entered allmulticast mode [ 895.049639][T28741] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.065572][T28741] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.088293][T28741] bridge_slave_0: entered allmulticast mode [ 895.107507][T28741] bridge_slave_0: entered promiscuous mode [ 895.130821][T28741] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.138288][T28741] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.146100][T28741] bridge_slave_1: entered allmulticast mode [ 895.154527][T28741] bridge_slave_1: entered promiscuous mode [ 895.216033][T28741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.229777][T28741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.308505][T28741] team0: Port device team_slave_0 added [ 895.319204][T28741] team0: Port device team_slave_1 added [ 895.351033][T28777] syzkaller0: entered promiscuous mode [ 895.357292][T28777] syzkaller0: entered allmulticast mode [ 895.380863][T28741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.388244][T28741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.426438][T28741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.438602][T28784] xt_policy: too many policy elements [ 895.440752][T28741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.456360][T28741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.460593][T28786] xt_policy: too many policy elements [ 895.484639][T28741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.659703][T28741] hsr_slave_0: entered promiscuous mode [ 895.667051][T28741] hsr_slave_1: entered promiscuous mode [ 895.676043][T28741] debugfs: 'hsr0' already exists in 'hsr' [ 895.682208][T28741] Cannot create hsr debugfs directory [ 895.951154][T28671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.202862][T17721] Bluetooth: hci1: command tx timeout [ 896.227193][T28671] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.249049][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 896.276671][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 896.290137][ T5640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 896.301424][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 896.312129][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 896.363502][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.371195][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.476277][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.483560][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.602761][T17721] Bluetooth: hci5: command tx timeout [ 896.670256][T28741] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 896.701607][T28741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 896.721396][T28741] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 896.765076][T28741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 896.784484][T28741] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 896.807987][T28741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 896.817154][T28741] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 896.830035][T28741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 896.908928][T28837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6065'. [ 897.025416][T28837] nr0: tun_chr_ioctl cmd 1074025677 [ 897.038389][T28837] nr0: linktype set to 774 [ 897.267968][T28819] wg1 speed is unknown, defaulting to 1000 [ 897.398806][T28741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.489005][T28741] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.524010][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.531337][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.598742][T14119] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.606056][T14119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.899664][T28819] lo speed is unknown, defaulting to 1000 [ 898.075147][T28881] bridge1: entered promiscuous mode [ 898.085016][T28881] bridge1: entered allmulticast mode [ 898.191464][T28671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.282942][T17721] Bluetooth: hci1: command tx timeout [ 898.364950][T17721] Bluetooth: hci6: command tx timeout [ 898.456433][T28671] veth0_vlan: entered promiscuous mode [ 898.492854][T28671] veth1_vlan: entered promiscuous mode [ 898.647570][T28671] veth0_macvtap: entered promiscuous mode [ 898.683308][T17721] Bluetooth: hci5: command tx timeout [ 898.708410][T28671] veth1_macvtap: entered promiscuous mode [ 898.881150][T28819] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.889115][T28819] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.898513][T28819] bridge_slave_0: entered allmulticast mode [ 898.909850][T28819] bridge_slave_0: entered promiscuous mode [ 898.926597][T28819] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.934285][T28819] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.941814][T28819] bridge_slave_1: entered allmulticast mode [ 898.951934][T28819] bridge_slave_1: entered promiscuous mode [ 898.962373][T28671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.015757][T28819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.028861][T28819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.045012][T28671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.077429][T28741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.145221][T14119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.164051][T14119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.184374][T28819] team0: Port device team_slave_0 added [ 899.198748][T14119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.216628][T14119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.241672][T28819] team0: Port device team_slave_1 added [ 899.267358][T28919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6081'. [ 899.339468][T28819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.349516][T28819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.393024][T28819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.427857][T28819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.440274][T28819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.469064][T28819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.480612][T28924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6082'. [ 899.578283][T28819] hsr_slave_0: entered promiscuous mode [ 899.585351][T28819] hsr_slave_1: entered promiscuous mode [ 899.603882][T28819] debugfs: 'hsr0' already exists in 'hsr' [ 899.611237][T28819] Cannot create hsr debugfs directory [ 899.931343][T16313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.959278][T16313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.045377][T28936] syzkaller0: entered promiscuous mode [ 900.050959][T28936] syzkaller0: entered allmulticast mode [ 900.159895][T28741] veth0_vlan: entered promiscuous mode [ 900.176810][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.186117][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.363407][T17721] Bluetooth: hci1: command tx timeout [ 900.421741][T28741] veth1_vlan: entered promiscuous mode [ 900.445397][T17721] Bluetooth: hci6: command tx timeout [ 900.657966][T28962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6093'. [ 900.743237][T28964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6095'. [ 900.758650][T28819] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 900.785778][T28819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 900.794074][T28819] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 900.809220][T28819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 900.828499][T28741] veth0_macvtap: entered promiscuous mode [ 900.846692][T28819] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 900.882265][T28819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 900.918446][T28819] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 900.942017][T28819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 900.960775][T28741] veth1_macvtap: entered promiscuous mode [ 901.075731][T28741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.105596][T28741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.139191][T16313] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.175438][T16313] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.246477][T16313] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.276363][ T54] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.589634][T29000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 901.600729][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.624700][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.667489][T28994] wg1 speed is unknown, defaulting to 1000 [ 901.766424][T28819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.796466][ T6202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.829225][T28819] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.830573][ T6202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.875889][T16313] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.883237][T16313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.964647][T16313] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.971929][T16313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.052085][T29011] netlink: 'syz.0.6105': attribute type 12 has an invalid length. [ 902.164170][T29013] pim6reg1: entered promiscuous mode [ 902.181379][T29013] pim6reg1: entered allmulticast mode [ 902.231525][T28819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 902.323557][T22369] bridge0: entered promiscuous mode [ 902.388309][T29005] wg1 speed is unknown, defaulting to 1000 [ 902.393748][T28994] lo speed is unknown, defaulting to 1000 [ 902.446528][T17721] Bluetooth: hci1: command tx timeout [ 902.523959][T17721] Bluetooth: hci6: command tx timeout [ 903.225299][T29005] lo speed is unknown, defaulting to 1000 [ 903.357002][T29029] syzkaller0: entered promiscuous mode [ 903.364104][T29029] syzkaller0: entered allmulticast mode [ 903.435710][T29029] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6109'. [ 903.985530][T22369] IPVS: starting estimator thread 0... [ 904.018908][T29043] wg1 speed is unknown, defaulting to 1000 [ 904.070026][T28819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.093001][T29050] IPVS: using max 25 ests per chain, 60000 per kthread [ 904.603363][T17721] Bluetooth: hci6: command tx timeout [ 905.017721][T28819] veth0_vlan: entered promiscuous mode [ 905.051917][T28819] veth1_vlan: entered promiscuous mode [ 905.080917][T29089] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20001 [ 905.137283][T28819] veth0_macvtap: entered promiscuous mode [ 905.159756][T29043] lo speed is unknown, defaulting to 1000 [ 905.171156][T28819] veth1_macvtap: entered promiscuous mode [ 905.246731][T28819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.273643][T29091] netlink: 'syz.0.6123': attribute type 4 has an invalid length. [ 905.317533][T29091] netlink: 'syz.0.6123': attribute type 4 has an invalid length. [ 905.336036][T28819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.357903][T11051] lo speed is unknown, defaulting to 1000 [ 905.369376][T11051] syz2: Port: 1 Link ACTIVE [ 905.380910][T16313] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.398831][T16313] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.433078][T16313] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.443330][T16313] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.877010][T14119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.897593][T14119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.122774][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 906.217439][T29112] syzkaller1: entered promiscuous mode [ 906.227999][T29112] syzkaller1: entered allmulticast mode [ 906.393873][T29117] wg1 speed is unknown, defaulting to 1000 [ 906.405625][T29118] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 906.418065][T29118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6130'. [ 906.573905][T29124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6133'. [ 906.644680][T29124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.658522][T29124] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.679673][T29124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.804183][T29124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.830332][T29124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.850789][T29124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 906.861851][T29124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 906.914058][T29124] veth1_vlan: left promiscuous mode [ 906.924890][T29124] veth0_vlan: left promiscuous mode [ 906.931812][T29124] veth0_vlan: entered promiscuous mode [ 906.946037][T29124] veth1_vlan: entered promiscuous mode [ 906.959917][T29124] veth1_macvtap: left promiscuous mode [ 906.969125][T29124] veth0_macvtap: left promiscuous mode [ 906.977308][T29124] veth0_macvtap: entered promiscuous mode [ 906.985107][T29124] veth1_macvtap: entered promiscuous mode [ 907.024347][T29124] 8021q: adding VLAN 0 to HW filter on device eth0 [ 907.037530][T29124] 8021q: adding VLAN 0 to HW filter on device eth1 [ 907.047426][T29124] 8021q: adding VLAN 0 to HW filter on device eth2 [ 907.057203][T29124] 8021q: adding VLAN 0 to HW filter on device eth3 [ 907.068825][T29124] ip6erspan0: left allmulticast mode [ 907.078575][T29124] bridge1: left promiscuous mode [ 907.087794][T29124] bridge1: left allmulticast mode [ 907.103106][T14119] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.110476][T14119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.124904][T14119] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.132202][T14119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.179510][ T1096] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.196898][ T1096] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.214103][T29117] lo speed is unknown, defaulting to 1000 [ 907.251532][ T1096] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.276237][ T1096] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.395519][T29139] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.6137'. [ 908.510215][T29100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 908.588129][T14119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.618978][T14119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.202374][T29170] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 909.619405][T29178] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6152'. [ 909.640240][ T5640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 909.662174][ T5640] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 909.678234][ T5640] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 909.686685][ T5640] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 909.694897][ T5640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 910.389928][T29198] wg1 speed is unknown, defaulting to 1000 [ 910.508066][T29210] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6156'. [ 910.636690][T29212] IPVS: Error connecting to the multicast addr [ 910.956487][T29226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6160'. [ 911.033330][T29228] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6161'. [ 911.046764][T29229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6160'. [ 911.061631][T29229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6160'. [ 911.141324][T29231] netlink: 'syz.3.6162': attribute type 1 has an invalid length. [ 911.152072][T29228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.178184][T29228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.206523][T29232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6162'. [ 911.218985][T29228] bond0 (unregistering): Released all slaves [ 911.298001][T29231] bond1: entered promiscuous mode [ 911.303679][T29231] bond1: entered allmulticast mode [ 911.309621][T29231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 911.317943][T29198] lo speed is unknown, defaulting to 1000 [ 911.400268][T29232] macsec1: entered promiscuous mode [ 911.426054][T29232] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 911.449918][T29180] wg1 speed is unknown, defaulting to 1000 [ 911.483076][T29237] erspan1: entered allmulticast mode [ 911.506254][T29237] bond1: (slave erspan1): making interface the new active one [ 911.522717][T29237] erspan1: entered promiscuous mode [ 911.538276][T29237] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 911.810318][ T5640] Bluetooth: hci7: command tx timeout [ 911.984334][T29180] lo speed is unknown, defaulting to 1000 [ 912.116897][T29252] netlink: 'syz.5.6168': attribute type 1 has an invalid length. [ 912.192861][T29252] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6168'. [ 912.280087][T29252] veth0_vlan: entered allmulticast mode [ 912.381080][T29260] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6169'. [ 912.482002][T29254] syzkaller0: entered promiscuous mode [ 912.499450][T29254] syzkaller0: entered allmulticast mode [ 913.894246][ T5640] Bluetooth: hci7: command tx timeout [ 915.742869][ T4991] udevd[4991]: worker [23319] /devices/virtual/block/nbd2 timeout; kill it [ 915.751802][ T4991] udevd[4991]: seq 30985 '/devices/virtual/block/nbd2' killed [ 915.963347][ T5640] Bluetooth: hci7: command tx timeout [ 917.262108][T29276] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6174'. [ 917.274066][T29282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6173'. [ 917.672350][T29297] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6178'. [ 917.713698][T29297] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6178'. [ 917.729280][T29300] netlink: 'syz.6.6179': attribute type 1 has an invalid length. [ 917.740398][T29297] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6178'. [ 917.757529][T29297] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6178'. [ 917.767541][T29297] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6178'. [ 917.783992][T29305] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6179'. [ 917.793657][T29297] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6178'. [ 917.793717][T29297] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6178'. [ 917.851481][T29297] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.858968][T29297] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.039962][T29297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.055254][ T5640] Bluetooth: hci7: command tx timeout [ 918.070559][T29297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.280039][T29305] wg0: entered promiscuous mode [ 918.304051][T29305] wg0: entered allmulticast mode [ 918.409314][T29312] bridge0: port 3(erspan0) entered blocking state [ 918.419224][T29312] bridge0: port 3(erspan0) entered disabled state [ 918.432815][T29312] erspan0: entered allmulticast mode [ 918.445281][T29312] erspan0: entered promiscuous mode [ 918.458394][T29312] bridge0: port 3(erspan0) entered blocking state [ 918.466805][T29312] bridge0: port 3(erspan0) entered forwarding state [ 918.537429][ T54] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.638090][T29324] syzkaller0: entered promiscuous mode [ 918.652946][T29324] syzkaller0: entered allmulticast mode [ 918.680448][T29315] erspan0: left allmulticast mode [ 918.701503][T29315] erspan0: left promiscuous mode [ 918.722848][T29315] bridge0: port 3(erspan0) entered disabled state [ 918.766733][ T54] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.789843][ T54] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.863370][ T54] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.897018][T29180] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.918461][T29180] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.947237][T29180] bridge_slave_0: entered allmulticast mode [ 918.965705][T29180] bridge_slave_0: entered promiscuous mode [ 918.977531][T29346] netlink: 'syz.5.6186': attribute type 1 has an invalid length. [ 918.988020][T29180] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.997741][T29180] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.006568][T29180] bridge_slave_1: entered allmulticast mode [ 919.015763][T29180] bridge_slave_1: entered promiscuous mode [ 919.031310][T29348] geneve2: entered promiscuous mode [ 919.257509][T29180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.297276][T29180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.371441][T29180] team0: Port device team_slave_0 added [ 919.386036][T29180] team0: Port device team_slave_1 added [ 919.442017][T29180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.449533][T29180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.476643][T29180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.519208][T29180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.526832][T29180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.555334][T29180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.681411][T29180] hsr_slave_0: entered promiscuous mode [ 919.697352][T29180] hsr_slave_1: entered promiscuous mode [ 919.706210][T29180] debugfs: 'hsr0' already exists in 'hsr' [ 919.710869][T29369] netlink: 'syz.6.6192': attribute type 1 has an invalid length. [ 919.714878][T29180] Cannot create hsr debugfs directory [ 919.762323][T29372] netlink: 'syz.3.6193': attribute type 1 has an invalid length. [ 919.933432][T29372] bond2: entered promiscuous mode [ 919.949214][T29372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 920.002098][T29376] bond2: entered allmulticast mode [ 920.085315][T29372] bond2: (slave bridge1): making interface the new active one [ 920.113170][T29372] bridge1: entered promiscuous mode [ 920.120321][T29372] bridge1: entered allmulticast mode [ 920.150087][T29372] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 920.190172][T29388] netlink: 'syz.5.6198': attribute type 2 has an invalid length. [ 920.659886][T29410] netlink: 'syz.5.6203': attribute type 1 has an invalid length. [ 920.744797][T29410] bond0: entered promiscuous mode [ 920.756281][T29410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.800151][T29414] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 920.814324][T29414] bond2 (unregistering): Released all slaves [ 920.883378][T29412] ipvlan2: entered allmulticast mode [ 920.888944][T29412] bond0: entered allmulticast mode [ 920.946934][T29419] IPVS: set_ctl: invalid protocol: 12 172.30.0.3:19999 [ 921.020771][T29410] bond0: (slave bridge1): making interface the new active one [ 921.035684][T29410] bridge1: entered promiscuous mode [ 921.035813][T29421] nbd: couldn't find a device at index 0 [ 921.041622][T29410] bridge1: entered allmulticast mode [ 921.057758][T29410] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 921.317698][T29425] syzkaller1: entered promiscuous mode [ 921.338386][T29425] syzkaller1: entered allmulticast mode [ 922.057387][T29180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 922.096668][T29180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 922.115089][T29180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 922.145560][T29180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 922.203030][T29180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 922.213148][T29180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 922.221383][T29180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 922.235893][T29180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 922.561270][T29475] netlink: 'syz.3.6223': attribute type 1 has an invalid length. [ 922.653881][T29475] bond3: entered promiscuous mode [ 922.661137][T29475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 922.809488][T29475] bond3: (slave bridge2): making interface the new active one [ 922.838231][T29475] bridge2: entered promiscuous mode [ 922.851272][T29475] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 923.096589][T29180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.105508][ T5640] block nbd4: Receive control failed (result -32) [ 923.106123][T17721] block nbd4: Receive control failed (result -32) [ 923.147544][T29180] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.176076][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.183549][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.258586][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.265878][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.449822][T29492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.731147][T29512] __nla_validate_parse: 145 callbacks suppressed [ 923.731171][T29512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6234'. [ 923.868777][T29492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.014549][T29519] netlink: 'syz.2.6236': attribute type 1 has an invalid length. [ 924.054548][T29492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.095925][T29519] bond1: entered promiscuous mode [ 924.101464][T29519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 924.155529][T29520] bond1: (slave bridge3): making interface the new active one [ 924.169735][T29520] bridge3: entered promiscuous mode [ 924.177216][T29520] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 924.260764][T29523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6237'. [ 924.291496][T29492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.686933][ T1768] block nbd2: Possible stuck request ffff888027607000: control (read@0,1024B). Runtime 210 seconds [ 924.698258][ T1768] block nbd2: Possible stuck request ffff8880276071c0: control (read@1024,1024B). Runtime 210 seconds [ 924.710540][ T1768] block nbd2: Possible stuck request ffff888027607380: control (read@2048,1024B). Runtime 210 seconds [ 924.722779][ T1768] block nbd2: Possible stuck request ffff888027607540: control (read@3072,1024B). Runtime 210 seconds [ 925.039122][ T54] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.122106][T14119] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.166213][T14119] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.374416][T14119] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.413447][T29553] syzkaller0: entered promiscuous mode [ 925.435137][T29553] syzkaller0: entered allmulticast mode [ 926.004878][T29586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6253'. [ 926.188867][T29593] vlan2: entered allmulticast mode [ 926.202582][T29593] team0: entered allmulticast mode [ 926.218299][T29593] team_slave_0: entered allmulticast mode [ 926.238104][T29593] team_slave_1: entered allmulticast mode [ 926.252091][T29600] netlink: 'syz.3.6254': attribute type 13 has an invalid length. [ 926.285454][T29600] netlink: 'syz.3.6254': attribute type 17 has an invalid length. [ 926.484099][T29606] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 926.501338][T29606] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 926.806657][T29591] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.814466][T29591] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.464536][T29591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.524248][T29591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 928.374413][T29600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.397079][T29600] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.414497][T29600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.485778][T29600] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.493075][T29600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.507265][T29600] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.514889][T29600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.547434][T29600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.561081][T29600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.630312][T29600] veth1_vlan: left promiscuous mode [ 928.638085][T29600] veth0_vlan: left promiscuous mode [ 928.647503][T29600] veth0_vlan: entered promiscuous mode [ 928.660086][T29600] veth1_vlan: entered promiscuous mode [ 928.691847][T29600] veth1_macvtap: left promiscuous mode [ 928.714380][T29600] veth0_macvtap: left promiscuous mode [ 928.727902][T29600] veth0_macvtap: entered promiscuous mode [ 928.759848][T29600] veth1_macvtap: entered promiscuous mode [ 928.778291][T29600] bond1: left promiscuous mode [ 928.783390][T29600] erspan1: left promiscuous mode [ 928.788618][T29600] bond1: left allmulticast mode [ 928.795191][T29600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 928.808431][T29600] bond1: entered promiscuous mode [ 928.813935][T29600] erspan1: entered promiscuous mode [ 928.819599][T29600] macsec1: left promiscuous mode [ 928.835171][T29600] bond1: left promiscuous mode [ 928.849025][T29600] erspan1: left promiscuous mode [ 928.860871][T29600] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 928.871983][T29600] erspan1: entered promiscuous mode [ 928.882661][T29600] erspan1: left allmulticast mode [ 928.896045][T29600] bond2: left promiscuous mode [ 928.901028][T29600] bridge1: left promiscuous mode [ 928.907174][T29600] bond2: left allmulticast mode [ 928.912220][T29600] bridge1: left allmulticast mode [ 928.919491][T29600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 928.931817][T29600] bond3: left promiscuous mode [ 928.938455][T29600] bridge2: left promiscuous mode [ 928.946498][T29600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 928.959789][T29600] 8021q: adding VLAN 0 to HW filter on device eth0 [ 928.975989][T29600] 8021q: adding VLAN 0 to HW filter on device eth1 [ 928.992042][T29600] 8021q: adding VLAN 0 to HW filter on device eth2 [ 929.009655][T29600] 8021q: adding VLAN 0 to HW filter on device eth3 [ 929.028974][T29604] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 929.184454][T29180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.212148][T29623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.453877][T29180] veth0_vlan: entered promiscuous mode [ 929.510566][T29180] veth1_vlan: entered promiscuous mode [ 929.661935][T29180] veth0_macvtap: entered promiscuous mode [ 929.741036][T29180] veth1_macvtap: entered promiscuous mode [ 929.841739][T29180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.894431][T29180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.959354][ T6202] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.981976][ T6202] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.995625][ T6202] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.008287][ T6202] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.253922][T29647] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6266'. [ 930.285159][T29647] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6266'. [ 930.458270][ T6209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.535197][ T6209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.736662][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.764270][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.804944][T29664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6268'. [ 931.134316][T29664] : entered promiscuous mode [ 931.215692][T29669] geneve2: entered promiscuous mode [ 931.317249][T29675] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6150'. [ 931.370032][T16312] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 931.383941][T16312] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 931.426385][T16312] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 931.441756][T16312] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 931.687590][T29686] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6273'. [ 931.741548][T29686] vlan2: entered allmulticast mode [ 932.093088][T29702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6280'. [ 932.105039][T29701] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6279'. [ 932.538482][T29713] netlink: 'syz.6.6283': attribute type 1 has an invalid length. [ 932.582791][T29713] netlink: 'syz.6.6283': attribute type 2 has an invalid length. [ 932.626764][T29713] netlink: 'syz.6.6283': attribute type 1 has an invalid length. [ 932.651804][T29719] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 932.657489][T29713] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6283'. [ 933.725084][T29730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6288'. [ 935.502710][T29712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 935.757941][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6290'. [ 935.942098][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6290'. [ 936.117258][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6290'. [ 936.238409][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6290'. [ 936.297090][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6290'. [ 936.338261][T29750] netlink: 'syz.3.6293': attribute type 1 has an invalid length. [ 936.418025][T29753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6293'. [ 936.482666][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6290'. [ 936.617677][T29750] bond4: entered promiscuous mode [ 936.638290][T29750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 936.659998][T29753] bond4: entered allmulticast mode [ 936.773144][T29750] bond4: (slave bridge4): making interface the new active one [ 936.792721][T29750] bridge4: entered promiscuous mode [ 936.801773][T29750] bridge4: entered allmulticast mode [ 936.832793][T29750] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 937.032897][T29762] bond2 (unregistering): Released all slaves [ 937.264018][T29769] wg1 speed is unknown, defaulting to 1000 [ 937.309253][T29774] syzkaller0: entered promiscuous mode [ 937.332358][T29774] syzkaller0: entered allmulticast mode [ 937.588870][T29783] netlink: 'syz.2.6300': attribute type 1 has an invalid length. [ 937.739112][T29793] netlink: 'syz.0.6304': attribute type 1 has an invalid length. [ 937.770869][T29793] netlink: 'syz.0.6304': attribute type 1 has an invalid length. [ 937.916997][T29799] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.6306'. [ 937.992153][T29783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 938.000999][T29801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6305'. [ 938.367896][T29769] lo speed is unknown, defaulting to 1000 [ 938.488471][T29812] netlink: 'syz.5.6308': attribute type 1 has an invalid length. [ 938.554331][T29812] bond1: entered promiscuous mode [ 938.561058][T29812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 938.669257][T29812] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6308'. [ 938.713516][T29812] bond1: entered allmulticast mode [ 938.759237][T29812] bond1: (slave bridge2): making interface the new active one [ 938.771609][T29812] bridge2: entered promiscuous mode [ 938.780228][T29812] bridge2: entered allmulticast mode [ 938.794018][T29812] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 938.957171][T29824] xt_TPROXY: Can be used only with -p tcp or -p udp [ 939.437449][T29845] netlink: 'syz.5.6318': attribute type 1 has an invalid length. [ 939.459183][T29848] netlink: 'syz.5.6318': attribute type 1 has an invalid length. [ 939.481004][T29845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 939.512880][T29848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.498372][T29890] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.506660][T29890] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.604946][T29890] bridge0: entered allmulticast mode [ 940.967846][T29922] __nla_validate_parse: 3 callbacks suppressed [ 940.967866][T29922] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6335'. [ 941.017171][T29912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6336'. [ 941.135259][T29911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6335'. [ 941.768858][T29950] xt_addrtype: ipv6 does not support BROADCAST matching [ 942.239029][T29964] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.246474][T29964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.254526][T29964] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.261835][T29964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.342204][T29973] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6348'. [ 942.891422][T29964] geneve2: left promiscuous mode [ 942.998423][T29995] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 943.069293][T29995] erspan0: entered promiscuous mode [ 943.116359][T29995] vlan3: entered promiscuous mode [ 943.762630][T30030] netlink: 'syz.6.6362': attribute type 1 has an invalid length. [ 943.779968][T30034] netlink: 'syz.2.6365': attribute type 3 has an invalid length. [ 944.390774][T30016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 944.845378][T30071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6369'. [ 945.057855][T30078] xt_hashlimit: size too large, truncated to 1048576 [ 945.271104][T30091] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 945.316490][T30091] bond3: (slave lo): Enslaving as an active interface with an up link [ 945.337294][T30096] netlink: 'syz.5.6380': attribute type 1 has an invalid length. [ 945.340111][T30091] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 945.397086][T30100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6380'. [ 945.460571][T30096] bond2: entered promiscuous mode [ 945.474839][T30096] 8021q: adding VLAN 0 to HW filter on device bond2 [ 945.500258][T30100] bond2: entered allmulticast mode [ 945.596522][T30096] bond2: (slave bridge3): making interface the new active one [ 945.619530][T30096] bridge3: entered promiscuous mode [ 945.633737][T30096] bridge3: entered allmulticast mode [ 945.694859][T30096] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 945.768735][T30113] syzkaller1: entered promiscuous mode [ 945.813119][T30113] syzkaller1: entered allmulticast mode [ 946.387168][T30119] geneve2: left promiscuous mode [ 946.431296][T30119] bond1: left promiscuous mode [ 946.455271][T30119] bridge3: left promiscuous mode [ 946.499997][T30119] 8021q: adding VLAN 0 to HW filter on device bond3 [ 946.614131][T30123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 946.648597][ T54] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 32952 - 0 [ 946.666784][ T54] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 32952 - 0 [ 946.721050][ T54] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 32952 - 0 [ 946.759919][ T54] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 32952 - 0 [ 946.842177][T30139] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 946.955083][T30143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6391'. [ 947.409745][T30150] bond4: option lacp_rate: invalid value (128) [ 947.458187][T30150] bond4 (unregistering): Released all slaves [ 947.548457][T30156] netlink: 'syz.3.6396': attribute type 1 has an invalid length. [ 947.620512][T30158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6396'. [ 947.663371][T30159] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 947.826204][T30156] bond5: entered promiscuous mode [ 947.843703][T30156] 8021q: adding VLAN 0 to HW filter on device bond5 [ 947.856886][T30169] openvswitch: netlink: Key type 327 is out of range max 32 [ 947.881539][T30158] bond5: entered allmulticast mode [ 947.924125][T30165] bond5: (slave bridge5): making interface the new active one [ 947.932153][T30165] bridge5: entered promiscuous mode [ 947.938785][T30165] bridge5: entered allmulticast mode [ 947.948524][T30165] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 947.997204][T30167] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 948.198807][T30179] xt_socket: unknown flags 0x4 [ 948.229449][T30178] netlink: 'syz.3.6400': attribute type 1 has an invalid length. [ 948.321036][T30181] veth3: entered allmulticast mode [ 948.520237][T30189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6404'. [ 948.547372][T30189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 948.559458][T30189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.579180][T30189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.587237][T30189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.091712][T30205] bond3: option lacp_rate: invalid value (128) [ 949.108803][T30205] bond3 (unregistering): Released all slaves [ 949.376442][T30228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6414'. [ 949.391891][T30228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6414'. [ 949.405247][T30228] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6414'. [ 949.881286][T30254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6423'. [ 949.921957][T30254] ip6gre1: entered promiscuous mode [ 949.938184][T30254] ip6gre1: entered allmulticast mode [ 949.954994][T30256] netlink: 'syz.0.6423': attribute type 6 has an invalid length. [ 949.968446][T30256] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6423'. [ 950.180091][T30261] wg1 speed is unknown, defaulting to 1000 [ 950.372349][T30275] netlink: 'syz.0.6430': attribute type 1 has an invalid length. [ 950.391135][T30275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6430'. [ 950.548753][T30283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6433'. [ 950.586686][T30282] syzkaller0: entered promiscuous mode [ 950.607414][T30282] syzkaller0: entered allmulticast mode [ 950.634619][T30261] lo speed is unknown, defaulting to 1000 [ 950.710809][T30288] can: request_module (can-proto-4) failed. [ 950.899702][T30297] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 951.403808][T30323] netlink: 'syz.6.6441': attribute type 2 has an invalid length. [ 951.879667][T30338] syzkaller0: entered promiscuous mode [ 951.894263][T30338] syzkaller0: entered allmulticast mode [ 952.669821][T30379] netlink: 'syz.2.6462': attribute type 1 has an invalid length. [ 952.706778][T30382] syzkaller0: entered promiscuous mode [ 952.715839][T30382] syzkaller0: entered allmulticast mode [ 952.741526][T30385] __nla_validate_parse: 4 callbacks suppressed [ 952.741546][T30385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6462'. [ 952.763201][T30384] netlink: 'syz.6.6460': attribute type 13 has an invalid length. [ 952.785672][T30384] netlink: 'syz.6.6460': attribute type 17 has an invalid length. [ 952.803001][T30384] netlink: 'syz.6.6460': attribute type 27 has an invalid length. [ 952.821562][T30379] bond4: entered promiscuous mode [ 952.827807][T30379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 952.909703][T30374] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.917722][T30374] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.125223][T30385] bond4: entered allmulticast mode [ 953.164461][T30379] bond4: (slave bridge5): making interface the new active one [ 953.182652][T30379] bridge5: entered promiscuous mode [ 953.188469][T30379] bridge5: entered allmulticast mode [ 953.196135][T30379] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 953.209513][T30394] kthread_run failed with err -4 [ 953.222693][ T6209] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.234261][ T6209] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.319755][ T6209] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.349840][ T6209] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.365014][T30380] wg1 speed is unknown, defaulting to 1000 [ 953.415267][T30403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6466'. [ 953.438189][T30403] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6466'. [ 954.000698][T30426] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6473'. [ 954.077813][T30380] lo speed is unknown, defaulting to 1000 [ 954.464717][T30448] syzkaller0: entered promiscuous mode [ 954.479497][T30448] syzkaller0: entered allmulticast mode [ 954.763465][ T1768] block nbd2: Possible stuck request ffff888027607000: control (read@0,1024B). Runtime 240 seconds [ 954.774805][ T1768] block nbd2: Possible stuck request ffff8880276071c0: control (read@1024,1024B). Runtime 240 seconds [ 954.789485][ T1768] block nbd2: Possible stuck request ffff888027607380: control (read@2048,1024B). Runtime 240 seconds [ 954.801343][ T1768] block nbd2: Possible stuck request ffff888027607540: control (read@3072,1024B). Runtime 240 seconds [ 954.879082][T30467] netlink: 'syz.0.6485': attribute type 1 has an invalid length. [ 955.271777][T30483] netlink: 'syz.3.6491': attribute type 24 has an invalid length. [ 955.274813][T30484] netlink: 'syz.5.6489': attribute type 2 has an invalid length. [ 955.290670][T30484] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6489'. [ 955.300339][T30483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6491'. [ 955.300376][T30483] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 955.429107][T30489] rdma_rxe: rxe_newlink: failed to add gre0 [ 955.583431][T30498] syzkaller0: entered promiscuous mode [ 955.620524][T30498] syzkaller0: entered allmulticast mode [ 955.669535][T30505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6496'. [ 955.701657][T30508] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6498'. [ 956.405889][T30536] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6510'. [ 957.019993][T30562] syz_tun: entered allmulticast mode [ 957.038390][T30562] dvmrp8: entered allmulticast mode [ 957.267118][T30540] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6507'. [ 957.643715][T30575] netlink: 'syz.0.6517': attribute type 1 has an invalid length. [ 957.831898][T30557] syz_tun: left allmulticast mode [ 958.167503][T30593] tipc: Started in network mode [ 958.185469][T30593] tipc: Node identity a21ce24cea73, cluster identity 4711 [ 958.190439][T30598] netlink: 'syz.5.6525': attribute type 7 has an invalid length. [ 958.194527][T30593] tipc: Enabled bearer , priority 0 [ 958.233045][T30598] netlink: 'syz.5.6525': attribute type 23 has an invalid length. [ 958.243919][T30600] syzkaller0: entered promiscuous mode [ 958.249722][T30600] syzkaller0: entered allmulticast mode [ 958.352298][T30593] tipc: Resetting bearer [ 958.377666][T30595] __nla_validate_parse: 2 callbacks suppressed [ 958.377687][T30595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6524'. [ 958.413580][T30591] tipc: Resetting bearer [ 958.454576][T30595] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6524'. [ 958.466184][T30591] tipc: Disabling bearer [ 958.482805][T30599] wg1 speed is unknown, defaulting to 1000 [ 958.691592][T30611] openvswitch: netlink: Key 8 has unexpected len 2 expected 40 [ 958.720075][T30611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6529'. [ 958.748172][T30611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6529'. [ 958.776917][T30611] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6529'. [ 958.876364][T30611] veth5: entered allmulticast mode [ 959.258935][T30599] lo speed is unknown, defaulting to 1000 [ 959.295933][ T1096] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.307679][ T1096] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.387651][T30641] netlink: 'syz.3.6536': attribute type 1 has an invalid length. [ 959.443870][T30642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6536'. [ 959.508623][ T1096] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.528811][ T1096] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.642599][T30641] bond6: entered promiscuous mode [ 959.649729][T30641] 8021q: adding VLAN 0 to HW filter on device bond6 [ 959.659437][T30642] bond6: entered allmulticast mode [ 959.696105][T30645] bond6: (slave bridge6): making interface the new active one [ 959.703926][T30645] bridge6: entered promiscuous mode [ 959.709617][T30645] bridge6: entered allmulticast mode [ 959.718020][T30645] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 959.953810][T30651] syzkaller0: entered promiscuous mode [ 959.969579][T30651] syzkaller0: entered allmulticast mode [ 960.011798][T30651] tipc: Started in network mode [ 960.028429][T30651] tipc: Node identity , cluster identity 4711 [ 960.059996][T30651] tipc: Failed to obtain node identity [ 960.083237][T30651] tipc: Enabling of bearer rejected, failed to enable media [ 960.223197][T30662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6544'. [ 960.256098][T30664] netlink: 'syz.6.6544': attribute type 14 has an invalid length. [ 960.268140][T30664] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6544'. [ 960.328939][T30662] syzkaller0: entered promiscuous mode [ 960.343521][T30662] syzkaller0: entered allmulticast mode [ 960.720112][T30680] netlink: 'syz.3.6549': attribute type 1 has an invalid length. [ 960.802691][T30684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6549'. [ 960.882694][ T10] IPVS: starting estimator thread 0... [ 960.944536][T30680] bond7: entered promiscuous mode [ 960.976124][T30680] 8021q: adding VLAN 0 to HW filter on device bond7 [ 960.983733][T30690] IPVS: using max 25 ests per chain, 60000 per kthread [ 961.010884][T30684] bond7: entered allmulticast mode [ 961.120053][T30698] bond7: (slave bridge7): making interface the new active one [ 961.155726][T30698] bridge7: entered promiscuous mode [ 961.183944][T30698] bridge7: entered allmulticast mode [ 961.190833][T30698] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 962.716916][T30760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6576'. [ 963.832237][T30787] netlink: 'syz.2.6587': attribute type 21 has an invalid length. [ 964.116979][T30801] __nla_validate_parse: 1 callbacks suppressed [ 964.117001][T30801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6589'. [ 964.156527][T30801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6589'. [ 964.691004][T30819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.719147][T30819] batadv_slave_0: entered promiscuous mode [ 964.740531][T30819] batadv_slave_0: entered allmulticast mode [ 964.984875][T30829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6600'. [ 965.147573][T30843] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 965.192952][T30841] syzkaller0: entered promiscuous mode [ 965.205125][T30841] syzkaller0: entered allmulticast mode [ 965.542843][T30872] netlink: 'syz.3.6610': attribute type 1 has an invalid length. [ 965.613956][T30876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6610'. [ 965.628464][T30877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6611'. [ 965.658673][T30872] bond8: entered promiscuous mode [ 965.664985][T30872] 8021q: adding VLAN 0 to HW filter on device bond8 [ 965.673493][T30876] bond8: entered allmulticast mode [ 965.820906][T30872] bond8: (slave bridge8): making interface the new active one [ 965.831811][T30872] bridge8: entered promiscuous mode [ 965.839317][T30872] bridge8: entered allmulticast mode [ 965.853985][T30872] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 965.904538][T30877] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.912959][T30877] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.976590][T30877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.026454][T30877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.250111][T30877] bond4: left promiscuous mode [ 966.255370][T30877] bridge5: left promiscuous mode [ 966.260691][T30877] bond4: left allmulticast mode [ 966.266579][T30877] bridge5: left allmulticast mode [ 966.412103][ T6202] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.429814][T30878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 966.438201][ T6202] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 32952 - 0 [ 966.465927][T30891] netlink: 'syz.5.6614': attribute type 1 has an invalid length. [ 966.497859][ T6202] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.532154][ T6202] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 32952 - 0 [ 966.561413][ T6202] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.604692][ T6202] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 32952 - 0 [ 966.642538][ T6202] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.681395][ T6202] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 32952 - 0 [ 966.725808][T30908] pim6reg: entered allmulticast mode [ 966.774019][T30908] pim6reg: left allmulticast mode [ 967.573483][T30942] bond3: (slave lo): Releasing backup interface [ 967.621710][T30942] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 967.622956][T30946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6629'. [ 967.659224][T30946] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 967.717306][T30942] bridge_slave_0: left allmulticast mode [ 967.763541][T30942] bridge_slave_0: left promiscuous mode [ 967.797163][T30942] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.803187][T17721] Bluetooth: hci7: command 0x0405 tx timeout [ 967.920974][T30942] bridge_slave_1: left allmulticast mode [ 967.979112][T30942] bridge_slave_1: left promiscuous mode [ 968.043155][T30942] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.120615][T30942] bond0: (slave bond_slave_0): Releasing backup interface [ 968.225256][T30942] bond0: (slave bond_slave_1): Releasing backup interface [ 968.267308][T30942] team0: Port device team_slave_0 removed [ 968.279309][T30942] team0: Port device team_slave_1 removed [ 968.294778][T30942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.328903][T30942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.395267][T30942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 968.447011][T30978] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6636'. [ 968.475252][T30978] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6636'. [ 968.522199][T30978] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6636'. [ 968.563613][T30978] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6636'. [ 969.005344][T30981] syzkaller0: entered promiscuous mode [ 969.010897][T30981] syzkaller0: entered allmulticast mode [ 969.411462][T31003] netlink: 'syz.5.6642': attribute type 21 has an invalid length. [ 969.782913][T31008] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 970.180740][T31017] xt_addrtype: ipv6 does not support BROADCAST matching [ 974.425128][T16312] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.433668][T16312] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.442008][T16312] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.478624][T16312] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.642216][T31044] netlink: 'syz.5.6656': attribute type 11 has an invalid length. [ 974.672802][T31044] openvswitch: netlink: Duplicate key (type 21). [ 974.789322][T31055] __nla_validate_parse: 2 callbacks suppressed [ 974.789344][T31055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6660'. [ 975.327764][T31075] xt_HMARK: proto mask must be zero with L3 mode [ 975.485065][T31085] veth0: entered promiscuous mode [ 975.584863][T31090] bond0: entered promiscuous mode [ 975.604061][T31090] bond_slave_0: entered promiscuous mode [ 975.623000][T31090] bond_slave_1: entered promiscuous mode [ 975.866384][T31106] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6674'. [ 975.913819][T31106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 975.971716][T31107] wg1 speed is unknown, defaulting to 1000 [ 976.123639][T31119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6678'. [ 976.141034][T31119] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 976.379358][T31090] bond0: left promiscuous mode [ 976.387493][T31090] bond_slave_0: left promiscuous mode [ 976.399362][T31090] bond_slave_1: left promiscuous mode [ 976.430047][T31090] veth0: left promiscuous mode [ 976.573863][T31131] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6681'. [ 976.949932][T31107] lo speed is unknown, defaulting to 1000 [ 977.194070][T31161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6689'. [ 977.231698][T31161] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6689'. [ 977.569757][T31174] netlink: 'syz.2.6690': attribute type 10 has an invalid length. [ 977.634438][T31174] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.6690'. [ 977.898239][T31180] netlink: 'syz.6.6693': attribute type 3 has an invalid length. [ 977.963950][T31180] netlink: 192 bytes leftover after parsing attributes in process `syz.6.6693'. [ 978.328496][T31188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6698'. [ 978.344879][T31190] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = -1, id = 0 [ 978.352208][T31188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6698'. [ 978.385704][T31192] netlink: 'syz.0.6696': attribute type 1 has an invalid length. [ 978.394368][T31188] netlink: 'syz.3.6698': attribute type 18 has an invalid length. [ 978.481997][T31192] bond1: entered promiscuous mode [ 978.489256][T31192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 978.652790][T31192] bond1: (slave bridge1): making interface the new active one [ 978.668607][T31192] bridge1: entered promiscuous mode [ 978.691888][T31192] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 980.988241][T31293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 981.023225][T31293] xt_ecn: cannot match TCP bits for non-tcp packets [ 981.054265][T31296] xt_ecn: cannot match TCP bits for non-tcp packets [ 981.135587][T31298] __nla_validate_parse: 4 callbacks suppressed [ 981.135604][T31298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6727'. [ 981.194045][T31298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6727'. [ 982.058291][T31314] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6730'. [ 982.100867][T31314] bond3: entered promiscuous mode [ 982.106967][T31314] 8021q: adding VLAN 0 to HW filter on device bond3 [ 982.125462][T31314] bond3 (unregistering): Released all slaves [ 983.958628][T31291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 984.218458][T31329] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6735'. [ 984.345598][T31335] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6738'. [ 984.563338][T31350] netlink: 'syz.6.6738': attribute type 1 has an invalid length. [ 984.784827][T31350] wg0: left promiscuous mode [ 984.789867][T31350] wg0: left allmulticast mode [ 984.805993][T31350] vlan2: left allmulticast mode [ 984.812083][T31350] veth3: left allmulticast mode [ 984.849245][ T1768] block nbd2: Possible stuck request ffff888027607000: control (read@0,1024B). Runtime 270 seconds [ 984.860965][ T1768] block nbd2: Possible stuck request ffff8880276071c0: control (read@1024,1024B). Runtime 270 seconds [ 984.872349][ T1768] block nbd2: Possible stuck request ffff888027607380: control (read@2048,1024B). Runtime 270 seconds [ 984.885884][ T1768] block nbd2: Possible stuck request ffff888027607540: control (read@3072,1024B). Runtime 270 seconds [ 984.981270][ T6198] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.023628][ T6198] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.042954][ T6198] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.053212][T16312] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.130278][T31376] sock: sock_set_timeout: `syz.3.6750' (pid 31376) tries to set negative timeout [ 985.217628][T31362] netlink: 4352 bytes leftover after parsing attributes in process `syz.0.6747'. [ 985.252542][T31362] openvswitch: netlink: Flow actions attr not present in new flow. [ 985.340491][T31362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6747'. [ 985.698449][T31393] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6755'. [ 985.779172][T31393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6755'. [ 986.075683][T31408] wireguard: wg0: Could not create IPv4 socket [ 986.441421][T31453] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6765'. [ 986.451761][T31453] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6765'. [ 986.554160][T31453] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6765'. [ 987.150021][T31500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6776'. [ 987.250313][T31494] syzkaller0: entered promiscuous mode [ 987.261402][T31494] syzkaller0: entered allmulticast mode [ 987.353321][T31505] netlink: 'syz.3.6778': attribute type 1 has an invalid length. [ 987.420639][T31505] bond9: entered promiscuous mode [ 987.426763][T31505] 8021q: adding VLAN 0 to HW filter on device bond9 [ 987.498842][T31505] bond9: (slave bridge9): making interface the new active one [ 987.506818][T31505] bridge9: entered promiscuous mode [ 987.515576][T31505] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 988.064895][T31534] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6782'. [ 988.080236][T31538] netlink: 'syz.6.6784': attribute type 1 has an invalid length. [ 988.183636][T31542] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6784'. [ 988.277792][T31538] bond2: entered promiscuous mode [ 988.305126][T31538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 988.526918][T31544] syzkaller0: entered promiscuous mode [ 988.541927][T31544] syzkaller0: entered allmulticast mode [ 988.549691][T31562] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6788'. [ 988.611282][T31538] bond2: (slave bridge1): making interface the new active one [ 988.622614][T31538] bridge1: entered promiscuous mode [ 988.638168][T31538] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 990.123238][T17721] Bluetooth: hci2: command 0x0406 tx timeout [ 991.956429][T31580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6794'. [ 992.200040][T31584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6794'. [ 993.549387][T31566] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 993.569348][T31569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 993.610471][T31580] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 993.699567][T31593] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6796'. [ 994.330298][T31633] smc: net device wlan0 applied user defined pnetid SYZ0 [ 994.432629][T31637] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6805'. [ 994.740639][T31657] netlink: 'syz.6.6812': attribute type 1 has an invalid length. [ 994.776413][T31657] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6812'. [ 995.159704][T31678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6819'. [ 995.586655][T31693] vlan2: entered promiscuous mode [ 995.604673][T31693] bond0: entered promiscuous mode [ 995.641540][ T29] audit: type=1804 audit(1777699048.404:14): pid=31695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6824" name="/newroot/227/cgroup.controllers" dev="tmpfs" ino=1179 res=1 errno=0 [ 995.699302][ T29] audit: type=1800 audit(1777699048.434:15): pid=31695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6824" name="cgroup.controllers" dev="tmpfs" ino=1179 res=0 errno=0 [ 995.706256][T31697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6825'. [ 995.854363][T31705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6828'. [ 995.900922][T31702] bond3: entered promiscuous mode [ 996.198859][T31729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 996.757705][ T5735] IPVS: starting estimator thread 0... [ 996.854006][T31754] IPVS: using max 26 ests per chain, 62400 per kthread [ 996.863054][T31713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 997.423645][T31778] netlink: 'syz.6.6849': attribute type 1 has an invalid length. [ 997.439596][T31777] netlink: 'syz.3.6848': attribute type 1 has an invalid length. [ 997.509660][T31783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6848'. [ 997.530814][T31784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6850'. [ 997.531224][T31786] xt_TCPMSS: Only works on TCP SYN packets [ 997.541463][T31778] bond4: entered promiscuous mode [ 997.559189][T31787] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6849'. [ 997.572914][T31784] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6850'. [ 997.593932][T31778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 997.744083][T31777] bond10: entered promiscuous mode [ 997.749623][T31777] 8021q: adding VLAN 0 to HW filter on device bond10 [ 997.894806][T31793] bond10: (slave bridge10): making interface the new active one [ 997.903018][T31793] bridge10: entered promiscuous mode [ 997.915129][T31803] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6854'. [ 997.925283][T31793] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 997.934428][T31803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6854'. [ 997.988328][T31791] bond4: (slave bridge2): making interface the new active one [ 997.996818][T31791] bridge2: entered promiscuous mode [ 998.005940][T31791] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 998.229317][ T5640] block nbd5: Receive control failed (result -32) [ 998.248547][ T5640] block nbd5: Receive control failed (result -32) [ 998.594420][T31827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6859'. [ 998.658272][T31827] : entered promiscuous mode [ 999.478063][T31856] netlink: 'syz.2.6868': attribute type 1 has an invalid length. [ 999.511496][T31858] netlink: 'syz.6.6867': attribute type 1 has an invalid length. [ 999.546290][T31856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6868'. [ 999.615182][T31866] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6867'. [ 999.644246][T31868] Cannot find set identified by id 0 to match [ 999.718302][T31872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6870'. [ 999.720446][T31858] bond5: entered promiscuous mode [ 999.776547][T31858] 8021q: adding VLAN 0 to HW filter on device bond5 [ 999.999031][T31858] bond5: (slave bridge3): making interface the new active one [ 1000.018583][T31858] bridge3: entered promiscuous mode [ 1000.036642][T31858] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1000.139854][T31878] netlink: 'syz.5.6872': attribute type 17 has an invalid length. [ 1000.175785][T31878] netlink: 'syz.5.6872': attribute type 49 has an invalid length. [ 1000.387974][T31890] syzkaller0: entered promiscuous mode [ 1000.420681][T31890] syzkaller0: entered allmulticast mode [ 1000.711202][T31907] netlink: 'syz.2.6883': attribute type 1 has an invalid length. [ 1000.967397][T31907] bond5: entered promiscuous mode [ 1000.990802][T31907] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1001.385360][T31930] wg1 speed is unknown, defaulting to 1000 [ 1001.532877][T31943] sctp: [Deprecated]: syz.5.6893 (pid 31943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1001.532877][T31943] Use struct sctp_sack_info instead [ 1002.113463][T31954] vlan2: entered allmulticast mode [ 1002.129235][T31954] bridge_slave_0: entered allmulticast mode [ 1002.151303][T31954] bridge0: port 1(vlan2) entered blocking state [ 1002.173826][T31954] bridge0: port 1(vlan2) entered disabled state [ 1002.194518][T31954] vlan2: entered promiscuous mode [ 1002.201547][T31954] bridge_slave_0: entered promiscuous mode [ 1002.569891][T31930] lo speed is unknown, defaulting to 1000 [ 1002.570664][T31962] wg1 speed is unknown, defaulting to 1000 [ 1002.600993][T31966] syzkaller1: entered promiscuous mode [ 1002.614692][T31966] syzkaller1: entered allmulticast mode [ 1003.810949][T31990] __nla_validate_parse: 5 callbacks suppressed [ 1003.810973][T31990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6906'. [ 1003.857360][T31962] lo speed is unknown, defaulting to 1000 [ 1003.963688][ T5640] Bluetooth: hci7: command 0x0405 tx timeout [ 1004.677321][T32008] x_tables: unsorted entry at hook 3 [ 1005.141078][T32016] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 1005.586667][T32031] bond2: Unable to set up delay as MII monitoring is disabled [ 1005.641058][T32031] bond2 (unregistering): Released all slaves [ 1006.018072][T32043] syzkaller0: entered promiscuous mode [ 1006.053067][T32043] syzkaller0: entered allmulticast mode [ 1006.247843][T32053] netlink: 'syz.0.6926': attribute type 1 has an invalid length. [ 1006.254491][T32051] Cannot find del_set index 0 as target [ 1006.266950][T32053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6926'. [ 1006.284765][T32057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6928'. [ 1006.294562][T32053] netlink: 'syz.0.6926': attribute type 1 has an invalid length. [ 1006.423919][T32057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6928'. [ 1006.879171][T32083] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1007.123955][T32097] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6939'. [ 1007.204065][T32097] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6939'. [ 1007.250534][T32099] syzkaller0: entered promiscuous mode [ 1007.264255][T32099] syzkaller0: entered allmulticast mode [ 1007.588369][T32117] openvswitch: netlink: Key 6 has unexpected len 8 expected 2 [ 1007.734745][T32127] netlink: 324 bytes leftover after parsing attributes in process `syz.2.6948'. [ 1007.827265][T32131] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6947'. [ 1008.097549][T32144] syzkaller0: entered promiscuous mode [ 1008.114670][T32144] syzkaller0: entered allmulticast mode [ 1008.158087][T32146] netlink: 'syz.6.6953': attribute type 2 has an invalid length. [ 1008.166978][T32146] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6953'. [ 1008.188899][T32146] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6953'. [ 1008.190277][T32148] syzkaller0: entered promiscuous mode [ 1008.224635][T32148] syzkaller0: entered allmulticast mode [ 1008.722663][T32175] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1010.434493][T32107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1010.445199][T32115] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1010.919437][T32192] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6967'. [ 1010.973552][T32196] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6969'. [ 1011.045490][T32194] syzkaller0: entered promiscuous mode [ 1011.062079][T32194] syzkaller0: entered allmulticast mode [ 1011.099567][T32196] ip6gre1: entered promiscuous mode [ 1011.106015][T32196] ip6gre1: entered allmulticast mode [ 1011.155164][T32202] dvmrp6: entered allmulticast mode [ 1011.228431][T32200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.274273][T32204] xt_connbytes: Forcing CT accounting to be enabled [ 1011.311059][T32182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6963'. [ 1011.349764][T32211] netlink: 'syz.6.6971': attribute type 1 has an invalid length. [ 1011.358123][T32211] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6971'. [ 1011.451455][T32202] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1011.970211][T32228] netlink: 'syz.5.6976': attribute type 1 has an invalid length. [ 1012.082006][T32235] openvswitch: netlink: IP tunnel dst address not specified [ 1012.210634][T32228] bond3: entered promiscuous mode [ 1012.233378][T32228] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1012.377977][T32232] bond3: (slave bridge4): making interface the new active one [ 1012.450551][T32232] bridge4: entered promiscuous mode [ 1012.516560][T32232] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1012.685564][T32237] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1012.741607][T32237] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1012.891741][T32261] syzkaller0: entered promiscuous mode [ 1012.914464][T32261] syzkaller0: entered allmulticast mode [ 1013.132006][T32277] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.471674][T32269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6984'. [ 1013.540563][T32294] xt_hashlimit: size too large, truncated to 1048576 [ 1013.556413][T32294] xt_hashlimit: invalid interval [ 1013.644820][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1013.731841][T32277] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.887477][T32287] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6984'. [ 1014.291499][T32277] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.468591][T32277] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.802104][T31443] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.907970][T31428] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.924032][ T1768] block nbd2: Possible stuck request ffff888027607000: control (read@0,1024B). Runtime 300 seconds [ 1014.935099][ T1768] block nbd2: Possible stuck request ffff8880276071c0: control (read@1024,1024B). Runtime 300 seconds [ 1014.946460][ T1768] block nbd2: Possible stuck request ffff888027607380: control (read@2048,1024B). Runtime 300 seconds [ 1014.959068][ T1768] block nbd2: Possible stuck request ffff888027607540: control (read@3072,1024B). Runtime 300 seconds [ 1014.987369][T31440] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.018555][T31443] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.157235][T32340] macsec1: entered promiscuous mode [ 1015.233548][T32339] pimreg: entered allmulticast mode [ 1015.326033][T32346] netlink: 'syz.3.6997': attribute type 10 has an invalid length. [ 1015.378972][T32355] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6997'. [ 1015.410063][T32354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7002'. [ 1015.411519][T32346] team0: Port device dummy0 added [ 1015.562103][T32363] netlink: 820 bytes leftover after parsing attributes in process `syz.0.7004'. [ 1015.578688][T32363] netlink: 820 bytes leftover after parsing attributes in process `syz.0.7004'. [ 1015.722948][ T5640] Bluetooth: hci5: command 0x0406 tx timeout [ 1015.777990][T32367] tc_dump_action: action bad kind [ 1015.829438][T32369] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7006'. [ 1016.613997][T31428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.631218][T31428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.971654][T32416] tipc: Started in network mode [ 1016.988953][T32416] tipc: Node identity daa4a3dfea57, cluster identity 4711 [ 1017.008648][T32416] tipc: Enabled bearer , priority 0 [ 1017.053802][T32419] syzkaller0: entered promiscuous mode [ 1017.067456][T32419] syzkaller0: entered allmulticast mode [ 1017.114217][T32417] wg1 speed is unknown, defaulting to 1000 [ 1017.128573][T32416] IPVS: set_ctl: invalid protocol: 222 10.1.1.1:20004 [ 1017.172237][T32416] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1017.195671][T32416] netlink: 'syz.5.7019': attribute type 33 has an invalid length. [ 1017.407336][T32404] tipc: Resetting bearer [ 1017.464472][T32423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1017.548198][T32403] tipc: Resetting bearer [ 1017.625324][T32403] tipc: Disabling bearer [ 1017.901744][T32435] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7028'. [ 1017.966645][T32429] syzkaller1: entered promiscuous mode [ 1017.993603][T32429] syzkaller1: entered allmulticast mode [ 1018.013032][T32417] lo speed is unknown, defaulting to 1000 [ 1018.258399][T32453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7033'. [ 1018.391127][T32462] netlink: 'syz.5.7034': attribute type 28 has an invalid length. [ 1018.501624][T32466] netlink: 'syz.0.7039': attribute type 3 has an invalid length. [ 1018.510083][T32466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7039'. [ 1018.521083][T32466] netlink: 'syz.0.7039': attribute type 3 has an invalid length. [ 1018.531243][T32466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7039'. [ 1018.575718][T32462] bridge_slave_0: left allmulticast mode [ 1018.591776][T32462] bridge_slave_0: left promiscuous mode [ 1018.606151][T32462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.650945][T32462] bridge_slave_1: left allmulticast mode [ 1018.659742][T32462] bridge_slave_1: left promiscuous mode [ 1018.666522][T32462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.718852][T32462] team_slave_0: left allmulticast mode [ 1018.726933][T32462] team0: Port device team_slave_0 removed [ 1018.734029][T32462] team_slave_1: left allmulticast mode [ 1018.740980][T32462] team0: Port device team_slave_1 removed [ 1018.748541][T32462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.757123][T32462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1019.111067][T32482] bond6: option arp_all_targets: invalid value (129) [ 1019.161564][T32482] bond6 (unregistering): Released all slaves [ 1019.347551][T32502] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7046'. [ 1019.598919][T32505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7049'. [ 1019.750336][T32519] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1020.844266][T32479] Bluetooth: hci1: command 0x0406 tx timeout [ 1020.852593][T32479] Bluetooth: hci6: command 0x0406 tx timeout [ 1020.950063][T32562] __nla_validate_parse: 1 callbacks suppressed [ 1020.950083][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7062'. [ 1020.987690][T32564] ip6gretap0: entered allmulticast mode [ 1021.081826][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7062'. [ 1021.136818][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7062'. [ 1021.169556][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7062'. [ 1021.208506][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7062'. [ 1021.275505][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7062'. [ 1021.286006][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7062'. [ 1021.299033][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7062'. [ 1021.327942][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7062'. [ 1021.469669][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7062'. [ 1021.740395][T32589] --map-set only usable from mangle table [ 1024.431300][T32574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1024.751951][T32635] syzkaller0: entered promiscuous mode [ 1024.785549][T32635] syzkaller0: entered allmulticast mode [ 1024.945549][T32645] tipc: Started in network mode [ 1024.956287][T32645] tipc: Node identity d6964d260379, cluster identity 4711 [ 1024.990713][T32645] tipc: Enabled bearer , priority 0 [ 1025.039213][T32634] tipc: Resetting bearer [ 1025.140765][T32634] tipc: Disabling bearer [ 1025.733372][T32682] team0: entered promiscuous mode [ 1025.889454][T32690] bridge_slave_0: left allmulticast mode [ 1025.937743][T32690] bridge_slave_0: left promiscuous mode [ 1025.965501][T32690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.071872][T32690] bridge_slave_1: left allmulticast mode [ 1026.108503][T32690] bridge_slave_1: left promiscuous mode [ 1026.128214][T32690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.211116][T32690] bond0: (slave bond_slave_0): Releasing backup interface [ 1026.275095][T32690] bond0: (slave bond_slave_1): Releasing backup interface [ 1026.322012][T32690] team0: Port device team_slave_0 removed [ 1026.368347][T32690] team0: Port device team_slave_1 removed [ 1026.386444][T32690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.408622][T32690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.425200][T32690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.459722][T32690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1026.477539][T32696] team0: Mode changed to "activebackup" [ 1026.779152][T32712] netlink: 'syz.6.7104': attribute type 1 has an invalid length. [ 1026.833553][T32718] netlink: 'syz.0.7106': attribute type 1 has an invalid length. [ 1026.859106][T32712] bond6: entered promiscuous mode [ 1026.865998][T32712] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1026.914876][T32718] bond2: entered promiscuous mode [ 1026.918796][T32722] __nla_validate_parse: 29 callbacks suppressed [ 1026.918815][T32722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7106'. [ 1026.920478][T32718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1026.968674][T32712] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7104'. [ 1026.977994][T32712] bond6: entered allmulticast mode [ 1027.048101][T32712] bond6: (slave bridge4): making interface the new active one [ 1027.072960][T32712] bridge4: entered promiscuous mode [ 1027.078688][T32712] bridge4: entered allmulticast mode [ 1027.090161][T32712] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 1027.496258][T32753] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7116'. [ 1027.608219][T32759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input8 [ 1027.630638][T32743] bridge0: left allmulticast mode [ 1027.675605][T32766] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1027.796905][T32754] syzkaller0: entered promiscuous mode [ 1027.827572][T32754] syzkaller0: entered allmulticast mode [ 1027.845012][T32756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7118'. [ 1027.908391][T32764] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1028.247501][ T318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7122'. [ 1028.663381][ T350] FAULT_INJECTION: forcing a failure. [ 1028.663381][ T350] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.678494][ T350] CPU: 1 UID: 0 PID: 350 Comm: syz.0.7134 Not tainted syzkaller #0 PREEMPT(full) [ 1028.678534][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1028.678549][ T350] Call Trace: [ 1028.678558][ T350] [ 1028.678567][ T350] dump_stack_lvl+0xe8/0x150 [ 1028.678601][ T350] should_fail_ex+0x412/0x560 [ 1028.678635][ T350] should_failslab+0xa8/0x100 [ 1028.678667][ T350] ? skb_clone+0x212/0x3a0 [ 1028.678696][ T350] kmem_cache_alloc_noprof+0x87/0x650 [ 1028.678722][ T350] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1028.678756][ T350] skb_clone+0x212/0x3a0 [ 1028.678790][ T350] ? dev_queue_xmit_nit+0x268/0xad0 [ 1028.678817][ T350] dev_queue_xmit_nit+0x29a/0xad0 [ 1028.678844][ T350] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1028.678881][ T350] dev_hard_start_xmit+0x1c1/0x830 [ 1028.678928][ T350] __dev_queue_xmit+0x14d9/0x3950 [ 1028.678956][ T350] ? __sys_sendmmsg+0x27c/0x4e0 [ 1028.678994][ T350] ? __dev_queue_xmit+0x2b6/0x3950 [ 1028.679033][ T350] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1028.679072][ T350] ? __copy_skb_header+0xa3/0x4a0 [ 1028.679133][ T350] ? skb_clone+0x246/0x3a0 [ 1028.679166][ T350] __netlink_deliver_tap+0x5ad/0x850 [ 1028.679208][ T350] ? netlink_deliver_tap+0x2e/0x1b0 [ 1028.679237][ T350] netlink_deliver_tap+0x19c/0x1b0 [ 1028.679265][ T350] netlink_unicast+0x730/0x8e0 [ 1028.679303][ T350] netlink_sendmsg+0x813/0xb40 [ 1028.679342][ T350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1028.679373][ T350] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1028.679403][ T350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1028.679435][ T350] ____sys_sendmsg+0x972/0x9f0 [ 1028.679463][ T350] ? __might_fault+0xaf/0x130 [ 1028.679497][ T350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1028.679536][ T350] ? import_iovec+0x73/0xa0 [ 1028.679576][ T350] ___sys_sendmsg+0x2a5/0x360 [ 1028.679603][ T350] ? __lock_acquire+0x6b5/0x2cf0 [ 1028.679631][ T350] ? __pfx____sys_sendmsg+0x10/0x10 [ 1028.679666][ T350] ? kstrtouint+0x6e/0xe0 [ 1028.679722][ T350] ? __fget_files+0x2a/0x420 [ 1028.679747][ T350] ? __fget_files+0x3a0/0x420 [ 1028.679784][ T350] __sys_sendmmsg+0x27c/0x4e0 [ 1028.679819][ T350] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1028.679844][ T350] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1028.679902][ T350] ? ksys_write+0x242/0x270 [ 1028.679934][ T350] ? __pfx_ksys_write+0x10/0x10 [ 1028.679972][ T350] __x64_sys_sendmmsg+0xa0/0xc0 [ 1028.680007][ T350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.680030][ T350] do_syscall_64+0x15f/0xf80 [ 1028.680053][ T350] ? trace_irq_disable+0x3b/0x140 [ 1028.680084][ T350] ? clear_bhb_loop+0x40/0x90 [ 1028.680120][ T350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.680141][ T350] RIP: 0033:0x7f067359cdd9 [ 1028.680163][ T350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.680181][ T350] RSP: 002b:00007f06744db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1028.680205][ T350] RAX: ffffffffffffffda RBX: 00007f0673815fa0 RCX: 00007f067359cdd9 [ 1028.680220][ T350] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000006 [ 1028.680234][ T350] RBP: 00007f06744db090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.680247][ T350] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 1028.680259][ T350] R13: 00007f0673816038 R14: 00007f0673815fa0 R15: 00007ffda0f91bf8 [ 1028.680296][ T350] [ 1029.404733][ T370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7138'. [ 1029.523543][ T370] bond7: entered promiscuous mode [ 1029.529420][ T370] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1029.745629][ T391] xfrm1: entered allmulticast mode [ 1029.883427][ T398] FAULT_INJECTION: forcing a failure. [ 1029.883427][ T398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.941770][ T398] CPU: 1 UID: 0 PID: 398 Comm: syz.0.7143 Not tainted syzkaller #0 PREEMPT(full) [ 1029.941801][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1029.941824][ T398] Call Trace: [ 1029.941833][ T398] [ 1029.941842][ T398] dump_stack_lvl+0xe8/0x150 [ 1029.941874][ T398] should_fail_ex+0x412/0x560 [ 1029.941907][ T398] _copy_from_user+0x2d/0xb0 [ 1029.941944][ T398] ___sys_sendmsg+0x1c6/0x360 [ 1029.941972][ T398] ? __lock_acquire+0x6b5/0x2cf0 [ 1029.942000][ T398] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.942033][ T398] ? kstrtouint+0x6e/0xe0 [ 1029.942084][ T398] ? __fget_files+0x2a/0x420 [ 1029.942108][ T398] ? __fget_files+0x3a0/0x420 [ 1029.942144][ T398] __sys_sendmmsg+0x27c/0x4e0 [ 1029.942177][ T398] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1029.942202][ T398] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1029.942257][ T398] ? ksys_write+0x242/0x270 [ 1029.942290][ T398] ? __pfx_ksys_write+0x10/0x10 [ 1029.942327][ T398] __x64_sys_sendmmsg+0xa0/0xc0 [ 1029.942354][ T398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.942377][ T398] do_syscall_64+0x15f/0xf80 [ 1029.942399][ T398] ? trace_irq_disable+0x3b/0x140 [ 1029.942428][ T398] ? clear_bhb_loop+0x40/0x90 [ 1029.942455][ T398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.942475][ T398] RIP: 0033:0x7f067359cdd9 [ 1029.942495][ T398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.942513][ T398] RSP: 002b:00007f06744db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1029.942537][ T398] RAX: ffffffffffffffda RBX: 00007f0673815fa0 RCX: 00007f067359cdd9 [ 1029.942552][ T398] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 1029.942567][ T398] RBP: 00007f06744db090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.942580][ T398] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 1029.942592][ T398] R13: 00007f0673816038 R14: 00007f0673815fa0 R15: 00007ffda0f91bf8 [ 1029.942627][ T398] [ 1029.999214][ T404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7146'. [ 1031.014745][ T452] FAULT_INJECTION: forcing a failure. [ 1031.014745][ T452] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.070375][ T452] CPU: 1 UID: 0 PID: 452 Comm: syz.0.7158 Not tainted syzkaller #0 PREEMPT(full) [ 1031.070406][ T452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1031.070419][ T452] Call Trace: [ 1031.070428][ T452] [ 1031.070438][ T452] dump_stack_lvl+0xe8/0x150 [ 1031.070470][ T452] should_fail_ex+0x412/0x560 [ 1031.070501][ T452] should_failslab+0xa8/0x100 [ 1031.070532][ T452] ? dst_alloc+0x105/0x170 [ 1031.070561][ T452] kmem_cache_alloc_noprof+0x87/0x650 [ 1031.070598][ T452] dst_alloc+0x105/0x170 [ 1031.070625][ T452] ? ip_check_mc_rcu+0x400/0x680 [ 1031.070652][ T452] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1031.070691][ T452] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1031.070720][ T452] ip_route_output_key_hash+0x18d/0x2a0 [ 1031.070749][ T452] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1031.070793][ T452] ip_route_output_flow+0x2a/0x150 [ 1031.070815][ T452] ? security_sk_classify_flow+0x6d/0x150 [ 1031.070849][ T452] udp_sendmsg+0x141a/0x21a0 [ 1031.070876][ T452] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1031.070917][ T452] ? __pfx_udp_sendmsg+0x10/0x10 [ 1031.070968][ T452] ? aa_sk_perm+0x6d5/0x900 [ 1031.071002][ T452] ? __pfx_aa_sk_perm+0x10/0x10 [ 1031.071023][ T452] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1031.071057][ T452] ? sock_rps_record_flow+0x19/0x350 [ 1031.071090][ T452] ? inet_sendmsg+0x29c/0x370 [ 1031.071131][ T452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1031.071164][ T452] ____sys_sendmsg+0x80a/0x9f0 [ 1031.071189][ T452] ? irqentry_exit+0x218/0x730 [ 1031.071214][ T452] ? trace_irq_disable+0x3b/0x140 [ 1031.071252][ T452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1031.071291][ T452] ? import_iovec+0x73/0xa0 [ 1031.071324][ T452] ___sys_sendmsg+0x2a5/0x360 [ 1031.071350][ T452] ? __lock_acquire+0x6b5/0x2cf0 [ 1031.071379][ T452] ? __pfx____sys_sendmsg+0x10/0x10 [ 1031.071413][ T452] ? kstrtouint+0x6e/0xe0 [ 1031.071469][ T452] ? __fget_files+0x2a/0x420 [ 1031.071493][ T452] ? __fget_files+0x3a0/0x420 [ 1031.071531][ T452] __sys_sendmmsg+0x27c/0x4e0 [ 1031.071564][ T452] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1031.071589][ T452] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1031.071646][ T452] ? ksys_write+0x242/0x270 [ 1031.071677][ T452] ? __pfx_ksys_write+0x10/0x10 [ 1031.071715][ T452] __x64_sys_sendmmsg+0xa0/0xc0 [ 1031.071742][ T452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.071765][ T452] do_syscall_64+0x15f/0xf80 [ 1031.071789][ T452] ? trace_irq_disable+0x3b/0x140 [ 1031.071819][ T452] ? clear_bhb_loop+0x40/0x90 [ 1031.071844][ T452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.071864][ T452] RIP: 0033:0x7f067359cdd9 [ 1031.071886][ T452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.071904][ T452] RSP: 002b:00007f06744db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1031.071928][ T452] RAX: ffffffffffffffda RBX: 00007f0673815fa0 RCX: 00007f067359cdd9 [ 1031.071944][ T452] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 1031.071958][ T452] RBP: 00007f06744db090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.071971][ T452] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 1031.071985][ T452] R13: 00007f0673816038 R14: 00007f0673815fa0 R15: 00007ffda0f91bf8 [ 1031.072021][ T452] [ 1031.477591][ T461] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7160'. [ 1031.525540][ T460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7161'. [ 1031.560595][ T461] team0: Port device bridge5 added [ 1031.570738][ T461] bridge0: port 3(team0) entered blocking state [ 1031.577287][ T461] bridge0: port 3(team0) entered disabled state [ 1031.587328][ T461] team0: entered allmulticast mode [ 1031.592206][ T460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7161'. [ 1031.592718][ T461] team_slave_0: entered allmulticast mode [ 1031.608048][ T461] team_slave_1: entered allmulticast mode [ 1031.614189][ T461] bridge5: entered allmulticast mode [ 1031.625179][ T461] team0: entered promiscuous mode [ 1031.630371][ T461] team_slave_0: entered promiscuous mode [ 1031.636310][ T461] team_slave_1: entered promiscuous mode [ 1031.642197][ T461] bridge5: entered promiscuous mode [ 1031.925558][ T484] netlink: 'syz.0.7168': attribute type 1 has an invalid length. [ 1032.023675][ T487] __nla_validate_parse: 2 callbacks suppressed [ 1032.023699][ T487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7168'. [ 1032.188672][ T484] bond3: entered promiscuous mode [ 1032.267003][ T484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1032.290705][ T487] bond3: entered allmulticast mode [ 1032.449639][ T484] bond3: (slave bridge4): making interface the new active one [ 1032.482598][ T484] bridge4: entered promiscuous mode [ 1032.488247][ T484] bridge4: entered allmulticast mode [ 1032.506808][ T484] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1032.609937][ T515] xt_hashlimit: size too large, truncated to 1048576 [ 1032.680376][ T508] –: renamed from vxcan1 [ 1032.755369][ T521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7174'. [ 1032.831131][ T510] wg1 speed is unknown, defaulting to 1000 [ 1033.437018][ T541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7183'. [ 1033.463117][ T541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7183'. [ 1033.491243][ T541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7183'. [ 1033.519775][ T541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7183'. [ 1033.588915][ T547] netlink: 'syz.2.7184': attribute type 4 has an invalid length. [ 1033.613555][ T541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7183'. [ 1033.615168][T31428] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.640527][ T547] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7184'. [ 1033.647266][ T541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7183'. [ 1033.680417][T31428] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.711438][T31428] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.736662][T31428] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.747780][ T548] netlink: 'syz.2.7184': attribute type 4 has an invalid length. [ 1033.763044][ T548] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7184'. [ 1033.783600][ T555] netlink: 'syz.6.7187': attribute type 10 has an invalid length. [ 1033.895614][ T555] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 1034.014372][ T510] lo speed is unknown, defaulting to 1000 [ 1034.141873][ T567] netlink: 'syz.2.7190': attribute type 13 has an invalid length. [ 1035.538936][ T617] netlink: 'syz.2.7203': attribute type 2 has an invalid length. [ 1036.159762][ T657] netlink: 'syz.3.7210': attribute type 1 has an invalid length. [ 1036.378961][ T657] bond11: entered promiscuous mode [ 1036.418986][ T657] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1036.464361][ T665] bond11: entered allmulticast mode [ 1036.573758][ T657] bond11: (slave bridge11): making interface the new active one [ 1036.617074][ T657] bridge11: entered promiscuous mode [ 1036.637960][ T657] bridge11: entered allmulticast mode [ 1036.662710][ T657] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 1037.635481][ T743] sit0: entered promiscuous mode [ 1037.659609][ T743] netlink: 'syz.6.7229': attribute type 1 has an invalid length. [ 1037.731888][ T743] __nla_validate_parse: 8 callbacks suppressed [ 1037.731909][ T743] netlink: 1 bytes leftover after parsing attributes in process `syz.6.7229'. [ 1038.060686][ T757] openvswitch: netlink: Multiple metadata blocks provided [ 1038.260589][ T761] sctp: [Deprecated]: syz.3.7235 (pid 761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1038.260589][ T761] Use struct sctp_sack_info instead [ 1038.336031][ T765] netlink: 'syz.2.7236': attribute type 11 has an invalid length. [ 1038.375032][ T765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7236'. [ 1038.449941][ T764] wg1 speed is unknown, defaulting to 1000 [ 1039.096880][ T787] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1039.133209][ T789] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1039.189141][ T787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1039.311919][ T764] lo speed is unknown, defaulting to 1000 [ 1039.498571][ T793] IPVS: Scheduler module ip_vs_sip not found [ 1039.547168][ T775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7238'. [ 1039.796013][ T815] netlink: 388 bytes leftover after parsing attributes in process `syz.2.7249'. [ 1039.832565][ T815] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1040.189566][ T825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1040.251847][ T827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7254'. [ 1040.580368][ T847] netlink: 'syz.6.7259': attribute type 1 has an invalid length. [ 1040.687924][ T856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7262'. [ 1040.693465][ T847] bond8: entered promiscuous mode [ 1040.701817][ T859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7259'. [ 1040.711632][ T847] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1040.721291][ T859] bond8: entered allmulticast mode [ 1040.747236][ T853] netlink: 180568 bytes leftover after parsing attributes in process `syz.3.7260'. [ 1040.807165][ T847] bond8: (slave bridge6): making interface the new active one [ 1040.834623][ T847] bridge6: entered promiscuous mode [ 1040.855906][ T847] bridge6: entered allmulticast mode [ 1040.879111][ T847] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 1041.139823][ T872] veth0_vlan: left allmulticast mode [ 1041.184126][ T872] bond0: left promiscuous mode [ 1041.194563][ T879] netlink: 'syz.2.7269': attribute type 2 has an invalid length. [ 1041.201282][ T881] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7267'. [ 1041.203924][ T882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7268'. [ 1041.221513][ T872] bridge1: left promiscuous mode [ 1041.232550][ T879] netlink: 'syz.2.7269': attribute type 2 has an invalid length. [ 1041.287941][ T872] ipvlan2: left allmulticast mode [ 1041.296908][ T872] bond0: left allmulticast mode [ 1041.304741][ T872] bridge1: left allmulticast mode [ 1041.320949][ T889] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1041.335123][ T872] vlan2: left allmulticast mode [ 1041.340518][ T872] team0: left allmulticast mode [ 1041.356382][ T888] netlink: 'syz.3.7273': attribute type 1 has an invalid length. [ 1041.453669][ T872] bond1: left promiscuous mode [ 1041.476355][ T872] bridge2: left promiscuous mode [ 1041.505456][ T872] bond1: left allmulticast mode [ 1041.534142][ T872] bridge2: left allmulticast mode [ 1041.650317][ T872] bond2: left promiscuous mode [ 1041.666303][ T872] bridge3: left promiscuous mode [ 1041.671607][ T872] bond2: left allmulticast mode [ 1041.677550][ T872] bridge3: left allmulticast mode [ 1041.757523][ T872] ip6gre1: left promiscuous mode [ 1041.770939][ T872] ip6gre1: left allmulticast mode [ 1041.792240][ T872] bond3: left promiscuous mode [ 1041.801322][ T872] bridge4: left promiscuous mode [ 1041.935593][ T888] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1041.996290][ T893] bond12: (slave veth3): Enslaving as an active interface with a down link [ 1042.019987][ T899] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1042.032815][ T899] bond12: (slave batadv1): making interface the new active one [ 1042.076942][ T899] batadv1: entered promiscuous mode [ 1042.090176][ T899] bond12: (slave batadv1): Enslaving as an active interface with an up link [ 1042.151999][ T903] bond12 (unregistering): (slave veth3): Releasing active interface [ 1042.185306][ T903] bond12 (unregistering): (slave batadv1): Releasing active interface [ 1042.206813][ T903] bond12 (unregistering): Released all slaves [ 1042.259399][T31443] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.276151][T31443] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.290607][T31443] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.334456][T31443] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.450324][ T30] INFO: task syz.1.5931:28325 blocked for more than 143 seconds. [ 1042.484872][ T30] Not tainted syzkaller #0 [ 1042.506001][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1042.519983][ T30] task:syz.1.5931 state:D stack:25112 pid:28325 tgid:28324 ppid:18884 task_flags:0x400140 flags:0x00080002 [ 1042.533283][ T30] Call Trace: [ 1042.542200][ T30] [ 1042.546607][ T30] __schedule+0x17b4/0x5680 [ 1042.552305][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1042.555044][ T951] netlink: 'syz.6.7281': attribute type 1 has an invalid length. [ 1042.557810][ T30] ? __pfx___schedule+0x10/0x10 [ 1042.571393][ T30] ? schedule+0x90/0x360 [ 1042.578650][ T30] schedule+0x164/0x360 [ 1042.583955][ T30] schedule_preempt_disabled+0x13/0x30 [ 1042.589698][ T30] __mutex_lock+0x7f7/0x1550 [ 1042.594737][ T30] ? __mutex_lock+0x608/0x1550 [ 1042.600309][ T30] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 1042.616474][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1042.621824][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1042.627616][ T30] ? genlmsg_put+0x137/0x2e0 [ 1042.632782][ T30] nfsd_nl_version_get_doit+0x17c/0xc40 [ 1042.638583][ T30] ? __nla_parse+0x40/0x60 [ 1042.643542][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1042.649888][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1042.656727][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1042.663485][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1042.669164][ T30] ? __asan_memcpy+0x40/0x70 [ 1042.674280][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1042.680540][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1042.685770][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1042.690368][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1042.695725][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1042.702097][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1042.707069][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1042.712485][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1042.718047][ T30] ? down_read+0x270/0x2e0 [ 1042.722781][ T30] ? genl_rcv+0xd/0x40 [ 1042.727086][ T30] genl_rcv+0x28/0x40 [ 1042.731211][ T30] netlink_unicast+0x75c/0x8e0 [ 1042.736327][ T30] netlink_sendmsg+0x813/0xb40 [ 1042.741281][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1042.750352][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1042.760004][ T960] __nla_validate_parse: 4 callbacks suppressed [ 1042.760025][ T960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7282'. [ 1042.779866][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1042.783305][ T960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7282'. [ 1042.788386][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1042.808109][ T30] ? __might_fault+0xaf/0x130 [ 1042.812960][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1042.818445][ T30] ? import_iovec+0x73/0xa0 [ 1042.823236][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1042.828018][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1042.833400][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1042.838771][ T30] ? futex_wait+0x2a2/0x390 [ 1042.845061][ T30] ? __fget_files+0x2a/0x420 [ 1042.849824][ T30] ? __fget_files+0x3a0/0x420 [ 1042.854582][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1042.859564][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1042.865328][ T30] ? rcu_is_watching+0x15/0xb0 [ 1042.870173][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.876679][ T30] do_syscall_64+0x15f/0xf80 [ 1042.881467][ T30] ? trace_irq_disable+0x3b/0x140 [ 1042.886842][ T30] ? clear_bhb_loop+0x40/0x90 [ 1042.891627][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.897773][ T30] RIP: 0033:0x7f4424b9cdd9 [ 1042.902245][ T30] RSP: 002b:00007f4425a0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.910936][ T30] RAX: ffffffffffffffda RBX: 00007f4424e15fa0 RCX: 00007f4424b9cdd9 [ 1042.919110][ T30] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1042.933516][ T30] RBP: 00007f4424c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1042.941670][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.950824][ T30] R13: 00007f4424e16038 R14: 00007f4424e15fa0 R15: 00007fff3072fef8 [ 1042.959048][ T30] [ 1042.964799][ T30] [ 1042.964799][ T30] Showing all locks held in the system: [ 1042.998755][ T30] 1 lock held by khungtaskd/30: [ 1043.007810][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1043.018685][ T30] 2 locks held by getty/5379: [ 1043.023705][ T30] #0: ffff8880373d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1043.033837][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1043.047427][ T30] 3 locks held by kworker/0:6/22361: [ 1043.053049][ T30] 3 locks held by kworker/0:16/22369: [ 1043.058544][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1043.069891][ T30] #1: ffffc90000b27c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1043.081105][ T30] #2: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1043.092836][ T30] 3 locks held by kworker/1:8/22802: [ 1043.098254][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1043.109969][ T30] #1: ffffc90004f67c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1043.123333][ T30] #2: ffff88809f968250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 1043.134129][ T30] 1 lock held by udevd/23319: [ 1043.139084][ T30] #0: ffff8880274e0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1043.148981][ T30] 2 locks held by syz.4.5919/28269: [ 1043.154515][ T30] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1043.163466][ T30] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1043.174106][ T30] 2 locks held by syz.1.5931/28325: [ 1043.179494][ T30] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1043.188557][ T30] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 1043.199195][ T30] 2 locks held by syz.2.7277/922: [ 1043.204654][ T30] #0: ffff88803c9b5640 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1043.215090][ T30] #1: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bc/0x9f0 [ 1043.224719][ T30] 1 lock held by syz.5.7280/937: [ 1043.229701][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1043.238960][ T30] 2 locks held by syz.3.7282/958: [ 1043.244365][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1043.253783][ T30] #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1043.265542][ T30] [ 1043.267965][ T30] ============================================= [ 1043.267965][ T30] [ 1043.276947][ T30] NMI backtrace for cpu 1 [ 1043.276967][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1043.276989][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1043.277002][ T30] Call Trace: [ 1043.277010][ T30] [ 1043.277020][ T30] dump_stack_lvl+0xe8/0x150 [ 1043.277050][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1043.277080][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1043.277105][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1043.277136][ T30] sys_info+0x135/0x170 [ 1043.277160][ T30] watchdog+0xfd3/0x1030 [ 1043.277198][ T30] ? watchdog+0x1c9/0x1030 [ 1043.277235][ T30] kthread+0x388/0x470 [ 1043.277261][ T30] ? __pfx_watchdog+0x10/0x10 [ 1043.277285][ T30] ? __pfx_kthread+0x10/0x10 [ 1043.277311][ T30] ret_from_fork+0x514/0xb70 [ 1043.277336][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.277355][ T30] ? __switch_to+0xc79/0x1410 [ 1043.277384][ T30] ? __pfx_kthread+0x10/0x10 [ 1043.277411][ T30] ret_from_fork_asm+0x1a/0x30 [ 1043.277452][ T30] [ 1043.277460][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1043.298357][ T958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.301729][ C0] NMI backtrace for cpu 0 [ 1043.301746][ C0] CPU: 0 UID: 0 PID: 958 Comm: syz.3.7282 Not tainted syzkaller #0 PREEMPT(full) [ 1043.301766][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1043.301776][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 1043.301810][ C0] Code: 03 81 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 dc 3e ec fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 1043.301825][ C0] RSP: 0018:ffffc90005706310 EFLAGS: 00000002 [ 1043.301842][ C0] RAX: 000000000000005b RBX: 000000000000005b RCX: 0000000000000000 [ 1043.301853][ C0] RDX: 00000000000003f8 RSI: 0000000000052cd7 RDI: 0000000000052cd8 [ 1043.301864][ C0] RBP: 00000000000003f8 R08: ffff888026210237 R09: 1ffff11004c42046 [ 1043.301877][ C0] R10: dffffc0000000000 R11: ffffffff8544a7e0 R12: dffffc0000000000 [ 1043.301889][ C0] R13: ffffffff9a4869a1 R14: ffffffff9a79f840 R15: 0000000000000000 [ 1043.301901][ C0] FS: 00007f42c368d6c0(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 1043.301916][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1043.301927][ C0] CR2: 00007ffda0f92000 CR3: 000000006519a000 CR4: 00000000003526f0 [ 1043.301945][ C0] Call Trace: [ 1043.301952][ C0] [ 1043.301962][ C0] serial8250_console_write+0x140c/0x1ba0 [ 1043.301988][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1043.302005][ C0] ? console_flush_all+0x123/0xb20 [ 1043.302031][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1043.302055][ C0] ? console_flush_all+0x123/0xb20 [ 1043.302077][ C0] console_flush_all+0x718/0xb20 [ 1043.302101][ C0] ? console_flush_all+0x123/0xb20 [ 1043.302125][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1043.302156][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1043.302174][ C0] console_unlock+0xd1/0x1c0 [ 1043.302194][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.302214][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1043.302234][ C0] ? vprintk_emit+0x200/0x560 [ 1043.302254][ C0] ? vprintk_emit+0x455/0x560 [ 1043.302274][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.302292][ C0] ? vprintk_emit+0x2cf/0x560 [ 1043.302313][ C0] vprintk_emit+0x485/0x560 [ 1043.302334][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1043.302354][ C0] ? __queue_work+0x1a1/0xfc0 [ 1043.302382][ C0] _printk+0xdd/0x130 [ 1043.302409][ C0] ? __pfx__printk+0x10/0x10 [ 1043.302431][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1043.302450][ C0] ? switchdev_deferred_enqueue+0x1fe/0x240 [ 1043.302472][ C0] br_set_state+0x493/0x730 [ 1043.302498][ C0] ? __pfx_br_set_state+0x10/0x10 [ 1043.302522][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1043.302545][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1043.302566][ C0] ? br_become_designated_port+0x20/0x250 [ 1043.302591][ C0] br_stp_disable_port+0x76/0x1d0 [ 1043.302609][ C0] br_stp_disable_bridge+0x81/0x150 [ 1043.302628][ C0] br_dev_stop+0x2d/0x180 [ 1043.302642][ C0] ? __pfx_br_dev_stop+0x10/0x10 [ 1043.302658][ C0] __dev_close_many+0x36d/0x6e0 [ 1043.302678][ C0] ? __pfx___dev_close_many+0x10/0x10 [ 1043.302693][ C0] ? __dev_change_flags+0x2b0/0x7e0 [ 1043.302714][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1043.302733][ C0] __dev_change_flags+0x3c1/0x7e0 [ 1043.302755][ C0] ? __pfx___dev_change_flags+0x10/0x10 [ 1043.302774][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1043.302800][ C0] netif_change_flags+0x88/0x1a0 [ 1043.302822][ C0] do_setlink+0xfa5/0x45a0 [ 1043.302844][ C0] ? arch_stack_walk+0xfb/0x150 [ 1043.302869][ C0] ? __pfx_do_setlink+0x10/0x10 [ 1043.302889][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1043.302923][ C0] ? __mutex_trylock_common+0x158/0x260 [ 1043.302946][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1043.302969][ C0] ? rcu_is_watching+0x15/0xb0 [ 1043.302988][ C0] ? trace_contention_end+0x3d/0x140 [ 1043.303010][ C0] ? __mutex_lock+0x319/0x1550 [ 1043.303029][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 1043.303058][ C0] ? rtnl_newlink+0x883/0x1bb0 [ 1043.303078][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1043.303104][ C0] ? ns_capable+0x89/0xe0 [ 1043.303124][ C0] rtnl_newlink+0x14ca/0x1bb0 [ 1043.303155][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 1043.303172][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.303206][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1043.303227][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1043.303249][ C0] ? nlmon_xmit+0xb0/0x100 [ 1043.303266][ C0] ? kmem_cache_free+0x182/0x650 [ 1043.303294][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1043.303313][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1043.303336][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1043.303352][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1043.303370][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1043.303390][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1043.303406][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1043.303430][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1043.303456][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 1043.303474][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1043.303494][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1043.303511][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1043.303528][ C0] ? ref_tracker_free+0x693/0x840 [ 1043.303550][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 1043.303575][ C0] netlink_rcv_skb+0x232/0x4b0 [ 1043.303595][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1043.303615][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1043.303640][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1043.303659][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1043.303681][ C0] netlink_unicast+0x75c/0x8e0 [ 1043.303704][ C0] netlink_sendmsg+0x813/0xb40 [ 1043.303728][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1043.303749][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1043.303771][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1043.303794][ C0] ____sys_sendmsg+0x972/0x9f0 [ 1043.303814][ C0] ? __might_fault+0xaf/0x130 [ 1043.303837][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1043.303862][ C0] ? import_iovec+0x73/0xa0 [ 1043.303885][ C0] ___sys_sendmsg+0x2a5/0x360 [ 1043.303904][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1043.303923][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1043.303946][ C0] ? futex_wake+0x4ac/0x580 [ 1043.303980][ C0] ? __fget_files+0x2a/0x420 [ 1043.303998][ C0] ? __fget_files+0x3a0/0x420 [ 1043.304022][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1043.304043][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1043.304068][ C0] ? rcu_is_watching+0x15/0xb0 [ 1043.304091][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.304108][ C0] do_syscall_64+0x15f/0xf80 [ 1043.304126][ C0] ? trace_irq_disable+0x3b/0x140 [ 1043.304156][ C0] ? clear_bhb_loop+0x40/0x90 [ 1043.304174][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.304191][ C0] RIP: 0033:0x7f42c279cdd9 [ 1043.304206][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.304219][ C0] RSP: 002b:00007f42c368d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1043.304237][ C0] RAX: ffffffffffffffda RBX: 00007f42c2a16180 RCX: 00007f42c279cdd9 [ 1043.304248][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 1043.304259][ C0] RBP: 00007f42c2832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1043.304269][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.304280][ C0] R13: 00007f42c2a16218 R14: 00007f42c2a16180 R15: 00007ffe1c6d9038 [ 1043.304301][ C0] [ 1043.305040][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1043.305057][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1043.305080][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1043.305092][ T30] Call Trace: [ 1043.305100][ T30] [ 1043.305109][ T30] vpanic+0x56c/0xa60 [ 1043.305134][ T30] ? __pfx___schedule+0x10/0x10 [ 1043.305156][ T30] ? __pfx_vpanic+0x10/0x10 [ 1043.305187][ T30] panic+0xc5/0xd0 [ 1043.305207][ T30] ? __pfx_panic+0x10/0x10 [ 1043.305230][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1043.305262][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1043.305293][ T30] watchdog+0x102c/0x1030 [ 1043.305327][ T30] ? watchdog+0x1c9/0x1030 [ 1043.305359][ T30] kthread+0x388/0x470 [ 1043.305384][ T30] ? __pfx_watchdog+0x10/0x10 [ 1043.305408][ T30] ? __pfx_kthread+0x10/0x10 [ 1043.305434][ T30] ret_from_fork+0x514/0xb70 [ 1043.305458][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.305478][ T30] ? __switch_to+0xc79/0x1410 [ 1043.305508][ T30] ? __pfx_kthread+0x10/0x10 [ 1043.305533][ T30] ret_from_fork_asm+0x1a/0x30 [ 1043.305571][ T30] [ 1043.308278][ T30] Kernel Offset: disabled