last executing test programs: 5.932995196s ago: executing program 1 (id=2342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x62, 0x0, &(0x7f0000000780)) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb) write(r1, &(0x7f0000000000)="fec6e3280aebe5a91ebe5e3ef2d74c6ddb850b81c8a29e8437679aae9a48bd5dc2dff962ba1ad7ee6e480e9041c6151646aba75bbcbce9d9de1aab57465d8da6e88a4ec9f5", 0x45) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="f715fc48a3379eb1be2441c5300f4146321d1858dab5c694e6431740092ba1a75f3648a10ccb19410a24adb455d97f2aa5a2c832e5709d02d0f33b46a1805e2d37d64431f9370c28fa12e9e032b9084ed50afe5add201f6c9410a5a85bb857eeecfcc174e79fb86ada07c463c99cd322de5616dc9fbc49de811e018b6d6a1dd2b1b577e73cc1239ab408b50757d1656071a15c30", 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 2.69055149s ago: executing program 1 (id=2349): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0x1, 0x2, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) (async) unshare(0x22020600) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20040894) (async) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f00000000c0)) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r5, &(0x7f0000000100)={0x27, 0x0, 0xffffffff, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) (async) getsockname(r5, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) (async) close(r8) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) 2.689053911s ago: executing program 0 (id=2350): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x1000006, 0x692}, 0x10) sendto$inet6(r1, &(0x7f0000000040)="78d6", 0x2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x1000006, 0x692}, 0x10) (async) sendto$inet6(r1, &(0x7f0000000040)="78d6", 0x2, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) (async) 2.58423523s ago: executing program 2 (id=2353): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) getsockname$l2tp6(r3, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000003c0)=0x20) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x12c, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x60}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xa9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x30}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40805}, 0x4) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x3c, r6, 0x507, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x3c}}, 0x0) 2.522667134s ago: executing program 3 (id=2354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0xffffffffffffff6d) (async, rerun: 64) shutdown(r2, 0x0) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x5fc0}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff0200"/53], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000611100000000000006000000feffffff9500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x28) 2.393896406s ago: executing program 0 (id=2356): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='@:@\\-&\x00', 0x169141, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8000]}, {0x86, 0xf, 0x8000, 0x9}}, 0x3ff, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x10}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000180)=0x2cfe, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x120080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1b, 0x2, 0x70bd29, 0x25dfdbfd, {0x20}, [@generic="fbce"]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20040814) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000002c0)={'ip6_vti0\x00', 0xd62c}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x6, 0x1, {{0x15, 0x4, 0x0, 0x15, 0x54, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast1, @private=0xa010101, {[@ssrr={0x89, 0x27, 0x87, [@multicast1, @empty, @loopback, @broadcast, @empty, @multicast2, @private=0xa010101, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2d}]}, @end, @noop, @ssrr={0x89, 0x17, 0x41, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @loopback]}]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x81) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r0}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001040)={&(0x7f0000000580), 0xc, &(0x7f0000001000)={&(0x7f0000000600)={0x9f0, r7, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7ef}, @NL80211_ATTR_FRAME={0x757, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @random="94942301acf4", {0x6, 0x3}, @value=@ver_80211n={0x0, 0x12c9, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x6, @random=0xfffa, 0x2, @void, @val={0x1, 0x1, [{0x18, 0x1}]}, @val={0x3, 0x1, 0x80}, @val={0x4, 0x6, {0x2, 0x6, 0x7f, 0x1}}, @val={0x6, 0x2, 0x7}, @val={0x5, 0xcd, {0x80, 0xec, 0x8, "f75cb44bb485a2ff08a42fc2ef7447e2ea3a5fab3c38f5f98d0982402415c0757b3b8d83fa5783abec645e1d59459b60a446314eaa4985bbfc9106874751f12105f1c1fe6d350edc65bcff9068b70b7f50893f9bf719055f4fe389f0f9cb3c6ed61a5fb53d5833b286d67f84726e3a0705033d73693192da49e53ea4ff3d8621d51958d175246f89991e1cd549ea4db32cb6b17a9a991056082371eade36b3b96e2bc281be30aba89c4f06dc417e4ee023a6c784480e0da4db81f86462eb2ce04d4f6c2f72bb75becbfd"}}, @val={0x25, 0x3, {0x1, 0x8, 0x7f}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xc0, 0x7c, 0x9d}}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x4, 0x0, {0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x80, 0xff}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x6, 0x60}}, @void, [{0xdd, 0x3a, "316285fe57cc8f41e8e28a0388fcff7a29706779f5011f3a322634cbcb769242b3c337473db7cdd743c1c02c768c2c3f52dab2d7573369bd21e3"}, {0xdd, 0x63, "3cb17a0e56ab75a7bcc7f2de95ef88454f66f6dffd4313645f257ad726cbe24e7b42a897382d8a277209d6b21eebbd6377ea5dc9b790fd0252c7ac98978eb3a35e6d7d98ac5fbfc39e6cefadd5293e31db19d53acdad3a96fd2ae8305934abf2851b26"}, {0xdd, 0xc2, "c0f9c4468976e228093afbe2758b1c8e6ad9acbf310d3de8f89c4910a86a4f7ced445ffbb23e92b9a312472de304db102f9ae7d8f849429f5e88e12ba93f440c3d43d8ad744339ed24057aab6f093cb7fa8362527256137f09e33200395952509d5a837f3e315a54eb4ed8f9c37f7f0ccf8413c921476f29dcf4aa01f13b27dd9d87d266db3ac38eecd74ac61c824fba504d9d06b16133bb8c68e563479f08180b0b0ab93f3da65690222842b4b882bfdc078206ac3083952d0e6724804eb1726883"}, {0xdd, 0xa8, "96ac6fb52f01a7f85a12d2c69a7e7a2c489cfd22701ce5151f4b75c0a8aaef16b274d90d01848214451cf46dcd6779eee81237156b11286941694068b055c9274a249e13a27e57f62427e1bbc4c56f0047bb11fd0fb13c2cf19286ae4df1b034be14ec054fc5b3ced62ca9ba519d0a998f943fb5ef9da3870e3b120c08b70d0edc474ca21e560d3ab8f704fd9123b42babd60da97f256751b137fde2b79e5f1eae765cacd0ba19c4"}, {0xdd, 0xe6, "947061776e14a45d068c858f2ca66875390d08f8d478b54c84104134fa49f3c8b54257e6ddd9ea8126ac0cf4589744dd2315b572d90b5457781166b0329ce5dff09ee5dcf63ae358cde59f7673163d8017a896c4ee8fbb861d290ee14df0b62a6869a2282b6acb783b2cc1445bbb9159107d6856beee08c873ae9c5c37f0d223cdf3126810fad45dfa4ab2ff906af0919c29945a5883d79b7c64d1070867857da4c7d6cfa04e1606ec8ee427ef2e51b1092dcd9b221f33787474f90f06e482908800149d48cc4dc79064bc434b7a35ec6c59bd8db86eb8d371910973dd54bc75a80a329f3e67"}, {0xdd, 0xe2, "27397c15536bb7fdc2d7ad2b0ed4e047a5619bf36e40a1d68e77d06d5c966ff9f6e16383148eeaddf36c13b500cd476f4db9699307b7981021e50042171714d5663bea743f55300b8eefcc2917c70e86a1577cfe944e3f60856828c9ed8b5e3aaa119f0a84ec8339741d240d518ecea7a5df63f6f2230c042a72b70b5eb9977bc82a001c75cd53b23ad07e62eff8b74f85f3ddc6ab76e2a7ae8419b8f2aa94315812e3fb4009dd2fd7ad51a6b7506580238d66b8122acd991f2f418adc1804aae3895255bad9ed0092c01a664dbecb35ee36dd810101184c88a8fae3be1c55e99159"}, {0xdd, 0xc3, "59433833ef2b50bda65ac815e6d089686fa3b9d4d2ac75caa5cd3e82ba72b446942425fdd45aea62062395bd7f2fa13c35267bc331d8f4e720d1eff9e18e8c86f5eeefc83fab8f82499cbebea9af3ab0bd493b7afe05a34a4083370df04078ce1ac3a1c72ff4dc8963b9322b7375a36b4352c12f421b770024718eab09a92e369131f7ffe586d63f4a372ef5c4d6b0061d81f49aeb8c39b2ae945b2c350b095f685c1a0d224630c0aa3da7bcfc25490f3d83960a20ae584c701e645c7a4b740b889af7"}, {0xdd, 0xc6, "240d4922a597094480e11ffa7c15b4a48b890f1d4b2099007df69341762fe31ed14662362db8c5d6420ce44257a3baeb8431c5f9f7f6329199125b1296b4df67e9ec878f0486ed9100017527364b9b0025251ba0a57b14763a7af90bcc4e2e2a2f4c6522321089c2d93ac439ecfbcd74a80069f2b27ae46e5ef3ee3e53495e54f728609445e808e7720e167def03668877dc49d9007a02f52a709c2aa2f907b6735b1eb1144080cd953444c2ced4666d5ced7da2e16ba888c90e23401499dc6e2a4be06c17f0"}, {0xdd, 0xa5, "6ed868bf6ecf52e36dae432d0f5947eb3ff1fb7460aea18d06fa1ee11496c913c1f8787e000d645d47d580a3e3a671649e40481185d649c5205bf6c0bcd878e0c34be91f5f85ea4bb06b84ccb73613c86c64596e993ac2f51a58b6c32b8390f3a003976be8e7ef7c8adeddfe58b9e24c1060977d28211ddb7de9147febd4f93d0ff403c01acd97599380b8e8166ae8d109dfa4ffe49c42b7758a9bc332e1cd896547922bfc"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc4b}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x0, 0x5e, 0x8, 0x10f, 0x8, 0x6, 0x1, 0x2]}, @NL80211_ATTR_FRAME={0x23f, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xff}, @device_b, @broadcast, @from_mac, {0x6, 0x7f}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0xf010, 0x3, @device_a, {0x0, 0x6, @random="89312cd2550e"}, @void, @void, [{0xdd, 0x87, "ac175949dca7f1027754a14d4aea91eaa2c96506af71f443e805e65c2a96e89979918ee71ae6ed58f459267374a4aeb3e3f8368df05bfd1ea58e2f17b027c8859afb7d02f28994f6a19dd6796a4b9c4e70f9364805c5a9ec60e179f2a4a3b52650f25beac9f1035bb9b38828cbc793d6bb5d325ec31ca6bec20f1b6100697f7fc8cb92a5eb62f6"}, {0xdd, 0xa, "989b658760c495137af0"}, {0xdd, 0xe7, "a1efa6632d2f9aa383cf1331f839aff3889a4ddf54db61bedc8d045d860557a5e0a52da0d6c9e63b5c6cbd918d6fd86445668d17d7513954c38d45cff93db33d88e7629a69f9b6df62b76ee0f1e29a8a4ccb9686923b1e050ae703cde90494d22a267d29daad0a7f9e72ada0ea42dcf0536ea61b51d76b64e37355a02258ffe8059b54c3cb982a57a9dae9c67d7587dab3b1b857c9c9d8d916a9d3d879260be162b9a3fbb37a6ec390c879c14a4ee8d47b1eb2f38d5f85a76b69406ce1a132d1a67c77e79c9ac5425c0a4972160b50afc94ce6cbc5a30f2882de860624572e4a71f4f4757e4224"}, {0xdd, 0x8d, "3eee26ffc6b411a6aafe97ebde477ed782addeb54cf973a789a474184e9bdfaf690db7006dd032bcbd3dbdc0b0538c9939fb03011853f26d378f97ca66fc820e6fd1e6eb4dead0dd35e7a71e1bf64217cf9d0e41979d2ff27cc1d93e1dd735abe5ab405949ee05852ba5ad7d78ff0501b0a51abd34ea3b2bfa4dccb07330f5f0328f2b8217ead1a0cdfaa9f3d7"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x9f0}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$sock(r0, &(0x7f0000001280)={&(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x1, 0x0, 0x0, 0x1}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001100)="730da6f55f", 0x5}, {&(0x7f0000001140)="3cb8e041cd9403910baddff896e7109e9abf0da9748970371705b68b1826609fe26d4825d5230dcbeaddabe858d44721fbcf1832a8dfc9b1bd85880b4e282d6e50bdf94eb8948327f88ffe40a3c4902f33d471feb3528e79e1ac3f0d7449", 0x5e}], 0x2, &(0x7f0000001200)=[@txtime={{0x18, 0x1, 0x3d, 0x5893}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x60}, 0xd0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000012c0)={'vxcan1\x00', 0x2}) ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f0000001300)={0x15, "5bdfd58acdecedc5a862b4454f26fc0cce34a15375ece5942ceca740e1c7cee158e781a0db11831ac75678030c93632134661fcd22e63526d239f0be12f91b9ed40111a7564bfbbd632b74a617dffa53f189f8b52984197bf33e7768011b74a27fddb53ef7cf68cd5bb7a2b257dd8f82c5581c7141bb8829d56aaabf8f5aff30"}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000013c0)={0x0, 0x0, 0x30, 0x0, 0xb3}, &(0x7f0000001400)=0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000001440)={r8, 0xc, 0x1, [0x9]}, 0xa) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000001480)=0x9799) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000015c0)={r2, &(0x7f00000014c0)='ip_vti0\x00', 0x80000, &(0x7f0000001500)={@_ha_fsid={[0x400, 0x8]}, {0x8000, 0x7ace, 0x8000, 0x5}}, 0xf, &(0x7f0000001540), &(0x7f0000001580)=0x9}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, r1, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x0) pipe(&(0x7f0000001700)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000001740)) socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000001780)="5980ea0e11dd4bcb068f5b3e2c8a2cd929af6a2b49201c730277cce2d2a0fa5f3735ed1bd7cd5bccf8607a467ff517987e2c0131605f412746524969867bc7d9612e11e510830ac8db15929e134b09b067b89053d8566217337c1639ea1c19026bfc7adfc4bacf94", 0x68) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r9, 0x8983, &(0x7f0000001800)={0x8, 'veth0_to_bond\x00', {'veth1_virt_wifi\x00'}, 0xfff9}) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001880), r11) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, r12, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1b84033f}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd463}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x20001011) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000001980)={0x1, 'syzkaller0\x00', {}, 0xae}) 2.21789794s ago: executing program 2 (id=2357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000002400)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x3, 0x1, 0x9, 0x7, 0x4, 0x9, 0x400009, 0x40, 0xfffffffe, 0x7fffffff, 0x7, 0x10021, 0x2, 0x7ffffffd, 0x8, 0x80000001, 0x8, 0x800, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008"], 0xa0}, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x4000051) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x39241}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) write(r2, &(0x7f0000000240)="94", 0x1) tee(r1, r5, 0x8f5, 0x0) write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="61c12a3a2a20dfdc"], 0x8) write(r3, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f0001"], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.81499161s ago: executing program 1 (id=2358): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0xe403, r3, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44090}, 0xc2010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000740)={'veth0_virt_wifi\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES64=r5], 0x20}}, 0x44800) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$NS_GET_OWNER_UID(r7, 0x8008b705, 0x0) 1.757726115s ago: executing program 3 (id=2359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000000000000000000a804040000000060000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"], 0x5c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r1, 0xffffffffffffffff, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x94) 1.630297684s ago: executing program 0 (id=2360): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @mss={0x2, 0x9000000}], 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0xe, 0x1, 0x0, 0xc, 0x7fffffff}}, {0x4}}]}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000000701020000000000000000020000070d00010073797a30000000000c0017400000000000000008030000000000000000dd180070467f86960002407f0900011173797a31000000000c00024000000000000000797a1c1b2eaeb954010c0002400000178f15d3cbef89f90640000000000000000800"/132], 0x84}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a48000000060a030400000000000000000a0000010900010073797a3100000000200004801c0001800b00010065787468647200000c000280080006400000000208000b4000000001140000000100000000000000000000000a00000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) getsockopt$inet_tcp_int(r4, 0x6, 0x11, 0x0, &(0x7f0000002340)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x20000000) 1.570635553s ago: executing program 2 (id=2362): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITHAW(r0, 0xc0045878) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfffa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x9, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x6], 0x3, [0xc, 0x3, 0x7, 0x2002, 0x3, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x401, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d38000911161000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x52, 0x1, 0x100, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xffffff44, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x80010) 1.435841312s ago: executing program 3 (id=2363): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x3, 0x2, {{0xe, 0x4, 0x1, 0x5, 0x38, 0x65, 0x0, 0x5, 0x29, 0x0, @local, @local, {[@timestamp_addr={0x44, 0xc, 0x99, 0x1, 0xc, [{@loopback, 0x10001}]}, @timestamp_addr={0x44, 0x14, 0xb2, 0x1, 0x7, [{@multicast2, 0x2}, {@rand_addr=0x64010101, 0xfff}]}, @noop]}}}}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0x5, 0x4) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115100000000008510000002000000850000008c00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @flow_dissector}, 0x94) 1.362573032s ago: executing program 4 (id=2364): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x844, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x818, 0x2, [@TCA_FW_POLICE={0x814, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x8006, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0xc38, 0x1ff, 0x0, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0x56, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x1, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x6, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x7, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x9, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x101, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x2008001, 0x9, 0x4, 0x3, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x844}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) socket(0x2b, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x3c}}, 0x20000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0) write$6lowpan_enable(r7, &(0x7f0000000040)='0', 0x1) 1.361074778s ago: executing program 0 (id=2365): socket$unix(0x1, 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0xc}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x36}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100004800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) socket(0x2, 0x80805, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) getsockopt$inet_int(r4, 0x0, 0x18, 0x0, &(0x7f0000000040)=0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @remote}) write$tun(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa81002f0008004500d5"], 0x36) 1.276186038s ago: executing program 3 (id=2366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xfffffffc}, [@mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0xc4}}, 0x4004) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = socket(0x80000000000000a, 0x3, 0xfffffffe) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x8) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) (async) close(r5) (async, rerun: 64) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000000)=0x1, 0x2) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r7, 0x25, 0x0, @val=@tracing={0x0, 0x5a7}}, 0x20) (async) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f00000001c0)="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", 0xafe}, {0x0}], 0x2, 0xf) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x44, 0x20}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, r8, 0x0, 0x20}, 0x38) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0xa8, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x7, 0x3, @val=0xa53d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.203208159s ago: executing program 1 (id=2367): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x8014) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c000000000000000000000007000000071b19ffffffffac1e0101ac1414bb588428c30cb6983fac1e00010000000000dd5ac5cd745291005905962e7abe97a3b370e37ba860ccbc5412d0ac024ded60931522f6478d26483359d96ebf862e290957562ffeb420855b344fb48277fe524421af6db61a0b036acaedf991eba20ea54e85019779d553179c5dadebf427f96ae8c3576e79e7062cfaf24e44d8ca7c496c00d2784415e345eddbfaf44a1c21473be3a688bb12e88fb9b3347e1b12"], 0x30}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x804) (async) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080006000900000014000000451a00142c9c6f"], 0xfce) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, 0x0, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_PROTOINFO={0x14, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x10, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9000000000000000}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x85}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8ee3}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_LABELS_MASK={0xc, 0x17, [0x4, 0x4]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe0f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6b6e}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xec}}, 0x20004000) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000000100"/16, @ANYRES64=r0, @ANYRES32, @ANYRES64=0x0, @ANYRESDEC=r5, @ANYBLOB="00000140cd723fc7f4132a803940c4f79d080000009c99eb21e8fc8a05abca7330e01347bdee376b9bad6dfa4f348e1029578b9e51c09896dd36059e6399be0ab4f4377f0b1d69d53d37a9ac193c0627e3a3aa00b71de95334e4468337f16656168816"], 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x4000000) 1.073801172s ago: executing program 3 (id=2368): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000080)={0xfffffffffffffff7, [{0x0}], 0x9, "7295343e11e607"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001080)={{r1, 0x4, 0x200, 0x5, 0x1ff, 0x80000001, 0x5, 0x9, 0x400, 0x12, 0x7, 0x0, 0x4, 0x5}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000002480)={0x2, 0x1, @start={r2, 0x1, "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", "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"}, [0x7, 0x8, 0x8, 0x0, 0x5, 0x1000000000, 0x5, 0x6, 0xfffffffffffffc00, 0x7, 0x10, 0x10001, 0x3, 0xc74, 0x7ff, 0xce25, 0x3, 0x3, 0xffffffffffffffff, 0x9, 0x3, 0x7, 0x1, 0x6, 0x6, 0xfffffffffffffff8, 0x8, 0xfff, 0x2, 0x9, 0x80000001, 0x8, 0x7, 0x7fffffffffffffff, 0x9, 0x4, 0xe000000000000000, 0x2, 0x7fff, 0x7, 0x9, 0x3a2, 0x6, 0x9, 0x0, 0x8, 0x9, 0x4, 0x2, 0x6, 0x101, 0xa, 0x4, 0x8000000000000001, 0x200, 0x7, 0x269147ae, 0x9, 0x2, 0x5, 0x100000001, 0x4, 0x4, 0x3]}) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000002ec0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002f40)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000003040)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)=@newtfilter={0x6c, 0x2c, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0xffff}, {0x5, 0x3}, {0xffff, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x40}}, @TCA_RATE={0x6, 0x5, {0xe3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0xd, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ARP_SIP_MASK={0x8}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x8e6}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000003080), &(0x7f00000030c0)=0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000003280)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003240)={&(0x7f00000031c0)={0x4c, r5, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_MAC={0xa, 0x6, @random="937533342514"}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r7 = socket(0x2c, 0x80000, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000034c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003480)={&(0x7f0000003300)={0x160, r5, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x64}}}}, [@NL80211_ATTR_TID_CONFIG={0x110, 0x11d, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {}, {0x1, 0x9}, {0x1, 0xa}, {0x7, 0xa}, {0x1, 0x8}, {0x3, 0xa}, {0x7, 0x9}, {0x3, 0x7}, {0x4, 0xa}, {0x0, 0xa}, {0x4, 0x8}, {0x6, 0x7}, {0x3, 0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x2, 0x4}, {0x7}, {0x7}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x1}, {0x6, 0x4}, {0x4, 0xa}, {0x7, 0x7}, {0x6, 0xa}, {0x1, 0x8}, {0x2}, {0x4, 0x4}, {0x4, 0x7}, {0x5, 0x8}, {0x4}, {0x6, 0x6}, {0x4, 0x9}, {0x3, 0x7}, {0x3, 0x4}, {0x0, 0x6}, {0x2, 0x6}, {0x5, 0x9}, {0x7, 0x1}, {0x2, 0x5}, {0x7, 0x8}, {0x5, 0x8}, {0x1, 0x8}, {0x4, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x4}, {0x2}, {0x2, 0x9}, {0x7, 0x1}, {0x1, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x6, 0x1}, {0x6}, {0x1}, {0x5, 0x4}, {0x7, 0x6}, {0x0, 0x5}, {0x0, 0x6}, {0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x4}, {}, {0x7, 0x5}, {0x4, 0x2}, {0x5, 0x5}, {0x2, 0x2}, {0x0, 0xa}, {0x2}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x800}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x531be2a1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f00000037c0)={{&(0x7f0000003500)=[{0x7fffffff, 0x8, 0x0, {0x5, 0x9}, 0x100000000, 0x0, 0xff}, {0x5, 0xcaac, 0xa, {0x92, 0x7}, 0x9, 0x7, 0x400}, {0x0, 0x5, 0x160000000, {0x8, 0x4}, 0x0, 0x200, 0xffffffff}, {0x6, 0x9, 0x2, {0x9, 0x10000}, 0x3ff, 0x1, 0x8}, {0x3da, 0x7d6fec37, 0x5, {0x9, 0x10000}, 0xd379, 0x3, 0x7ff}], 0x5, 0x40, 0x3, 0xffffffff}, {&(0x7f0000003640)=[{0x7, 0x2013}, {0x100, 0x8001}, {0x4, 0xffffffff}, {0x9, 0x1}, {0x5, 0x3}, {0x7, 0x3}, {0xffffffffffffffff, 0x9}], 0x7, 0x10, 0x6, 0x5}, {&(0x7f00000036c0)=[0xd74, 0x800, 0x3], 0x3, 0x8, 0x8, 0x2}, {&(0x7f0000003700)=[{0x7, 0x6, 0x6, 0x5, 0x3}, {0x401, 0x5, 0x8, 0xff, 0x1cb2}], 0x2, 0x28, 0x4, 0x6}, {&(0x7f0000003780)=[0x3, 0xffffffffffff8000, 0x1, 0x4, 0x5d8], 0x5, 0x8, 0x7, 0x1}}) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000003840)={0x0, 0x3}, &(0x7f0000003880)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f00000038c0)={r9, 0x1000, "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"}, &(0x7f0000004900)=0x1008) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000004980)={&(0x7f0000004940)=""/24, 0x12000, 0x800, 0x3}, 0x20) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r10, 0x890b, &(0x7f00000049c0)={@null, 0x8, 'wlan1\x00'}) socketpair(0x1, 0x6, 0xd, &(0x7f0000004ac0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$l2tp(r11, &(0x7f0000004b00)={0x2, 0x0, @empty}, &(0x7f0000004b40)=0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r11, 0x84, 0x3, &(0x7f0000004b80)=0x40, 0x4) setsockopt$MRT_DEL_VIF(r12, 0x0, 0xcb, &(0x7f0000004bc0)={0x1, 0x4, 0x8, 0x2, @vifc_lcl_ifindex=r3, @local}, 0x10) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r8, 0xc0205866, &(0x7f00000051c0)={&(0x7f0000004c00)=0x7, 0xe, &(0x7f0000004c40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000005180)}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000005200)=0xc, 0x4) preadv(r12, &(0x7f0000005240), 0x0, 0x559, 0x5) 991.626631ms ago: executing program 0 (id=2369): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x3, 0x32, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2a) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x301, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x1800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 928.06251ms ago: executing program 2 (id=2370): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x884) bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r12, &(0x7f0000000040)=0x4, r12, &(0x7f0000000180)=0x5, 0xe6, 0xc) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r13 = accept4(r10, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_OPER(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}}, 0x4b}, 0x1, 0x0, 0x0, 0x20040084}, 0x10) r14 = socket$kcm(0x29, 0x2, 0x0) recvmsg(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/201}, {&(0x7f0000000300)=""/125}], 0x1000000000000139, 0x0, 0xfffffffffffffec6}, 0x12122) 880.706097ms ago: executing program 3 (id=2371): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000000bad999559dc3fcfb4e27dff872985cb714921e0cffff7d4671e803e4d1009b05f7b28d8ba60eff7f879d19fe8de9c1bf5527"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20040010) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x400000}, 0x8) socket(0x2, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4800}, 0x11) sendto$inet(r4, &(0x7f0000000180)="8b643e", 0xfffffffffffffdfd, 0x101, 0x0, 0x9c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500004208000b4000000000340004803000018008000100636d7000240002801000038009000100d3060d2def000000080002400000000008000140000000160900010073797a30000000001400000011000100000000003a534f930000000a"], 0xd0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000040)=0x84) 876.930803ms ago: executing program 4 (id=2372): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x2}, {0x5, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x10008040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 661.816461ms ago: executing program 4 (id=2373): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f00000000c0)='bridge_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffcae, 0x0}, 0x8004) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r5, 0xffffe000) close(r5) sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf250300000014000900e0ffffffffffffff000000000000000108000b00", @ANYRES32=0x0, @ANYBLOB="06000a004e200000050002000a00000014000700fc000000000000000000000000000001"], 0x54}, 0x1, 0x0, 0x0, 0x4810}, 0x810) r6 = socket(0x40000000015, 0x4, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8}, 0x94) 355.150121ms ago: executing program 4 (id=2374): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@generic={0x9, 0x1, 0x5, 0x400, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x60, 0x0, 0x0, 0x41000, 0xa, '\x00', r4, 0x25, r5, 0x8, &(0x7f00000000c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xc, 0x4, 0xb2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, r0, r7, r0, r0]}, 0x94) 237.773336ms ago: executing program 1 (id=2375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000380)={{&(0x7f0000000000)=[{0x5, 0xffffffffffffffff, 0x2, {0x1, 0x9}, 0x9, 0x6, 0x8}, {0x7, 0x2, 0x0, {0x400, 0x4}, 0x1c00000000, 0x7f, 0x6}, {0x4d, 0x3, 0xaff7, {0x6, 0xa}, 0x2, 0x5000000000000000}, {0x3, 0x8, 0x914, {0x0, 0xa8b3}, 0x3a, 0xfffffffffffffffe, 0x7}], 0x4, 0x40, 0x4, 0x4}, {&(0x7f0000000100)=[{0x9, 0x7}, {0x81, 0x8}, {0x9, 0xff5}, {0x9, 0xa9e5}], 0x4, 0x10, 0x5de, 0x2}, {&(0x7f0000000140)=[0xec3d, 0x4ad, 0x3, 0x8, 0x1, 0xfffffffffffffffc, 0xffff, 0x6, 0xb282, 0x8], 0xa, 0x8, 0x401, 0x8000000000000001}, {&(0x7f0000000240)=[{0x1, 0xfff, 0x5, 0xb, 0x6}, {0xaa, 0x3, 0x81, 0x3540, 0x80000000}], 0x2, 0x28, 0xffff, 0x5e8a}, {&(0x7f00000002c0)=[0x0, 0x4], 0x2, 0x8, 0x3, 0x1}}) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0xa0, r1, 0x401, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "3263a5f4b2b44cd4bcc8d7eac5e2f35177d5dc700ba31616291c7fbd58f522a6acfc"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffda}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400f0}, 0x2001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x9, 0x6, 0x402, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xc15}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8090}, 0x24044081) 237.439851ms ago: executing program 4 (id=2376): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) syz_emit_ethernet(0x6a, &(0x7f00000008c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @empty}}}}}}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 230.671377ms ago: executing program 2 (id=2377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r1, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x10) 206.761005ms ago: executing program 0 (id=2378): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xe7be759}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x6, 0x6, 0x1}, {0x5, 0x1, 0x1, 0xa, 0xd3d, 0x1}, 0x26, 0x4b3b, 0x19c5}}]}}]}, 0x60}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001981100fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0xf000, 0x3ff, 0x202, 0x6, 0x1, 0xfff, 0x80000001, 0x594d2396, r2}, &(0x7f0000000080)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000075000000de0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 74.010861ms ago: executing program 1 (id=2379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000900)={0x0, 0x2}, 0xfc1e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000005c0)={0x0, 'wlan1\x00', {0x3}}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f", 0x68, 0x840, 0x0, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r11, r10, 0x25, 0x0, @void}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000540)={{r12, &(0x7f0000000380)='syzkaller\x00', 0x101400, &(0x7f0000000440)={@_ha_fsid={[0xdf2]}, {0x81, 0x2, 0x4}}, 0xfffffffc, &(0x7f0000000480), &(0x7f00000004c0)=0x16b0}, {[0x82, 0x1, 0xe18c, 0x9]}, 0x725, 0x2, &(0x7f0000000500)=""/2}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r13, 0x800448d2, &(0x7f0000000840)={0x1, &(0x7f0000000780)=[{@none}]}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r14, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64=r5, @ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r15, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd7880ca8395ccfda2e499b3dcf581000000000000", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000fad67b3e75be3671ad717d0f869bff4c7598ed9efcf2a32f00ac4d4c46384cdb7672e915dc574d53d1fdf2d11e5ec0a0adb3a1735ac007028403cbe15428d4fefd3813a125c2d57117eb9ff605ed46bdee8743a319b5a78154c7df05a9b5489a", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000400"/28], 0x50) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r16, 0x7, 0x0, 0xb, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 73.434251ms ago: executing program 2 (id=2380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x140e, 0x300, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80d1}, 0x8000004) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 0s ago: executing program 4 (id=2381): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 'erspan0\x00'}}, 0x1e) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f00000000c0)='\x00', 0x8202, &(0x7f0000000200)={@_ha_fsid={[0x3, 0xffff7833]}, {0x7, 0xa, 0x4, 0x7}}, 0x10000, &(0x7f0000000300), &(0x7f0000000340)=0x2}) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="2d6e6551f2"], 0x5) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000047000701feffffffffffffff027c00000800e380c700ef80"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000011"], 0x128}, 0x24004004) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x6, 0x30, 0x80000000, 0x72d}, &(0x7f0000000500)=0x18) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40004240) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r8, &(0x7f0000000440)=ANY=[@ANYRES8=r7], 0xa) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES64=r5, @ANYBLOB="2fc6bc464756ca7e5e547e9b31a9b22a704bb6dbf48379e04441858b355eebe3059f5f782560afd1219188844c036683b190ebdf1694963903066d7d523f1daca65cf745f243bb2ad4a8c9a3509f8fb948aee80c741a", @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="08002dbd7000ffdbdf25032800000900010073797a320000000005000400020000000500040002000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) r11 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x50, 0x3, 0x1c, @empty, @mcast2={0xff, 0x5}, 0x8, 0x0, 0xe3e1, 0xcfe}}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xac58, 0x5, [0x6, 0xd, 0x428e, 0x7, 0x8000]}, &(0x7f0000000080)=0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000103000000000071124c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): us mode [ 193.035728][ T9209] geneve1: left promiscuous mode [ 193.044826][ T9209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.061907][ T9209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.080863][ T9209] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.107695][ T9209] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.131499][ T9209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.143921][ T9209] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.162726][ T9209] ip6erspan0: left allmulticast mode [ 193.183386][ T9209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.215790][ T9219] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 193.233417][ T9219] syzkaller1: Linktype set failed because interface is up [ 193.294082][ T9226] netlink: 32 bytes leftover after parsing attributes in process `syz.4.861'. [ 193.358179][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 193.456237][ T9242] netlink: 560 bytes leftover after parsing attributes in process `syz.3.865'. [ 193.463669][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.492573][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.866'. [ 193.511423][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.624732][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.650432][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.867'. [ 193.677175][ T137] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.929410][ T5635] block nbd4: Receive control failed (result -32) [ 193.929410][ T5622] block nbd4: Receive control failed (result -32) [ 194.045981][ T9264] netlink: 44 bytes leftover after parsing attributes in process `syz.1.869'. [ 194.131102][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.248270][ T9263] syz.0.870 (9263) used greatest stack depth: 17944 bytes left [ 194.263671][ T9273] netlink: 128 bytes leftover after parsing attributes in process `syz.4.872'. [ 194.302391][ T9275] xt_bpf: check failed: parse error [ 194.369788][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 194.385440][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 194.425017][ T9278] FAULT_INJECTION: forcing a failure. [ 194.425017][ T9278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.483471][ T9278] CPU: 0 UID: 0 PID: 9278 Comm: syz.0.875 Not tainted syzkaller #0 PREEMPT(full) [ 194.483496][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.483506][ T9278] Call Trace: [ 194.483514][ T9278] [ 194.483521][ T9278] dump_stack_lvl+0xe8/0x150 [ 194.483546][ T9278] should_fail_ex+0x412/0x560 [ 194.483574][ T9278] _copy_to_user+0x31/0xb0 [ 194.483601][ T9278] simple_read_from_buffer+0xe1/0x170 [ 194.483627][ T9278] proc_fail_nth_read+0x1bb/0x230 [ 194.483653][ T9278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.483678][ T9278] ? rw_verify_area+0x2a6/0x4d0 [ 194.483701][ T9278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.483724][ T9278] vfs_read+0x20c/0xa70 [ 194.483753][ T9278] ? __pfx___mutex_lock+0x10/0x10 [ 194.483776][ T9278] ? __pfx_vfs_read+0x10/0x10 [ 194.483801][ T9278] ? __fget_files+0x2a/0x420 [ 194.483827][ T9278] ? __fget_files+0x3a0/0x420 [ 194.483846][ T9278] ? __fget_files+0x2a/0x420 [ 194.483875][ T9278] ksys_read+0x150/0x270 [ 194.483901][ T9278] ? __pfx_ksys_read+0x10/0x10 [ 194.483933][ T9278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.483953][ T9278] do_syscall_64+0x15f/0xf80 [ 194.483978][ T9278] ? trace_irq_disable+0x3b/0x140 [ 194.484004][ T9278] ? clear_bhb_loop+0x40/0x90 [ 194.484026][ T9278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.484043][ T9278] RIP: 0033:0x7f5ecbd5d60e [ 194.484059][ T9278] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.484073][ T9278] RSP: 002b:00007f5ec9ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 194.484092][ T9278] RAX: ffffffffffffffda RBX: 00007f5ec9ff66c0 RCX: 00007f5ecbd5d60e [ 194.484104][ T9278] RDX: 000000000000000f RSI: 00007f5ec9ff60a0 RDI: 0000000000000006 [ 194.484115][ T9278] RBP: 00007f5ec9ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.484126][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.484135][ T9278] R13: 00007f5ecc016038 R14: 00007f5ecc015fa0 R15: 00007ffcf39aae08 [ 194.484165][ T9278] [ 194.770190][ T5730] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.148569][ T9315] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 195.237282][ T9315] tipc: Started in network mode [ 195.250901][ T9315] tipc: Node identity 02ef3f9a1b3e, cluster identity 4711 [ 195.260598][ T9315] tipc: Enabled bearer , priority 0 [ 195.284509][ T9314] tipc: Disabling bearer [ 195.302269][ T9318] syzkaller1: entered promiscuous mode [ 195.308722][ T9318] syzkaller1: entered allmulticast mode [ 199.257390][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.272260][ T6310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 204.386445][ T7222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 204.412917][ T7222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.003704][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.124867][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.963561][ T7222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.893804][ T1174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.725990][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.644341][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.484659][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.683711][ T6310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.603476][ T1174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.524012][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.723434][ T6310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.283780][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.483337][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.043611][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.603818][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.803764][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.643827][ T1174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.458423][ T9367] __nla_validate_parse: 5 callbacks suppressed [ 253.458441][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 253.491330][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.895'. [ 253.810094][ T9382] netlink: 'syz.4.897': attribute type 4 has an invalid length. [ 253.885874][ T9382] netlink: 'syz.4.897': attribute type 4 has an invalid length. [ 253.921970][ T9390] dvmrp8: entered allmulticast mode [ 254.438606][ T9410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.905'. [ 254.554782][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'. [ 254.617497][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 254.626744][ T9416] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.676369][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.908'. [ 254.926170][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.565908][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.777120][ T9477] netlink: 'syz.2.922': attribute type 3 has an invalid length. [ 256.017208][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 256.039542][ T9492] tipc: Enabling of bearer rejected, failed to enable media [ 256.054521][ T9492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.063994][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.192131][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.928'. [ 256.203461][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.928'. [ 256.230643][ T9499] syzkaller0: entered promiscuous mode [ 256.254497][ T9499] syzkaller0: entered allmulticast mode [ 256.399826][ T9507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.933'. [ 256.399838][ T9508] netlink: 'syz.3.934': attribute type 4 has an invalid length. [ 256.431256][ T9508] IPVS: set_ctl: invalid protocol: 8 172.20.20.11:21 [ 256.442511][ T9508] IPVS: set_ctl: invalid protocol: 153 224.0.0.1:20000 [ 256.767632][ T9512] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.808938][ T9512] bond5: entered promiscuous mode [ 256.889510][ T9512] team0: Port device bond5 added [ 257.301671][ T9526] bond1: entered promiscuous mode [ 257.318336][ T9526] bond1: entered allmulticast mode [ 257.338306][ T9526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.427672][ T9528] bond6: entered promiscuous mode [ 257.434467][ T9528] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.485858][ T9554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.729564][ T9588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.763316][ T9588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.772857][ T9588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.983658][ T9582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.109664][ T9580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.121379][ T9580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.136817][ T9580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.155315][ T9580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.206917][ T9600] netlink: 'syz.1.952': attribute type 10 has an invalid length. [ 258.485382][ T9610] ip6gre1: entered promiscuous mode [ 258.490635][ T9610] ip6gre1: entered allmulticast mode [ 258.656780][ T9620] syzkaller0: entered promiscuous mode [ 258.672001][ T9620] syzkaller0: entered allmulticast mode [ 259.382393][ T9640] __nla_validate_parse: 7 callbacks suppressed [ 259.382411][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 259.436189][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'. [ 259.460028][ T9643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.963'. [ 259.507755][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.962'. [ 260.689752][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.836943][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 261.885567][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 261.939233][ T9665] netlink: 6004 bytes leftover after parsing attributes in process `syz.2.967'. [ 261.978396][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.968'. [ 262.257332][ T9667] bond4: entered promiscuous mode [ 262.276986][ T9667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.527253][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 262.608203][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.649887][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 262.669689][ T9709] net_ratelimit: 17 callbacks suppressed [ 262.669707][ T9709] openvswitch: netlink: Multiple metadata blocks provided [ 262.840664][ T9715] netlink: zone id is out of range [ 262.857737][ T9715] netlink: get zone limit has 4 unknown bytes [ 262.989643][ T9724] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 263.071830][ T9724] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 263.289114][ T9733] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 263.315841][ T9733] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 263.369186][ T9743] xt_TCPMSS: Only works on TCP SYN packets [ 263.486594][ T9737] bond_slave_0: entered allmulticast mode [ 264.083865][ T9769] pim6reg1: entered promiscuous mode [ 264.094698][ T9769] pim6reg1: entered allmulticast mode [ 264.455429][ T9787] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 264.509354][ T9790] gretap0: entered promiscuous mode [ 264.539282][ T9790] vlan2: entered promiscuous mode [ 264.708869][ T9802] syzkaller0: entered promiscuous mode [ 264.740271][ T9802] syzkaller0: entered allmulticast mode [ 264.898655][ T9814] netlink: 'syz.4.1004': attribute type 61 has an invalid length. [ 264.920985][ T9814] netlink: 'syz.4.1004': attribute type 62 has an invalid length. [ 264.955296][ T9818] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 265.197171][ T9837] __nla_validate_parse: 10 callbacks suppressed [ 265.197189][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1011'. [ 265.863430][ T9869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1019'. [ 266.035841][ T9873] Unsupported ieee802154 address type: 0 [ 266.077091][ T9873] netlink: 'syz.1.1021': attribute type 21 has an invalid length. [ 266.174249][ T9879] netlink: 'syz.2.1023': attribute type 12 has an invalid length. [ 266.195567][ T9879] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1023'. [ 266.320092][ T9884] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 266.446180][ T9550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.258276][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 267.321127][ T9935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1034'. [ 267.733510][ T9942] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1038'. [ 267.838003][ T9910] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1030'. [ 267.920793][ T9950] netlink: 'syz.3.1039': attribute type 10 has an invalid length. [ 267.938586][ T9950] ipvlan0: entered allmulticast mode [ 267.949290][ T9950] veth0_vlan: entered allmulticast mode [ 267.961040][ T9950] team0: Device ipvlan0 failed to register rx_handler [ 268.364177][ T137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.498455][ T9965] netlink: 'syz.1.1044': attribute type 29 has an invalid length. [ 268.526044][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 270.004873][ T9920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.015520][ T9960] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 270.032978][ T9960] netlink: 'syz.3.1043': attribute type 3 has an invalid length. [ 270.043803][ T9960] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1043'. [ 270.301371][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 270.332369][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'. [ 270.459978][T10030] netlink: 'syz.2.1059': attribute type 1 has an invalid length. [ 270.475517][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 270.484626][T10030] netlink: 'syz.2.1059': attribute type 1 has an invalid length. [ 270.529070][T10023] veth1_macvtap: left promiscuous mode [ 270.579200][ T7222] IPVS: starting estimator thread 0... [ 270.697526][T10038] IPVS: using max 33 ests per chain, 79200 per kthread [ 270.768434][T10045] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1063'. [ 270.830609][T10045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.845362][T10045] team0: Port device batadv0 added [ 270.860415][T10045] IPv6: NLM_F_REPLACE set, but no existing node found! [ 270.880193][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 271.024976][T10049] veth3: entered promiscuous mode [ 271.028751][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 271.077184][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1067'. [ 271.241047][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.249616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.331294][T10068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.344740][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.374263][T10068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.392893][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1071'. [ 271.565255][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.693545][T10082] syzkaller0: entered promiscuous mode [ 271.699077][T10082] syzkaller0: entered allmulticast mode [ 272.150722][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 273.484260][ T375] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.570876][T10105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.581674][T10105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.877191][T10105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.889635][T10105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.007341][T10138] syzkaller1: entered promiscuous mode [ 275.015789][T10138] syzkaller1: entered allmulticast mode [ 275.069566][T10105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.127262][T10105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.358246][T10105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.369919][T10105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.691208][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.011394][ T57] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.019992][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.075455][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.122848][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.208589][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.232175][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 277.241021][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.247674][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 277.278685][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 277.288853][T10175] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1096'. [ 277.292457][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 277.315823][ T48] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.332008][ T48] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.367801][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1094'. [ 277.780201][T10205] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 278.081956][T10222] vxcan2: entered allmulticast mode [ 278.274682][T10233] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1114'. [ 278.286516][T10233] team_slave_0: entered promiscuous mode [ 278.765695][T10253] x_tables: unsorted entry at hook 2 [ 279.206422][T10262] vlan3: entered promiscuous mode [ 279.211499][T10262] bridge0: entered promiscuous mode [ 279.243545][ T375] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.158668][T10226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.394562][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'. [ 281.441993][T10305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1131'. [ 281.797895][T10326] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 281.806249][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.039208][ T5622] block nbd5: Receive control failed (result -32) [ 282.039208][ T5635] block nbd5: Receive control failed (result -32) [ 282.252367][T10350] ip6tnl5: entered promiscuous mode [ 282.265578][T10350] ip6tnl5: entered allmulticast mode [ 282.623646][T10380] raw_sendmsg: syz.1.1145 forgot to set AF_INET. Fix it! [ 282.868864][T10393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1149'. [ 282.997980][T10402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1151'. [ 283.640152][T10423] syzkaller0: entered promiscuous mode [ 283.659124][T10423] syzkaller0: entered allmulticast mode [ 283.701820][T10436] netlink: 'syz.3.1158': attribute type 3 has an invalid length. [ 283.981420][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 284.134005][ T5730] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 284.190619][T10458] netlink: 'syz.4.1162': attribute type 7 has an invalid length. [ 284.203739][ T5730] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 284.390679][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 284.432980][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 284.489787][T10467] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1164'. [ 285.007903][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.305445][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'. [ 285.368780][ T6309] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 285.381599][T10491] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1169'. [ 285.393085][T10491] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1169'. [ 285.705283][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 285.761618][T10503] veth0_macvtap: left promiscuous mode [ 287.564922][ T9548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.492639][ T1174] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 288.513734][ T1174] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 288.595436][T10544] netlink: 'syz.3.1178': attribute type 1 has an invalid length. [ 288.603316][T10544] __nla_validate_parse: 2 callbacks suppressed [ 288.603332][T10544] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1178'. [ 288.634873][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 288.916628][T10549] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1179'. [ 289.012463][T10549] netlink: ct family unspecified [ 289.076740][ T7223] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 289.135167][T10564] bridge0: port 3(vlan0) entered blocking state [ 289.150497][T10564] bridge0: port 3(vlan0) entered disabled state [ 289.157559][T10564] vlan0: entered allmulticast mode [ 289.163085][T10564] geneve0: entered allmulticast mode [ 289.171864][T10564] vlan0: entered promiscuous mode [ 289.177401][T10564] geneve0: entered promiscuous mode [ 289.456335][T10576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1183'. [ 289.496369][T10567] syzkaller0: entered promiscuous mode [ 289.517391][T10567] syzkaller0: entered allmulticast mode [ 289.527869][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 289.539798][T10581] netlink: 'syz.0.1183': attribute type 2 has an invalid length. [ 289.554987][T10582] netlink: 'syz.3.1184': attribute type 2 has an invalid length. [ 289.669939][T10582] batadv0: entered promiscuous mode [ 289.686775][T10576] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 289.987270][T10601] netlink: 'syz.4.1186': attribute type 1 has an invalid length. [ 290.766728][ T1174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.637737][T10576] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1183'. [ 291.687750][T10595] geneve0: entered promiscuous mode [ 291.708705][T10595] geneve0: entered allmulticast mode [ 291.766752][T10601] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 291.780820][T10582] batadv0: left promiscuous mode [ 292.362921][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.645657][T10628] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 293.040068][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 293.199199][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'. [ 293.325300][ T1174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.329016][T10688] syzkaller0: entered promiscuous mode [ 293.348678][T10708] openvswitch: netlink: Key type 310 is out of range max 32 [ 293.400226][T10688] syzkaller0: entered allmulticast mode [ 293.816427][T10728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1206'. [ 293.839603][T10734] veth1_macvtap: mtu less than device minimum [ 293.883424][ T5622] Bluetooth: hci0: command 0x080f tx timeout [ 293.893425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.907484][T10725] block nbd6: server does not support multiple connections per device. [ 293.925234][T10725] block nbd6: shutting down sockets [ 294.089323][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 294.108234][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 294.760521][T10789] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1217'. [ 294.916059][T10790] erspan1: entered allmulticast mode [ 294.922967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.931096][T10795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1219'. [ 294.968067][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 295.123571][T10802] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1220'. [ 295.240458][T10804] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.401199][T10820] xt_nfacct: accounting object `syz0' does not exist [ 295.720234][T10831] xt_cgroup: invalid path, errno=-2 [ 295.884007][ T137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.024953][T10843] netlink: 'syz.4.1228': attribute type 2 has an invalid length. [ 296.202219][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 296.245279][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1229'. [ 296.497159][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 296.545586][T10864] netlink: 'syz.1.1233': attribute type 61 has an invalid length. [ 298.744986][T10899] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 298.909086][ T48] tipc: Subscription rejected, illegal request [ 298.962471][T10904] No such timeout policy "syz0" [ 299.086276][ T9552] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.438947][T10923] __nla_validate_parse: 3 callbacks suppressed [ 299.438966][T10923] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1240'. [ 299.483677][T10923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1240'. [ 299.579145][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 299.610530][T10930] xt_hashlimit: size too large, truncated to 1048576 [ 299.652876][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1241'. [ 299.722896][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 299.839708][T10938] bond0: Error: Cannot enslave bond to itself. [ 300.226749][T10956] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1247'. [ 300.248452][T10957] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 300.502012][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 300.613798][T10969] netlink: 'syz.0.1251': attribute type 21 has an invalid length. [ 300.719608][T10973] syzkaller0: entered promiscuous mode [ 300.741865][T10973] syzkaller0: entered allmulticast mode [ 300.768603][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 301.404648][T10979] netlink: 'syz.3.1254': attribute type 1 has an invalid length. [ 301.541386][T10979] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.645551][T11037] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1265'. [ 301.650556][ T1127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.866505][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1266'. [ 302.617564][T11080] tipc: Enabling of bearer rejected, failed to enable media [ 302.660162][T11080] netlink: 'syz.0.1276': attribute type 1 has an invalid length. [ 302.997435][T11094] 8021q: adding VLAN 0 to HW filter on device bond6 [ 303.061534][T11094] bond5: (slave bond6): making interface the new active one [ 303.097425][T11094] bond5: (slave bond6): Enslaving as an active interface with an up link [ 303.121053][T11117] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1281'. [ 303.189281][T11113] gretap1: entered promiscuous mode [ 303.210161][T11113] gretap1: entered allmulticast mode [ 303.328672][T11121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.368966][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a227c00: rx timeout, send abort [ 304.406626][T11178] netlink: 'syz.2.1294': attribute type 16 has an invalid length. [ 304.570592][T11191] __nla_validate_parse: 8 callbacks suppressed [ 304.570611][T11191] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1294'. [ 304.789783][T11203] : renamed from hsr0 (while UP) [ 304.792654][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 304.844365][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.877649][T11205] syzkaller1: entered promiscuous mode [ 304.883273][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a227c00: abort rx timeout. Force session deactivation [ 304.907806][T11205] syzkaller1: entered allmulticast mode [ 304.927588][T11209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1300'. [ 305.000844][T11212] netlink: 'syz.4.1301': attribute type 32 has an invalid length. [ 305.063425][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 305.121068][T11212] bond5: Setting coupled_control to off (0) [ 305.183950][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1299'. [ 305.202197][T11218] bond7: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 305.245022][T11218] bond7 (unregistering): Released all slaves [ 305.267481][T11223] netlink: 'syz.0.1303': attribute type 21 has an invalid length. [ 305.288414][T11223] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1303'. [ 305.464352][T11232] netlink: 'syz.0.1304': attribute type 4 has an invalid length. [ 305.520473][T11234] netlink: 'syz.0.1304': attribute type 4 has an invalid length. [ 305.858620][T11245] xt_hashlimit: size too large, truncated to 1048576 [ 306.390265][T11279] netlink: 'syz.0.1314': attribute type 29 has an invalid length. [ 306.400619][T11280] netlink: 'syz.0.1314': attribute type 29 has an invalid length. [ 306.412676][T11279] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1314'. [ 306.428647][T11279] unsupported nla_type 58 [ 306.437847][T11279] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1314'. [ 306.448077][T11279] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1314'. [ 306.459771][T11279] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1314'. [ 306.722137][T11293] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 306.776508][T11295] Cannot find add_set index 0 as target [ 307.130075][T11301] hsr_slave_1 (unregistering): left promiscuous mode [ 307.197332][T11318] netlink: 'syz.0.1326': attribute type 1 has an invalid length. [ 307.413361][ T6309] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.497674][T11318] 8021q: adding VLAN 0 to HW filter on device bond7 [ 308.688395][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.698767][ T7222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.714221][ T7208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.729614][ T7209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.014818][T11394] netlink: 'syz.3.1346': attribute type 29 has an invalid length. [ 309.056795][T11394] netlink: 'syz.3.1346': attribute type 29 has an invalid length. [ 309.088588][ T5622] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 309.090651][ T5635] Bluetooth: hci2: command 0x0401 tx timeout [ 309.110201][T11394] netlink: 'syz.3.1346': attribute type 32 has an invalid length. [ 309.206480][T11405] netlink: 'syz.1.1349': attribute type 2 has an invalid length. [ 309.325837][ T9552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.339204][ T7222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.354304][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.358918][T11414] IPv6: addrconf: prefix option has invalid lifetime [ 309.810986][ T7208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.895193][T11443] can: request_module (can-proto-0) failed. [ 309.901837][T11442] can: request_module (can-proto-0) failed. [ 309.963688][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.065090][T11442] __nla_validate_parse: 35 callbacks suppressed [ 310.065106][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 310.075181][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 310.089030][T11442] veth0: entered promiscuous mode [ 310.603608][ T1127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.866159][T11486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.872007][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 310.895972][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 311.435832][T11507] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 311.530996][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1379'. [ 311.561896][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 311.579333][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 311.630484][T11525] tipc: Enabling of bearer rejected, failed to enable media [ 311.777288][T11534] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1384'. [ 311.832475][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'. [ 312.050751][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 312.936054][T11597] sctp: [Deprecated]: syz.3.1405 (pid 11597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.936054][T11597] Use struct sctp_sack_info instead [ 313.165414][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.194551][T11612] netlink: 'syz.3.1409': attribute type 1 has an invalid length. [ 313.731209][T11641] netlink: 'syz.1.1414': attribute type 13 has an invalid length. [ 313.765053][T11641] netlink: 'syz.1.1414': attribute type 17 has an invalid length. [ 313.791738][T11640] syzkaller0: entered promiscuous mode [ 313.817530][T11640] syzkaller0: entered allmulticast mode [ 313.871397][T11651] net_ratelimit: 7 callbacks suppressed [ 313.871416][T11651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.886012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.961689][T11651] netlink: 'syz.0.1415': attribute type 1 has an invalid length. [ 313.986380][ T7209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.001701][T11641] 1ªî{X¹¦: left allmulticast mode [ 314.030249][T11641] erspan0: left promiscuous mode [ 314.112669][T11641] bond_slave_0: left allmulticast mode [ 314.189882][T11641] hsr0: left promiscuous mode [ 314.228025][T11641] macvtap1: left allmulticast mode [ 314.234183][T11641] dummy0: left allmulticast mode [ 314.259427][T11641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 314.267172][T11641] gretap3: left allmulticast mode [ 314.276264][T11641] 8021q: adding VLAN 0 to HW filter on device eth0 [ 314.286171][T11641] 8021q: adding VLAN 0 to HW filter on device eth1 [ 314.296639][T11641] 8021q: adding VLAN 0 to HW filter on device eth2 [ 314.305886][T11641] 8021q: adding VLAN 0 to HW filter on device eth3 [ 314.316849][T11641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 314.330852][T11641] bond6: left promiscuous mode [ 314.429342][T11654] gretap1: entered allmulticast mode [ 314.443914][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 314.451751][T11654] bond8: (slave gretap1): making interface the new active one [ 314.452968][ T9552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.467490][T11654] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 314.468829][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.498046][ T7208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.038462][T11705] netlink: 'syz.3.1428': attribute type 1 has an invalid length. [ 315.065538][T11705] netlink: 'syz.3.1428': attribute type 4 has an invalid length. [ 315.094314][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.105952][ T7222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.119703][ T7223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.134773][T11705] __nla_validate_parse: 6 callbacks suppressed [ 315.134790][T11705] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1428'. [ 315.221857][T11711] veth1_macvtap: left promiscuous mode [ 315.234064][T11711] macsec0: entered promiscuous mode [ 315.240858][T11711] macsec0: entered allmulticast mode [ 315.566858][ T7208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.590091][T11730] netlink: 'syz.3.1434': attribute type 39 has an invalid length. [ 315.719257][T11730] syz_tun (unregistering): left allmulticast mode [ 315.808458][T11741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1434'. [ 315.929587][T11747] xt_l2tp: v2 tid > 0xffff: 37482740 [ 316.150053][T11742] erspan0: entered promiscuous mode [ 316.165929][T11742] vlan2: entered promiscuous mode [ 316.166835][T11753] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 316.363844][ T6309] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.494329][T11760] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1442'. [ 316.637435][T11763] syzkaller0: entered promiscuous mode [ 316.657789][T11763] syzkaller0: entered allmulticast mode [ 317.023870][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.464708][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1453'. [ 317.857691][T11835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1458'. [ 317.891598][T11841] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1462'. [ 317.947481][T11845] vlan0 (unregistering): left allmulticast mode [ 317.971239][T11845] geneve0: left allmulticast mode [ 317.976863][T11845] vlan0 (unregistering): left promiscuous mode [ 317.997307][T11845] geneve0: left promiscuous mode [ 318.002763][T11845] bridge0: port 3(vlan0) entered disabled state [ 318.237937][T11858] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 318.445553][T11869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1468'. [ 318.646817][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 318.670300][T11876] xfrm0: entered promiscuous mode [ 318.695025][T11876] xfrm0: entered allmulticast mode [ 318.731233][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 318.926881][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.057199][T11897] : renamed from bond0 (while UP) [ 319.110300][T11901] netlink: 'syz.0.1477': attribute type 2 has an invalid length. [ 319.140550][T11901] netlink: 'syz.0.1477': attribute type 2 has an invalid length. [ 319.178314][T11901] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 319.197842][T11901] netlink: 'syz.0.1477': attribute type 2 has an invalid length. [ 319.221657][T11901] netlink: 'syz.0.1477': attribute type 2 has an invalid length. [ 319.247997][T11901] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 319.266866][T11901] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 319.289405][T11901] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 319.392485][T11915] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 319.500559][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 319.729424][ T29] net_ratelimit: 8 callbacks suppressed [ 319.729441][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.798065][T11938] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 319.954644][T11947] syzkaller0: entered promiscuous mode [ 319.979454][T11947] syzkaller0: entered allmulticast mode [ 320.203722][T11965] tipc: Enabling of bearer rejected, already enabled [ 320.206275][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.224716][ T7222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.241128][ T7208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.271089][T11966] syz_tun: entered promiscuous mode [ 320.292190][T11966] macvtap1: entered promiscuous mode [ 320.324083][T11966] syz_tun: left promiscuous mode [ 320.396764][T11965] syz_tun: entered promiscuous mode [ 320.423182][T11965] macvtap1: entered promiscuous mode [ 320.445540][T11965] syz_tun: left promiscuous mode [ 320.501648][T11977] __nla_validate_parse: 3 callbacks suppressed [ 320.501665][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 320.693239][T11989] tipc: Enabled bearer , priority 0 [ 320.725660][T11996] tipc: Enabling of bearer rejected, already enabled [ 320.845573][ T9552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.858623][ T7222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.869257][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.869533][T11989] syzkaller0: entered promiscuous mode [ 320.893721][T11989] syzkaller0: entered allmulticast mode [ 320.953349][T11959] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 320.956564][T12010] netlink: 'syz.0.1500': attribute type 13 has an invalid length. [ 320.963807][T11959] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 321.129612][T11959] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.154997][T11959] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 321.252238][T11959] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.269561][T11959] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 321.308401][T11959] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.346312][T11959] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 321.380161][T11959] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 321.396763][T11959] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 322.095290][T12010] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.107105][T12010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.119559][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.127754][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.159687][T12010] team_slave_0: left promiscuous mode [ 322.170792][T12010] xfrm0: left promiscuous mode [ 322.176431][T12010] xfrm0: left allmulticast mode [ 322.185892][T12010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.197139][T12010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.211787][T12022] : renamed from team_slave_0 (while UP) [ 322.238728][ T6309] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.265962][ T6309] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.285461][T11999] tipc: Resetting bearer [ 322.356601][T11999] tipc: Disabling bearer [ 322.428933][ T6309] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.454499][ T6309] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.480847][ T6309] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.496869][ T6309] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.510143][ T6309] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.519874][ T6309] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.679246][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 322.874916][T12050] veth1_to_batadv: entered allmulticast mode [ 323.068466][T12062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1514'. [ 323.178851][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1516'. [ 323.234274][T12064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1516'. [ 323.466540][T12073] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1519'. [ 323.867133][T12094] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1521'. [ 324.109562][T12101] syzkaller0: entered promiscuous mode [ 324.134992][T12101] syzkaller0: entered allmulticast mode [ 324.609310][T12127] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1534'. [ 324.685168][ T137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.729691][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1536'. [ 324.791521][T12132] bond7: entered promiscuous mode [ 324.797132][T12132] bond7: entered allmulticast mode [ 324.819926][T12132] 8021q: adding VLAN 0 to HW filter on device bond7 [ 324.829959][T12136] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 325.074960][T12155] IPVS: Scheduler module ip_vs_sip not found [ 325.075352][T12153] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1541'. [ 325.164378][ T7223] net_ratelimit: 18 callbacks suppressed [ 325.164396][ T7223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.244331][ T7208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.496431][T12183] validate_nla: 1 callbacks suppressed [ 325.496443][T12183] netlink: 'syz.3.1546': attribute type 1 has an invalid length. [ 325.531976][T12183] bond7: entered promiscuous mode [ 325.537663][T12183] bond7: entered allmulticast mode [ 325.544271][T12183] 8021q: adding VLAN 0 to HW filter on device bond7 [ 325.570189][T12180] __nla_validate_parse: 2 callbacks suppressed [ 325.570206][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1547'. [ 325.571376][T12182] erspan2: entered allmulticast mode [ 325.592406][T12179] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 325.600724][T12179] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1547'. [ 325.614338][T12179] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 325.634732][T12179] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1547'. [ 325.709080][T12179] veth5: entered promiscuous mode [ 325.747851][T12192] netlink: 'syz.3.1549': attribute type 8 has an invalid length. [ 325.787757][T12186] veth5: entered promiscuous mode [ 326.025715][T12201] veth0: entered promiscuous mode [ 326.036753][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'. [ 326.048776][T12203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1555'. [ 326.082937][T12201] veth0: left promiscuous mode [ 326.268064][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 326.288286][ T7210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.310180][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 326.330195][T12215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 326.354773][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 326.417739][T12215] netlink: 'syz.1.1556': attribute type 12 has an invalid length. [ 326.426624][T12212] netlink: 'syz.1.1556': attribute type 12 has an invalid length. [ 326.434992][T12215] netlink: 'syz.1.1556': attribute type 11 has an invalid length. [ 326.444030][T12212] netlink: 'syz.1.1556': attribute type 11 has an invalid length. [ 326.456399][T12229] Bluetooth: MGMT ver 1.23 [ 326.694613][T12236] ip6gretap1: entered promiscuous mode [ 326.836754][T12243] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1562'. [ 327.246543][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.260297][ T137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.271930][ T7210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.307273][ T7208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.325170][ T7210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.357949][T12262] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 1, id = 0 [ 327.664340][T12274] veth0_macvtap: left allmulticast mode [ 328.231930][T12307] netlink: 'syz.3.1582': attribute type 1 has an invalid length. [ 328.324464][T12307] bond8: entered promiscuous mode [ 328.330136][T12307] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.362984][ T7210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.385023][T12307] bond8: entered allmulticast mode [ 328.405550][T12317] syzkaller0: entered promiscuous mode [ 328.429327][T12317] syzkaller0: entered allmulticast mode [ 328.488620][T12307] bond8: (slave bridge9): making interface the new active one [ 328.506020][T12307] bridge9: entered promiscuous mode [ 328.519112][T12307] bridge9: entered allmulticast mode [ 328.530072][T12307] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 328.620443][T12323] netlink: 'syz.4.1586': attribute type 13 has an invalid length. [ 329.175440][T12321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.209214][T12321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.409178][ T7210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.776289][T12323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.784111][T12323] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.794947][T12323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.826131][T12323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.833967][T12323] veth1_to_batadv: left allmulticast mode [ 329.841526][T12323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.857637][T12323] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 330.031927][ T48] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.041033][ T48] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.100971][ T48] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.120834][ T48] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.152199][ T48] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.172433][ T48] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.210817][ T48] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.228841][ T48] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.364148][ T7223] net_ratelimit: 2 callbacks suppressed [ 330.364166][ T7223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.445783][ T7208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.645942][T12362] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20003 [ 330.772135][T12374] xt_TCPMSS: Only works on TCP SYN packets [ 330.961062][T12384] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 331.038101][T12386] syzkaller1: entered promiscuous mode [ 331.053291][T12386] syzkaller1: entered allmulticast mode [ 331.073886][T12389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.255135][T12395] veth0_macvtap: entered allmulticast mode [ 331.261646][T12395] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 331.295026][T12395] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 331.309212][T12387] __nla_validate_parse: 11 callbacks suppressed [ 331.309231][T12387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1607'. [ 331.444469][T12406] tipc: Started in network mode [ 331.453745][T12406] tipc: Node identity ac14140f, cluster identity 4711 [ 331.464172][T12406] tipc: New replicast peer: 255.255.255.255 [ 331.476642][T12406] tipc: Enabled bearer , priority 10 [ 331.483283][ T7237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.493198][T12406] validate_nla: 1 callbacks suppressed [ 331.493215][T12406] netlink: 'syz.3.1613': attribute type 8 has an invalid length. [ 331.681378][T12413] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1615'. [ 331.724026][ T7223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.739727][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 331.780043][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'. [ 331.803637][T12418] netlink: 'syz.2.1616': attribute type 7 has an invalid length. [ 331.820631][T12408] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 332.064363][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 332.065997][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 332.073482][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'. [ 332.092672][T12418] netlink: 'syz.2.1616': attribute type 7 has an invalid length. [ 332.224973][T12429] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1619'. [ 332.324101][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1620'. [ 332.424835][T12431] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.475965][T12442] netlink: 'syz.4.1618': attribute type 2 has an invalid length. [ 332.526594][ T7208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.605349][T12431] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.675738][ T7208] tipc: Node number set to 2886997007 [ 332.740226][T12453] bridge0: port 3(vlan0) entered blocking state [ 332.750238][T12453] bridge0: port 3(vlan0) entered disabled state [ 332.757774][T12453] vlan0: entered allmulticast mode [ 332.764809][T12453] dummy0: entered allmulticast mode [ 332.779916][T12453] vlan0: entered promiscuous mode [ 332.786127][T12453] dummy0: entered promiscuous mode [ 332.870494][T12431] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.991562][T12431] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.004512][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.016708][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.231560][ T1127] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.243971][T12471] netlink: 'syz.0.1630': attribute type 1 has an invalid length. [ 333.253659][T12471] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.1630'. [ 333.270688][T12473] netlink: 'syz.2.1631': attribute type 89 has an invalid length. [ 333.374080][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.426123][T12474] netlink: 'syz.0.1630': attribute type 1 has an invalid length. [ 333.499715][ T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.606188][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.731593][T12494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.382938][T12534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.410385][T12534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.593492][T12580] netlink: 'syz.4.1656': attribute type 4 has an invalid length. [ 335.663912][ T7211] net_ratelimit: 5 callbacks suppressed [ 335.665213][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.730639][T12588] netlink: 'syz.3.1658': attribute type 1 has an invalid length. [ 336.045589][ T7223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.097648][T12611] netlink: 'syz.3.1662': attribute type 30 has an invalid length. [ 336.426728][T12625] __nla_validate_parse: 150 callbacks suppressed [ 336.426747][T12625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1669'. [ 336.684745][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.882222][T12644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1675'. [ 336.919741][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 336.929628][T12643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1675'. [ 336.947438][T12647] openvswitch: netlink: Flow actions attr not present in new flow. [ 337.222024][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1682'. [ 337.241528][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1682'. [ 337.251769][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'. [ 337.310979][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 337.626791][T12680] netlink: 'syz.3.1687': attribute type 13 has an invalid length. [ 337.644209][T12680] netlink: 'syz.3.1687': attribute type 17 has an invalid length. [ 337.680072][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 337.724626][T12680] team0: left promiscuous mode [ 337.725571][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.738527][T12680] team_slave_0: left promiscuous mode [ 337.751543][T12680] team_slave_1: left promiscuous mode [ 337.765948][T12680] bond5: left promiscuous mode [ 337.778096][T12680] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.897618][T12680] 0·: left allmulticast mode [ 337.902277][T12680] hsr_slave_0: left allmulticast mode [ 337.919793][T12680] hsr_slave_1: left allmulticast mode [ 337.952132][T12680] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 338.498448][T12724] veth0_macvtap: left promiscuous mode [ 338.725564][T12724] veth0_macvtap: entered promiscuous mode [ 338.737595][T12733] netlink: 'syz.3.1697': attribute type 2 has an invalid length. [ 338.763974][ T7211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.766045][T12733] netlink: 'syz.3.1697': attribute type 9 has an invalid length. [ 338.773598][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.788942][ T5086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.797816][T12733] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1697'. [ 338.808312][ T7208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.955198][T12744] netlink: 'syz.1.1702': attribute type 1 has an invalid length. [ 339.470662][T12763] dummy0 speed is unknown, defaulting to 1000 [ 339.634012][T12763] dummy0 speed is unknown, defaulting to 1000 [ 339.730222][T12763] dummy0 speed is unknown, defaulting to 1000 [ 340.137037][T12811] Unknown options in mask 6 [ 340.184561][T12817] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 340.505698][T12825] syzkaller0: entered promiscuous mode [ 340.524622][T12825] syzkaller0: entered allmulticast mode [ 340.694517][T12763] infiniband syz0: set active [ 340.703646][T12763] infiniband syz0: added dummy0 [ 340.746033][T12837] netlink: 'syz.4.1728': attribute type 1 has an invalid length. [ 340.843424][ T5086] net_ratelimit: 7 callbacks suppressed [ 340.843440][ T5086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.878142][T12763] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 340.920132][ T7208] dummy0 speed is unknown, defaulting to 1000 [ 340.934309][T12763] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 341.005267][T12763] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 341.202521][T12847] dummy0 speed is unknown, defaulting to 1000 [ 341.289723][T12763] RDS/IB: syz0: added [ 341.312104][T12763] smc: adding ib device syz0 with port count 1 [ 341.327647][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.341377][T12865] bridge: RTM_NEWNEIGH with invalid ether address [ 341.344572][T12763] smc: ib device syz0 port 1 has no pnetid [ 341.392318][ T10] dummy0 speed is unknown, defaulting to 1000 [ 341.402011][T12867] bridge: RTM_NEWNEIGH with invalid ether address [ 341.426171][T12865] bridge: RTM_NEWNEIGH with invalid ether address [ 341.585877][T12870] __nla_validate_parse: 17 callbacks suppressed [ 341.585897][T12870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1733'. [ 341.593832][T12876] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1735'. [ 341.865257][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 341.883633][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.891784][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.896180][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 342.222061][T12763] dummy0 speed is unknown, defaulting to 1000 [ 342.785126][T12914] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1740'. [ 342.926608][ T7233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.023657][T12925] bridge_slave_0: left allmulticast mode [ 343.036294][T12925] bridge_slave_0: left promiscuous mode [ 343.042241][T12925] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.114497][T12931] sctp: [Deprecated]: syz.4.1742 (pid 12931) Use of int in max_burst socket option deprecated. [ 343.114497][T12931] Use struct sctp_assoc_value instead [ 343.117329][T12925] bridge_slave_1: left allmulticast mode [ 343.163144][T12925] bridge_slave_1: left promiscuous mode [ 343.179556][T12925] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.277125][T12925] bond0: (slave bond_slave_0): Releasing backup interface [ 343.334521][T12925] bond0: (slave bond_slave_1): Releasing backup interface [ 343.404852][T12925] team0: Port device team_slave_0 removed [ 343.444867][T12925] team0: Port device team_slave_1 removed [ 343.464258][T12925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.467662][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'. [ 343.487318][T12925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.514221][T12925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.526394][T12925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.537455][T12925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 343.566272][T12930] team0: No ports can be present during mode change [ 343.579526][T12763] dummy0 speed is unknown, defaulting to 1000 [ 343.584146][T12946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.647158][T12946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.804006][T12952] batadv0: entered allmulticast mode [ 343.963522][ T7233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.056436][T12763] dummy0 speed is unknown, defaulting to 1000 [ 344.210154][T12971] netlink: 'syz.4.1750': attribute type 3 has an invalid length. [ 344.238999][T12965] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 344.344064][T12975] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1752'. [ 344.545092][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.554612][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.570567][T12983] bond10: option ad_select: invalid value (254) [ 344.579830][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.591239][T12983] bond10 (unregistering): Released all slaves [ 344.608591][T12763] dummy0 speed is unknown, defaulting to 1000 [ 344.755855][T12763] dummy0 speed is unknown, defaulting to 1000 [ 344.888715][T12763] dummy0 speed is unknown, defaulting to 1000 [ 345.016382][T12763] dummy0 speed is unknown, defaulting to 1000 [ 345.256389][T12994] netlink: 'syz.1.1754': attribute type 1 has an invalid length. [ 345.266816][T12994] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1754'. [ 345.449068][T12995] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1755'. [ 345.681374][T12998] netlink: 'syz.1.1756': attribute type 13 has an invalid length. [ 345.720140][T12998] 1ªî{X¹¦: refused to change device tx_queue_len [ 346.025851][T13015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1760'. [ 346.045328][ T5811] net_ratelimit: 2 callbacks suppressed [ 346.045345][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.425053][T13026] xfrm1: entered allmulticast mode [ 346.541546][T13034] netlink: 'syz.1.1766': attribute type 1 has an invalid length. [ 346.572431][T13037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.583931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.598854][T13037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.609601][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.622845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.632077][T13037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.642659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.036006][T13051] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 347.048128][T13051] bond9 (unregistering): Released all slaves [ 347.090989][ T7233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.260988][T13064] syzkaller0: entered promiscuous mode [ 347.268085][T13064] syzkaller0: entered allmulticast mode [ 347.470903][T13071] netlink: 'syz.3.1776': attribute type 30 has an invalid length. [ 347.644652][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.766943][T13076] dummy0 speed is unknown, defaulting to 1000 [ 348.226167][T13105] netlink: 'syz.0.1788': attribute type 1 has an invalid length. [ 348.235929][T13106] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 348.361151][T13104] __nla_validate_parse: 3 callbacks suppressed [ 348.361171][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 348.424676][T13105] bond10: entered promiscuous mode [ 348.464372][T13105] 8021q: adding VLAN 0 to HW filter on device bond10 [ 348.541776][T13110] 8021q: adding VLAN 0 to HW filter on device bond10 [ 348.544442][T13121] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1790'. [ 348.558494][T13110] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 348.601444][T13110] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 348.642104][T13110] bond10: (slave wireguard0): making interface the new active one [ 348.650389][T13110] wireguard0: entered promiscuous mode [ 348.657569][T13110] bond10: (slave wireguard0): Enslaving as an active interface with an up link [ 349.027655][T13147] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 349.123938][T13146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1796'. [ 349.168948][T13147] bond0: entered promiscuous mode [ 349.175162][T13147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.197258][T13146] bond0: entered allmulticast mode [ 349.567147][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 349.850107][T13188] netlink: 'syz.0.1807': attribute type 31 has an invalid length. [ 349.894674][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 350.215795][T13201] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1812'. [ 350.422920][T13211] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 2, id = 0 [ 350.437887][T13210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1815'. [ 350.563199][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 350.606781][T13215] bond0: entered promiscuous mode [ 350.614758][T13215] batadv_slave_0: entered promiscuous mode [ 350.626699][T13215] debugfs: 'hsr0' already exists in 'hsr' [ 350.634775][T13215] Cannot create hsr debugfs directory [ 350.786579][T13226] xt_cgroup: xt_cgroup: no path or classid specified [ 350.818769][T13229] netlink: 'syz.0.1821': attribute type 3 has an invalid length. [ 350.850442][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 350.906171][T13230] PKCS7: Unknown OID: [4] (bad) [ 350.931318][T13230] PKCS7: Only support pkcs7_signedData type [ 351.245354][ T5086] net_ratelimit: 13 callbacks suppressed [ 351.245371][ T5086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.369982][T13250] netlink: 'syz.0.1824': attribute type 3 has an invalid length. [ 351.399467][T13250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.470869][T13262] Bluetooth: MGMT ver 1.23 [ 351.631693][T13270] netlink: 'syz.1.1832': attribute type 1 has an invalid length. [ 352.283466][ T7233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.616580][T13315] netlink: 'syz.4.1849': attribute type 21 has an invalid length. [ 352.631875][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1848'. [ 352.668786][T13315] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.716853][T13315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.724254][T13315] IPv6: NLM_F_CREATE should be set when creating new route [ 352.731553][T13315] IPv6: NLM_F_CREATE should be set when creating new route [ 352.738827][T13315] IPv6: NLM_F_CREATE should be set when creating new route [ 352.789656][T13323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.798067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.925930][T13332] syzkaller0: entered promiscuous mode [ 352.941792][T13332] syzkaller0: entered allmulticast mode [ 353.020226][T13340] netlink: 'syz.3.1854': attribute type 27 has an invalid length. [ 353.326514][ T7233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.753244][ T7223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.932040][T13340] batadv0: left allmulticast mode [ 354.221661][T13340] ipvlan0: left allmulticast mode [ 354.234208][T13340] veth0_vlan: left allmulticast mode [ 354.260404][T13340] veth0_macvtap: left allmulticast mode [ 354.305059][T13340] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 354.371741][T13340] bond1: left promiscuous mode [ 354.379805][T13340] bond2: left promiscuous mode [ 354.391623][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.497968][T13340] gretap1: left promiscuous mode [ 354.504860][T13340] gretap1: left allmulticast mode [ 354.518491][T13340] bond7: left promiscuous mode [ 354.523938][T13340] bond7: left allmulticast mode [ 354.529462][T13340] erspan2: left allmulticast mode [ 354.538118][T13340] ip6gretap1: left promiscuous mode [ 354.544396][T13340] bond8: left promiscuous mode [ 354.549169][T13340] bridge9: left promiscuous mode [ 354.554542][T13340] bond8: left allmulticast mode [ 354.559392][T13340] bridge9: left allmulticast mode [ 354.651168][ T48] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.661325][ T48] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.699387][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.725774][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.758077][T13356] dummy0 speed is unknown, defaulting to 1000 [ 355.286950][T13418] __nla_validate_parse: 1 callbacks suppressed [ 355.286970][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1866'. [ 355.362405][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 355.393838][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 355.408949][ T5086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.460856][T13418] bond2: (slave vlan4): Opening slave failed [ 355.678515][T13434] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1868'. [ 355.850565][T13444] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1869'. [ 355.893010][T13444] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 355.942285][T13440] dummy0 speed is unknown, defaulting to 1000 [ 355.956662][T13447] netlink: 'syz.2.1871': attribute type 1 has an invalid length. [ 356.072090][T13452] GUP no longer grows the stack in syz.2.1873 (13452): 200000003000-20000000a000 (200000001000) [ 356.085332][T13452] CPU: 1 UID: 0 PID: 13452 Comm: syz.2.1873 Not tainted syzkaller #0 PREEMPT(full) [ 356.085363][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 356.085387][T13452] Call Trace: [ 356.085394][T13452] [ 356.085402][T13452] dump_stack_lvl+0xe8/0x150 [ 356.085429][T13452] __get_user_pages+0x2378/0x2720 [ 356.085456][T13452] ? __gup_longterm_locked+0xc4e/0x1630 [ 356.085492][T13452] ? __gup_longterm_locked+0xc4e/0x1630 [ 356.085513][T13452] ? down_read_killable+0x1bb/0x340 [ 356.085542][T13452] __gup_longterm_locked+0xdcf/0x1630 [ 356.085568][T13452] ? lock_acquire+0x106/0x350 [ 356.085611][T13452] gup_fast_fallback+0x1d84/0x20d0 [ 356.085664][T13452] ? __pfx_gup_fast_fallback+0x10/0x10 [ 356.085688][T13452] ? is_valid_gup_args+0x11f/0x200 [ 356.085711][T13452] ? get_user_pages_fast+0x4d/0xb0 [ 356.085737][T13452] __iov_iter_get_pages_alloc+0x370/0xa10 [ 356.085771][T13452] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 356.085799][T13452] iov_iter_get_pages2+0x5e/0xa0 [ 356.085827][T13452] __se_sys_vmsplice+0x7c7/0x1620 [ 356.085870][T13452] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 356.085896][T13452] ? __pfx_futex_wake+0x10/0x10 [ 356.085928][T13452] ? lockdep_hardirqs_on+0x7a/0x110 [ 356.086003][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.086023][T13452] do_syscall_64+0x15f/0xf80 [ 356.086042][T13452] ? trace_irq_disable+0x3b/0x140 [ 356.086068][T13452] ? clear_bhb_loop+0x40/0x90 [ 356.086090][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.086108][T13452] RIP: 0033:0x7f563419cdd9 [ 356.086126][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.086140][T13452] RSP: 002b:00007f5634ffa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 356.086160][T13452] RAX: ffffffffffffffda RBX: 00007f5634415fa0 RCX: 00007f563419cdd9 [ 356.086173][T13452] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 356.086184][T13452] RBP: 00007f5634232d69 R08: 0000000000000000 R09: 0000000000000000 [ 356.086196][T13452] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 356.086206][T13452] R13: 00007f5634416038 R14: 00007f5634415fa0 R15: 00007ffe725d39b8 [ 356.086237][T13452] [ 356.443843][ T5086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.621736][T13461] netlink: 'syz.3.1875': attribute type 10 has an invalid length. [ 356.629855][T13461] ipvlan0: entered allmulticast mode [ 356.635329][T13461] veth0_vlan: entered allmulticast mode [ 356.642595][T13461] team0: Device ipvlan0 failed to register rx_handler [ 356.775185][ T7223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.007710][T13468] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1879'. [ 357.038685][T13468] netlink: 'syz.2.1879': attribute type 1 has an invalid length. [ 357.055186][T13468] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1879'. [ 357.187386][T13470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.328790][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 357.487516][ T5086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.581603][T13492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1886'. [ 357.882396][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1894'. [ 358.114182][T13517] netlink: 'syz.3.1895': attribute type 6 has an invalid length. [ 358.135102][T13517] netlink: 'syz.3.1895': attribute type 1 has an invalid length. [ 358.294534][T13528] netlink: 'syz.3.1898': attribute type 21 has an invalid length. [ 358.368911][T13530] netlink: 'syz.1.1900': attribute type 28 has an invalid length. [ 358.387342][T13530] netlink: 'syz.1.1900': attribute type 3 has an invalid length. [ 358.400043][T13530] syzkaller0: entered promiscuous mode [ 358.420242][T13530] syzkaller0: entered allmulticast mode [ 358.461008][T13530] netlink: 'syz.1.1900': attribute type 10 has an invalid length. [ 358.523452][T13545] x_tables: duplicate underflow at hook 1 [ 358.538075][ T5086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.847932][T13559] netlink: 'syz.1.1904': attribute type 4 has an invalid length. [ 359.081750][T13576] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20004 [ 359.514249][T13559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.547120][T13559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.581090][ T7209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.820887][T13380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.918448][ T5730] dummy0 speed is unknown, defaulting to 1000 [ 359.926119][ T5730] syz0: Port: 1 Link DOWN [ 359.946536][T13586] batadv_slave_0: entered promiscuous mode [ 359.959001][T13586] macvlan2: entered promiscuous mode [ 359.966917][T13586] batadv_slave_0: left promiscuous mode [ 360.029190][ T1127] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.058942][ T1127] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.067960][ T7209] dummy0 speed is unknown, defaulting to 1000 [ 360.087658][ T1127] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.121146][ T1127] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.298229][T13604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.385386][T13612] __nla_validate_parse: 6 callbacks suppressed [ 360.385405][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1918'. [ 360.423786][T13612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.450325][T13612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.547131][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.604420][ T7209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.633012][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1918'. [ 360.678735][T13630] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 360.925376][T13641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1922'. [ 360.954012][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'. [ 361.164424][T13652] validate_nla: 1 callbacks suppressed [ 361.164441][T13652] netlink: 'syz.3.1925': attribute type 11 has an invalid length. [ 361.202657][T13651] netlink: 'syz.3.1925': attribute type 11 has an invalid length. [ 361.571947][T13667] netlink: 'syz.3.1929': attribute type 1 has an invalid length. [ 361.672099][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.694695][T13667] bond10: entered promiscuous mode [ 361.715919][T13667] bond10: entered allmulticast mode [ 361.723361][T13667] 8021q: adding VLAN 0 to HW filter on device bond10 [ 361.731268][T13669] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 361.795268][T13667] syz.3.1929 (13667) used obsolete PPPIOCDETACH ioctl [ 361.989513][T13672] dummy0 speed is unknown, defaulting to 1000 [ 362.003042][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 362.027021][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 362.046668][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 362.063473][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 362.081205][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 362.157676][T13686] bridge_slave_1: invalid flags given to default FDB implementation [ 362.411784][T13690] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 362.498225][T13703] bond4: left promiscuous mode [ 362.514073][T13703] bond7: left promiscuous mode [ 362.683595][ T7209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.844211][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.049743][T13726] netlink: 'syz.2.1943': attribute type 1 has an invalid length. [ 363.114573][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1943'. [ 363.137780][T13726] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.164472][T13730] bond3: entered allmulticast mode [ 363.299643][T13726] bond3: (slave ip6gretap2): making interface the new active one [ 363.334572][T13726] ip6gretap2: entered allmulticast mode [ 363.360411][T13726] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 363.461653][T13736] syzkaller0: entered promiscuous mode [ 363.494091][T13736] syzkaller0: entered allmulticast mode [ 363.585920][T13736] tipc: Enabled bearer , priority 0 [ 363.693959][T13752] xt_hashlimit: size too large, truncated to 1048576 [ 363.723390][ T7209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.833518][T13735] tipc: Resetting bearer [ 363.912357][T13735] tipc: Disabling bearer [ 364.067560][T13763] team0 (unregistering): Port device bond5 removed [ 364.206239][T13772] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 364.256640][T13768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.266885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.299483][T13775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.307983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.647029][T13791] xt_hashlimit: max too large, truncated to 1048576 [ 364.684096][T13802] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.705286][T13802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.712537][T13802] IPv6: NLM_F_CREATE should be set when creating new route [ 364.719859][T13802] IPv6: NLM_F_CREATE should be set when creating new route [ 364.727119][T13802] IPv6: NLM_F_CREATE should be set when creating new route [ 364.743683][T13808] netlink: 'syz.2.1964': attribute type 1 has an invalid length. [ 364.763481][ T7209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.832326][T13811] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 364.961964][T13815] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 364.973503][T13813] dummy0 speed is unknown, defaulting to 1000 [ 365.810924][ T7209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.846870][T13857] __nla_validate_parse: 1 callbacks suppressed [ 365.846889][T13857] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1973'. [ 365.920273][T13842] syzkaller0: entered promiscuous mode [ 365.927574][T13842] syzkaller0: entered allmulticast mode [ 366.412277][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 366.423062][T13880] netlink: 'syz.1.1986': attribute type 3 has an invalid length. [ 366.432197][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'. [ 366.844125][ T7209] net_ratelimit: 1 callbacks suppressed [ 366.844139][ T7209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.883485][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.074639][T13872] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1984'. [ 368.084005][T13872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1984'. [ 368.093362][T13872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1984'. [ 368.102827][T13872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1984'. [ 368.326855][T13893] xt_TCPMSS: Only works on TCP SYN packets [ 368.356932][T13899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1991'. [ 368.376230][T13893] xt_TCPMSS: Only works on TCP SYN packets [ 368.418572][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1990'. [ 368.700458][T13910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1994'. [ 368.819520][T13918] dummy0 speed is unknown, defaulting to 1000 [ 368.923076][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.931254][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.253194][T13926] kthread_run failed with err -4 [ 369.408655][T13932] syzkaller1: entered promiscuous mode [ 369.431136][T13932] syzkaller1: entered allmulticast mode [ 369.472220][T13941] tc_dump_action: action bad kind [ 369.810615][T13953] veth1_to_batadv: entered allmulticast mode [ 369.965807][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.125667][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.205079][T13983] netlink: 'syz.2.2010': attribute type 30 has an invalid length. [ 370.419539][T13983] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 370.449725][T13983] bond4 (unregistering): Released all slaves [ 371.003573][ T7209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.260208][T14049] tipc: Enabling of bearer rejected, failed to enable media [ 371.394139][T14058] netlink: 'syz.2.2027': attribute type 13 has an invalid length. [ 371.396182][T14051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.404177][T14058] netlink: 'syz.2.2027': attribute type 17 has an invalid length. [ 371.410670][T14051] IPv6: NLM_F_CREATE should be set when creating new route [ 371.425782][T14051] IPv6: NLM_F_CREATE should be set when creating new route [ 371.485387][T14058] bridge0: port 3(vlan0) entered blocking state [ 371.492928][T14058] bridge0: port 3(vlan0) entered forwarding state [ 371.513207][T14058] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 371.531228][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.538501][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.705983][T14051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.750681][T14070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.968717][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.054468][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.237123][T14100] __nla_validate_parse: 7 callbacks suppressed [ 372.237139][T14100] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2036'. [ 372.284417][T14092] dummy0 speed is unknown, defaulting to 1000 [ 372.847814][T14127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.856334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.949666][T14127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.972965][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.033287][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.036461][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'. [ 373.083063][T14145] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 373.093396][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.391396][T14154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2048'. [ 373.477848][T14156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2048'. [ 373.489408][T14114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.513923][T14114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.264617][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2060'. [ 374.386808][T14197] dummy0 speed is unknown, defaulting to 1000 [ 374.506943][T14208] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 374.592300][T14211] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 374.632065][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'. [ 374.683258][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 374.736480][ T30] audit: type=1800 audit(1777871160.680:3): pid=14214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2064" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1891 res=0 errno=0 [ 374.875336][T14223] netlink: 'syz.1.2068': attribute type 3 has an invalid length. [ 374.886714][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 374.901613][T14223] netlink: 'syz.1.2068': attribute type 3 has an invalid length. [ 374.917334][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 375.288964][T14243] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 375.568155][T14245] dummy0 speed is unknown, defaulting to 1000 [ 375.828646][T14260] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2076'. [ 376.297066][T14273] netlink: 'syz.0.2078': attribute type 83 has an invalid length. [ 376.359579][T14276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.608790][T14249] tipc: Enabled bearer , priority 0 [ 376.800247][T14299] dummy0: entered promiscuous mode [ 376.831925][T14299] dummy0: left promiscuous mode [ 376.936715][T14244] tipc: Disabling bearer [ 377.119878][T14301] dummy0 speed is unknown, defaulting to 1000 [ 377.137196][T14314] vlan4: entered allmulticast mode [ 377.145638][T14314] gretap0: entered allmulticast mode [ 377.261379][T14319] netlink: 'syz.2.2091': attribute type 1 has an invalid length. [ 377.270272][T14320] netlink: 'syz.2.2091': attribute type 1 has an invalid length. [ 377.270908][T14319] netlink: 'syz.2.2091': attribute type 4 has an invalid length. [ 377.286672][T14319] __nla_validate_parse: 1 callbacks suppressed [ 377.286686][T14319] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2091'. [ 377.330221][T14320] netlink: 'syz.2.2091': attribute type 4 has an invalid length. [ 377.355780][T14320] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2091'. [ 378.077895][T14337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2095'. [ 378.099940][T14337] netlink: 'syz.0.2095': attribute type 7 has an invalid length. [ 378.120943][T14337] netlink: 'syz.0.2095': attribute type 8 has an invalid length. [ 378.147375][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2095'. [ 378.641870][T14355] block nbd0: NBD_DISCONNECT [ 378.657371][T14355] block nbd0: Send disconnect failed -32 [ 378.682999][T14355] block nbd0: Send disconnect failed -32 [ 378.703061][T14355] block nbd0: shutting down sockets [ 378.934187][T14374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2107'. [ 379.136878][T14392] sctp: [Deprecated]: syz.2.2110 (pid 14392) Use of int in max_burst socket option. [ 379.136878][T14392] Use struct sctp_assoc_value instead [ 379.169720][T14394] sctp: [Deprecated]: syz.2.2110 (pid 14394) Use of int in max_burst socket option. [ 379.169720][T14394] Use struct sctp_assoc_value instead [ 379.361149][T14406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2113'. [ 379.623471][T14421] syzkaller0: entered promiscuous mode [ 379.629263][T14421] syzkaller0: entered allmulticast mode [ 379.635997][T14418] net_ratelimit: 7 callbacks suppressed [ 379.636011][T14418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.217817][T14419] ipvlan2: entered promiscuous mode [ 380.730736][T14419] ipvlan3: entered promiscuous mode [ 380.893922][T14471] tipc: Enabled bearer , priority 0 [ 380.930348][T14471] tipc: Resetting bearer [ 381.040320][T14464] tipc: Disabling bearer [ 381.186519][T14491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2132'. [ 381.400773][T14500] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 381.421767][T14503] validate_nla: 1 callbacks suppressed [ 381.421784][T14503] netlink: 'syz.0.2137': attribute type 13 has an invalid length. [ 381.439958][T14506] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2138'. [ 381.461261][T14503] netlink: 'syz.0.2137': attribute type 17 has an invalid length. [ 381.699921][T14503] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.809114][T14503] veth1_vlan: left promiscuous mode [ 381.820071][T14503] veth0_vlan: left promiscuous mode [ 381.835746][T14503] veth0_vlan: entered promiscuous mode [ 381.853331][T14503] veth1_vlan: entered promiscuous mode [ 381.878557][T14503] veth0_macvtap: left promiscuous mode [ 381.920945][T14503] veth0_macvtap: entered promiscuous mode [ 381.955936][T14503] veth1_macvtap: entered promiscuous mode [ 381.961771][T14503] veth1_macvtap: entered allmulticast mode [ 381.969018][T14503] macsec0: left promiscuous mode [ 381.974293][T14503] macsec0: left allmulticast mode [ 381.979649][T14503] veth1_macvtap: left allmulticast mode [ 381.996198][T14503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.004668][T14503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.028806][T14503] 8021q: adding VLAN 0 to HW filter on device bond3 [ 382.052549][T14503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.068320][T14503] 8021q: adding VLAN 0 to HW filter on device bond5 [ 382.076382][T14503] 8021q: adding VLAN 0 to HW filter on device bond6 [ 382.085917][T14503] 8021q: adding VLAN 0 to HW filter on device bond7 [ 382.094540][T14503] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 382.147327][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2143'. [ 382.196210][T14530] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2143'. [ 382.267720][T14535] netlink: 'syz.3.2146': attribute type 32 has an invalid length. [ 382.337603][T14535] bond11: Setting coupled_control to off (0) [ 382.449957][T14555] __nla_validate_parse: 2 callbacks suppressed [ 382.449975][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2150'. [ 382.621084][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'. [ 382.679824][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 383.390562][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 383.419787][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 383.644946][T14620] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2168'. [ 383.654818][T14620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2168'. [ 383.663993][T14620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2168'. [ 383.673541][T14631] netem: change failed [ 383.839016][T14620] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 383.876705][T14635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2173'. [ 384.168004][ T30] audit: type=1804 audit(1777871170.110:4): pid=14649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2177" name="/newroot/386/memory.events" dev="tmpfs" ino=1993 res=1 errno=0 [ 384.197812][T14652] tipc: Enabled bearer , priority 0 [ 384.205417][ T30] audit: type=1800 audit(1777871170.110:5): pid=14649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2177" name="memory.events" dev="tmpfs" ino=1993 res=0 errno=0 [ 384.228863][T14652] syzkaller0: entered promiscuous mode [ 384.235169][T14652] syzkaller0: entered allmulticast mode [ 384.240845][ T30] audit: type=1804 audit(1777871170.140:6): pid=14649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2177" name="/newroot/386/memory.events" dev="tmpfs" ino=1993 res=1 errno=0 [ 384.266495][T14652] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2178'. [ 384.275924][T14652] 0ªX¹¦À: renamed from batadv0 (while UP) [ 384.283714][T14652] 0ªX¹¦À: entered allmulticast mode [ 384.289355][T14652] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 384.312519][T14650] tipc: Resetting bearer [ 384.344062][T14650] tipc: Disabling bearer [ 384.783887][T14677] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 385.392330][T14698] netlink: 'syz.0.2190': attribute type 29 has an invalid length. [ 385.433772][T14697] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 385.456585][T14703] ip6erspan1: entered allmulticast mode [ 386.221323][T14731] syzkaller0: entered promiscuous mode [ 386.243991][T14731] syzkaller0: entered allmulticast mode [ 388.317331][T14762] tipc: Enabling of bearer rejected, media not registered [ 388.364617][T14768] geneve2: entered promiscuous mode [ 388.389258][ T1127] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 388.430242][ T1127] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 388.451806][T14768] __nla_validate_parse: 8 callbacks suppressed [ 388.451822][T14768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2211'. [ 388.470654][ T1127] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 388.512595][ T1127] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 388.611017][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2211'. [ 388.644403][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2211'. [ 388.820179][ T9548] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x42 [ 388.936267][T14792] dummy0 speed is unknown, defaulting to 1000 [ 389.018890][T14779] syzkaller1: entered promiscuous mode [ 389.076273][T14779] syzkaller1: entered allmulticast mode [ 389.632200][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2224'. [ 389.753575][T14836] macsec1: entered promiscuous mode [ 390.182422][T14853] netlink: 'syz.0.2230': attribute type 1 has an invalid length. [ 390.190593][T14853] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2230'. [ 390.292176][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2230'. [ 390.374924][T14857] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 390.577114][T14858] dummy0 speed is unknown, defaulting to 1000 [ 390.846748][T14866] syzkaller0: entered promiscuous mode [ 390.848108][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 390.867882][T14875] netlink: 'syz.0.2238': attribute type 20 has an invalid length. [ 390.877543][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 390.878806][T14866] syzkaller0: entered allmulticast mode [ 391.151760][T14892] netlink: 'syz.0.2240': attribute type 1 has an invalid length. [ 391.335474][T14895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2240'. [ 392.973799][T14892] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 392.987133][T14893] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 393.159325][T14906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'. [ 393.322082][T14912] vlan0: entered allmulticast mode [ 393.332142][T14912] bridge8: entered allmulticast mode [ 393.471289][T14915] bridge8: port 1(bond9) entered blocking state [ 393.488123][T14915] bridge8: port 1(bond9) entered disabled state [ 393.501657][T14915] bond9: entered allmulticast mode [ 393.513765][T14915] bond9: entered promiscuous mode [ 393.704146][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2250'. [ 393.741859][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2250'. [ 394.336677][T14960] syzkaller1: entered promiscuous mode [ 394.342308][T14960] syzkaller1: entered allmulticast mode [ 394.684725][T14974] batadv0: entered promiscuous mode [ 394.701569][T14974] batadv0: entered allmulticast mode [ 394.723836][T14971] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2260'. [ 394.751863][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2262'. [ 394.954648][T14962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2257'. [ 395.394084][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 395.423117][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 395.462389][T15014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2270'. [ 395.465436][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'. [ 395.485175][T15011] syzkaller0: entered promiscuous mode [ 395.502977][T15011] 0: reclassify loop, rule prio 0, protocol 700 [ 395.800883][ T30] audit: type=1804 audit(1777871181.740:7): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2276" name="/newroot/449/cgroup.controllers" dev="tmpfs" ino=2317 res=1 errno=0 [ 395.876283][ T30] audit: type=1800 audit(1777871181.740:8): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2276" name="cgroup.controllers" dev="tmpfs" ino=2317 res=0 errno=0 [ 395.926528][ T30] audit: type=1804 audit(1777871181.740:9): pid=15034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2276" name="/newroot/449/cgroup.controllers" dev="tmpfs" ino=2317 res=1 errno=0 [ 395.999572][ T30] audit: type=1800 audit(1777871181.740:10): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2276" name="cgroup.controllers" dev="tmpfs" ino=2317 res=0 errno=0 [ 396.014647][T15028] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2274'. [ 396.043003][T15030] syzkaller0: entered promiscuous mode [ 396.052067][ T30] audit: type=1804 audit(1777871181.740:11): pid=15034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2276" name="/newroot/449/cgroup.controllers" dev="tmpfs" ino=2317 res=1 errno=0 [ 396.072013][T15030] syzkaller0: entered allmulticast mode [ 396.087415][ T30] audit: type=1800 audit(1777871181.740:12): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2276" name="cgroup.controllers" dev="tmpfs" ino=2317 res=0 errno=0 [ 396.148196][ T30] audit: type=1800 audit(1777871181.740:13): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2276" name="cgroup.controllers" dev="tmpfs" ino=2317 res=0 errno=0 [ 396.231528][ T30] audit: type=1800 audit(1777871181.770:14): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2276" name="cgroup.controllers" dev="tmpfs" ino=2317 res=0 errno=0 [ 396.315388][ T30] audit: type=1800 audit(1777871181.770:15): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2276" name="cgroup.controllers" dev="tmpfs" ino=2317 res=0 errno=0 [ 396.383319][ T30] audit: type=1800 audit(1777871181.770:16): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2276" name="cgroup.controllers" dev="tmpfs" ino=2317 res=0 errno=0 [ 398.521734][T15050] dummy0 speed is unknown, defaulting to 1000 [ 398.742577][T15091] __nla_validate_parse: 2 callbacks suppressed [ 398.742596][T15091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2289'. [ 398.781771][T15091] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 398.809615][T15091] pim6reg1: entered promiscuous mode [ 398.826596][T15091] pim6reg1: entered allmulticast mode [ 399.093566][T15106] netlink: 'syz.2.2293': attribute type 1 has an invalid length. [ 399.112730][T15106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2293'. [ 399.140275][T15106] netlink: 'syz.2.2293': attribute type 1 has an invalid length. [ 399.157120][T15111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2295'. [ 399.193760][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'. [ 399.281045][T15121] netlink: 'syz.4.2295': attribute type 7 has an invalid length. [ 399.335384][T15106] syzkaller1: entered promiscuous mode [ 399.356653][T15106] syzkaller1: entered allmulticast mode [ 399.925927][T15152] pimreg: entered allmulticast mode [ 400.023419][T15162] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 400.052557][T15157] netlink: 'syz.2.2303': attribute type 10 has an invalid length. [ 400.103739][T15166] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2303'. [ 400.211294][T15157] bridge0: port 3(vlan0) entered disabled state [ 400.246816][T15173] IPv6: Can't replace route, no match found [ 400.261197][T15173] IPv6: Can't replace route, no match found [ 400.268058][T15157] : (slave dummy0): Releasing backup interface [ 400.340718][T15177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.355640][T15177] dummy0: left promiscuous mode [ 400.617553][T15177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 400.627990][T15177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.650491][T15177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.661279][T15177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.669143][T15177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 400.679166][T15177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.694739][T15177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.704630][T15177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 400.719004][T15177] 8021q: adding VLAN 0 to HW filter on device bond7 [ 400.727213][T15177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 400.740574][T15177] 8021q: adding VLAN 0 to HW filter on device eth0 [ 400.749801][T15177] 8021q: adding VLAN 0 to HW filter on device eth1 [ 400.758097][T15177] 8021q: adding VLAN 0 to HW filter on device eth2 [ 400.766491][T15177] 8021q: adding VLAN 0 to HW filter on device eth3 [ 400.775512][T15177] xfrm1: left allmulticast mode [ 400.783664][T15177] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 400.805222][T15180] tap0: tun_chr_ioctl cmd 1074025677 [ 400.825511][T15180] tap0: linktype set to 778 [ 400.865542][ T5086] dummy0: entered promiscuous mode [ 400.877317][T13380] dummy0 speed is unknown, defaulting to 1000 [ 400.887777][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.894918][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.904321][T13380] syz0: Port: 1 Link ACTIVE [ 400.972235][ T1127] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.981315][ T1127] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 400.989691][ T1127] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.007585][ T1127] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 401.035742][T15189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2310'. [ 401.052983][T15189] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2310'. [ 401.071435][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2311'. [ 401.081360][ T10] dummy0 speed is unknown, defaulting to 1000 [ 401.155193][ T1127] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.198793][ T1127] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 401.233676][ T1127] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.259824][ T1127] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 401.344671][ T1127] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 401.365788][T15217] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2315'. [ 401.376691][ T10] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 401.387603][ T1127] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 401.448522][T15217] 0·: renamed from hsr0 (while UP) [ 401.569710][T15217] 0·: entered allmulticast mode [ 401.589731][T15217] hsr_slave_0: entered allmulticast mode [ 401.597806][T15225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.613007][ T5730] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 401.614496][T15217] hsr_slave_1: entered allmulticast mode [ 401.643270][T15217] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 401.698520][T15219] geneve2: entered promiscuous mode [ 401.704118][T15219] geneve2: entered allmulticast mode [ 401.774651][T15210] dummy0 speed is unknown, defaulting to 1000 [ 401.854965][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2319'. [ 402.033172][ T5730] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 402.359620][T15244] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 402.582964][T15258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.625198][T15254] dummy0 speed is unknown, defaulting to 1000 [ 403.421909][T15305] ip6gre1: entered promiscuous mode [ 403.435176][T15305] ip6gre1: entered allmulticast mode [ 403.749097][T15313] __nla_validate_parse: 7 callbacks suppressed [ 403.749117][T15313] netlink: 804 bytes leftover after parsing attributes in process `syz.0.2340'. [ 403.792912][T15313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2340'. [ 403.799873][T15316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2341'. [ 403.824551][T15314] netlink: 'syz.0.2340': attribute type 1 has an invalid length. [ 403.979402][T15317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2341'. [ 404.033891][T15317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2341'. [ 404.112203][T15310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.151719][T15310] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2339'. [ 404.188031][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'. [ 404.270327][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'. [ 404.454365][T15330] : entered promiscuous mode [ 404.695576][T15337] tipc: Enabled bearer , priority 0 [ 404.712574][T15331] openvswitch: : Dropping previously announced user features [ 404.723533][T15341] syzkaller0: entered promiscuous mode [ 404.755182][T15341] syzkaller0: entered allmulticast mode [ 404.865674][T15355] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2347'. [ 405.802841][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 406.935435][T15332] tipc: Resetting bearer [ 406.965855][T15332] tipc: Disabling bearer [ 407.028079][ T5730] tipc: Node number set to 433143706 [ 407.176092][T15364] netlink: 'syz.3.2351': attribute type 11 has an invalid length. [ 407.197398][T15366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2350'. [ 407.213467][T15366] netlink: 'syz.0.2350': attribute type 7 has an invalid length. [ 407.239554][T15366] netlink: 'syz.0.2350': attribute type 8 has an invalid length. [ 407.284543][T15375] netlink: 'syz.3.2354': attribute type 1 has an invalid length. [ 407.381227][T15386] netlink: 'syz.4.2355': attribute type 13 has an invalid length. [ 407.386089][T15375] bond12: entered promiscuous mode [ 407.396024][T15375] 8021q: adding VLAN 0 to HW filter on device bond12 [ 407.410400][T15386] netlink: 'syz.4.2355': attribute type 17 has an invalid length. [ 407.439461][T15383] 8021q: adding VLAN 0 to HW filter on device bond12 [ 407.449185][T15383] bond12: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 407.459954][T15383] bond12: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 407.473218][T15383] bond12: (slave ip6gre1): making interface the new active one [ 407.481977][T15383] ip6gre1: entered promiscuous mode [ 407.492173][T15383] bond12: (slave ip6gre1): Enslaving as an active interface with an up link [ 407.534420][T15386] ip6gretap0: entered promiscuous mode [ 407.546298][T15386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.556452][T15386] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.567609][T15386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.610788][T15386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.618339][T15386] veth1_to_batadv: left allmulticast mode [ 407.626623][T15386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.636263][T15386] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 407.660403][T15386] veth1_macvtap: left promiscuous mode [ 407.667374][T15386] veth0_macvtap: left promiscuous mode [ 407.674067][T15386] veth0_macvtap: entered promiscuous mode [ 407.680855][T15386] veth1_macvtap: entered promiscuous mode [ 407.695017][T15386] 8021q: adding VLAN 0 to HW filter on device team1 [ 407.703605][T15386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.740879][T15386] 8021q: adding VLAN 0 to HW filter on device eth0 [ 407.754393][T15386] 8021q: adding VLAN 0 to HW filter on device eth1 [ 407.767187][T15386] 8021q: adding VLAN 0 to HW filter on device eth2 [ 407.781030][T15386] 8021q: adding VLAN 0 to HW filter on device eth3 [ 407.794345][T15386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.816152][T15386] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.825103][T15386] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.841430][T15386] 8021q: adding VLAN 0 to HW filter on device bond5 [ 407.851146][T15386] 8021q: adding VLAN 0 to HW filter on device bond6 [ 407.865984][T15386] bond7: left allmulticast mode [ 407.871083][T15386] 8021q: adding VLAN 0 to HW filter on device bond7 [ 407.880742][T15386] 8021q: adding VLAN 0 to HW filter on device bond8 [ 407.891970][T15386] 8021q: adding VLAN 0 to HW filter on device bond9 [ 407.900879][T15386] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 408.034598][ T5730] : entered promiscuous mode [ 408.041107][ T5730] team_slave_1: entered promiscuous mode [ 408.064887][ T9548] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.086943][ T9548] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.109402][ T9548] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.128674][ T9548] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.146550][T15397] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 408.234500][T15414] netlink: 'syz.0.2360': attribute type 39 has an invalid length. [ 408.291314][ T9548] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.308278][ T9548] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.326156][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.367131][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.645464][T15433] syzkaller1: entered allmulticast mode [ 408.741779][T15442] syzkaller1: entered promiscuous mode [ 408.743782][T15427] nbd0: detected capacity change from 0 to 63 [ 408.747989][T15442] syzkaller1: entered allmulticast mode [ 408.769975][ T5635] block nbd0: Receive control failed (result -32) [ 408.770053][T10244] block nbd0: Send control failed (result -32) [ 408.791211][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 408.857245][T10244] block nbd0: Request send failed, requeueing [ 408.918224][ T324] block nbd0: Dead connection, failed to find a fallback [ 408.930832][ T324] block nbd0: shutting down sockets [ 408.937285][ T324] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.949747][ T324] Buffer I/O error on dev nbd0, logical block 0, async page read [ 408.959854][T10244] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.970220][T10244] Buffer I/O error on dev nbd0, logical block 1, async page read [ 408.980619][T10244] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.990971][T10244] Buffer I/O error on dev nbd0, logical block 2, async page read [ 408.999376][T10244] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 409.009073][T10244] Buffer I/O error on dev nbd0, logical block 3, async page read [ 409.017337][T10244] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 409.022242][T15452] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 409.028799][T10244] Buffer I/O error on dev nbd0, logical block 0, async page read [ 409.044562][T10244] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 409.053987][T10244] Buffer I/O error on dev nbd0, logical block 1, async page read [ 409.073718][T10244] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 409.092762][T10244] Buffer I/O error on dev nbd0, logical block 2, async page read [ 409.104723][T10244] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 409.138468][T10244] Buffer I/O error on dev nbd0, logical block 3, async page read [ 409.190741][T10244] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 409.203083][T15452] __nla_validate_parse: 4 callbacks suppressed [ 409.203100][T15452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2370'. [ 409.227489][T10244] Buffer I/O error on dev nbd0, logical block 0, async page read [ 409.238370][T10244] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 409.253524][T15463] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 409.264098][T10244] Buffer I/O error on dev nbd0, logical block 1, async page read [ 409.273748][T15463] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 409.288999][T10244] ldm_validate_partition_table(): Disk read failed. [ 409.306762][T10244] Dev nbd0: unable to read RDB block 0 [ 409.327498][T10244] nbd0: unable to read partition table [ 409.367178][T10244] ldm_validate_partition_table(): Disk read failed. [ 409.378836][T10244] Dev nbd0: unable to read RDB block 0 [ 409.387164][T10244] nbd0: unable to read partition table [ 409.399136][T15452] bond4: (slave bridge7): Enslaving as an active interface with a down link [ 409.416000][T15468] macvlan2: entered promiscuous mode [ 409.421451][T15468] macvlan2: entered allmulticast mode [ 409.427829][T15468] bond4: entered promiscuous mode [ 409.439820][T15468] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 409.450046][T15468] bond4: left promiscuous mode [ 409.837486][T15486] [ 409.839850][T15486] ====================================================== [ 409.846866][T15486] WARNING: possible circular locking dependency detected [ 409.853952][T15486] syzkaller #0 Not tainted [ 409.858355][T15486] ------------------------------------------------------ [ 409.865357][T15486] syz.4.2381/15486 is trying to acquire lock: [ 409.871417][T15486] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0 [ 409.881876][T15486] [ 409.881876][T15486] but task is already holding lock: [ 409.889242][T15486] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 409.898651][T15486] [ 409.898651][T15486] which lock already depends on the new lock. [ 409.898651][T15486] [ 409.909054][T15486] [ 409.909054][T15486] the existing dependency chain (in reverse order) is: [ 409.918063][T15486] [ 409.918063][T15486] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 409.926073][T15486] down_write+0x96/0x200 [ 409.930835][T15486] kernfs_add_one+0x41/0x5c0 [ 409.935943][T15486] kernfs_create_dir_ns+0xde/0x130 [ 409.941572][T15486] internal_create_group+0x425/0x1180 [ 409.947457][T15486] cpuhp_invoke_callback+0x445/0x860 [ 409.953254][T15486] cpuhp_issue_call+0x430/0x7a0 [ 409.958615][T15486] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 409.965195][T15486] __cpuhp_setup_state+0x3f/0x60 [ 409.970647][T15486] do_one_initcall+0x250/0x870 [ 409.975923][T15486] do_initcall_level+0x104/0x190 [ 409.981378][T15486] do_initcalls+0x59/0xa0 [ 409.986223][T15486] kernel_init_freeable+0x2a6/0x3e0 [ 409.991936][T15486] kernel_init+0x1d/0x1d0 [ 409.996779][T15486] ret_from_fork+0x514/0xb70 [ 410.001880][T15486] ret_from_fork_asm+0x1a/0x30 [ 410.007156][T15486] [ 410.007156][T15486] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 410.014969][T15486] [ 410.014969][T15486] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 410.022694][T15486] cpus_read_lock+0x42/0x160 [ 410.027795][T15486] static_key_slow_inc+0x12/0x30 [ 410.033242][T15486] nbd_genl_reconfigure+0x132f/0x1ea0 [ 410.039123][T15486] genl_family_rcv_msg_doit+0x22a/0x330 [ 410.045191][T15486] genl_rcv_msg+0x61c/0x7a0 [ 410.050214][T15486] netlink_rcv_skb+0x232/0x4b0 [ 410.055493][T15486] genl_rcv+0x28/0x40 [ 410.060004][T15486] netlink_unicast+0x75c/0x8e0 [ 410.065309][T15486] netlink_sendmsg+0x813/0xb40 [ 410.070597][T15486] ____sys_sendmsg+0x972/0x9f0 [ 410.075881][T15486] ___sys_sendmsg+0x2a5/0x360 [ 410.081076][T15486] __x64_sys_sendmsg+0x1bd/0x2a0 [ 410.086535][T15486] do_syscall_64+0x15f/0xf80 [ 410.091641][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.098045][T15486] [ 410.098045][T15486] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 410.105684][T15486] __mutex_lock+0x1a3/0x1550 [ 410.110788][T15486] nbd_queue_rq+0x37b/0x1100 [ 410.115886][T15486] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 410.121947][T15486] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 410.128790][T15486] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 410.135287][T15486] blk_mq_run_hw_queue+0x348/0x4f0 [ 410.140912][T15486] blk_mq_dispatch_list+0xd16/0xe10 [ 410.146627][T15486] blk_mq_flush_plug_list+0x48d/0x570 [ 410.152514][T15486] __blk_flush_plug+0x3ed/0x4d0 [ 410.157883][T15486] __submit_bio+0x28d/0x580 [ 410.162901][T15486] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 410.169048][T15486] block_read_full_folio+0x599/0x830 [ 410.174846][T15486] filemap_read_folio+0x137/0x3b0 [ 410.180386][T15486] do_read_cache_folio+0x358/0x590 [ 410.186016][T15486] read_part_sector+0xb6/0x2b0 [ 410.191295][T15486] adfspart_check_ICS+0xb1/0x960 [ 410.196751][T15486] bdev_disk_changed+0x817/0x1770 [ 410.202288][T15486] blkdev_get_whole+0x380/0x510 [ 410.207653][T15486] bdev_open+0x31e/0xd30 [ 410.212410][T15486] blkdev_open+0x470/0x610 [ 410.217334][T15486] do_dentry_open+0x785/0x14e0 [ 410.222607][T15486] vfs_open+0x3b/0x340 [ 410.227182][T15486] path_openat+0x2e08/0x3860 [ 410.232287][T15486] do_file_open+0x23e/0x4a0 [ 410.237308][T15486] do_sys_openat2+0x113/0x200 [ 410.242495][T15486] __x64_sys_openat+0x138/0x170 [ 410.247860][T15486] do_syscall_64+0x15f/0xf80 [ 410.252964][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.259371][T15486] [ 410.259371][T15486] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 410.266575][T15486] __mutex_lock+0x1a3/0x1550 [ 410.271686][T15486] nbd_queue_rq+0xc6/0x1100 [ 410.276698][T15486] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 410.282757][T15486] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 410.289605][T15486] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 410.296101][T15486] blk_mq_run_hw_queue+0x348/0x4f0 [ 410.301726][T15486] blk_mq_dispatch_list+0xd16/0xe10 [ 410.307438][T15486] blk_mq_flush_plug_list+0x48d/0x570 [ 410.313325][T15486] __blk_flush_plug+0x3ed/0x4d0 [ 410.318690][T15486] __submit_bio+0x28d/0x580 [ 410.323713][T15486] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 410.329860][T15486] block_read_full_folio+0x599/0x830 [ 410.335653][T15486] filemap_read_folio+0x137/0x3b0 [ 410.341195][T15486] do_read_cache_folio+0x358/0x590 [ 410.346823][T15486] read_part_sector+0xb6/0x2b0 [ 410.352105][T15486] adfspart_check_ICS+0xb1/0x960 [ 410.357556][T15486] bdev_disk_changed+0x817/0x1770 [ 410.363097][T15486] blkdev_get_whole+0x380/0x510 [ 410.368466][T15486] bdev_open+0x31e/0xd30 [ 410.373249][T15486] blkdev_open+0x470/0x610 [ 410.378190][T15486] do_dentry_open+0x785/0x14e0 [ 410.383471][T15486] vfs_open+0x3b/0x340 [ 410.388072][T15486] path_openat+0x2e08/0x3860 [ 410.393194][T15486] do_file_open+0x23e/0x4a0 [ 410.398220][T15486] do_sys_openat2+0x113/0x200 [ 410.403419][T15486] __x64_sys_openat+0x138/0x170 [ 410.408784][T15486] do_syscall_64+0x15f/0xf80 [ 410.413899][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.420301][T15486] [ 410.420301][T15486] -> #4 (set->srcu){.+.+}-{0:0}: [ 410.427421][T15486] __synchronize_srcu+0xca/0x300 [ 410.432958][T15486] elevator_switch+0x1e8/0x7a0 [ 410.438240][T15486] elevator_change+0x2cc/0x450 [ 410.443522][T15486] elevator_set_default+0x36c/0x430 [ 410.449245][T15486] blk_register_queue+0x3e9/0x4e0 [ 410.454791][T15486] __add_disk+0x677/0xd50 [ 410.459629][T15486] add_disk_fwnode+0xfb/0x480 [ 410.464812][T15486] nbd_dev_add+0x72c/0xb50 [ 410.469736][T15486] nbd_init+0x168/0x1f0 [ 410.474405][T15486] do_one_initcall+0x250/0x870 [ 410.479678][T15486] do_initcall_level+0x104/0x190 [ 410.485130][T15486] do_initcalls+0x59/0xa0 [ 410.489974][T15486] kernel_init_freeable+0x2a6/0x3e0 [ 410.495682][T15486] kernel_init+0x1d/0x1d0 [ 410.500524][T15486] ret_from_fork+0x514/0xb70 [ 410.505623][T15486] ret_from_fork_asm+0x1a/0x30 [ 410.510898][T15486] [ 410.510898][T15486] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 410.518707][T15486] __mutex_lock+0x1a3/0x1550 [ 410.523809][T15486] elevator_change+0x1b3/0x450 [ 410.529087][T15486] elevator_set_none+0xb5/0x140 [ 410.534448][T15486] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 410.540761][T15486] nbd_start_device+0x17f/0xb10 [ 410.546120][T15486] nbd_genl_connect+0x165b/0x1cf0 [ 410.551651][T15486] genl_family_rcv_msg_doit+0x22a/0x330 [ 410.557710][T15486] genl_rcv_msg+0x61c/0x7a0 [ 410.562729][T15486] netlink_rcv_skb+0x232/0x4b0 [ 410.568002][T15486] genl_rcv+0x28/0x40 [ 410.572498][T15486] netlink_unicast+0x75c/0x8e0 [ 410.577773][T15486] netlink_sendmsg+0x813/0xb40 [ 410.583055][T15486] ____sys_sendmsg+0x972/0x9f0 [ 410.588338][T15486] ___sys_sendmsg+0x2a5/0x360 [ 410.593526][T15486] __x64_sys_sendmsg+0x1bd/0x2a0 [ 410.598978][T15486] do_syscall_64+0x15f/0xf80 [ 410.604081][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.610489][T15486] [ 410.610489][T15486] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 410.619084][T15486] blk_alloc_queue+0x546/0x680 [ 410.624363][T15486] __blk_mq_alloc_disk+0x197/0x390 [ 410.630002][T15486] nbd_dev_add+0x499/0xb50 [ 410.634924][T15486] nbd_init+0x168/0x1f0 [ 410.639595][T15486] do_one_initcall+0x250/0x870 [ 410.644866][T15486] do_initcall_level+0x104/0x190 [ 410.650314][T15486] do_initcalls+0x59/0xa0 [ 410.655159][T15486] kernel_init_freeable+0x2a6/0x3e0 [ 410.660868][T15486] kernel_init+0x1d/0x1d0 [ 410.665713][T15486] ret_from_fork+0x514/0xb70 [ 410.670816][T15486] ret_from_fork_asm+0x1a/0x30 [ 410.676088][T15486] [ 410.676088][T15486] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 410.683286][T15486] fs_reclaim_acquire+0x71/0x100 [ 410.688739][T15486] kmem_cache_alloc_noprof+0x40/0x650 [ 410.694622][T15486] __kernfs_iattrs+0xdf/0x320 [ 410.699807][T15486] kernfs_iop_setattr+0xea/0x3f0 [ 410.705265][T15486] notify_change+0xc1a/0xf40 [ 410.710386][T15486] do_truncate+0x1c2/0x250 [ 410.715332][T15486] path_openat+0x2f89/0x3860 [ 410.720448][T15486] do_file_open+0x23e/0x4a0 [ 410.725469][T15486] do_sys_openat2+0x113/0x200 [ 410.730658][T15486] __x64_sys_openat+0x138/0x170 [ 410.736022][T15486] do_syscall_64+0x15f/0xf80 [ 410.741126][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.747526][T15486] [ 410.747526][T15486] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 410.756035][T15486] __lock_acquire+0x15a5/0x2cf0 [ 410.761399][T15486] lock_acquire+0x106/0x350 [ 410.766408][T15486] down_write+0x96/0x200 [ 410.771168][T15486] kernfs_link_sibling+0x4ed/0x5c0 [ 410.776800][T15486] kernfs_add_one+0x1ca/0x5c0 [ 410.781998][T15486] kernfs_create_dir_ns+0xde/0x130 [ 410.787625][T15486] sysfs_create_dir_ns+0x12f/0x2a0 [ 410.793246][T15486] kobject_add_internal+0x62b/0xd00 [ 410.798983][T15486] kobject_add+0x163/0x240 [ 410.803911][T15486] device_add+0x408/0xbb0 [ 410.808749][T15486] tty_register_device_attr+0x422/0x950 [ 410.814807][T15486] rfcomm_dev_ioctl+0x1b73/0x21d0 [ 410.820342][T15486] sock_do_ioctl+0x101/0x320 [ 410.825449][T15486] sock_ioctl+0x5c6/0x7f0 [ 410.830298][T15486] __se_sys_ioctl+0xfc/0x170 [ 410.835405][T15486] do_syscall_64+0x15f/0xf80 [ 410.840506][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.846908][T15486] [ 410.846908][T15486] other info that might help us debug this: [ 410.846908][T15486] [ 410.857119][T15486] Chain exists of: [ 410.857119][T15486] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 410.857119][T15486] [ 410.871539][T15486] Possible unsafe locking scenario: [ 410.871539][T15486] [ 410.879006][T15486] CPU0 CPU1 [ 410.884356][T15486] ---- ---- [ 410.889703][T15486] lock(&root->kernfs_rwsem); [ 410.894468][T15486] lock(cpuhp_state_mutex); [ 410.901577][T15486] lock(&root->kernfs_rwsem); [ 410.908853][T15486] lock(&root->kernfs_iattr_rwsem); [ 410.914132][T15486] [ 410.914132][T15486] *** DEADLOCK *** [ 410.914132][T15486] [ 410.922260][T15486] 2 locks held by syz.4.2381/15486: [ 410.927527][T15486] #0: ffffffff8ff79480 (rfcomm_ioctl_mutex){+.+.}-{4:4}, at: rfcomm_dev_ioctl+0x25f/0x21d0 [ 410.937621][T15486] #1: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 410.947454][T15486] [ 410.947454][T15486] stack backtrace: [ 410.953432][T15486] CPU: 1 UID: 0 PID: 15486 Comm: syz.4.2381 Not tainted syzkaller #0 PREEMPT(full) [ 410.953465][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.953485][T15486] Call Trace: [ 410.953495][T15486] [ 410.953503][T15486] dump_stack_lvl+0xe8/0x150 [ 410.953523][T15486] print_circular_bug+0x2e1/0x300 [ 410.953546][T15486] check_noncircular+0x12e/0x150 [ 410.953570][T15486] __lock_acquire+0x15a5/0x2cf0 [ 410.953590][T15486] ? __lock_acquire+0x6b5/0x2cf0 [ 410.953611][T15486] ? kernfs_link_sibling+0x4ed/0x5c0 [ 410.953633][T15486] lock_acquire+0x106/0x350 [ 410.953649][T15486] ? kernfs_link_sibling+0x4ed/0x5c0 [ 410.953675][T15486] down_write+0x96/0x200 [ 410.953697][T15486] ? kernfs_link_sibling+0x4ed/0x5c0 [ 410.953718][T15486] ? __pfx_down_write+0x10/0x10 [ 410.953739][T15486] ? kernfs_root+0x1c/0x230 [ 410.953758][T15486] ? kernfs_root+0x1c/0x230 [ 410.953777][T15486] ? kernfs_root+0x1ea/0x230 [ 410.953797][T15486] kernfs_link_sibling+0x4ed/0x5c0 [ 410.953822][T15486] kernfs_add_one+0x1ca/0x5c0 [ 410.953844][T15486] kernfs_create_dir_ns+0xde/0x130 [ 410.953868][T15486] sysfs_create_dir_ns+0x12f/0x2a0 [ 410.953888][T15486] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 410.953908][T15486] ? do_raw_spin_unlock+0xf5/0x210 [ 410.953933][T15486] kobject_add_internal+0x62b/0xd00 [ 410.953959][T15486] kobject_add+0x163/0x240 [ 410.953981][T15486] ? __pfx_kobject_add+0x10/0x10 [ 410.954002][T15486] ? do_raw_spin_unlock+0xf5/0x210 [ 410.954026][T15486] ? get_device_parent+0x366/0x3a0 [ 410.954045][T15486] device_add+0x408/0xbb0 [ 410.954063][T15486] tty_register_device_attr+0x422/0x950 [ 410.954080][T15486] ? rfcomm_dev_ioctl+0x1675/0x21d0 [ 410.954100][T15486] ? __pfx___mutex_lock+0x10/0x10 [ 410.954120][T15486] ? __pfx_tty_register_device_attr+0x10/0x10 [ 410.954139][T15486] ? tty_port_register_device+0xca/0x150 [ 410.954157][T15486] rfcomm_dev_ioctl+0x1b73/0x21d0 [ 410.954185][T15486] ? kasan_quarantine_put+0xbb/0x1f0 [ 410.954207][T15486] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 410.954229][T15486] ? tomoyo_path_number_perm+0x219/0x630 [ 410.954248][T15486] ? tomoyo_path_number_perm+0x219/0x630 [ 410.954268][T15486] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 410.954295][T15486] sock_do_ioctl+0x101/0x320 [ 410.954321][T15486] ? __pfx_sock_do_ioctl+0x10/0x10 [ 410.954343][T15486] ? do_futex+0x395/0x420 [ 410.954367][T15486] sock_ioctl+0x5c6/0x7f0 [ 410.954391][T15486] ? __pfx_sock_ioctl+0x10/0x10 [ 410.954414][T15486] ? __fget_files+0x2a/0x420 [ 410.954432][T15486] ? __fget_files+0x3a0/0x420 [ 410.954450][T15486] ? __fget_files+0x2a/0x420 [ 410.954469][T15486] ? bpf_lsm_file_ioctl+0x9/0x20 [ 410.954493][T15486] ? __pfx_sock_ioctl+0x10/0x10 [ 410.954516][T15486] __se_sys_ioctl+0xfc/0x170 [ 410.954539][T15486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.954555][T15486] do_syscall_64+0x15f/0xf80 [ 410.954574][T15486] ? trace_irq_disable+0x3b/0x140 [ 410.954598][T15486] ? clear_bhb_loop+0x40/0x90 [ 410.954616][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.954633][T15486] RIP: 0033:0x7f9a5579cdd9 [ 410.954649][T15486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.954664][T15486] RSP: 002b:00007f9a539f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.954682][T15486] RAX: ffffffffffffffda RBX: 00007f9a55a15fa0 RCX: 00007f9a5579cdd9 [ 410.954694][T15486] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 000000000000000c [ 410.954705][T15486] RBP: 00007f9a55832d69 R08: 0000000000000000 R09: 0000000000000000 [ 410.954716][T15486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.954726][T15486] R13: 00007f9a55a16038 R14: 00007f9a55a15fa0 R15: 00007ffc5aefa968 [ 410.954745][T15486] [ 411.396679][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2382'. [ 411.441476][T15493] : entered promiscuous mode [ 412.762806][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 414.923495][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!